Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/v1wHuyLD0lT9xLNIfHSO1rbSaRg.roa
File: v1wHuyLD0lT9xLNIfHSO1rbSaRg.roa (raw, json)
Hash identifier: 8VY1fRQGtBjgC5UccCU2Q19IB1PWw1jc9tCUJQCQB4s=
Subject key identifier: BF:5C:07:BB:22:C3:D2:54:FD:C4:B3:48:7C:74:8E:D6:B6:D2:69:18
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 01941FFA66E21970A849018015578D1E6B66
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/v1wHuyLD0lT9xLNIfHSO1rbSaRg.roa
Signing time: Wed 01 Jan 2025 03:48:11 +0000
ROA not before: Wed 01 Jan 2025 03:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42337
IP address blocks: 178.239.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 12:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:66:e2:19:70:a8:49:01:80:15:57:8d:1e:6b:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Jan 1 03:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bf5c07bb22c3d254fdc4b3487c748ed6b6d26918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:81:16:7c:2e:3a:56:11:b8:13:28:88:71:03:
e6:36:60:2c:b8:fc:d4:31:ef:3f:1a:f6:19:2d:bc:
18:19:63:08:74:03:b1:17:b3:1d:8e:9b:66:fc:2a:
41:cc:4b:79:3e:97:40:cb:f4:f9:ca:d5:f2:64:85:
61:90:a1:78:d9:fa:f0:f6:3e:1f:79:5c:eb:44:7a:
86:7c:cf:44:44:af:a8:a2:47:b0:8c:8c:47:bc:c3:
ef:04:6c:6a:87:ae:87:b0:58:93:96:85:01:6b:b0:
59:54:5f:01:e7:0a:29:39:7f:a1:1d:6c:e8:53:b0:
4e:76:9e:48:ff:cc:55:2f:1e:e2:ff:e8:a1:d7:06:
cb:c5:c3:46:78:c7:e8:81:c8:75:0d:8f:51:6b:8d:
dd:0c:31:c6:15:68:51:a9:58:35:80:71:93:ff:5b:
d2:db:c2:e6:ce:87:be:3e:31:8a:95:26:89:00:f4:
df:37:42:1f:fa:7e:3f:3b:f7:4c:f3:73:0a:49:9a:
90:98:09:f9:9e:b9:c6:f7:1a:81:5e:09:32:3b:53:
3b:82:53:4b:3f:1c:8f:0d:80:07:e7:b6:2c:5f:ae:
cb:d7:2b:c1:e5:98:8a:b5:db:73:44:39:0a:06:dd:
ae:59:08:d8:3b:04:fc:7a:89:fd:3b:41:a6:0f:68:
80:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:5C:07:BB:22:C3:D2:54:FD:C4:B3:48:7C:74:8E:D6:B6:D2:69:18
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/v1wHuyLD0lT9xLNIfHSO1rbSaRg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.149.0/24
Signature Algorithm: sha256WithRSAEncryption
08:8b:c2:eb:00:d0:4a:ad:9d:1f:9f:f7:35:20:af:a4:ee:16:
b6:ac:1d:25:f1:92:33:8e:72:91:c5:e6:91:c4:b0:91:00:b1:
53:4e:aa:be:04:60:7d:55:23:ea:7d:b6:f9:a4:52:03:16:fc:
ce:81:8e:34:66:14:78:86:38:19:a6:8a:9d:99:51:af:60:0e:
d0:20:39:1d:90:12:e9:87:f2:79:ce:22:34:0f:6d:53:a6:1b:
21:32:7c:7c:c0:a6:1b:f7:9a:15:a3:81:32:3a:80:04:0a:04:
aa:a1:96:ad:3b:8d:7c:5f:d7:3b:fa:e1:ce:4d:d4:88:12:c6:
ca:9d:1e:4c:b0:d7:07:da:cc:a0:29:4c:51:f5:5e:09:19:e3:
5e:a2:fc:3b:6d:be:32:2b:46:3e:a3:13:ef:63:86:12:7f:34:
af:d3:27:68:5b:06:2c:e6:25:87:a3:4b:fc:c7:f6:fd:94:e0:
d6:30:e5:d3:9d:62:76:25:61:66:8c:26:2d:47:37:64:ce:b1:
55:c1:cf:c0:81:b3:63:7d:7d:15:91:4b:ce:39:1a:4f:68:47:
a5:94:57:56:a2:64:db:1c:69:30:95:09:41:e1:33:52:a5:3b:
e8:04:24:96:ec:11:90:ab:c3:f2:ba:30:e6:bc:17:78:fa:9f:
3c:d7:b6:cf
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQf+mbiGXCoSQGAFVeNHmtmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxMzUzMzM5OWY1NWViNTJlNmIyMjAwYzdjYWU0MjcyYjc0
ZDY0NjQwHhcNMjUwMTAxMDM0ODExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZjVjMDdiYjIyYzNkMjU0ZmRjNGIzNDg3Yzc0OGVkNmI2ZDI2OTE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkoEWfC46VhG4EyiIcQPmNmAsuPzU
Me8/GvYZLbwYGWMIdAOxF7Mdjptm/CpBzEt5PpdAy/T5ytXyZIVhkKF42frw9j4f
eVzrRHqGfM9ERK+ookewjIxHvMPvBGxqh66HsFiTloUBa7BZVF8B5wopOX+hHWzo
U7BOdp5I/8xVLx7i/+ih1wbLxcNGeMfogch1DY9Ra43dDDHGFWhRqVg1gHGT/1vS
28Lmzoe+PjGKlSaJAPTfN0If+n4/O/dM83MKSZqQmAn5nrnG9xqBXgkyO1M7glNL
PxyPDYAH57YsX67L1yvB5ZiKtdtzRDkKBt2uWQjYOwT8eon9O0GmD2iADQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFL9cB7siw9JU/cSzSHx0jta20mkYMB8GA1UdIwQY
MBaAFPE1MzmfVetS5rIgDHyuQnK3TWRkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFRVek9aOVY2MUxtc2lBTWZLNUNjcmROWkdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi84NDRlZWItY2RmMS00N2YxLWJjZmEt
OTg5MTY2ODgxOTY5LzEvdjF3SHV5TEQwbFQ5eExOSWZIU08xcmJTYVJnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi84NDRlZWItY2RmMS00N2YxLWJjZmEtOTg5MTY2ODgxOTY5
LzEvOFRVek9aOVY2MUxtc2lBTWZLNUNjcmROWkdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsu+VMA0G
CSqGSIb3DQEBCwUAA4IBAQAIi8LrANBKrZ0fn/c1IK+k7ha2rB0l8ZIzjnKRxeaR
xLCRALFTTqq+BGB9VSPqfbb5pFIDFvzOgY40ZhR4hjgZpoqdmVGvYA7QIDkdkBLp
h/J5ziI0D21TphshMnx8wKYb95oVo4EyOoAECgSqoZatO418X9c7+uHOTdSIEsbK
nR5MsNcH2sygKUxR9V4JGeNeovw7bb4yK0Y+oxPvY4YSfzSv0ydoWwYs5iWHo0v8
x/b9lODWMOXTnWJ2JWFmjCYtRzdkzrFVwc/AgbNjfX0VkUvOORpPaEellFdWomTb
HGkwlQlB4TNSpTvoBCSW7BGQq8PyujDmvBd4+p8817bP
-----END CERTIFICATE-----
Generated at Thu Apr 17 19:03:41 2025 by rpki-client