Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/Nw-tf2Fdg1IBaL0ZaEM215Hb70k.roa
File: Nw-tf2Fdg1IBaL0ZaEM215Hb70k.roa (raw, json)
Hash identifier: D6voi0MuqX48csC8cycT9bMohcrVdXkjR0ufp2F3pwQ=
Subject key identifier: 37:0F:AD:7F:61:5D:83:52:01:68:BD:19:68:43:36:D7:91:DB:EF:49
Certificate issuer: /CN=2c0ceb81ebce859f50928e8ed3e1f0a8511152db
Certificate serial: 019421B200193FAC213616B3C9E689A934AA
Authority key identifier: 2C:0C:EB:81:EB:CE:85:9F:50:92:8E:8E:D3:E1:F0:A8:51:11:52:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LAzrgevOhZ9Qko6O0-HwqFERUts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/Nw-tf2Fdg1IBaL0ZaEM215Hb70k.roa
Signing time: Wed 01 Jan 2025 11:48:21 +0000
ROA not before: Wed 01 Jan 2025 11:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6730
IP address blocks: 193.201.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/LAzrgevOhZ9Qko6O0-HwqFERUts.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/LAzrgevOhZ9Qko6O0-HwqFERUts.mft
rsync://rpki.ripe.net/repository/DEFAULT/LAzrgevOhZ9Qko6O0-HwqFERUts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:00:19:3f:ac:21:36:16:b3:c9:e6:89:a9:34:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c0ceb81ebce859f50928e8ed3e1f0a8511152db
Validity
Not Before: Jan 1 11:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=370fad7f615d83520168bd19684336d791dbef49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:09:b4:9c:c7:59:e0:4f:c7:5e:20:18:46:9b:
9b:e3:b5:d4:11:11:3a:1d:54:6f:01:cc:c5:19:2a:
4e:93:ed:84:13:32:69:33:a9:03:98:ca:9c:f3:50:
f5:2b:88:77:de:a7:28:2e:d3:5e:a1:34:a2:75:25:
17:e1:d0:2d:46:7d:95:29:96:b7:cd:43:3e:dc:28:
3b:b0:e0:66:db:11:34:b4:1a:22:09:6b:e8:e7:e8:
10:a6:f1:8b:e7:b1:76:3a:de:c5:af:03:6f:f8:b0:
6f:7a:d4:7a:0f:0c:47:59:b6:57:20:29:0c:06:b2:
50:c1:8a:6f:7b:2d:7b:80:65:78:b6:0d:46:ba:41:
d3:ea:2c:09:d6:97:a8:60:78:1c:c1:91:25:e2:78:
5f:37:56:64:9c:a9:9b:3f:23:7d:86:29:a6:06:e3:
3c:7d:9d:07:f7:d3:75:39:7f:49:4b:3a:81:df:2b:
b1:08:07:01:f9:34:23:38:c0:25:6a:c3:bc:5d:4d:
49:ea:b7:d9:f2:ad:86:28:af:0d:00:ac:34:97:ce:
b3:1e:0f:b0:24:96:cd:cf:40:58:d7:ee:06:f6:a2:
2a:5c:b5:65:6c:b4:c3:27:22:33:56:f1:b3:8e:de:
a9:cf:2d:7f:87:ed:2a:4b:c0:6d:6b:e6:84:e8:1f:
fe:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:0F:AD:7F:61:5D:83:52:01:68:BD:19:68:43:36:D7:91:DB:EF:49
X509v3 Authority Key Identifier:
keyid:2C:0C:EB:81:EB:CE:85:9F:50:92:8E:8E:D3:E1:F0:A8:51:11:52:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LAzrgevOhZ9Qko6O0-HwqFERUts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/Nw-tf2Fdg1IBaL0ZaEM215Hb70k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/04982c-5ffc-42a8-9879-6e8b34f1976b/1/LAzrgevOhZ9Qko6O0-HwqFERUts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.201.33.0/24
Signature Algorithm: sha256WithRSAEncryption
00:1d:c3:09:23:f5:61:ee:58:f3:41:44:5c:57:04:ec:f4:34:
37:69:0a:f8:62:34:d6:43:56:92:5b:f2:f0:10:eb:82:02:a6:
30:8f:55:39:bb:46:95:32:f4:a0:c6:ad:db:00:b1:a5:32:79:
8b:a1:cc:ea:2c:82:63:6c:05:08:0e:90:dd:5b:3b:9a:5b:3a:
df:c0:45:3f:74:87:fe:29:62:4d:30:03:f3:4b:ab:ac:c4:b0:
15:b1:66:8b:a0:1c:38:9e:c7:7b:c6:4a:20:d9:8b:cd:2b:22:
8d:0c:fd:36:ba:d6:a5:47:00:33:dc:63:e7:b9:bc:e2:18:0a:
45:50:4c:95:49:83:ea:94:04:0c:46:a3:4d:00:91:2c:ad:e6:
ea:36:f8:bf:d5:4f:46:db:3d:f6:5a:0b:e2:f1:9c:cf:59:2f:
43:f3:d8:14:b0:13:76:e1:59:bb:c0:76:06:d0:1c:5a:a4:76:
0d:e0:a1:d7:c4:43:2a:c5:b6:ba:25:57:cb:5e:a3:96:50:d8:
3a:4d:27:e0:6d:4f:28:6f:24:c0:8b:30:c7:c3:92:bf:03:81:
52:f1:aa:86:14:45:f4:e0:60:4c:b9:1a:26:8a:2e:a3:92:59:
50:9e:eb:0b:e7:7c:1b:17:b9:95:07:9f:a7:b5:c1:b4:ab:7d:
90:16:9f:5d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhsgAZP6whNhazyeaJqTSqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjMGNlYjgxZWJjZTg1OWY1MDkyOGU4ZWQzZTFmMGE4NTEx
MTUyZGIwHhcNMjUwMTAxMTE0ODIxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNzBmYWQ3ZjYxNWQ4MzUyMDE2OGJkMTk2ODQzMzZkNzkxZGJlZjQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgm0nMdZ4E/HXiAYRpub47XUERE6
HVRvAczFGSpOk+2EEzJpM6kDmMqc81D1K4h33qcoLtNeoTSidSUX4dAtRn2VKZa3
zUM+3Cg7sOBm2xE0tBoiCWvo5+gQpvGL57F2Ot7FrwNv+LBvetR6DwxHWbZXICkM
BrJQwYpvey17gGV4tg1GukHT6iwJ1peoYHgcwZEl4nhfN1ZknKmbPyN9himmBuM8
fZ0H99N1OX9JSzqB3yuxCAcB+TQjOMAlasO8XU1J6rfZ8q2GKK8NAKw0l86zHg+w
JJbNz0BY1+4G9qIqXLVlbLTDJyIzVvGzjt6pzy1/h+0qS8Bta+aE6B/+7wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDcPrX9hXYNSAWi9GWhDNteR2+9JMB8GA1UdIwQY
MBaAFCwM64HrzoWfUJKOjtPh8KhREVLbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEF6cmdldk9oWjlRa282TzAtSHdxRkVSVXRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8wNDk4MmMtNWZmYy00MmE4LTk4Nzkt
NmU4YjM0ZjE5NzZiLzEvTnctdGYyRmRnMUlCYUwwWmFFTTIxNUhiNzBrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC8wNDk4MmMtNWZmYy00MmE4LTk4NzktNmU4YjM0ZjE5NzZi
LzEvTEF6cmdldk9oWjlRa282TzAtSHdxRkVSVXRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwckhMA0G
CSqGSIb3DQEBCwUAA4IBAQAAHcMJI/Vh7ljzQURcVwTs9DQ3aQr4YjTWQ1aSW/Lw
EOuCAqYwj1U5u0aVMvSgxq3bALGlMnmLoczqLIJjbAUIDpDdWzuaWzrfwEU/dIf+
KWJNMAPzS6usxLAVsWaLoBw4nsd7xkog2YvNKyKNDP02utalRwAz3GPnubziGApF
UEyVSYPqlAQMRqNNAJEsrebqNvi/1U9G2z32Wgvi8ZzPWS9D89gUsBN24Vm7wHYG
0BxapHYN4KHXxEMqxba6JVfLXqOWUNg6TSfgbU8obyTAizDHw5K/A4FS8aqGFEX0
4GBMuRomii6jkllQnusL53wbF7mVB5+ntcG0q32QFp9d
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:39:05 2025 by rpki-client