Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/1f3322-6af7-47ab-8dc5-99a11f6385ab/1/AUtsyV4GoOAXKw9J3JJYlvWZMCo.roa
File: AUtsyV4GoOAXKw9J3JJYlvWZMCo.roa (raw, json)
Hash identifier: /0BCHflij9PTsqkAVxlV2lPjueYr2KbGYcBxxZ+N59s=
Subject key identifier: 01:4B:6C:C9:5E:06:A0:E0:17:2B:0F:49:DC:92:58:96:F5:99:30:2A
Certificate issuer: /CN=0bebcee4d23379aed81aecffc7a742b35acdddb3
Certificate serial: 01951157357C6E54D5F3ABAD3D3BEE92812F
Authority key identifier: 0B:EB:CE:E4:D2:33:79:AE:D8:1A:EC:FF:C7:A7:42:B3:5A:CD:DD:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C-vO5NIzea7YGuz_x6dCs1rN3bM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/1f3322-6af7-47ab-8dc5-99a11f6385ab/1/AUtsyV4GoOAXKw9J3JJYlvWZMCo.roa
Signing time: Mon 17 Feb 2025 00:38:02 +0000
ROA not before: Mon 17 Feb 2025 00:38:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200273
IP address blocks: 195.39.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/1f3322-6af7-47ab-8dc5-99a11f6385ab/1/C-vO5NIzea7YGuz_x6dCs1rN3bM.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/1f3322-6af7-47ab-8dc5-99a11f6385ab/1/C-vO5NIzea7YGuz_x6dCs1rN3bM.mft
rsync://rpki.ripe.net/repository/DEFAULT/C-vO5NIzea7YGuz_x6dCs1rN3bM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:57:35:7c:6e:54:d5:f3:ab:ad:3d:3b:ee:92:81:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bebcee4d23379aed81aecffc7a742b35acdddb3
Validity
Not Before: Feb 17 00:38:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=014b6cc95e06a0e0172b0f49dc925896f599302a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:0c:c8:f1:f0:0b:ce:bf:58:ce:70:7d:59:e3:
12:29:54:1b:6f:16:19:e2:f3:55:0b:1e:ac:1b:ae:
3a:1d:bf:e4:6e:92:74:0b:29:5d:af:d9:ec:6e:15:
e7:c5:e2:cd:fb:2d:f3:36:db:dc:2d:13:7a:6e:5e:
9c:09:6a:43:c2:11:76:ec:1e:7d:e1:a2:4e:fe:0f:
4b:29:65:0d:e2:00:59:8f:da:56:8a:67:4d:2f:57:
7f:75:04:64:5a:c7:f3:85:a7:e2:60:e3:ea:67:5a:
07:bf:e2:2d:5d:b0:ce:c6:23:6f:ad:ac:b2:d8:f7:
7e:c8:61:2b:25:55:a5:d3:f4:e2:ec:d9:86:ca:5a:
8b:d3:0a:3e:05:14:97:e8:71:c2:e6:29:5c:81:74:
20:56:49:9c:60:43:44:2a:96:3b:5b:96:c9:46:ee:
6a:1e:4b:b1:0f:01:ce:36:1f:29:b6:65:8b:a9:b4:
05:a2:a1:6e:e4:db:08:45:ae:28:50:cf:0c:b9:c9:
62:21:42:be:f7:9c:20:6d:49:81:56:23:34:46:d5:
d8:a0:72:a7:42:16:80:f0:29:c0:13:9d:71:c2:25:
95:fe:2d:d9:28:e4:9b:76:24:8b:83:7d:c3:c0:bc:
b1:f5:cc:48:60:94:9c:44:c6:34:96:90:c4:e6:a5:
62:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:4B:6C:C9:5E:06:A0:E0:17:2B:0F:49:DC:92:58:96:F5:99:30:2A
X509v3 Authority Key Identifier:
keyid:0B:EB:CE:E4:D2:33:79:AE:D8:1A:EC:FF:C7:A7:42:B3:5A:CD:DD:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-vO5NIzea7YGuz_x6dCs1rN3bM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1f3322-6af7-47ab-8dc5-99a11f6385ab/1/AUtsyV4GoOAXKw9J3JJYlvWZMCo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1f3322-6af7-47ab-8dc5-99a11f6385ab/1/C-vO5NIzea7YGuz_x6dCs1rN3bM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.39.220.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:97:df:b0:b7:23:cd:b4:10:2b:37:d5:27:d1:8b:d0:92:c9:
fc:23:ef:eb:1d:5f:53:bf:bc:03:0c:53:9e:69:2d:0f:16:8d:
c3:2e:9c:16:a7:f9:82:66:16:6f:89:64:89:92:6d:a8:30:6f:
d5:bf:b5:85:90:4d:65:d0:44:1b:41:e1:10:30:19:d0:6c:f6:
76:58:7c:3b:48:15:5e:e7:37:3e:1f:e5:22:72:63:10:3b:00:
8d:94:2c:66:81:53:dc:fb:48:5a:21:f2:b7:36:33:ce:b9:b2:
f7:7a:1c:09:31:41:ee:a0:66:ba:f3:f3:46:7c:a0:a8:47:3a:
3e:41:c3:04:5b:66:a6:35:02:ec:11:c8:af:ce:54:30:fc:2f:
9f:5a:28:22:82:49:8f:c5:66:a7:0a:81:65:ad:62:46:e1:d1:
0c:0d:27:4e:26:97:63:ec:eb:24:b3:b6:3f:2b:aa:3d:06:98:
3c:0b:af:e3:a5:9e:56:41:5f:81:7e:40:a9:cf:c6:90:d3:7a:
d5:19:4a:f5:75:0b:e6:d7:6a:3e:06:08:ef:d3:a2:b8:7d:a7:
88:a4:ae:2f:09:a5:d3:cb:4c:a0:01:76:ec:0d:10:04:55:80:
6f:9c:a8:aa:cb:2a:bf:18:39:03:45:67:78:1a:e0:24:97:9c:
b5:0c:c7:c3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZURVzV8blTV86utPTvukoEvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiZWJjZWU0ZDIzMzc5YWVkODFhZWNmZmM3YTc0MmIzNWFj
ZGRkYjMwHhcNMjUwMjE3MDAzODAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMTRiNmNjOTVlMDZhMGUwMTcyYjBmNDlkYzkyNTg5NmY1OTkzMDJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+gzI8fALzr9YznB9WeMSKVQbbxYZ
4vNVCx6sG646Hb/kbpJ0Cyldr9nsbhXnxeLN+y3zNtvcLRN6bl6cCWpDwhF27B59
4aJO/g9LKWUN4gBZj9pWimdNL1d/dQRkWsfzhafiYOPqZ1oHv+ItXbDOxiNvrayy
2Pd+yGErJVWl0/Ti7NmGylqL0wo+BRSX6HHC5ilcgXQgVkmcYENEKpY7W5bJRu5q
HkuxDwHONh8ptmWLqbQFoqFu5NsIRa4oUM8MucliIUK+95wgbUmBViM0RtXYoHKn
QhaA8CnAE51xwiWV/i3ZKOSbdiSLg33DwLyx9cxIYJScRMY0lpDE5qVixQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAFLbMleBqDgFysPSdySWJb1mTAqMB8GA1UdIwQY
MBaAFAvrzuTSM3mu2Brs/8enQrNazd2zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQy12TzVOSXplYTdZR3V6X3g2ZENzMXJOM2JNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8xZjMzMjItNmFmNy00N2FiLThkYzUt
OTlhMTFmNjM4NWFiLzEvQVV0c3lWNEdvT0FYS3c5SjNKSllsdldaTUNvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC8xZjMzMjItNmFmNy00N2FiLThkYzUtOTlhMTFmNjM4NWFi
LzEvQy12TzVOSXplYTdZR3V6X3g2ZENzMXJOM2JNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwyfcMA0G
CSqGSIb3DQEBCwUAA4IBAQCil9+wtyPNtBArN9Un0YvQksn8I+/rHV9Tv7wDDFOe
aS0PFo3DLpwWp/mCZhZviWSJkm2oMG/Vv7WFkE1l0EQbQeEQMBnQbPZ2WHw7SBVe
5zc+H+UicmMQOwCNlCxmgVPc+0haIfK3NjPOubL3ehwJMUHuoGa68/NGfKCoRzo+
QcMEW2amNQLsEcivzlQw/C+fWigigkmPxWanCoFlrWJG4dEMDSdOJpdj7Osks7Y/
K6o9Bpg8C6/jpZ5WQV+BfkCpz8aQ03rVGUr1dQvm12o+Bgjv06K4faeIpK4vCaXT
y0ygAXbsDRAEVYBvnKiqyyq/GDkDRWd4GuAkl5y1DMfD
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:51:35 2025 by rpki-client