Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/S34eKn41CbeHBs9JztR1Ea-qnWM.roa
File: S34eKn41CbeHBs9JztR1Ea-qnWM.roa (raw, json)
Hash identifier: ivl9YTuqSiUvueW/pRMX9Z40ugXy2JCZOHJUmHTZ+5g=
Subject key identifier: 4B:7E:1E:2A:7E:35:09:B7:87:06:CF:49:CE:D4:75:11:AF:AA:9D:63
Certificate issuer: /CN=058737ac1bca8c1428b3969546f1974f0694e400
Certificate serial: 01941FFA05FF7836D4C5D6B4697521FA58BA
Authority key identifier: 05:87:37:AC:1B:CA:8C:14:28:B3:96:95:46:F1:97:4F:06:94:E4:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BYc3rBvKjBQos5aVRvGXTwaU5AA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/S34eKn41CbeHBs9JztR1Ea-qnWM.roa
Signing time: Wed 01 Jan 2025 03:47:46 +0000
ROA not before: Wed 01 Jan 2025 03:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205185
IP address blocks: 193.163.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/BYc3rBvKjBQos5aVRvGXTwaU5AA.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/BYc3rBvKjBQos5aVRvGXTwaU5AA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BYc3rBvKjBQos5aVRvGXTwaU5AA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:05:ff:78:36:d4:c5:d6:b4:69:75:21:fa:58:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=058737ac1bca8c1428b3969546f1974f0694e400
Validity
Not Before: Jan 1 03:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4b7e1e2a7e3509b78706cf49ced47511afaa9d63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:fe:09:b8:06:4d:97:6c:63:56:be:d9:17:f6:
62:3d:10:5f:47:d5:ba:a1:9a:e3:87:e2:0f:ac:3d:
57:88:40:80:27:72:77:03:18:08:85:bf:51:d5:63:
72:ee:46:81:e8:8d:a1:66:86:f2:a7:db:88:f9:5c:
8c:c4:94:59:0a:fa:5e:ee:de:55:34:4e:8a:b6:27:
b6:db:15:d2:54:4d:5f:2f:5f:54:26:eb:ad:4d:f1:
98:2c:68:f9:d4:38:9a:6f:b1:a3:40:70:63:a7:b8:
09:5e:ac:5f:27:f2:6f:63:93:8a:d4:28:7b:74:10:
95:b5:3b:51:9d:d7:8f:3f:28:03:c7:b9:25:b9:75:
16:b3:db:68:80:b1:a4:54:86:c9:36:c7:df:17:de:
a0:2d:61:c8:98:87:72:cc:49:3a:40:90:64:3d:71:
53:29:27:fd:5b:f9:1f:2f:6f:43:3d:07:4e:45:e6:
6f:df:d9:e2:9d:37:0d:97:8a:ad:a9:44:7b:01:bb:
9a:94:90:aa:c5:7e:09:63:1b:e7:88:11:a4:1b:d5:
91:db:fc:ec:e2:e6:73:8d:1b:ae:48:e8:a0:38:13:
dd:7a:66:c6:90:a4:0f:65:19:b2:80:12:1d:3b:e0:
43:17:2a:06:a5:b3:88:42:b7:03:37:13:21:7a:80:
d2:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:7E:1E:2A:7E:35:09:B7:87:06:CF:49:CE:D4:75:11:AF:AA:9D:63
X509v3 Authority Key Identifier:
keyid:05:87:37:AC:1B:CA:8C:14:28:B3:96:95:46:F1:97:4F:06:94:E4:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BYc3rBvKjBQos5aVRvGXTwaU5AA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/S34eKn41CbeHBs9JztR1Ea-qnWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/BYc3rBvKjBQos5aVRvGXTwaU5AA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.108.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:50:fe:36:7a:ec:69:8f:ed:05:6f:05:0e:2a:5a:b0:02:b8:
d8:06:ac:0d:b7:5f:89:ab:b8:27:f6:c2:5c:35:5b:45:d1:82:
2c:c3:5f:f1:78:0e:6f:90:d1:91:a2:03:aa:fd:a5:d1:80:61:
03:44:53:42:74:12:ce:69:45:d6:16:08:44:35:62:ba:1a:1d:
5f:fb:2e:26:bd:a1:a9:c2:40:8d:7b:e3:f0:3a:36:d4:10:d1:
19:65:d5:b9:87:b7:44:83:67:c8:c5:0d:4f:47:06:01:30:23:
49:fb:21:4c:ca:90:1c:47:d4:2f:c0:54:8d:59:f2:7f:b9:bf:
28:2f:73:f8:db:bb:18:7c:76:81:59:24:4a:26:f6:ca:a0:81:
89:ec:f8:24:e7:8a:87:fd:e2:2f:03:dc:a6:fd:48:65:73:a8:
51:20:2d:c9:55:19:50:01:d8:8a:23:44:bb:01:6f:df:e3:b4:
2f:cd:9b:d7:45:49:d3:09:81:e9:0f:7d:e0:a2:5a:1d:07:36:
86:e4:59:8e:4b:e9:82:66:6c:06:7b:6a:61:7e:91:77:06:7e:
28:b1:51:ea:d7:c9:2e:bd:fd:74:1c:80:2e:7c:50:02:5f:51:
2c:f9:8d:10:01:58:98:ef:29:6a:27:1d:77:d0:62:54:63:9e:
c0:58:18:64
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQf+gX/eDbUxda0aXUh+li6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1ODczN2FjMWJjYThjMTQyOGIzOTY5NTQ2ZjE5NzRmMDY5
NGU0MDAwHhcNMjUwMTAxMDM0NzQ2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YjdlMWUyYTdlMzUwOWI3ODcwNmNmNDljZWQ0NzUxMWFmYWE5ZDYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyv4JuAZNl2xjVr7ZF/ZiPRBfR9W6
oZrjh+IPrD1XiECAJ3J3AxgIhb9R1WNy7kaB6I2hZobyp9uI+VyMxJRZCvpe7t5V
NE6Ktie22xXSVE1fL19UJuutTfGYLGj51Diab7GjQHBjp7gJXqxfJ/JvY5OK1Ch7
dBCVtTtRndePPygDx7kluXUWs9togLGkVIbJNsffF96gLWHImIdyzEk6QJBkPXFT
KSf9W/kfL29DPQdOReZv39ninTcNl4qtqUR7AbualJCqxX4JYxvniBGkG9WR2/zs
4uZzjRuuSOigOBPdembGkKQPZRmygBIdO+BDFyoGpbOIQrcDNxMheoDSUQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEt+Hip+NQm3hwbPSc7UdRGvqp1jMB8GA1UdIwQY
MBaAFAWHN6wbyowUKLOWlUbxl08GlOQAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlljM3JCdktqQlFvczVhVlJ2R1hUd2FVNUFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS82OTMyN2EtNjhkZS00NTg1LWFjZmIt
NTAxMjU3NTkwZGU3LzEvUzM0ZUtuNDFDYmVIQnM5Snp0UjFFYS1xbldNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS82OTMyN2EtNjhkZS00NTg1LWFjZmItNTAxMjU3NTkwZGU3
LzEvQlljM3JCdktqQlFvczVhVlJ2R1hUd2FVNUFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwaNsMA0G
CSqGSIb3DQEBCwUAA4IBAQCtUP42euxpj+0FbwUOKlqwArjYBqwNt1+Jq7gn9sJc
NVtF0YIsw1/xeA5vkNGRogOq/aXRgGEDRFNCdBLOaUXWFghENWK6Gh1f+y4mvaGp
wkCNe+PwOjbUENEZZdW5h7dEg2fIxQ1PRwYBMCNJ+yFMypAcR9QvwFSNWfJ/ub8o
L3P427sYfHaBWSRKJvbKoIGJ7Pgk54qH/eIvA9ym/Uhlc6hRIC3JVRlQAdiKI0S7
AW/f47QvzZvXRUnTCYHpD33golodBzaG5FmOS+mCZmwGe2phfpF3Bn4osVHq18ku
vf10HIAufFACX1Es+Y0QAViY7ylqJx130GJUY57AWBhk
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:57:29 2025 by rpki-client