Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/a3d825-d7a7-47cc-a0ca-9666edeee1e3/1/DTuRKBc5DWAml25DkyA602e9E2c.roa
File: DTuRKBc5DWAml25DkyA602e9E2c.roa (raw, json)
Hash identifier: 5dE22gWyeJTuF6kqg31h2vC+gEZF7bnxpO0rszd82sI=
Subject key identifier: 0D:3B:91:28:17:39:0D:60:26:97:6E:43:93:20:3A:D3:67:BD:13:67
Certificate issuer: /CN=5a8a52dc998f1148c078290bdbb4d3cdc3f03cbc
Certificate serial: 019420D5B1F62DCB0AA15DFF223DB79BDCC8
Authority key identifier: 5A:8A:52:DC:99:8F:11:48:C0:78:29:0B:DB:B4:D3:CD:C3:F0:3C:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WopS3JmPEUjAeCkL27TTzcPwPLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/a3d825-d7a7-47cc-a0ca-9666edeee1e3/1/DTuRKBc5DWAml25DkyA602e9E2c.roa
Signing time: Wed 01 Jan 2025 07:47:43 +0000
ROA not before: Wed 01 Jan 2025 07:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6730
IP address blocks: 194.33.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/a3d825-d7a7-47cc-a0ca-9666edeee1e3/1/WopS3JmPEUjAeCkL27TTzcPwPLw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/a3d825-d7a7-47cc-a0ca-9666edeee1e3/1/WopS3JmPEUjAeCkL27TTzcPwPLw.mft
rsync://rpki.ripe.net/repository/DEFAULT/WopS3JmPEUjAeCkL27TTzcPwPLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 19:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:b1:f6:2d:cb:0a:a1:5d:ff:22:3d:b7:9b:dc:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a8a52dc998f1148c078290bdbb4d3cdc3f03cbc
Validity
Not Before: Jan 1 07:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0d3b912817390d6026976e4393203ad367bd1367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:4d:44:82:8f:c2:67:4d:4b:de:ad:eb:77:f4:
de:dd:d1:6f:11:c3:70:30:d8:7a:78:a9:49:7d:9b:
00:0d:58:0c:b1:0b:10:63:65:9b:aa:dd:08:fe:01:
ec:f1:f8:36:95:db:cb:e0:eb:d8:7e:48:2c:12:cc:
5a:34:78:2a:cf:6a:c1:21:36:b6:6a:e0:c4:92:0a:
31:6f:d9:89:c1:3f:57:6e:a4:b3:0b:10:b3:b6:bf:
9f:6c:4e:10:be:2c:6b:f6:f6:e9:c8:80:c2:63:cd:
eb:eb:8f:3f:a7:23:9c:18:77:b0:fb:64:a4:90:a5:
5b:1b:a1:e5:0d:82:87:cf:33:da:3d:e1:6b:92:c5:
d7:aa:89:79:8b:62:5f:e6:84:da:95:69:ef:90:f9:
62:05:c0:21:70:77:52:79:cc:ab:93:5b:57:97:7e:
ff:5b:69:15:ef:f5:85:48:17:d9:c6:55:b1:1f:74:
ea:81:66:1d:5b:31:91:86:df:af:34:de:2c:ad:a5:
77:2c:38:5a:f4:76:45:0e:bc:40:65:f4:4a:a7:9a:
51:df:b8:26:cc:6d:d8:b7:42:99:52:88:be:84:5b:
d4:29:f8:28:45:8b:28:b6:4f:3f:36:e7:d0:c4:ff:
d6:6e:f5:5c:f0:3c:cf:b0:03:c5:48:dc:87:3c:ee:
cd:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:3B:91:28:17:39:0D:60:26:97:6E:43:93:20:3A:D3:67:BD:13:67
X509v3 Authority Key Identifier:
keyid:5A:8A:52:DC:99:8F:11:48:C0:78:29:0B:DB:B4:D3:CD:C3:F0:3C:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WopS3JmPEUjAeCkL27TTzcPwPLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a3d825-d7a7-47cc-a0ca-9666edeee1e3/1/DTuRKBc5DWAml25DkyA602e9E2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a3d825-d7a7-47cc-a0ca-9666edeee1e3/1/WopS3JmPEUjAeCkL27TTzcPwPLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.33.186.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:7d:88:c4:5f:77:34:6c:b3:53:84:19:91:34:95:68:42:ef:
d5:68:e7:0f:33:70:a5:75:3f:21:88:de:dd:d1:bb:44:44:c1:
7a:32:a1:ad:05:19:37:7f:ce:79:e2:b0:68:ce:b2:39:89:9e:
53:53:a0:bb:bc:1d:70:de:84:ca:fa:e8:61:69:9c:47:0e:90:
e6:04:64:08:87:db:b9:75:3d:0e:1b:49:9d:e8:f0:b9:e2:ff:
97:78:e9:b1:ec:45:38:82:39:83:83:14:b7:b6:9d:73:45:a2:
76:25:c3:b8:4e:9f:50:29:3c:2b:52:ec:6a:31:2d:69:de:f5:
9f:37:a4:de:a9:56:1a:a6:a8:a2:dd:d8:1f:8a:91:09:49:00:
80:94:8e:af:77:82:7f:60:e2:de:1b:db:b0:2b:ed:eb:72:43:
2a:5d:86:82:1f:a5:2d:c7:7c:3f:24:66:f8:19:2b:3d:66:64:
d8:2f:5b:50:3a:f2:26:ae:82:a6:42:2b:02:bf:ca:c7:35:1a:
93:87:5b:94:5e:b3:df:44:d1:4c:52:33:23:34:3e:19:36:4a:
2e:22:a0:dc:31:be:ef:ee:b5:e9:d8:bc:b4:bf:6b:d3:12:f2:
04:04:35:ee:1b:df:6e:92:12:97:55:76:21:22:7f:ba:1a:92:
2c:a9:11:93
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQg1bH2LcsKoV3/Ij23m9zIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhOGE1MmRjOTk4ZjExNDhjMDc4MjkwYmRiYjRkM2NkYzNm
MDNjYmMwHhcNMjUwMTAxMDc0NzQzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZDNiOTEyODE3MzkwZDYwMjY5NzZlNDM5MzIwM2FkMzY3YmQxMzY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzk1Ego/CZ01L3q3rd/Te3dFvEcNw
MNh6eKlJfZsADVgMsQsQY2Wbqt0I/gHs8fg2ldvL4OvYfkgsEsxaNHgqz2rBITa2
auDEkgoxb9mJwT9XbqSzCxCztr+fbE4Qvixr9vbpyIDCY83r648/pyOcGHew+2Sk
kKVbG6HlDYKHzzPaPeFrksXXqol5i2Jf5oTalWnvkPliBcAhcHdSecyrk1tXl37/
W2kV7/WFSBfZxlWxH3TqgWYdWzGRht+vNN4sraV3LDha9HZFDrxAZfRKp5pR37gm
zG3Yt0KZUoi+hFvUKfgoRYsotk8/NufQxP/WbvVc8DzPsAPFSNyHPO7NXQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA07kSgXOQ1gJpduQ5MgOtNnvRNnMB8GA1UdIwQY
MBaAFFqKUtyZjxFIwHgpC9u0083D8Dy8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV29wUzNKbVBFVWpBZUNrTDI3VFR6Y1B3UEx3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9hM2Q4MjUtZDdhNy00N2NjLWEwY2Et
OTY2NmVkZWVlMWUzLzEvRFR1UktCYzVEV0FtbDI1RGt5QTYwMmU5RTJjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9hM2Q4MjUtZDdhNy00N2NjLWEwY2EtOTY2NmVkZWVlMWUz
LzEvV29wUzNKbVBFVWpBZUNrTDI3VFR6Y1B3UEx3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwiG6MA0G
CSqGSIb3DQEBCwUAA4IBAQB+fYjEX3c0bLNThBmRNJVoQu/VaOcPM3CldT8hiN7d
0btERMF6MqGtBRk3f8554rBozrI5iZ5TU6C7vB1w3oTK+uhhaZxHDpDmBGQIh9u5
dT0OG0md6PC54v+XeOmx7EU4gjmDgxS3tp1zRaJ2JcO4Tp9QKTwrUuxqMS1p3vWf
N6TeqVYapqii3dgfipEJSQCAlI6vd4J/YOLeG9uwK+3rckMqXYaCH6Utx3w/JGb4
GSs9ZmTYL1tQOvImroKmQisCv8rHNRqTh1uUXrPfRNFMUjMjND4ZNkouIqDcMb7v
7rXp2Ly0v2vTEvIEBDXuG99ukhKXVXYhIn+6GpIsqRGT
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:47:19 2025 by rpki-client