Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/auDMGKuBUFekwr1pbKCTw36W0Cg.roa
File: auDMGKuBUFekwr1pbKCTw36W0Cg.roa (raw, json)
Hash identifier: Ih8H6tUaVW1XZmrRDrxRFmcbfxbignoEn1fpBpsApWc=
Subject key identifier: 6A:E0:CC:18:AB:81:50:57:A4:C2:BD:69:6C:A0:93:C3:7E:96:D0:28
Certificate issuer: /CN=65cf99962f989f7b733da7aa70eaf9e41052ae19
Certificate serial: 01942143FDAA13931DAE05D3332CAA89485D
Authority key identifier: 65:CF:99:96:2F:98:9F:7B:73:3D:A7:AA:70:EA:F9:E4:10:52:AE:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/auDMGKuBUFekwr1pbKCTw36W0Cg.roa
Signing time: Wed 01 Jan 2025 09:48:11 +0000
ROA not before: Wed 01 Jan 2025 09:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202717
IP address blocks: 193.33.124.0/24 maxlen: 24
2a10:a80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 21:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:fd:aa:13:93:1d:ae:05:d3:33:2c:aa:89:48:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65cf99962f989f7b733da7aa70eaf9e41052ae19
Validity
Not Before: Jan 1 09:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6ae0cc18ab815057a4c2bd696ca093c37e96d028
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:29:b0:1b:e6:4c:8d:73:2f:5f:ec:4c:5d:24:
cc:ec:cf:7f:84:89:17:9b:14:01:27:d2:06:33:f2:
55:72:8e:15:1f:f8:b3:c8:03:13:d3:d7:a9:e0:16:
82:89:27:c0:36:ed:cd:35:5f:18:0f:60:0a:d6:43:
ea:ae:fb:09:b6:b4:9a:3c:34:97:65:9a:1d:d7:4f:
c8:c5:09:38:f5:df:a9:61:28:91:fa:92:c0:4b:85:
69:aa:4e:7d:59:3c:01:be:3a:5a:14:7d:1e:48:93:
92:08:46:50:89:7a:d7:26:d5:37:a2:89:06:cd:49:
bb:7a:d9:61:32:3b:fd:54:f9:c7:ab:6b:21:7b:e2:
55:47:ff:06:79:7b:58:d5:5d:c6:c0:7c:87:37:36:
c9:bf:cb:97:04:bc:be:c6:5b:61:4b:f4:2c:9c:58:
c1:dd:f9:b4:a4:42:cf:7d:72:47:4f:af:bf:76:4e:
d6:ee:ca:77:e8:ed:78:19:70:6b:a1:ec:4c:1d:b8:
7b:a1:6a:73:89:43:25:ef:1c:7d:41:a4:97:6c:fc:
dc:29:11:83:2b:a0:d7:ea:65:ef:2d:ee:57:6a:b2:
a2:04:b8:db:8a:aa:7f:72:a6:00:ee:ed:f2:1a:9e:
dc:21:c4:0e:86:e1:68:dd:2b:68:54:43:d4:45:53:
6c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:E0:CC:18:AB:81:50:57:A4:C2:BD:69:6C:A0:93:C3:7E:96:D0:28
X509v3 Authority Key Identifier:
keyid:65:CF:99:96:2F:98:9F:7B:73:3D:A7:AA:70:EA:F9:E4:10:52:AE:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/auDMGKuBUFekwr1pbKCTw36W0Cg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.33.124.0/24
IPv6:
2a10:a80::/32
Signature Algorithm: sha256WithRSAEncryption
a8:68:bb:bc:db:0c:94:f9:2e:3c:91:67:de:d1:18:74:6e:47:
76:69:45:31:87:e4:85:b2:0e:b4:87:1b:6a:3c:d9:db:89:13:
45:ce:b0:cd:0e:35:38:84:43:52:19:a9:38:59:1f:fb:5d:8f:
a2:c9:00:7f:20:0b:42:83:29:01:06:78:99:fe:3d:1a:7b:53:
94:7e:5c:3c:5c:52:87:24:9d:2b:6a:e8:e8:8b:e6:6e:cb:20:
af:10:56:f4:4c:b3:5b:5c:c4:cd:6d:aa:66:fc:b6:fa:0e:57:
8d:53:ff:ef:d0:44:d3:55:f4:fb:ea:3b:69:09:bf:fb:09:11:
1c:a8:bb:0b:92:b3:53:0b:98:b4:ff:a2:47:49:d3:eb:1c:b8:
db:bd:6a:9f:a5:b9:6b:5e:1b:ee:e1:bb:26:ec:af:4a:a6:3a:
9b:c0:42:25:54:d6:8a:3d:4d:ac:30:9d:ee:2b:a1:04:f1:4c:
07:92:9b:b6:55:82:9f:36:a3:d0:1b:4e:56:9d:fe:8d:12:6a:
0d:d1:94:bc:df:1a:cc:55:41:64:43:8f:71:60:b1:5d:63:1a:
9e:67:bf:80:25:09:44:14:20:03:4d:24:40:1f:7a:86:d4:5f:
1e:cf:47:e2:13:bf:14:63:2c:57:48:b4:03:a1:ee:9f:b4:9c:
a7:55:29:d1
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQhQ/2qE5MdrgXTMyyqiUhdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1Y2Y5OTk2MmY5ODlmN2I3MzNkYTdhYTcwZWFmOWU0MTA1
MmFlMTkwHhcNMjUwMTAxMDk0ODExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YWUwY2MxOGFiODE1MDU3YTRjMmJkNjk2Y2EwOTNjMzdlOTZkMDI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSmwG+ZMjXMvX+xMXSTM7M9/hIkX
mxQBJ9IGM/JVco4VH/izyAMT09ep4BaCiSfANu3NNV8YD2AK1kPqrvsJtrSaPDSX
ZZod10/IxQk49d+pYSiR+pLAS4Vpqk59WTwBvjpaFH0eSJOSCEZQiXrXJtU3ookG
zUm7etlhMjv9VPnHq2she+JVR/8GeXtY1V3GwHyHNzbJv8uXBLy+xlthS/QsnFjB
3fm0pELPfXJHT6+/dk7W7sp36O14GXBroexMHbh7oWpziUMl7xx9QaSXbPzcKRGD
K6DX6mXvLe5XarKiBLjbiqp/cqYA7u3yGp7cIcQOhuFo3StoVEPURVNsdQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFGrgzBirgVBXpMK9aWygk8N+ltAoMB8GA1UdIwQY
MBaAFGXPmZYvmJ97cz2nqnDq+eQQUq4ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmMtWmxpLVluM3R6UGFlcWNPcjU1QkJTcmhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9hNTJiMDQtZWZiMC00MTViLTliMWEt
NDA5ZWExMjA4OTI2LzEvYXVETUdLdUJVRmVrd3IxcGJLQ1R3MzZXMENnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9hNTJiMDQtZWZiMC00MTViLTliMWEtNDA5ZWExMjA4OTI2
LzEvWmMtWmxpLVluM3R6UGFlcWNPcjU1QkJTcmhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwSF8MA0E
AgACMAcDBQAqEAqAMA0GCSqGSIb3DQEBCwUAA4IBAQCoaLu82wyU+S48kWfe0Rh0
bkd2aUUxh+SFsg60hxtqPNnbiRNFzrDNDjU4hENSGak4WR/7XY+iyQB/IAtCgykB
BniZ/j0ae1OUflw8XFKHJJ0raujoi+ZuyyCvEFb0TLNbXMTNbapm/Lb6DleNU//v
0ETTVfT76jtpCb/7CREcqLsLkrNTC5i0/6JHSdPrHLjbvWqfpblrXhvu4bsm7K9K
pjqbwEIlVNaKPU2sMJ3uK6EE8UwHkpu2VYKfNqPQG05Wnf6NEmoN0ZS83xrMVUFk
Q49xYLFdYxqeZ7+AJQlEFCADTSRAH3qG1F8ez0fiE78UYyxXSLQDoe6ftJynVSnR
-----END CERTIFICATE-----
Generated at Fri Apr 18 07:04:03 2025 by rpki-client