Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/SPO79W-RKvYGHUZUo_GKPu1EhfI.roa
File: SPO79W-RKvYGHUZUo_GKPu1EhfI.roa (raw, json)
Hash identifier: cEdKpQm01CKeHg+/Jj2Tpv6ISl0LACkf+X0dbIBfckM=
Subject key identifier: 48:F3:BB:F5:6F:91:2A:F6:06:1D:46:54:A3:F1:8A:3E:ED:44:85:F2
Certificate issuer: /CN=5ca053dfe7712ee63dbff640fae07308d66ce748
Certificate serial: 0194228E12CF2EAA4AA2CCE3F5E28E823B8E
Authority key identifier: 5C:A0:53:DF:E7:71:2E:E6:3D:BF:F6:40:FA:E0:73:08:D6:6C:E7:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XKBT3-dxLuY9v_ZA-uBzCNZs50g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/SPO79W-RKvYGHUZUo_GKPu1EhfI.roa
Signing time: Wed 01 Jan 2025 15:48:43 +0000
ROA not before: Wed 01 Jan 2025 15:48:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19905
IP address blocks: 92.54.34.0/24 maxlen: 24
2a02:a0:9::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.mft
rsync://rpki.ripe.net/repository/DEFAULT/XKBT3-dxLuY9v_ZA-uBzCNZs50g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:12:cf:2e:aa:4a:a2:cc:e3:f5:e2:8e:82:3b:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ca053dfe7712ee63dbff640fae07308d66ce748
Validity
Not Before: Jan 1 15:48:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=48f3bbf56f912af6061d4654a3f18a3eed4485f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:fb:20:95:1f:bc:0f:44:2b:b2:2d:a5:db:71:
a7:be:8d:1b:db:c7:c3:e4:d7:98:0d:c8:c0:f3:e1:
2c:15:cc:1e:20:ae:45:83:5f:83:d9:e8:70:c3:3c:
92:f2:92:d5:cd:4c:16:fa:7e:98:75:c6:80:9d:21:
68:a6:bd:d4:6c:5c:60:f7:1b:d4:62:7e:0d:26:10:
74:6d:05:2e:e2:d3:1f:e8:11:60:8d:cb:44:52:b6:
c1:45:03:67:43:a1:69:48:06:c7:bb:63:cd:c1:c8:
07:d5:bb:89:50:07:a5:d3:09:0a:72:8c:1b:21:af:
7a:b6:7b:46:a4:b7:c5:37:d3:f9:52:36:86:a3:7e:
be:ca:9b:61:0e:f7:5c:4d:29:8b:d7:7e:57:48:4b:
67:a7:e5:4f:08:7a:5c:49:18:de:ce:e5:0a:38:e8:
8f:3b:a0:2a:ac:f3:c4:45:6a:c0:9c:78:8a:73:15:
93:b6:6e:9a:8b:1c:26:e6:7e:c5:04:57:a0:97:82:
4a:55:fc:dd:de:11:15:bf:f2:fb:13:d7:65:64:15:
56:09:ce:d9:97:1c:ac:b0:24:3e:b5:d5:99:a1:87:
ef:28:c7:02:62:8f:03:ea:b9:48:e6:93:24:cc:c2:
3f:5f:aa:12:9d:f7:bc:1a:94:62:86:6b:7d:13:86:
65:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:F3:BB:F5:6F:91:2A:F6:06:1D:46:54:A3:F1:8A:3E:ED:44:85:F2
X509v3 Authority Key Identifier:
keyid:5C:A0:53:DF:E7:71:2E:E6:3D:BF:F6:40:FA:E0:73:08:D6:6C:E7:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XKBT3-dxLuY9v_ZA-uBzCNZs50g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/SPO79W-RKvYGHUZUo_GKPu1EhfI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.54.34.0/24
IPv6:
2a02:a0:9::/48
Signature Algorithm: sha256WithRSAEncryption
37:24:05:e7:ab:23:ce:28:19:f9:fb:62:63:d0:b9:4d:d7:49:
e1:c3:87:77:07:99:36:d0:a5:10:e3:b6:fa:c4:e8:37:85:3d:
44:52:d8:79:3c:f7:48:70:be:d0:65:09:2e:7e:c5:e1:d7:c0:
f3:be:f2:b9:58:55:41:d4:34:2a:51:ab:94:b6:ff:c2:a4:81:
0b:0c:17:a9:31:25:3f:f7:4f:6b:eb:21:c4:f8:b2:39:fc:c0:
b0:23:0e:2c:b9:38:02:4b:18:d4:95:ae:7d:3f:e7:f8:e3:cc:
4f:22:a3:ae:0f:42:11:8e:45:0c:b6:1e:d9:b8:49:d0:98:c4:
36:25:35:eb:68:54:d3:3d:35:70:30:df:d2:ce:ef:45:0f:5f:
4b:41:2d:43:8f:8f:09:f2:7a:ad:79:5e:b5:70:93:00:ca:78:
a9:20:bb:58:51:26:82:b6:d1:7c:6d:03:72:42:5b:fb:da:8c:
ac:d1:87:ad:97:23:2d:d9:82:e8:c6:bc:7d:14:ce:78:0d:02:
50:10:59:db:3c:5f:be:06:5c:b1:08:f1:50:a5:2b:06:34:7c:
64:d6:1b:7b:c6:49:1a:7e:08:4d:46:80:87:5e:bb:60:4b:4d:
c3:1b:6b:bf:ed:30:9c:fb:13:d4:4f:26:61:02:37:d3:db:62:
e1:fd:14:75
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZQijhLPLqpKoszj9eKOgjuOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjYTA1M2RmZTc3MTJlZTYzZGJmZjY0MGZhZTA3MzA4ZDY2
Y2U3NDgwHhcNMjUwMTAxMTU0ODQzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OGYzYmJmNTZmOTEyYWY2MDYxZDQ2NTRhM2YxOGEzZWVkNDQ4NWYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPsglR+8D0Qrsi2l23Gnvo0b28fD
5NeYDcjA8+EsFcweIK5Fg1+D2ehwwzyS8pLVzUwW+n6YdcaAnSFopr3UbFxg9xvU
Yn4NJhB0bQUu4tMf6BFgjctEUrbBRQNnQ6FpSAbHu2PNwcgH1buJUAel0wkKcowb
Ia96tntGpLfFN9P5UjaGo36+ypthDvdcTSmL135XSEtnp+VPCHpcSRjezuUKOOiP
O6AqrPPERWrAnHiKcxWTtm6aixwm5n7FBFegl4JKVfzd3hEVv/L7E9dlZBVWCc7Z
lxyssCQ+tdWZoYfvKMcCYo8D6rlI5pMkzMI/X6oSnfe8GpRihmt9E4ZlBQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFEjzu/VvkSr2Bh1GVKPxij7tRIXyMB8GA1UdIwQY
MBaAFFygU9/ncS7mPb/2QPrgcwjWbOdIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEtCVDMtZHhMdVk5dl9aQS11QnpDTlpzNTBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9lYmJkMmMtYmY1YS00NmRhLTg2ZmIt
ODBjM2VhNGZkMDAwLzEvU1BPNzlXLVJLdllHSFVaVW9fR0tQdTFFaGZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy9lYmJkMmMtYmY1YS00NmRhLTg2ZmItODBjM2VhNGZkMDAw
LzEvWEtCVDMtZHhMdVk5dl9aQS11QnpDTlpzNTBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAXDYiMA8E
AgACMAkDBwAqAgCgAAkwDQYJKoZIhvcNAQELBQADggEBADckBeerI84oGfn7YmPQ
uU3XSeHDh3cHmTbQpRDjtvrE6DeFPURS2Hk890hwvtBlCS5+xeHXwPO+8rlYVUHU
NCpRq5S2/8KkgQsMF6kxJT/3T2vrIcT4sjn8wLAjDiy5OAJLGNSVrn0/5/jjzE8i
o64PQhGORQy2Htm4SdCYxDYlNetoVNM9NXAw39LO70UPX0tBLUOPjwnyeq15XrVw
kwDKeKkgu1hRJoK20XxtA3JCW/vajKzRh62XIy3ZgujGvH0UzngNAlAQWds8X74G
XLEI8VClKwY0fGTWG3vGSRp+CE1GgIdeu2BLTcMba7/tMJz7E9RPJmECN9PbYuH9
FHU=
-----END CERTIFICATE-----
Generated at Sat Apr 12 15:51:52 2025 by rpki-client