Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/T30bJyS4tnukk0y5XcMB2tlA-sE.roa
File: T30bJyS4tnukk0y5XcMB2tlA-sE.roa (raw, json)
Hash identifier: NB63nJlDN5bcZa8a7PZtrUJV2b4GBR3YB6Q88OfOLtU=
Subject key identifier: 4F:7D:1B:27:24:B8:B6:7B:A4:93:4C:B9:5D:C3:01:DA:D9:40:FA:C1
Certificate issuer: /CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Certificate serial: 0194266BC847C8A5F0387282DC6572B9E552
Authority key identifier: A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/T30bJyS4tnukk0y5XcMB2tlA-sE.roa
Signing time: Thu 02 Jan 2025 09:49:45 +0000
ROA not before: Thu 02 Jan 2025 09:49:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208119
IP address blocks: 92.62.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:c8:47:c8:a5:f0:38:72:82:dc:65:72:b9:e5:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Validity
Not Before: Jan 2 09:49:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4f7d1b2724b8b67ba4934cb95dc301dad940fac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c5:9d:f5:93:4d:58:a5:24:37:c6:97:10:89:
62:dc:ad:01:31:0c:e3:e5:f9:19:fc:60:5d:ac:11:
8f:82:13:ae:c8:a9:aa:6b:6d:cc:bf:3b:59:99:81:
62:58:53:b4:2e:6b:c8:6a:5c:b8:40:1b:03:d8:86:
b2:84:51:4d:08:29:3e:86:d3:63:ac:8c:77:38:be:
f1:04:5d:cb:ba:bb:e8:76:ba:53:b4:d5:27:c5:22:
d2:81:bb:cb:2b:ce:60:f4:34:67:89:39:66:30:df:
0a:3b:2d:3b:77:46:ad:32:5a:b2:2d:36:33:69:f3:
0c:65:22:05:a7:84:ec:85:d7:ad:f3:26:d1:43:b2:
34:0e:5b:4e:fb:d0:cb:a2:bb:1b:7c:a1:0d:c2:bf:
e9:a1:21:35:42:90:19:32:1b:c9:63:df:b5:27:6a:
38:2a:6f:c2:26:0f:7e:51:5f:2c:d5:5e:6d:98:e2:
db:5e:c8:d2:99:cf:2d:c8:2a:27:6f:e3:97:7a:e8:
f9:39:32:0f:f4:63:e3:6f:29:dc:da:4f:b0:42:73:
08:4a:81:76:25:d3:2c:bd:68:64:bc:7a:51:60:da:
f9:c9:40:3b:d2:91:4a:16:75:ed:10:66:da:1f:48:
57:79:de:0c:4b:0d:e5:3b:61:d4:36:f2:97:1c:4c:
54:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:7D:1B:27:24:B8:B6:7B:A4:93:4C:B9:5D:C3:01:DA:D9:40:FA:C1
X509v3 Authority Key Identifier:
keyid:A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/T30bJyS4tnukk0y5XcMB2tlA-sE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.62.134.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:bf:5b:35:8e:16:ae:65:0c:d5:2a:70:a3:59:bc:da:3b:4c:
d3:a8:12:66:55:33:5a:04:8d:75:23:91:7d:39:19:a0:95:20:
99:c4:cd:5f:fc:6b:d7:03:26:c0:ab:30:e7:79:e1:ad:d2:56:
10:e6:eb:ee:1f:5f:79:cf:db:07:d8:a6:ff:11:90:95:77:33:
fc:04:b0:95:79:c6:50:d7:c5:d1:02:a4:d2:fe:16:9f:fc:a4:
4e:27:86:2c:96:ae:67:80:c5:a8:84:1b:0f:cf:86:d7:7f:39:
5b:88:0e:f3:8c:db:f3:92:0a:d4:c6:0e:1d:fe:bf:6b:6f:fa:
66:fd:42:93:42:12:e4:5f:00:f5:6c:74:f9:f0:6f:da:07:73:
36:fe:d2:71:05:cc:f4:4d:6a:b1:d8:5e:eb:03:91:84:12:fb:
2f:ac:22:cc:74:b7:be:57:d6:1c:da:af:57:f0:d0:a7:e6:14:
3b:45:78:6d:bc:e2:06:a4:d6:46:3a:4e:55:e2:bd:bc:42:57:
fa:a1:f1:ff:1c:44:fe:fe:2b:f4:52:e3:de:1e:1c:50:9b:95:
58:66:12:6d:e1:78:c9:11:71:72:89:22:04:3e:f7:66:24:2f:
f6:d1:ba:12:b7:8f:dd:b3:2a:07:4f:39:c6:d4:ec:df:80:7e:
e2:a9:1a:b1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQma8hHyKXwOHKC3GVyueVSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyNTRhOWYzYTI2NjUxM2RkYzY5MzVkOGJlMDIyZTdlNTIz
MGVhMTAwHhcNMjUwMTAyMDk0OTQ1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZjdkMWIyNzI0YjhiNjdiYTQ5MzRjYjk1ZGMzMDFkYWQ5NDBmYWMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8Wd9ZNNWKUkN8aXEIli3K0BMQzj
5fkZ/GBdrBGPghOuyKmqa23MvztZmYFiWFO0LmvIaly4QBsD2IayhFFNCCk+htNj
rIx3OL7xBF3LurvodrpTtNUnxSLSgbvLK85g9DRniTlmMN8KOy07d0atMlqyLTYz
afMMZSIFp4Tshdet8ybRQ7I0DltO+9DLorsbfKENwr/poSE1QpAZMhvJY9+1J2o4
Km/CJg9+UV8s1V5tmOLbXsjSmc8tyConb+OXeuj5OTIP9GPjbync2k+wQnMISoF2
JdMsvWhkvHpRYNr5yUA70pFKFnXtEGbaH0hXed4MSw3lO2HUNvKXHExUFQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFE99GyckuLZ7pJNMuV3DAdrZQPrBMB8GA1UdIwQY
MBaAFKJUqfOiZlE93Gk12L4CLn5SMOoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9iNjAzNzMtODE4ZS00MGE5LTkzMTkt
YWRkZjBlMTg0OWViLzEvVDMwYkp5UzR0bnVrazB5NVhjTUIydGxBLXNFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9iNjAzNzMtODE4ZS00MGE5LTkzMTktYWRkZjBlMTg0OWVi
LzEvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXD6GMA0G
CSqGSIb3DQEBCwUAA4IBAQA9v1s1jhauZQzVKnCjWbzaO0zTqBJmVTNaBI11I5F9
ORmglSCZxM1f/GvXAybAqzDneeGt0lYQ5uvuH195z9sH2Kb/EZCVdzP8BLCVecZQ
18XRAqTS/haf/KROJ4Yslq5ngMWohBsPz4bXfzlbiA7zjNvzkgrUxg4d/r9rb/pm
/UKTQhLkXwD1bHT58G/aB3M2/tJxBcz0TWqx2F7rA5GEEvsvrCLMdLe+V9Yc2q9X
8NCn5hQ7RXhtvOIGpNZGOk5V4r28Qlf6ofH/HET+/iv0UuPeHhxQm5VYZhJt4XjJ
EXFyiSIEPvdmJC/20boSt4/dsyoHTznG1OzfgH7iqRqx
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:36:55 2025 by rpki-client