Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/SEv5PYdinUVT5nM_RvN02I4WnPI.roa
File: SEv5PYdinUVT5nM_RvN02I4WnPI.roa (raw, json)
Hash identifier: bEn83H7TItfWeMGBLjyh2LDH4cnpzc0XU4z33ahI6+E=
Subject key identifier: 48:4B:F9:3D:87:62:9D:45:53:E6:73:3F:46:F3:74:D8:8E:16:9C:F2
Certificate issuer: /CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Certificate serial: 01941FFA4A112FE14EC9F6C197BEEB793D86
Authority key identifier: 1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/SEv5PYdinUVT5nM_RvN02I4WnPI.roa
Signing time: Wed 01 Jan 2025 03:48:04 +0000
ROA not before: Wed 01 Jan 2025 03:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 40123
IP address blocks: 83.126.16.0/23 maxlen: 24
83.126.17.0/24 maxlen: 24
83.126.22.0/24 maxlen: 24
83.126.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 05:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:4a:11:2f:e1:4e:c9:f6:c1:97:be:eb:79:3d:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Validity
Not Before: Jan 1 03:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=484bf93d87629d4553e6733f46f374d88e169cf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:80:dd:f5:0f:f1:cd:51:c2:83:e6:9d:c2:1e:
21:bc:49:64:97:c2:76:03:68:2d:f5:6d:75:18:6a:
ad:cf:3c:b9:6d:ca:08:c4:0b:fb:6d:2d:21:c9:95:
2d:5a:f3:b9:85:2e:21:30:86:2f:bd:c7:21:a8:ca:
85:24:25:3d:50:fb:16:6e:ba:f3:df:2c:50:48:db:
db:9e:98:f7:db:67:19:e8:42:ac:df:78:10:71:14:
b8:da:40:a9:43:af:e4:ed:e3:d4:a9:b2:b8:7e:d7:
41:69:88:ab:1f:f9:7e:97:11:a3:b8:b3:85:03:49:
27:d5:c8:2a:9c:bf:6c:3e:33:32:f7:f4:89:50:a3:
22:60:c9:0b:2c:e0:0f:a8:eb:9c:4b:a2:8f:db:d1:
a3:73:a1:bb:d1:ca:d5:cf:e1:86:63:81:99:a5:17:
91:6c:fe:dc:f8:75:ce:cb:37:07:28:bb:7a:6e:9c:
34:ce:fd:f1:a5:59:77:ec:f2:67:5b:54:c5:0d:4e:
b5:84:4e:a2:66:e6:39:ba:6e:0b:aa:30:ac:2b:fe:
15:41:78:c2:76:82:f5:2a:13:82:2b:0c:ad:03:ca:
5f:e1:2e:c3:bf:78:0a:74:cd:14:dd:a0:a6:29:72:
e8:76:4e:11:43:53:01:5a:3a:be:52:37:53:8b:0d:
43:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:4B:F9:3D:87:62:9D:45:53:E6:73:3F:46:F3:74:D8:8E:16:9C:F2
X509v3 Authority Key Identifier:
keyid:1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/SEv5PYdinUVT5nM_RvN02I4WnPI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.126.16.0/23
83.126.22.0/24
83.126.56.0/24
Signature Algorithm: sha256WithRSAEncryption
07:9f:46:ce:63:c1:d6:05:a8:fc:e8:cc:e5:37:ca:bc:d9:b6:
0e:de:9b:e8:34:46:04:5a:ba:9d:a8:0f:50:46:af:cb:03:a8:
5f:3c:bf:60:1d:78:81:79:26:55:ee:d0:d8:a0:60:9d:78:2d:
8e:b0:41:7f:a8:78:01:76:80:7c:34:f3:25:e8:93:7b:b7:3f:
b9:92:7f:16:64:52:d8:ee:7f:b5:8f:b1:0c:bb:15:e6:d6:72:
68:b5:21:f0:9e:57:67:96:cc:37:98:d3:e8:13:3e:13:37:84:
f5:8c:fd:0d:0d:d7:e2:38:f8:fb:65:29:0e:7b:d6:a1:26:bd:
a6:54:de:60:37:2b:22:6e:84:b7:bd:fb:7e:a7:43:94:1f:6a:
78:51:57:cd:41:67:0b:ba:b7:4d:88:7a:61:ba:ff:df:fe:99:
c0:7d:2c:f5:b8:7e:c4:fa:39:c0:9f:c4:46:f1:1d:b8:48:3b:
82:78:cf:44:e3:ee:c9:54:3a:4e:09:b8:d6:e0:b3:cc:79:41:
49:31:cf:ee:fc:a0:34:52:73:4f:23:87:24:11:80:20:b3:ae:
89:da:ae:0e:30:81:f0:6d:8f:cd:6f:45:94:92:d3:bc:71:29:
9d:8d:8f:4a:2e:fb:97:e3:96:94:13:a7:ec:fa:7f:9b:f9:7b:
ba:6a:8b:79
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQf+koRL+FOyfbBl77reT2GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmZTkwZmRlOTc4NGE5MWQ5M2E3YTJhZjU5ZDRkMDQzZjEx
NzFmYmEwHhcNMjUwMTAxMDM0ODA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ODRiZjkzZDg3NjI5ZDQ1NTNlNjczM2Y0NmYzNzRkODhlMTY5Y2YyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4Dd9Q/xzVHCg+adwh4hvElkl8J2
A2gt9W11GGqtzzy5bcoIxAv7bS0hyZUtWvO5hS4hMIYvvcchqMqFJCU9UPsWbrrz
3yxQSNvbnpj322cZ6EKs33gQcRS42kCpQ6/k7ePUqbK4ftdBaYirH/l+lxGjuLOF
A0kn1cgqnL9sPjMy9/SJUKMiYMkLLOAPqOucS6KP29Gjc6G70crVz+GGY4GZpReR
bP7c+HXOyzcHKLt6bpw0zv3xpVl37PJnW1TFDU61hE6iZuY5um4LqjCsK/4VQXjC
doL1KhOCKwytA8pf4S7Dv3gKdM0U3aCmKXLodk4RQ1MBWjq+UjdTiw1DYwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFEhL+T2HYp1FU+ZzP0bzdNiOFpzyMB8GA1UdIwQY
MBaAFB/pD96XhKkdk6eir1nU0EPxFx+6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9hOTQ1ZjctNTNiMy00ZGI1LWFlMDQt
MjM3NzJlN2Y5MmUzLzEvU0V2NVBZZGluVVZUNW5NX1J2TjAySTRXblBJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi9hOTQ1ZjctNTNiMy00ZGI1LWFlMDQtMjM3NzJlN2Y5MmUz
LzEvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBU34QAwQA
U34WAwQAU344MA0GCSqGSIb3DQEBCwUAA4IBAQAHn0bOY8HWBaj86MzlN8q82bYO
3pvoNEYEWrqdqA9QRq/LA6hfPL9gHXiBeSZV7tDYoGCdeC2OsEF/qHgBdoB8NPMl
6JN7tz+5kn8WZFLY7n+1j7EMuxXm1nJotSHwnldnlsw3mNPoEz4TN4T1jP0NDdfi
OPj7ZSkOe9ahJr2mVN5gNysiboS3vft+p0OUH2p4UVfNQWcLurdNiHphuv/f/pnA
fSz1uH7E+jnAn8RG8R24SDuCeM9E4+7JVDpOCbjW4LPMeUFJMc/u/KA0UnNPI4ck
EYAgs66J2q4OMIHwbY/Nb0WUktO8cSmdjY9KLvuX45aUE6fs+n+b+Xu6aot5
-----END CERTIFICATE-----
Generated at Sun Apr 6 13:18:42 2025 by rpki-client