Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/02srA_dodlsqHDgp--vASVvWX9E.roa
File: 02srA_dodlsqHDgp--vASVvWX9E.roa (raw, json)
Hash identifier: lJ1KGWWna7XFX1YELq/QOjPK38+hDLl/0ZeJxdIW2VA=
Subject key identifier: D3:6B:2B:03:F7:68:76:5B:2A:1C:38:29:FB:EB:C0:49:5B:D6:5F:D1
Certificate issuer: /CN=153f24183d6c95185919349e6e92533736437b94
Certificate serial: 0194CCCC44FADDC966C97A912304669824BA
Authority key identifier: 15:3F:24:18:3D:6C:95:18:59:19:34:9E:6E:92:53:37:36:43:7B:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FT8kGD1slRhZGTSebpJTNzZDe5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/02srA_dodlsqHDgp--vASVvWX9E.roa
Signing time: Mon 03 Feb 2025 17:12:06 +0000
ROA not before: Mon 03 Feb 2025 17:12:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216146
IP address blocks: 194.187.253.0/24 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/FT8kGD1slRhZGTSebpJTNzZDe5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 20:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:cc:cc:44:fa:dd:c9:66:c9:7a:91:23:04:66:98:24:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=153f24183d6c95185919349e6e92533736437b94
Validity
Not Before: Feb 3 17:12:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d36b2b03f768765b2a1c3829fbebc0495bd65fd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:13:75:ac:33:96:e1:52:a4:8e:78:f5:f7:12:
7e:d1:42:60:34:aa:13:4f:3e:06:20:76:84:d8:95:
0a:2c:5a:5d:20:56:ff:e3:17:aa:55:42:3b:4b:8f:
a2:af:42:57:8d:9f:3d:58:85:cb:8e:a2:dd:86:0b:
1a:b9:df:0b:e9:4c:e5:76:89:ee:7c:12:16:ff:d5:
fe:1f:4d:b5:6e:be:ee:05:9d:5d:38:29:9e:71:e1:
a8:c1:ce:ce:fb:71:f0:23:27:81:fd:ce:c4:01:ec:
7c:8b:ce:84:6c:b6:be:63:69:c0:b7:2c:97:c4:61:
69:c1:b6:23:cf:cc:a9:50:2f:5d:99:95:a2:98:2b:
5a:2b:6a:f6:67:f0:35:bf:e7:a3:ea:50:2b:55:33:
26:1a:b4:f2:6b:dc:55:a9:80:a6:60:35:9d:68:62:
3c:80:e6:67:fa:92:bc:36:5f:47:90:f5:41:44:fe:
f9:77:e4:cb:b1:40:29:ad:6c:99:5d:cd:51:97:90:
72:38:63:9b:e8:11:06:dd:f4:9f:86:07:3a:ce:a9:
97:63:41:f6:d5:62:5f:28:47:af:5f:dd:50:0b:9d:
cc:6f:e3:3e:0e:e7:0a:50:c4:38:ea:30:87:ad:b3:
f0:f5:61:9a:63:02:da:8f:ff:68:d8:16:58:1c:03:
54:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:6B:2B:03:F7:68:76:5B:2A:1C:38:29:FB:EB:C0:49:5B:D6:5F:D1
X509v3 Authority Key Identifier:
keyid:15:3F:24:18:3D:6C:95:18:59:19:34:9E:6E:92:53:37:36:43:7B:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FT8kGD1slRhZGTSebpJTNzZDe5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/02srA_dodlsqHDgp--vASVvWX9E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.187.253.0/24
Signature Algorithm: sha256WithRSAEncryption
37:20:0f:4d:86:6f:60:54:8f:3c:61:89:21:a6:56:2e:ef:a2:
f4:5c:84:df:f3:c9:6f:93:c9:d4:67:9e:67:73:fe:06:10:7a:
9e:97:08:b8:4e:bb:37:ae:b6:65:aa:40:65:84:4b:6f:f3:2c:
8d:c5:48:ce:c0:d9:16:cd:8d:0d:36:ec:7d:d1:c1:a4:dd:05:
f6:1d:d8:ae:72:11:29:33:09:ec:6d:2e:01:12:e6:21:84:1d:
2f:c6:0f:3e:c9:61:ec:ed:bd:70:ae:30:a2:17:13:55:0b:09:
61:82:9f:7c:41:1f:27:dc:a1:f7:8e:e3:99:33:84:28:cc:d4:
68:58:d4:49:ec:aa:83:29:4c:18:27:45:2e:7e:3e:f8:db:2a:
7f:51:9d:6f:70:71:26:ec:62:0d:7a:81:8e:86:ba:61:4c:6a:
dc:c5:37:99:6f:44:24:ce:8b:ff:ef:aa:a4:63:a4:cb:c7:78:
a2:b0:22:5d:74:34:07:d7:90:94:06:d0:ed:f1:c6:9b:53:ac:
d5:60:61:46:d2:b9:d4:62:a2:97:4c:f1:ed:88:fb:9e:06:b7:
d5:d6:eb:95:8e:b5:d4:a9:3b:e9:6f:6c:86:fd:40:24:2f:68:
45:86:c2:4b:16:8c:b0:ae:0d:1e:3a:73:01:d9:0b:d6:23:03:
eb:ec:2a:94
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZTMzET63clmyXqRIwRmmCS6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1M2YyNDE4M2Q2Yzk1MTg1OTE5MzQ5ZTZlOTI1MzM3MzY0
MzdiOTQwHhcNMjUwMjAzMTcxMjA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMzZiMmIwM2Y3Njg3NjViMmExYzM4MjlmYmViYzA0OTViZDY1ZmQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBN1rDOW4VKkjnj19xJ+0UJgNKoT
Tz4GIHaE2JUKLFpdIFb/4xeqVUI7S4+ir0JXjZ89WIXLjqLdhgsaud8L6Uzldonu
fBIW/9X+H021br7uBZ1dOCmeceGowc7O+3HwIyeB/c7EAex8i86EbLa+Y2nAtyyX
xGFpwbYjz8ypUC9dmZWimCtaK2r2Z/A1v+ej6lArVTMmGrTya9xVqYCmYDWdaGI8
gOZn+pK8Nl9HkPVBRP75d+TLsUAprWyZXc1Rl5ByOGOb6BEG3fSfhgc6zqmXY0H2
1WJfKEevX91QC53Mb+M+DucKUMQ46jCHrbPw9WGaYwLaj/9o2BZYHANUYwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNNrKwP3aHZbKhw4KfvrwElb1l/RMB8GA1UdIwQY
MBaAFBU/JBg9bJUYWRk0nm6SUzc2Q3uUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlQ4a0dEMXNsUmhaR1RTZWJwSlROelpEZTVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9iMDVlMDgtMDc2Mi00ZGM3LWE0YjAt
NTgwNWQzZjNkYmIyLzEvMDJzckFfZG9kbHNxSERncC0tdkFTVnZXWDlFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi9iMDVlMDgtMDc2Mi00ZGM3LWE0YjAtNTgwNWQzZjNkYmIy
LzEvRlQ4a0dEMXNsUmhaR1RTZWJwSlROelpEZTVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwrv9MA0G
CSqGSIb3DQEBCwUAA4IBAQA3IA9Nhm9gVI88YYkhplYu76L0XITf88lvk8nUZ55n
c/4GEHqelwi4Trs3rrZlqkBlhEtv8yyNxUjOwNkWzY0NNux90cGk3QX2HdiuchEp
MwnsbS4BEuYhhB0vxg8+yWHs7b1wrjCiFxNVCwlhgp98QR8n3KH3juOZM4QozNRo
WNRJ7KqDKUwYJ0Uufj742yp/UZ1vcHEm7GINeoGOhrphTGrcxTeZb0Qkzov/76qk
Y6TLx3iisCJddDQH15CUBtDt8cabU6zVYGFG0rnUYqKXTPHtiPueBrfV1uuVjrXU
qTvpb2yG/UAkL2hFhsJLFoywrg0eOnMB2QvWIwPr7CqU
-----END CERTIFICATE-----
Generated at Wed Apr 9 02:57:58 2025 by rpki-client