Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/NThoSQxUafUu9GSg2YgB3KD61Uo.roa
File: NThoSQxUafUu9GSg2YgB3KD61Uo.roa (raw, json)
Hash identifier: WZ5JuyMW+kpet8m35KP5+E570TrABwEt7fwaKtcUv+U=
Subject key identifier: 35:38:68:49:0C:54:69:F5:2E:F4:64:A0:D9:88:01:DC:A0:FA:D5:4A
Certificate issuer: /CN=13fe9bcebae228b36c883c27ea5518e704c10991
Certificate serial: 019420D66027B3027B0844CF077C34B6BF54
Authority key identifier: 13:FE:9B:CE:BA:E2:28:B3:6C:88:3C:27:EA:55:18:E7:04:C1:09:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E_6bzrriKLNsiDwn6lUY5wTBCZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/NThoSQxUafUu9GSg2YgB3KD61Uo.roa
Signing time: Wed 01 Jan 2025 07:48:27 +0000
ROA not before: Wed 01 Jan 2025 07:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215826
IP address blocks: 94.141.122.0/23 maxlen: 24
94.141.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/E_6bzrriKLNsiDwn6lUY5wTBCZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/E_6bzrriKLNsiDwn6lUY5wTBCZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/E_6bzrriKLNsiDwn6lUY5wTBCZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 04:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:60:27:b3:02:7b:08:44:cf:07:7c:34:b6:bf:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13fe9bcebae228b36c883c27ea5518e704c10991
Validity
Not Before: Jan 1 07:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=353868490c5469f52ef464a0d98801dca0fad54a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7e:8e:62:0e:f9:12:59:5c:7c:2c:49:60:fa:
31:17:32:43:2e:53:71:c3:67:05:a0:b6:f9:dc:9e:
c4:b8:8b:79:3b:cc:40:6f:07:9e:68:1a:5e:d0:88:
0c:ab:9f:32:4c:df:8d:ca:22:70:b2:18:75:d6:37:
62:ff:99:9f:56:8d:88:a5:21:b3:68:ac:99:60:76:
80:33:e4:82:5b:68:6d:17:ee:4e:2e:ea:44:73:72:
4f:72:20:80:13:d2:0d:ca:05:ad:bc:71:df:be:d3:
68:81:61:07:8d:98:0b:77:67:4a:bf:54:68:2c:bf:
dc:87:8f:a3:df:e6:c6:8f:15:bb:7d:45:4f:91:50:
a5:44:19:a9:67:8f:4c:77:ff:7e:9c:8d:0d:63:ea:
44:0d:3f:38:67:eb:35:77:3d:1c:0c:02:9e:ae:39:
8e:7a:72:eb:fe:5a:4b:d5:42:b0:85:75:c2:7b:76:
97:ed:e0:52:7f:c4:31:7f:fe:94:b4:91:bb:79:9a:
e9:f1:05:3d:16:7c:e3:8b:50:e9:81:ef:7f:67:cd:
f3:49:e3:62:8a:36:a4:ac:7c:58:ef:e6:a5:f1:06:
35:92:71:bf:10:60:7d:dd:60:bf:38:ac:f5:70:19:
9b:f3:18:45:1f:34:e2:a7:be:51:17:1a:26:e1:a6:
ea:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:38:68:49:0C:54:69:F5:2E:F4:64:A0:D9:88:01:DC:A0:FA:D5:4A
X509v3 Authority Key Identifier:
keyid:13:FE:9B:CE:BA:E2:28:B3:6C:88:3C:27:EA:55:18:E7:04:C1:09:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E_6bzrriKLNsiDwn6lUY5wTBCZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/NThoSQxUafUu9GSg2YgB3KD61Uo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/E_6bzrriKLNsiDwn6lUY5wTBCZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.141.122.0/23
Signature Algorithm: sha256WithRSAEncryption
74:a7:1c:24:cf:f2:63:1e:39:8e:f1:23:3d:da:b5:8c:eb:c8:
a8:6b:70:f6:32:6e:0c:b0:a6:09:9b:97:f6:59:fa:77:4d:68:
c4:41:04:73:55:37:ff:5a:e3:17:f2:dc:49:5c:ac:bf:98:f7:
44:ea:39:a6:01:41:59:b6:61:2f:a3:14:2b:fc:0c:66:ba:07:
12:bd:36:68:b6:82:12:5d:e3:e7:0b:90:0d:1a:0b:27:4e:29:
5e:af:5e:a2:2f:dd:88:39:f6:73:80:f2:d1:da:37:51:ad:5d:
46:85:ea:30:71:d3:7a:b7:f0:ec:d2:88:7b:e3:1d:b0:5e:32:
66:71:e0:6c:f9:ae:df:4a:e3:6d:21:f4:44:f4:6e:ab:15:d2:
3f:96:07:4a:e8:ef:04:ed:62:af:e1:3a:37:e6:46:23:c7:ba:
fb:95:3c:8e:30:5d:96:22:8d:aa:d7:13:d8:10:42:c5:e6:73:
e4:27:bd:80:4a:2a:d2:ea:45:eb:af:a0:ea:4b:1f:d7:e1:57:
7e:10:6f:03:54:15:be:95:68:f7:1a:ef:05:cb:70:05:4c:6c:
a3:06:92:45:45:db:b7:98:fc:a1:1a:7a:9e:a6:0f:98:60:a2:
82:30:6d:b9:42:22:b1:e7:c1:2f:c1:a6:2d:f0:01:d7:9d:90:
59:12:b5:5a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQg1mAnswJ7CETPB3w0tr9UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzZmU5YmNlYmFlMjI4YjM2Yzg4M2MyN2VhNTUxOGU3MDRj
MTA5OTEwHhcNMjUwMTAxMDc0ODI3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNTM4Njg0OTBjNTQ2OWY1MmVmNDY0YTBkOTg4MDFkY2EwZmFkNTRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvH6OYg75EllcfCxJYPoxFzJDLlNx
w2cFoLb53J7EuIt5O8xAbweeaBpe0IgMq58yTN+NyiJwshh11jdi/5mfVo2IpSGz
aKyZYHaAM+SCW2htF+5OLupEc3JPciCAE9INygWtvHHfvtNogWEHjZgLd2dKv1Ro
LL/ch4+j3+bGjxW7fUVPkVClRBmpZ49Md/9+nI0NY+pEDT84Z+s1dz0cDAKerjmO
enLr/lpL1UKwhXXCe3aX7eBSf8Qxf/6UtJG7eZrp8QU9Fnzji1Dpge9/Z83zSeNi
ijakrHxY7+al8QY1knG/EGB93WC/OKz1cBmb8xhFHzTip75RFxom4abqbQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDU4aEkMVGn1LvRkoNmIAdyg+tVKMB8GA1UdIwQY
MBaAFBP+m8664iizbIg8J+pVGOcEwQmRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRV82YnpycmlLTE5zaUR3bjZsVVk1d1RCQ1pFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS81MGE3ZGEtMTYyYi00YmRlLWIwYzQt
NWUyZDYwNzBlZjgzLzEvTlRob1NReFVhZlV1OUdTZzJZZ0IzS0Q2MVVvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS81MGE3ZGEtMTYyYi00YmRlLWIwYzQtNWUyZDYwNzBlZjgz
LzEvRV82YnpycmlLTE5zaUR3bjZsVVk1d1RCQ1pFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBXo16MA0G
CSqGSIb3DQEBCwUAA4IBAQB0pxwkz/JjHjmO8SM92rWM68ioa3D2Mm4MsKYJm5f2
Wfp3TWjEQQRzVTf/WuMX8txJXKy/mPdE6jmmAUFZtmEvoxQr/AxmugcSvTZotoIS
XePnC5ANGgsnTiler16iL92IOfZzgPLR2jdRrV1GheowcdN6t/Ds0oh74x2wXjJm
ceBs+a7fSuNtIfRE9G6rFdI/lgdK6O8E7WKv4To35kYjx7r7lTyOMF2WIo2q1xPY
EELF5nPkJ72ASirS6kXrr6DqSx/X4Vd+EG8DVBW+lWj3Gu8Fy3AFTGyjBpJFRdu3
mPyhGnqepg+YYKKCMG25QiKx58EvwaYt8AHXnZBZErVa
-----END CERTIFICATE-----
Generated at Sun Apr 6 14:01:53 2025 by rpki-client