Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/Lni9QsCWJQRDVBRxpwG5n1IJkbU.roa
File: Lni9QsCWJQRDVBRxpwG5n1IJkbU.roa (raw, json)
Hash identifier: QRcYAUPH48lC0KP2oO/xDtIFFXEN0MZQq138n0M6Tas=
Subject key identifier: 2E:78:BD:42:C0:96:25:04:43:54:14:71:A7:01:B9:9F:52:09:91:B5
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 019421B26E88F20F204CC2BBDE265335F81A
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/Lni9QsCWJQRDVBRxpwG5n1IJkbU.roa
Signing time: Wed 01 Jan 2025 11:48:49 +0000
ROA not before: Wed 01 Jan 2025 11:48:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215098
IP address blocks: 80.250.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 09:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:6e:88:f2:0f:20:4c:c2:bb:de:26:53:35:f8:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Jan 1 11:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2e78bd42c096250443541471a701b99f520991b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:61:98:a2:b7:82:a4:d9:f2:61:c5:17:0b:44:
ad:c5:bf:09:c3:a1:c8:ca:3c:5e:56:56:0b:96:6d:
5a:05:90:8d:6f:71:a8:a5:af:fe:a7:ac:d4:4c:c5:
2a:b5:e7:70:f8:1b:a9:45:1f:37:1d:be:80:5c:2b:
9d:08:ec:c6:48:84:83:45:f0:52:57:2d:bb:01:fe:
3c:a1:6f:14:d5:c8:46:4a:b2:7b:0f:af:9c:c1:b6:
21:ee:b4:5a:af:df:39:92:8f:ae:bc:67:52:6b:3c:
8d:1d:82:22:52:c0:b5:7e:56:b7:01:32:93:dc:fb:
d7:e4:6e:f6:af:dc:65:c4:59:87:49:ac:68:03:ea:
cc:d4:d1:92:0a:65:2a:b1:3e:f7:d7:5b:8b:50:f5:
ce:db:0c:ad:90:35:23:5f:3c:1f:1c:4d:b7:64:ae:
f9:a6:80:42:d0:15:58:d4:fc:a3:0e:63:89:7f:0f:
e2:f2:34:83:56:b6:d6:06:5e:87:7e:2a:3e:72:90:
e9:83:8a:ed:90:59:15:c7:63:e3:84:25:3c:73:25:
8c:88:d8:1b:69:9c:e7:ab:32:6e:2a:dc:12:7c:9b:
8e:54:5c:b0:53:7b:f1:ab:68:d5:46:cc:5c:2a:54:
70:e6:98:6a:a2:97:3f:b8:60:8f:42:d4:f9:30:c5:
0b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:78:BD:42:C0:96:25:04:43:54:14:71:A7:01:B9:9F:52:09:91:B5
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/Lni9QsCWJQRDVBRxpwG5n1IJkbU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.250.165.0/24
Signature Algorithm: sha256WithRSAEncryption
02:75:b2:29:00:94:43:aa:fa:15:92:69:d1:af:59:9c:b4:eb:
e9:a6:49:48:33:61:9b:92:50:16:f9:81:18:e8:bf:7d:be:81:
48:3f:54:89:20:af:b2:73:59:bb:57:b5:85:09:08:cf:72:98:
31:42:0d:db:94:13:0e:42:4e:34:83:f6:2a:db:7e:94:b7:76:
bc:b6:0c:ec:8e:8a:2a:fd:d7:0a:a5:9e:f7:70:1c:ed:90:16:
c8:c8:85:12:d3:46:41:d5:40:96:46:54:03:da:d1:fd:9c:1d:
ed:01:d5:bd:e1:fc:ac:ae:24:4e:e1:2f:47:33:13:a7:1e:19:
22:39:95:aa:98:c3:1f:5e:a0:56:9c:5c:14:a2:97:d1:63:d4:
9c:e2:ca:69:e1:70:70:74:c9:b6:e7:a7:30:fb:5b:c6:21:e0:
d9:e3:70:86:b5:36:2d:ca:0a:38:a0:6e:8e:0c:4f:a5:dc:39:
cf:bf:ca:69:af:b6:8e:1f:0f:4c:2a:7b:d1:1f:49:d9:51:36:
b1:79:ea:ee:4e:47:a5:ce:63:dc:5e:e6:60:c9:71:b7:69:08:
18:d7:45:93:2d:e4:87:08:7c:d4:09:ee:f4:b5:96:4b:27:de:
2d:14:bf:73:3c:e5:de:41:3b:a4:a4:38:f7:a0:c7:be:60:af:
c4:01:bd:96
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhsm6I8g8gTMK73iZTNfgaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4YjIyMDIzYjZlYWQ0YzI5NjgzYTlmZWQ0NDkzZDAzZGVl
MmM2ODUwHhcNMjUwMTAxMTE0ODQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZTc4YmQ0MmMwOTYyNTA0NDM1NDE0NzFhNzAxYjk5ZjUyMDk5MWI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA22GYoreCpNnyYcUXC0Stxb8Jw6HI
yjxeVlYLlm1aBZCNb3Gopa/+p6zUTMUqtedw+BupRR83Hb6AXCudCOzGSISDRfBS
Vy27Af48oW8U1chGSrJ7D6+cwbYh7rRar985ko+uvGdSazyNHYIiUsC1fla3ATKT
3PvX5G72r9xlxFmHSaxoA+rM1NGSCmUqsT7311uLUPXO2wytkDUjXzwfHE23ZK75
poBC0BVY1PyjDmOJfw/i8jSDVrbWBl6Hfio+cpDpg4rtkFkVx2PjhCU8cyWMiNgb
aZznqzJuKtwSfJuOVFywU3vxq2jVRsxcKlRw5phqopc/uGCPQtT5MMULswIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC54vULAliUEQ1QUcacBuZ9SCZG1MB8GA1UdIwQY
MBaAFDiyICO26tTCloOp/tRJPQPe4saFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMt
NDBkOTViZDMzZmNiLzEvTG5pOVFzQ1dKUVJEVkJSeHB3RzVuMUlKa2JVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMtNDBkOTViZDMzZmNi
LzEvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUPqlMA0G
CSqGSIb3DQEBCwUAA4IBAQACdbIpAJRDqvoVkmnRr1mctOvppklIM2GbklAW+YEY
6L99voFIP1SJIK+yc1m7V7WFCQjPcpgxQg3blBMOQk40g/Yq236Ut3a8tgzsjooq
/dcKpZ73cBztkBbIyIUS00ZB1UCWRlQD2tH9nB3tAdW94fysriRO4S9HMxOnHhki
OZWqmMMfXqBWnFwUopfRY9Sc4spp4XBwdMm256cw+1vGIeDZ43CGtTYtygo4oG6O
DE+l3DnPv8ppr7aOHw9MKnvRH0nZUTaxeeruTkelzmPcXuZgyXG3aQgY10WTLeSH
CHzUCe70tZZLJ94tFL9zPOXeQTukpDj3oMe+YK/EAb2W
-----END CERTIFICATE-----
Generated at Tue Apr 15 18:50:40 2025 by rpki-client