Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/818491-d657-42c8-bc9a-e5470c52d4dd/1/cD-tw650Z_Y6Vmxx9pyza1DBukk.roa
File: cD-tw650Z_Y6Vmxx9pyza1DBukk.roa (raw, json)
Hash identifier: wcc3gJVDDM85KdHRToySGGF6W2lO6V1fBEScrl4XQJI=
Subject key identifier: 70:3F:AD:C3:AE:74:67:F6:3A:56:6C:71:F6:9C:B3:6B:50:C1:BA:49
Certificate issuer: /CN=f2624065f86b4cf9848dec7dab86a4db86c15e11
Certificate serial: 0194A702CDE6273AEFAEABBE0B0F3A95B050
Authority key identifier: F2:62:40:65:F8:6B:4C:F9:84:8D:EC:7D:AB:86:A4:DB:86:C1:5E:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mJAZfhrTPmEjex9q4ak24bBXhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/818491-d657-42c8-bc9a-e5470c52d4dd/1/cD-tw650Z_Y6Vmxx9pyza1DBukk.roa
Signing time: Mon 27 Jan 2025 09:06:06 +0000
ROA not before: Mon 27 Jan 2025 09:06:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39914
IP address blocks: 194.50.61.0/24 maxlen: 24
195.206.126.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/818491-d657-42c8-bc9a-e5470c52d4dd/1/8mJAZfhrTPmEjex9q4ak24bBXhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/818491-d657-42c8-bc9a-e5470c52d4dd/1/8mJAZfhrTPmEjex9q4ak24bBXhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8mJAZfhrTPmEjex9q4ak24bBXhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:a7:02:cd:e6:27:3a:ef:ae:ab:be:0b:0f:3a:95:b0:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2624065f86b4cf9848dec7dab86a4db86c15e11
Validity
Not Before: Jan 27 09:06:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=703fadc3ae7467f63a566c71f69cb36b50c1ba49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9f:b8:ce:ff:65:7a:e2:4b:90:ec:a9:93:30:
97:0c:68:6e:2e:09:1a:c4:6f:4a:92:6a:40:e4:d3:
90:f7:08:96:df:7c:b2:03:4f:c4:46:6a:27:15:08:
30:37:e8:c7:05:43:79:bb:02:d5:94:f8:11:07:73:
cb:af:41:e8:1e:a7:d5:c6:b5:e4:a8:e5:bb:0a:33:
e6:be:92:27:5c:8e:23:fe:16:8e:54:e9:9d:47:fb:
a0:19:24:3f:72:18:be:c7:92:d7:b1:40:da:a4:d7:
b1:9e:97:44:34:95:57:ad:88:56:4b:36:7c:96:35:
f6:0d:04:0d:fc:d9:39:77:1b:5a:6b:20:47:3b:4d:
47:11:a3:70:02:fd:ab:88:68:1a:18:b5:36:94:90:
75:38:cc:35:04:e8:27:bd:31:43:9d:c9:d7:bf:ba:
0d:b8:14:21:12:19:31:73:1c:11:e9:83:c8:e6:71:
e6:92:de:9c:6b:1a:ca:16:3d:52:6b:57:36:2c:cc:
91:be:df:94:92:fd:b8:d8:10:7f:58:39:7e:fc:35:
51:5f:2c:31:b9:c9:33:77:8b:91:ec:61:f5:71:7a:
65:7f:f6:71:9d:e0:47:47:d6:b5:c4:e9:68:6d:80:
07:24:de:11:a2:8a:04:36:e2:4e:14:27:47:22:d6:
6f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:3F:AD:C3:AE:74:67:F6:3A:56:6C:71:F6:9C:B3:6B:50:C1:BA:49
X509v3 Authority Key Identifier:
keyid:F2:62:40:65:F8:6B:4C:F9:84:8D:EC:7D:AB:86:A4:DB:86:C1:5E:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mJAZfhrTPmEjex9q4ak24bBXhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/818491-d657-42c8-bc9a-e5470c52d4dd/1/cD-tw650Z_Y6Vmxx9pyza1DBukk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/818491-d657-42c8-bc9a-e5470c52d4dd/1/8mJAZfhrTPmEjex9q4ak24bBXhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.61.0/24
195.206.126.0/23
Signature Algorithm: sha256WithRSAEncryption
81:49:e5:27:a9:4d:67:56:9a:4f:45:36:0e:db:8d:3e:ac:bc:
2f:f8:de:3e:86:cf:3b:40:a6:f0:b4:b2:b3:06:44:83:99:1f:
98:d3:d7:3e:c1:84:25:49:3a:b2:c9:b0:fd:c0:9e:8e:89:e8:
03:d6:42:d1:85:f8:89:f3:d6:15:7e:10:64:de:3c:d1:e0:b8:
63:00:dd:2c:ce:31:8b:fc:ba:b0:b3:c6:8f:41:8e:14:1d:8e:
a2:4d:08:ab:96:c2:ec:76:7c:8e:c0:53:67:e5:2a:5e:07:b7:
c5:cc:e6:ee:dd:53:6f:de:95:78:71:bf:66:75:c1:d5:73:2c:
f1:9f:47:a6:a6:9f:19:6f:ff:5f:94:8e:ce:43:7b:14:2a:45:
40:5a:ee:ce:2e:5b:e2:53:e0:1d:36:4b:73:ae:80:6b:13:84:
61:84:6b:c5:be:b7:b0:64:86:82:1a:5d:ff:1e:61:a0:05:15:
eb:20:c5:a6:bc:e7:c9:05:26:bc:f9:76:53:10:6f:c4:2b:c4:
f7:8b:fe:a2:f8:28:6e:7a:3e:4d:47:85:e9:83:5f:25:9d:d5:
49:38:2f:74:01:75:17:da:36:82:75:4f:52:dc:d7:ba:ee:50:
d9:fa:f6:c9:d1:7b:ad:af:e1:e6:ca:6d:af:38:d2:47:85:5b:
b1:a9:96:bf
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZSnAs3mJzrvrqu+Cw86lbBQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyNjI0MDY1Zjg2YjRjZjk4NDhkZWM3ZGFiODZhNGRiODZj
MTVlMTEwHhcNMjUwMTI3MDkwNjA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MDNmYWRjM2FlNzQ2N2Y2M2E1NjZjNzFmNjljYjM2YjUwYzFiYTQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5+4zv9leuJLkOypkzCXDGhuLgka
xG9KkmpA5NOQ9wiW33yyA0/ERmonFQgwN+jHBUN5uwLVlPgRB3PLr0HoHqfVxrXk
qOW7CjPmvpInXI4j/haOVOmdR/ugGSQ/chi+x5LXsUDapNexnpdENJVXrYhWSzZ8
ljX2DQQN/Nk5dxtaayBHO01HEaNwAv2riGgaGLU2lJB1OMw1BOgnvTFDncnXv7oN
uBQhEhkxcxwR6YPI5nHmkt6caxrKFj1Sa1c2LMyRvt+Ukv242BB/WDl+/DVRXywx
uckzd4uR7GH1cXplf/ZxneBHR9a1xOlobYAHJN4RoooENuJOFCdHItZvwwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHA/rcOudGf2OlZscfacs2tQwbpJMB8GA1UdIwQY
MBaAFPJiQGX4a0z5hI3sfauGpNuGwV4RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOG1KQVpmaHJUUG1FamV4OXE0YWsyNGJCWGhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84MTg0OTEtZDY1Ny00MmM4LWJjOWEt
ZTU0NzBjNTJkNGRkLzEvY0QtdHc2NTBaX1k2Vm14eDlweXphMURCdWtrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi84MTg0OTEtZDY1Ny00MmM4LWJjOWEtZTU0NzBjNTJkNGRk
LzEvOG1KQVpmaHJUUG1FamV4OXE0YWsyNGJCWGhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwjI9AwQB
w85+MA0GCSqGSIb3DQEBCwUAA4IBAQCBSeUnqU1nVppPRTYO240+rLwv+N4+hs87
QKbwtLKzBkSDmR+Y09c+wYQlSTqyybD9wJ6OiegD1kLRhfiJ89YVfhBk3jzR4Lhj
AN0szjGL/Lqws8aPQY4UHY6iTQirlsLsdnyOwFNn5SpeB7fFzObu3VNv3pV4cb9m
dcHVcyzxn0empp8Zb/9flI7OQ3sUKkVAWu7OLlviU+AdNktzroBrE4RhhGvFvrew
ZIaCGl3/HmGgBRXrIMWmvOfJBSa8+XZTEG/EK8T3i/6i+Chuej5NR4Xpg18lndVJ
OC90AXUX2jaCdU9S3Ne67lDZ+vbJ0Xutr+Hmym2vONJHhVuxqZa/
-----END CERTIFICATE-----
Generated at Sun Feb 2 08:54:53 2025 by rpki-client