Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/31fa99-c853-4d02-b53d-d250e45b1620/1/ABgvtVRWI6brZz3FziMb4rv0_78.roa
File: ABgvtVRWI6brZz3FziMb4rv0_78.roa (raw, json)
Hash identifier: xcpeYC06fvzRoHxarxnxi+ZpU9v7tXYglNgTbxJJFa4=
Subject key identifier: 00:18:2F:B5:54:56:23:A6:EB:67:3D:C5:CE:23:1B:E2:BB:F4:FF:BF
Certificate issuer: /CN=972c33aed8efb269d3744813d28c536092e7cf38
Certificate serial: 0194236A1B6BF386768A6F008D71543D52E9
Authority key identifier: 97:2C:33:AE:D8:EF:B2:69:D3:74:48:13:D2:8C:53:60:92:E7:CF:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lywzrtjvsmnTdEgT0oxTYJLnzzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/31fa99-c853-4d02-b53d-d250e45b1620/1/ABgvtVRWI6brZz3FziMb4rv0_78.roa
Signing time: Wed 01 Jan 2025 19:49:03 +0000
ROA not before: Wed 01 Jan 2025 19:49:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199031
IP address blocks: 194.126.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/31fa99-c853-4d02-b53d-d250e45b1620/1/lywzrtjvsmnTdEgT0oxTYJLnzzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/31fa99-c853-4d02-b53d-d250e45b1620/1/lywzrtjvsmnTdEgT0oxTYJLnzzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lywzrtjvsmnTdEgT0oxTYJLnzzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:1b:6b:f3:86:76:8a:6f:00:8d:71:54:3d:52:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=972c33aed8efb269d3744813d28c536092e7cf38
Validity
Not Before: Jan 1 19:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=00182fb5545623a6eb673dc5ce231be2bbf4ffbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6f:39:97:88:ba:2f:c0:85:b4:d2:83:f0:a4:
4b:8b:f4:50:2f:e7:37:e8:45:c4:cc:6e:86:2f:ba:
d9:72:da:6f:1b:f5:42:92:53:db:fd:ac:71:d8:22:
34:a3:04:cb:0d:41:f6:ff:43:66:7b:75:2f:7d:9c:
ba:ef:a5:2a:71:93:3b:a5:3b:40:8d:69:c2:c6:21:
b0:ba:77:35:58:d4:ec:7c:5d:07:da:be:c7:fd:c9:
e0:80:d6:37:c5:8b:c9:67:7c:7e:10:31:53:eb:b1:
8f:e9:1d:89:21:3d:c8:38:8c:16:27:3e:19:d0:b8:
60:63:0b:f0:e6:9e:d6:ff:32:ae:50:0c:0d:d9:e5:
be:fd:7c:58:bd:8c:b7:62:c4:2d:83:c8:09:88:42:
c8:11:e3:1f:37:9f:d2:8a:9d:32:2b:4c:31:a3:67:
be:4e:ca:58:4e:2a:e6:dc:6e:1d:5b:70:74:b4:21:
e5:26:8e:71:69:99:b7:85:d5:f9:e4:8d:d6:be:a4:
61:23:ca:ba:8a:5a:71:44:02:ec:3f:34:51:08:6b:
38:bc:53:84:67:4a:ae:f5:31:42:45:27:7a:6e:91:
fc:b1:37:dc:d2:c7:3b:21:1c:f8:8a:cf:1c:e8:80:
32:75:dc:b1:03:70:22:66:bd:a6:76:23:35:ef:0d:
33:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:18:2F:B5:54:56:23:A6:EB:67:3D:C5:CE:23:1B:E2:BB:F4:FF:BF
X509v3 Authority Key Identifier:
keyid:97:2C:33:AE:D8:EF:B2:69:D3:74:48:13:D2:8C:53:60:92:E7:CF:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lywzrtjvsmnTdEgT0oxTYJLnzzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/31fa99-c853-4d02-b53d-d250e45b1620/1/ABgvtVRWI6brZz3FziMb4rv0_78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/31fa99-c853-4d02-b53d-d250e45b1620/1/lywzrtjvsmnTdEgT0oxTYJLnzzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.126.199.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:6c:6b:fb:56:e1:26:ed:d0:24:d4:87:28:f8:e3:89:61:42:
69:68:ac:7e:99:5a:95:af:3a:cd:03:cc:ba:8c:c0:17:2f:ae:
15:6a:80:9b:05:4a:89:4a:3f:72:11:be:89:18:ef:a3:79:33:
7e:38:b6:d4:89:40:02:8b:b1:80:a1:48:37:05:6a:a9:6c:bb:
9b:e6:d9:cc:65:17:ae:cf:11:c2:f7:f6:2e:df:ea:fc:cb:9d:
28:bf:1f:0a:57:71:a5:13:7c:68:34:14:46:cd:d8:d5:99:59:
99:6a:2c:13:8d:ef:b5:59:e3:eb:5d:ce:d1:13:92:eb:72:1f:
b0:9a:3c:7b:ec:4b:8e:d7:03:51:20:d4:30:76:6d:81:5e:a0:
77:af:93:5b:b6:2d:73:7b:b1:d4:68:95:ff:e9:1c:07:e7:5e:
cd:d2:2d:e9:c8:5c:46:ca:e8:03:16:94:c8:a0:2f:d3:ff:02:
9e:43:86:88:82:a9:84:3b:2d:15:7a:18:1f:a5:83:4e:f8:53:
22:e5:24:43:4b:f0:6a:b2:66:7d:9b:c9:75:34:c8:ab:0a:c4:
78:a2:18:19:4c:99:41:a1:33:24:c7:64:00:be:b1:ae:88:2e:
b3:ca:99:cb:c2:d2:bd:85:f5:6c:7b:06:48:74:89:08:2a:63:
27:69:9d:00
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQjahtr84Z2im8AjXFUPVLpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3MmMzM2FlZDhlZmIyNjlkMzc0NDgxM2QyOGM1MzYwOTJl
N2NmMzgwHhcNMjUwMTAxMTk0OTAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMDE4MmZiNTU0NTYyM2E2ZWI2NzNkYzVjZTIzMWJlMmJiZjRmZmJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArG85l4i6L8CFtNKD8KRLi/RQL+c3
6EXEzG6GL7rZctpvG/VCklPb/axx2CI0owTLDUH2/0Nme3UvfZy676UqcZM7pTtA
jWnCxiGwunc1WNTsfF0H2r7H/cnggNY3xYvJZ3x+EDFT67GP6R2JIT3IOIwWJz4Z
0LhgYwvw5p7W/zKuUAwN2eW+/XxYvYy3YsQtg8gJiELIEeMfN5/Sip0yK0wxo2e+
TspYTirm3G4dW3B0tCHlJo5xaZm3hdX55I3WvqRhI8q6ilpxRALsPzRRCGs4vFOE
Z0qu9TFCRSd6bpH8sTfc0sc7IRz4is8c6IAyddyxA3AiZr2mdiM17w0zZwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAAYL7VUViOm62c9xc4jG+K79P+/MB8GA1UdIwQY
MBaAFJcsM67Y77Jp03RIE9KMU2CS5884MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHl3enJ0anZzbW5UZEVnVDBveFRZSkxuenpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8zMWZhOTktYzg1My00ZDAyLWI1M2Qt
ZDI1MGU0NWIxNjIwLzEvQUJndnRWUldJNmJyWnozRnppTWI0cnYwXzc4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy8zMWZhOTktYzg1My00ZDAyLWI1M2QtZDI1MGU0NWIxNjIw
LzEvbHl3enJ0anZzbW5UZEVnVDBveFRZSkxuenpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwn7HMA0G
CSqGSIb3DQEBCwUAA4IBAQAcbGv7VuEm7dAk1Ico+OOJYUJpaKx+mVqVrzrNA8y6
jMAXL64VaoCbBUqJSj9yEb6JGO+jeTN+OLbUiUACi7GAoUg3BWqpbLub5tnMZReu
zxHC9/Yu3+r8y50ovx8KV3GlE3xoNBRGzdjVmVmZaiwTje+1WePrXc7RE5Lrch+w
mjx77EuO1wNRINQwdm2BXqB3r5Nbti1ze7HUaJX/6RwH517N0i3pyFxGyugDFpTI
oC/T/wKeQ4aIgqmEOy0VehgfpYNO+FMi5SRDS/BqsmZ9m8l1NMirCsR4ohgZTJlB
oTMkx2QAvrGuiC6zypnLwtK9hfVsewZIdIkIKmMnaZ0A
-----END CERTIFICATE-----
Generated at Sun Feb 2 09:53:05 2025 by rpki-client