Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/lhJ5RbjQbCIcx6Snzw8-3JVMgGE.roa
File: lhJ5RbjQbCIcx6Snzw8-3JVMgGE.roa (raw, json)
Hash identifier: VcH6B7wbqshRYaE0Py9Bav3UnTpHMEOSu603CVWuDjo=
Subject key identifier: 96:12:79:45:B8:D0:6C:22:1C:C7:A4:A7:CF:0F:3E:DC:95:4C:80:61
Certificate issuer: /CN=fd6369271b6d13a6aedcaa23ebb29e29b796a46b
Certificate serial: 01941FFA8C56CCC514E5911461F8F504F388
Authority key identifier: FD:63:69:27:1B:6D:13:A6:AE:DC:AA:23:EB:B2:9E:29:B7:96:A4:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_WNpJxttE6au3Koj67KeKbeWpGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/lhJ5RbjQbCIcx6Snzw8-3JVMgGE.roa
Signing time: Wed 01 Jan 2025 03:48:21 +0000
ROA not before: Wed 01 Jan 2025 03:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20775
IP address blocks: 194.55.2.0/24 maxlen: 24
194.55.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/_WNpJxttE6au3Koj67KeKbeWpGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/_WNpJxttE6au3Koj67KeKbeWpGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_WNpJxttE6au3Koj67KeKbeWpGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:8c:56:cc:c5:14:e5:91:14:61:f8:f5:04:f3:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd6369271b6d13a6aedcaa23ebb29e29b796a46b
Validity
Not Before: Jan 1 03:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=96127945b8d06c221cc7a4a7cf0f3edc954c8061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a2:63:cc:47:e7:5d:1c:6c:4c:32:3d:61:0f:
5d:2b:f8:92:d1:b3:8e:60:48:d1:59:e0:df:3c:30:
31:72:90:5a:01:6e:ba:d5:90:b0:7b:15:2f:75:55:
bd:ed:b8:05:de:a6:05:17:ab:65:38:61:c2:55:78:
46:e5:1e:a1:96:48:36:d6:a3:15:e3:bd:84:d4:ea:
d5:7a:a9:88:3a:c5:2d:fe:18:b9:67:96:59:60:e2:
4a:d6:50:e8:d3:28:fa:02:df:5c:48:f8:b0:55:78:
22:a5:95:fb:d5:dd:18:bb:01:31:ea:51:67:ca:bc:
f8:e1:9e:69:da:fc:c5:27:f3:bf:f2:c9:f5:15:fb:
db:fd:db:58:86:f2:a6:b2:45:2a:5b:6e:df:64:ba:
ed:f7:ce:ff:06:18:aa:1c:c9:72:4e:3e:65:2a:dd:
57:51:57:72:9d:32:da:96:ec:9f:d3:f9:1c:5b:fe:
93:e2:f4:ca:28:68:6e:86:ac:75:76:8c:f6:d3:5c:
c5:8f:b5:33:ea:b4:cd:2c:26:04:89:8e:d4:82:86:
89:59:54:ba:cf:20:a0:f6:81:0a:6c:3b:1c:27:db:
ae:b8:04:46:0b:f7:f8:50:61:0d:8c:33:4c:db:06:
71:d9:2f:0c:83:86:43:a3:07:6b:f0:94:c8:56:d1:
06:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:12:79:45:B8:D0:6C:22:1C:C7:A4:A7:CF:0F:3E:DC:95:4C:80:61
X509v3 Authority Key Identifier:
keyid:FD:63:69:27:1B:6D:13:A6:AE:DC:AA:23:EB:B2:9E:29:B7:96:A4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_WNpJxttE6au3Koj67KeKbeWpGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/lhJ5RbjQbCIcx6Snzw8-3JVMgGE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/_WNpJxttE6au3Koj67KeKbeWpGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.55.2.0/23
Signature Algorithm: sha256WithRSAEncryption
14:e5:6c:c2:b7:77:78:b8:8d:9a:e1:de:c9:18:49:94:fa:43:
2b:91:36:c7:3a:29:13:87:3f:db:7c:67:14:72:f4:d0:2e:31:
b7:0f:a1:26:6e:4e:b6:9e:c6:2d:0a:09:86:c1:60:46:3b:e3:
25:16:4e:44:60:cd:c2:12:b6:cb:72:f9:2f:87:b4:c5:e2:40:
10:0b:03:da:d8:0a:06:26:f3:2e:5f:b5:a5:4e:21:23:6f:bf:
07:45:78:aa:92:45:7b:07:4c:57:1f:00:a2:db:f9:b2:4f:7e:
99:58:d7:74:84:5d:37:b0:98:b7:67:fc:d9:77:3a:39:46:42:
e6:5a:1b:0b:4c:6e:b2:d1:19:b8:85:d2:5b:07:91:cb:29:7e:
9c:49:c3:2d:39:47:51:76:b4:8b:21:ba:35:07:e2:f7:1b:40:
46:ad:28:28:e7:55:4e:81:46:1c:f8:b7:c2:d5:60:57:9b:ad:
db:63:32:86:32:4c:71:13:23:e9:fc:f9:55:cd:14:09:36:8d:
cf:1f:ef:01:d8:12:6c:9c:3d:ff:ca:4d:de:aa:d2:a9:86:dc:
78:bc:b2:54:04:a0:20:fc:4d:1a:32:a7:a6:7b:da:df:a5:c6:
ee:41:a1:e5:f7:5e:1d:4c:a9:2d:91:6d:26:df:76:6a:61:29:
8a:12:0b:80
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQf+oxWzMUU5ZEUYfj1BPOIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkNjM2OTI3MWI2ZDEzYTZhZWRjYWEyM2ViYjI5ZTI5Yjc5
NmE0NmIwHhcNMjUwMTAxMDM0ODIxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NjEyNzk0NWI4ZDA2YzIyMWNjN2E0YTdjZjBmM2VkYzk1NGM4MDYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqJjzEfnXRxsTDI9YQ9dK/iS0bOO
YEjRWeDfPDAxcpBaAW661ZCwexUvdVW97bgF3qYFF6tlOGHCVXhG5R6hlkg21qMV
472E1OrVeqmIOsUt/hi5Z5ZZYOJK1lDo0yj6At9cSPiwVXgipZX71d0YuwEx6lFn
yrz44Z5p2vzFJ/O/8sn1Ffvb/dtYhvKmskUqW27fZLrt987/BhiqHMlyTj5lKt1X
UVdynTLaluyf0/kcW/6T4vTKKGhuhqx1doz201zFj7Uz6rTNLCYEiY7UgoaJWVS6
zyCg9oEKbDscJ9uuuARGC/f4UGENjDNM2wZx2S8Mg4ZDowdr8JTIVtEGywIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJYSeUW40GwiHMekp88PPtyVTIBhMB8GA1UdIwQY
MBaAFP1jaScbbROmrtyqI+uynim3lqRrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1dOcEp4dHRFNmF1M0tvajY3S2VLYmVXcEdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9lZDVlMTUtNGYxNC00OWU2LWE2ZGQt
NDUzNTFmOWRiYjUyLzEvbGhKNVJialFiQ0ljeDZTbnp3OC0zSlZNZ0dFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9lZDVlMTUtNGYxNC00OWU2LWE2ZGQtNDUzNTFmOWRiYjUy
LzEvX1dOcEp4dHRFNmF1M0tvajY3S2VLYmVXcEdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwjcCMA0G
CSqGSIb3DQEBCwUAA4IBAQAU5WzCt3d4uI2a4d7JGEmU+kMrkTbHOikThz/bfGcU
cvTQLjG3D6Embk62nsYtCgmGwWBGO+MlFk5EYM3CErbLcvkvh7TF4kAQCwPa2AoG
JvMuX7WlTiEjb78HRXiqkkV7B0xXHwCi2/myT36ZWNd0hF03sJi3Z/zZdzo5RkLm
WhsLTG6y0Rm4hdJbB5HLKX6cScMtOUdRdrSLIbo1B+L3G0BGrSgo51VOgUYc+LfC
1WBXm63bYzKGMkxxEyPp/PlVzRQJNo3PH+8B2BJsnD3/yk3eqtKphtx4vLJUBKAg
/E0aMqeme9rfpcbuQaHl914dTKktkW0m33ZqYSmKEguA
-----END CERTIFICATE-----
Generated at Sat Apr 12 13:17:25 2025 by rpki-client