Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/TAjOCfxKmVaufyeMAaRjJQRrJpo.roa
File: TAjOCfxKmVaufyeMAaRjJQRrJpo.roa (raw, json)
Hash identifier: SxUJ/IMNoKh2IGXhAoqHbHYgCNszkM1cz1fmREsS+Ko=
Subject key identifier: 4C:08:CE:09:FC:4A:99:56:AE:7F:27:8C:01:A4:63:25:04:6B:26:9A
Certificate issuer: /CN=52cd9a6512dbf25a5f19b827d7a2c7e22a2ee8dd
Certificate serial: 019420686C6BB31ADDC34241CD2643926581
Authority key identifier: 52:CD:9A:65:12:DB:F2:5A:5F:19:B8:27:D7:A2:C7:E2:2A:2E:E8:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/TAjOCfxKmVaufyeMAaRjJQRrJpo.roa
Signing time: Wed 01 Jan 2025 05:48:21 +0000
ROA not before: Wed 01 Jan 2025 05:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211126
IP address blocks: 195.250.27.0/24 maxlen: 24
195.250.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:6c:6b:b3:1a:dd:c3:42:41:cd:26:43:92:65:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52cd9a6512dbf25a5f19b827d7a2c7e22a2ee8dd
Validity
Not Before: Jan 1 05:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4c08ce09fc4a9956ae7f278c01a46325046b269a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2a:0d:c8:a5:59:7e:c0:a5:40:d5:49:5a:a7:
ae:7a:01:49:ab:ca:cb:c4:2e:44:e2:cf:33:21:47:
44:63:ae:01:e4:a4:d2:a6:4d:36:19:35:5d:ed:bb:
46:4d:9a:c0:91:fb:2f:05:eb:af:50:1d:ff:89:8a:
10:7e:a9:da:3d:a5:8c:e9:fd:69:aa:6d:70:1e:60:
7f:08:8f:9d:d9:89:22:bc:dc:6f:e1:5c:84:2d:e6:
e5:ad:3d:04:d8:9c:23:20:97:4d:db:a2:50:54:d5:
39:d1:bf:4a:38:84:f0:6c:30:3a:b6:22:18:cc:b9:
50:63:fe:0f:3c:5b:cd:70:94:74:b6:74:94:3b:a1:
4e:43:86:5c:84:cf:a3:f4:50:28:9a:58:23:47:22:
d7:15:b1:86:54:57:b7:78:f6:59:00:98:c5:bf:69:
38:e9:d2:2d:6e:77:c5:c8:43:eb:57:f6:38:3d:9f:
46:60:58:03:8f:c3:0a:cc:6e:fa:d9:b2:9a:0d:61:
38:fc:a0:ec:af:c0:b7:d2:f2:6e:a9:da:7d:3c:3d:
76:a7:b3:29:57:0c:ca:59:12:c3:e9:47:10:4c:7b:
21:0c:6e:f6:32:c0:2f:04:65:e9:c2:79:de:2e:be:
5e:b2:c6:0b:1c:f1:03:1d:a3:02:b0:dd:c3:07:05:
22:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:08:CE:09:FC:4A:99:56:AE:7F:27:8C:01:A4:63:25:04:6B:26:9A
X509v3 Authority Key Identifier:
keyid:52:CD:9A:65:12:DB:F2:5A:5F:19:B8:27:D7:A2:C7:E2:2A:2E:E8:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/TAjOCfxKmVaufyeMAaRjJQRrJpo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.250.27.0-195.250.28.255
Signature Algorithm: sha256WithRSAEncryption
77:e4:b3:2a:88:39:32:f5:1d:8f:7c:2a:f2:94:00:5e:0d:56:
87:14:53:22:7f:c4:39:a5:39:72:b4:a5:87:f1:eb:58:6c:48:
82:6b:f8:c0:e9:7a:dd:28:5c:ac:06:ac:f3:ce:41:c8:46:59:
a6:f8:42:b8:1f:94:dc:6b:27:1f:63:ad:61:ab:60:18:55:7b:
7c:0e:c8:f7:f2:a1:b6:f6:a1:93:af:8d:eb:50:46:4a:e3:a4:
e8:96:e8:85:c4:bf:2f:bf:cc:66:02:3b:8b:88:dd:5a:69:ec:
7a:5c:be:08:e9:f9:99:f4:cd:0c:a0:66:b3:0f:40:96:4f:73:
6a:34:06:0f:f2:5f:78:5f:22:0b:97:c0:80:d1:14:ff:1d:a8:
f6:26:3c:6e:97:ef:43:3b:82:83:83:f4:6d:be:72:54:a2:c3:
c9:39:6a:28:e1:09:80:de:73:25:d6:11:49:ca:6b:ee:75:e1:
4c:3d:ff:87:19:cb:06:13:c4:d6:46:0e:e2:5f:b1:0e:ac:1c:
47:50:5e:08:8b:0a:3f:fc:4a:8b:2d:4b:48:1b:23:73:a5:ca:
5a:34:6f:64:3c:e7:4a:a3:1a:16:d8:cc:d4:b8:50:f8:cb:bf:
4d:ab:0e:70:2d:40:8b:71:59:68:68:b6:3f:3b:a9:50:d2:9c:
db:1e:a3:ef
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZQgaGxrsxrdw0JBzSZDkmWBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyY2Q5YTY1MTJkYmYyNWE1ZjE5YjgyN2Q3YTJjN2UyMmEy
ZWU4ZGQwHhcNMjUwMTAxMDU0ODIxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YzA4Y2UwOWZjNGE5OTU2YWU3ZjI3OGMwMWE0NjMyNTA0NmIyNjlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArioNyKVZfsClQNVJWqeuegFJq8rL
xC5E4s8zIUdEY64B5KTSpk02GTVd7btGTZrAkfsvBeuvUB3/iYoQfqnaPaWM6f1p
qm1wHmB/CI+d2YkivNxv4VyELeblrT0E2JwjIJdN26JQVNU50b9KOITwbDA6tiIY
zLlQY/4PPFvNcJR0tnSUO6FOQ4ZchM+j9FAomlgjRyLXFbGGVFe3ePZZAJjFv2k4
6dItbnfFyEPrV/Y4PZ9GYFgDj8MKzG762bKaDWE4/KDsr8C30vJuqdp9PD12p7Mp
VwzKWRLD6UcQTHshDG72MsAvBGXpwnneLr5essYLHPEDHaMCsN3DBwUiuQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFEwIzgn8SplWrn8njAGkYyUEayaaMB8GA1UdIwQY
MBaAFFLNmmUS2/JaXxm4J9eix+IqLujdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXMyYVpSTGI4bHBmR2JnbjE2TEg0aW91Nk4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8yMjIzY2EtY2UzOC00OWJiLWIxMjUt
Y2NhMzc2MDZiZjE4LzEvVEFqT0NmeEttVmF1ZnllTUFhUmpKUVJySnBvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi8yMjIzY2EtY2UzOC00OWJiLWIxMjUtY2NhMzc2MDZiZjE4
LzEvVXMyYVpSTGI4bHBmR2JnbjE2TEg0aW91Nk4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADD+hsD
BADD+hwwDQYJKoZIhvcNAQELBQADggEBAHfksyqIOTL1HY98KvKUAF4NVocUUyJ/
xDmlOXK0pYfx61hsSIJr+MDpet0oXKwGrPPOQchGWab4QrgflNxrJx9jrWGrYBhV
e3wOyPfyobb2oZOvjetQRkrjpOiW6IXEvy+/zGYCO4uI3Vpp7Hpcvgjp+Zn0zQyg
ZrMPQJZPc2o0Bg/yX3hfIguXwIDRFP8dqPYmPG6X70M7goOD9G2+clSiw8k5aijh
CYDecyXWEUnKa+514Uw9/4cZywYTxNZGDuJfsQ6sHEdQXgiLCj/8SostS0gbI3Ol
ylo0b2Q850qjGhbYzNS4UPjLv02rDnAtQItxWWhotj87qVDSnNseo+8=
-----END CERTIFICATE-----
Generated at Mon Apr 14 04:22:28 2025 by rpki-client