Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/rC_bTep_k2W1swG7Jm4biitFHA4.roa
File: rC_bTep_k2W1swG7Jm4biitFHA4.roa (raw, json)
Hash identifier: Sbe+qsJH965cmbXMZY6OWU+P7tgNGwOdhieuhSBvccc=
Subject key identifier: AC:2F:DB:4D:EA:7F:93:65:B5:B3:01:BB:26:6E:1B:8A:2B:45:1C:0E
Certificate issuer: /CN=c398060f1bf22f0999cb071b1b42696dbc43e10c
Certificate serial: 01942823936402398FA79CCC3AB8ED9CAE98
Authority key identifier: C3:98:06:0F:1B:F2:2F:09:99:CB:07:1B:1B:42:69:6D:BC:43:E1:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/rC_bTep_k2W1swG7Jm4biitFHA4.roa
Signing time: Thu 02 Jan 2025 17:50:07 +0000
ROA not before: Thu 02 Jan 2025 17:50:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59599
IP address blocks: 62.132.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.mft
rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 15:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:93:64:02:39:8f:a7:9c:cc:3a:b8:ed:9c:ae:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c398060f1bf22f0999cb071b1b42696dbc43e10c
Validity
Not Before: Jan 2 17:50:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ac2fdb4dea7f9365b5b301bb266e1b8a2b451c0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2e:87:b7:bb:3b:96:91:43:4b:c3:9e:44:4b:
db:cb:a8:56:dc:9b:58:5c:44:39:6d:60:d3:9c:30:
42:69:b4:3e:84:c4:4d:1b:bc:da:bf:58:95:2f:7c:
28:7f:4f:17:f5:cc:b7:2d:d0:02:1a:46:6f:5a:49:
bd:c3:29:22:1f:11:a9:4f:15:59:92:ed:b0:c2:ea:
27:be:69:85:58:79:23:6a:eb:27:8c:cd:20:51:4c:
18:6e:7b:1c:f4:2c:18:c7:02:86:88:9e:94:b8:65:
23:9b:c7:9d:7c:d5:13:3e:06:9e:57:36:51:7c:9d:
22:f0:57:00:81:85:23:5a:55:f0:52:9a:3e:ab:8a:
af:de:a1:ba:e4:cf:74:bc:39:28:57:93:55:2b:3b:
8f:01:79:a2:15:61:74:cb:ae:3e:50:fc:21:e2:0b:
e8:25:ff:02:3d:d7:42:85:28:78:34:95:51:37:97:
19:3f:58:63:cd:ed:8a:32:56:49:0c:de:5f:39:d3:
ed:09:92:ba:ac:34:f0:b5:5d:d5:dd:e0:53:52:4f:
f0:63:6d:21:fd:2d:cf:0b:70:3c:b8:2d:15:79:4d:
40:dd:21:98:90:ce:70:c7:07:ac:0d:85:f3:d4:05:
80:b6:81:e8:ea:82:61:03:a4:22:cd:71:31:bc:4a:
7d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:2F:DB:4D:EA:7F:93:65:B5:B3:01:BB:26:6E:1B:8A:2B:45:1C:0E
X509v3 Authority Key Identifier:
keyid:C3:98:06:0F:1B:F2:2F:09:99:CB:07:1B:1B:42:69:6D:BC:43:E1:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/rC_bTep_k2W1swG7Jm4biitFHA4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.132.201.0/24
Signature Algorithm: sha256WithRSAEncryption
50:28:86:54:79:c0:ab:89:4e:51:01:e2:55:d5:1c:40:4b:6b:
25:7e:09:20:fe:95:b5:b3:8e:c6:02:19:ac:53:0f:4b:fb:1b:
16:31:43:10:25:53:f4:e8:7f:cf:c9:76:63:7c:11:e7:3b:64:
79:ff:0a:ef:ec:f1:59:6c:11:ef:3d:6f:d1:b9:86:51:a9:cc:
69:12:0d:40:a0:6f:42:4b:b0:57:78:fe:e3:c0:36:9b:a0:92:
70:6f:8b:b5:64:e2:60:f5:d6:54:0e:8f:ef:6c:07:23:af:fe:
30:71:24:32:b8:fe:7e:3b:17:ae:88:72:f1:a5:86:79:f6:29:
51:75:98:8e:fb:86:f8:0d:d0:19:ec:c2:e5:64:5d:bb:c9:c5:
3b:74:ed:11:9e:9a:84:89:16:99:63:be:da:11:3e:12:90:48:
57:c9:1e:a3:67:5f:1c:6f:12:c8:38:14:27:33:00:0f:be:6c:
08:a0:2e:69:1b:6a:1b:d6:d4:a5:a3:19:d4:be:1d:30:a5:c0:
01:83:c0:55:0e:11:12:d9:bf:d9:f2:ee:c3:ba:76:0f:e1:28:
75:ba:8a:ca:0f:a3:e6:d0:d1:b0:bc:21:50:1f:86:4f:f9:fc:
6e:7b:48:dc:c0:f2:3e:71:4d:35:3b:e0:82:9d:cb:43:a9:4e:
44:6c:fa:18
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQoI5NkAjmPp5zMOrjtnK6YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzOTgwNjBmMWJmMjJmMDk5OWNiMDcxYjFiNDI2OTZkYmM0
M2UxMGMwHhcNMjUwMTAyMTc1MDA3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYzJmZGI0ZGVhN2Y5MzY1YjViMzAxYmIyNjZlMWI4YTJiNDUxYzBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArS6Ht7s7lpFDS8OeREvby6hW3JtY
XEQ5bWDTnDBCabQ+hMRNG7zav1iVL3wof08X9cy3LdACGkZvWkm9wykiHxGpTxVZ
ku2wwuonvmmFWHkjausnjM0gUUwYbnsc9CwYxwKGiJ6UuGUjm8edfNUTPgaeVzZR
fJ0i8FcAgYUjWlXwUpo+q4qv3qG65M90vDkoV5NVKzuPAXmiFWF0y64+UPwh4gvo
Jf8CPddChSh4NJVRN5cZP1hjze2KMlZJDN5fOdPtCZK6rDTwtV3V3eBTUk/wY20h
/S3PC3A8uC0VeU1A3SGYkM5wxwesDYXz1AWAtoHo6oJhA6QizXExvEp9PQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKwv203qf5NltbMBuyZuG4orRRwOMB8GA1UdIwQY
MBaAFMOYBg8b8i8JmcsHGxtCaW28Q+EMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzVnR0R4dnlMd21aeXdjYkcwSnBiYnhENFF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8zYmZjMzEtZGMzMi00NTQxLTg0NjAt
YzkyN2I4YzJjN2M0LzEvckNfYlRlcF9rMlcxc3dHN0ptNGJpaXRGSEE0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC8zYmZjMzEtZGMzMi00NTQxLTg0NjAtYzkyN2I4YzJjN2M0
LzEvdzVnR0R4dnlMd21aeXdjYkcwSnBiYnhENFF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPoTJMA0G
CSqGSIb3DQEBCwUAA4IBAQBQKIZUecCriU5RAeJV1RxAS2slfgkg/pW1s47GAhms
Uw9L+xsWMUMQJVP06H/PyXZjfBHnO2R5/wrv7PFZbBHvPW/RuYZRqcxpEg1AoG9C
S7BXeP7jwDaboJJwb4u1ZOJg9dZUDo/vbAcjr/4wcSQyuP5+OxeuiHLxpYZ59ilR
dZiO+4b4DdAZ7MLlZF27ycU7dO0RnpqEiRaZY77aET4SkEhXyR6jZ18cbxLIOBQn
MwAPvmwIoC5pG2ob1tSloxnUvh0wpcABg8BVDhES2b/Z8u7DunYP4Sh1uorKD6Pm
0NGwvCFQH4ZP+fxue0jcwPI+cU01O+CCnctDqU5EbPoY
-----END CERTIFICATE-----
Generated at Thu Apr 17 02:39:38 2025 by rpki-client