Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/28XK2LntrxapfWOiuemErSbP0S4.roa
File: 28XK2LntrxapfWOiuemErSbP0S4.roa (raw, json)
Hash identifier: sgkhd13yQAtGGrSC01wHgB/gMMTuEmwDtGIbpMD74NM=
Subject key identifier: DB:C5:CA:D8:B9:ED:AF:16:A9:7D:63:A2:B9:E9:84:AD:26:CF:D1:2E
Certificate issuer: /CN=0ea3c9c4497c1fa485e9dd1758af9f000e2bd4bf
Certificate serial: 01942823B985223A7A3AD6AA36382A5D715C
Authority key identifier: 0E:A3:C9:C4:49:7C:1F:A4:85:E9:DD:17:58:AF:9F:00:0E:2B:D4:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DqPJxEl8H6SF6d0XWK-fAA4r1L8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/28XK2LntrxapfWOiuemErSbP0S4.roa
Signing time: Thu 02 Jan 2025 17:50:17 +0000
ROA not before: Thu 02 Jan 2025 17:50:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48943
IP address blocks: 193.111.87.0/24 maxlen: 24
195.88.166.0/23 maxlen: 23
2001:67c:2420::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft
rsync://rpki.ripe.net/repository/DEFAULT/DqPJxEl8H6SF6d0XWK-fAA4r1L8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 18:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:b9:85:22:3a:7a:3a:d6:aa:36:38:2a:5d:71:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ea3c9c4497c1fa485e9dd1758af9f000e2bd4bf
Validity
Not Before: Jan 2 17:50:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dbc5cad8b9edaf16a97d63a2b9e984ad26cfd12e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:2c:6d:35:f3:70:19:63:a8:10:8e:f9:78:7a:
2e:ad:a1:d9:a4:98:23:07:c8:cb:5a:0e:6b:bc:bb:
b5:b8:c3:13:62:33:e6:99:4c:80:2e:35:34:ac:bd:
62:44:9b:6a:5d:81:d9:af:8b:09:58:9b:53:79:15:
4c:f5:dd:26:9c:5d:08:a3:cf:59:49:3e:08:5d:9e:
e0:06:79:a0:36:93:d0:09:b8:b8:83:8e:50:d5:b4:
f7:ff:e9:44:57:8f:be:ba:5f:8a:99:d9:d2:63:14:
b9:49:f8:db:ed:ff:fc:6d:b6:61:d7:1b:17:a9:1e:
34:0e:2f:08:14:e1:f1:a2:f1:df:57:2c:77:0f:b7:
20:a5:07:8b:8b:73:c8:aa:2f:25:a0:4c:b2:8f:9c:
d9:88:11:e6:7d:37:cf:25:d2:00:39:81:bd:56:e2:
0a:c3:7d:6b:67:30:9a:de:e8:7f:ea:1c:de:ca:43:
4a:93:45:72:a5:7e:64:7a:ce:45:72:76:6e:d4:32:
85:ce:00:00:09:ec:11:73:b2:5a:36:ba:f0:7f:67:
b5:8d:2e:45:41:c0:d1:a5:f1:81:2f:a0:a1:81:20:
9e:e6:99:44:90:df:ae:fc:5c:5d:1b:83:ce:a3:78:
f5:a3:11:dd:af:ac:30:57:ae:a5:91:2f:fa:ca:ba:
88:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:C5:CA:D8:B9:ED:AF:16:A9:7D:63:A2:B9:E9:84:AD:26:CF:D1:2E
X509v3 Authority Key Identifier:
keyid:0E:A3:C9:C4:49:7C:1F:A4:85:E9:DD:17:58:AF:9F:00:0E:2B:D4:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DqPJxEl8H6SF6d0XWK-fAA4r1L8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/28XK2LntrxapfWOiuemErSbP0S4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.111.87.0/24
195.88.166.0/23
IPv6:
2001:67c:2420::/48
Signature Algorithm: sha256WithRSAEncryption
6b:99:2c:78:92:1d:9c:9f:a1:80:67:7a:7c:91:d7:0c:d0:38:
de:58:72:99:32:4b:95:a2:28:f9:5d:97:4d:2f:00:ee:40:aa:
c0:b0:3c:97:eb:1f:41:e2:56:24:0c:d3:8b:03:39:a5:02:a9:
b2:c7:90:e0:38:37:c9:20:2b:be:f1:87:77:ca:48:c9:14:09:
4e:00:a5:d2:57:a3:ec:bd:e8:e6:77:d5:0e:05:20:e1:94:a8:
f2:7c:41:45:e4:d0:05:a7:d8:b7:0a:fb:e2:d1:ca:37:a4:e8:
43:a5:cc:04:28:48:63:28:64:a1:68:43:c3:c0:e0:1d:26:5f:
23:74:69:bc:42:7e:e7:d8:22:ff:16:c6:f4:c3:20:13:4a:6b:
92:ad:0a:a0:bf:e1:3f:b9:6f:84:fe:2a:b6:55:10:be:f9:55:
cf:6f:8c:b8:8a:45:53:7d:30:05:66:b9:16:84:8b:0d:a6:0a:
1a:fe:ff:29:25:d8:73:37:2c:d5:90:51:d9:d8:93:e6:a3:e7:
7c:36:b7:e4:36:12:1f:2c:a3:08:2b:98:0b:70:88:ef:f3:f0:
4c:72:12:33:28:4b:1d:8f:5f:6d:db:20:47:90:51:c7:6d:cb:
43:41:64:06:16:6f:b3:09:44:e5:8c:cc:dc:08:51:df:ae:8b:
01:4a:6b:e3
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAZQoI7mFIjp6OtaqNjgqXXFcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlYTNjOWM0NDk3YzFmYTQ4NWU5ZGQxNzU4YWY5ZjAwMGUy
YmQ0YmYwHhcNMjUwMTAyMTc1MDE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYmM1Y2FkOGI5ZWRhZjE2YTk3ZDYzYTJiOWU5ODRhZDI2Y2ZkMTJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ixtNfNwGWOoEI75eHouraHZpJgj
B8jLWg5rvLu1uMMTYjPmmUyALjU0rL1iRJtqXYHZr4sJWJtTeRVM9d0mnF0Io89Z
ST4IXZ7gBnmgNpPQCbi4g45Q1bT3/+lEV4++ul+KmdnSYxS5Sfjb7f/8bbZh1xsX
qR40Di8IFOHxovHfVyx3D7cgpQeLi3PIqi8loEyyj5zZiBHmfTfPJdIAOYG9VuIK
w31rZzCa3uh/6hzeykNKk0VypX5kes5FcnZu1DKFzgAACewRc7JaNrrwf2e1jS5F
QcDRpfGBL6ChgSCe5plEkN+u/FxdG4POo3j1oxHdr6wwV66lkS/6yrqIkwIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFNvFyti57a8WqX1jornphK0mz9EuMB8GA1UdIwQY
MBaAFA6jycRJfB+khendF1ivnwAOK9S/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHFQSnhFbDhINlNGNmQwWFdLLWZBQTRyMUw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9hYWQyN2ItNjliYS00OWVkLWJiN2Ut
YTk5MGY5MDY0YTU3LzEvMjhYSzJMbnRyeGFwZldPaXVlbUVyU2JQMFM0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9hYWQyN2ItNjliYS00OWVkLWJiN2UtYTk5MGY5MDY0YTU3
LzEvRHFQSnhFbDhINlNGNmQwWFdLLWZBQTRyMUw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAwW9XAwQB
w1imMA8EAgACMAkDBwAgAQZ8JCAwDQYJKoZIhvcNAQELBQADggEBAGuZLHiSHZyf
oYBnenyR1wzQON5YcpkyS5WiKPldl00vAO5AqsCwPJfrH0HiViQM04sDOaUCqbLH
kOA4N8kgK77xh3fKSMkUCU4ApdJXo+y96OZ31Q4FIOGUqPJ8QUXk0AWn2LcK++LR
yjek6EOlzAQoSGMoZKFoQ8PA4B0mXyN0abxCfufYIv8WxvTDIBNKa5KtCqC/4T+5
b4T+KrZVEL75Vc9vjLiKRVN9MAVmuRaEiw2mChr+/ykl2HM3LNWQUdnYk+aj53w2
t+Q2Eh8sowgrmAtwiO/z8ExyEjMoSx2PX23bIEeQUcdty0NBZAYWb7MJROWMzNwI
Ud+uiwFKa+M=
-----END CERTIFICATE-----
Generated at Sun Apr 13 03:15:38 2025 by rpki-client