Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/sdkhaebPKKw0NEDwkJt1BwzDM5k.roa
File: sdkhaebPKKw0NEDwkJt1BwzDM5k.roa (raw, json)
Hash identifier: eFITnmOe55K1oGBBdg5u8Fa0Zz7d1qwKIy6tb8P+FGk=
Subject key identifier: B1:D9:21:69:E6:CF:28:AC:34:34:40:F0:90:9B:75:07:0C:C3:33:99
Certificate issuer: /CN=5794afdb5e6a1885780920a54ffa82408ea85ba1
Certificate serial: 019424B3BDE7D368D92411A50D327C9F7004
Authority key identifier: 57:94:AF:DB:5E:6A:18:85:78:09:20:A5:4F:FA:82:40:8E:A8:5B:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V5Sv215qGIV4CSClT_qCQI6oW6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/sdkhaebPKKw0NEDwkJt1BwzDM5k.roa
Signing time: Thu 02 Jan 2025 01:49:06 +0000
ROA not before: Thu 02 Jan 2025 01:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 397071
IP address blocks: 178.236.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/V5Sv215qGIV4CSClT_qCQI6oW6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/V5Sv215qGIV4CSClT_qCQI6oW6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/V5Sv215qGIV4CSClT_qCQI6oW6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:bd:e7:d3:68:d9:24:11:a5:0d:32:7c:9f:70:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5794afdb5e6a1885780920a54ffa82408ea85ba1
Validity
Not Before: Jan 2 01:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b1d92169e6cf28ac343440f0909b75070cc33399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b3:12:97:83:63:6e:3c:83:6e:db:a9:6f:b9:
78:69:86:ef:1c:c2:02:f7:e4:5a:4b:40:5b:cf:f6:
74:fe:7d:37:cd:1b:0c:44:1e:c0:7c:c2:e9:d2:6e:
1e:f2:34:3b:b1:a1:aa:fe:6b:bd:79:a7:b2:05:a6:
85:5f:1a:db:cd:f4:5f:cb:21:fe:80:a6:06:8f:30:
58:af:56:85:cb:e7:10:27:e3:9c:df:56:06:47:44:
ea:3c:bd:fc:91:6f:18:ec:1a:25:88:8a:a3:0a:e2:
f1:a1:3d:95:81:6f:a5:93:8c:3d:d4:5c:b9:05:03:
91:07:38:30:e9:dc:3c:8e:ba:c8:21:06:6e:60:f5:
29:02:a6:b2:cd:78:52:f0:52:1e:7e:44:d3:7f:0e:
4c:02:cc:ae:c6:0c:fb:5c:3e:12:79:ec:c1:60:6c:
d8:93:c5:df:28:c3:f5:9a:11:da:3b:e1:93:66:f2:
65:ab:d6:85:0a:8e:22:a8:48:cf:e2:f8:28:85:bc:
9e:35:1f:d0:de:7f:49:35:35:3b:2e:6b:4d:2f:a4:
3c:ea:6a:2e:ee:a9:f1:f4:7d:56:5f:16:ef:64:b5:
eb:f7:4f:64:57:2b:6b:96:74:a2:db:60:3b:04:e7:
d0:df:02:74:70:ea:c9:b4:58:01:ce:3a:39:a4:ae:
d1:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:D9:21:69:E6:CF:28:AC:34:34:40:F0:90:9B:75:07:0C:C3:33:99
X509v3 Authority Key Identifier:
keyid:57:94:AF:DB:5E:6A:18:85:78:09:20:A5:4F:FA:82:40:8E:A8:5B:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5Sv215qGIV4CSClT_qCQI6oW6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/sdkhaebPKKw0NEDwkJt1BwzDM5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/V5Sv215qGIV4CSClT_qCQI6oW6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.236.234.0/24
Signature Algorithm: sha256WithRSAEncryption
36:de:ff:af:ac:a7:92:5b:7c:53:f2:8c:cc:df:65:c2:8a:8f:
4e:54:9a:8e:8b:66:73:f3:49:22:ca:1d:b0:d3:55:fa:31:b3:
aa:71:26:96:e1:54:9e:ff:0c:a0:54:2b:b8:38:41:51:a8:50:
b2:db:91:fd:4d:e9:e9:61:f4:61:90:ac:3e:84:c8:42:22:8d:
c7:b3:cb:5e:a3:41:ec:aa:72:23:f7:76:58:b0:1a:6f:0d:99:
11:67:59:e6:ae:21:8b:52:5c:f6:29:fc:79:02:78:74:a7:f3:
f9:f3:d9:b3:d3:f5:68:3c:ba:17:ee:4e:1d:87:b4:b4:8d:35:
00:04:1b:75:e3:30:80:e9:8d:2d:4a:1b:c9:e0:f5:11:fc:bd:
ee:bb:df:d1:6e:3e:c2:0b:d4:d8:dd:af:de:ef:23:90:6b:0f:
6f:d0:80:39:4c:65:37:7c:7d:60:df:d4:fa:7a:81:d7:5d:0d:
51:d1:fd:b2:4d:fd:40:20:bd:5c:77:27:be:5f:b7:15:a3:f0:
9f:d8:f4:b3:ad:2d:8a:b7:38:d6:f6:04:d1:37:6a:1a:ea:88:
fc:d6:f2:06:c0:b5:20:a3:78:dd:2f:af:bd:33:71:29:d2:a5:
2d:d7:13:47:22:2c:47:96:43:52:9b:59:53:c7:47:03:6c:42:
d9:9a:76:02
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQks73n02jZJBGlDTJ8n3AEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3OTRhZmRiNWU2YTE4ODU3ODA5MjBhNTRmZmE4MjQwOGVh
ODViYTEwHhcNMjUwMTAyMDE0OTA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMWQ5MjE2OWU2Y2YyOGFjMzQzNDQwZjA5MDliNzUwNzBjYzMzMzk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7MSl4NjbjyDbtupb7l4aYbvHMIC
9+RaS0Bbz/Z0/n03zRsMRB7AfMLp0m4e8jQ7saGq/mu9eaeyBaaFXxrbzfRfyyH+
gKYGjzBYr1aFy+cQJ+Oc31YGR0TqPL38kW8Y7BoliIqjCuLxoT2VgW+lk4w91Fy5
BQORBzgw6dw8jrrIIQZuYPUpAqayzXhS8FIefkTTfw5MAsyuxgz7XD4SeezBYGzY
k8XfKMP1mhHaO+GTZvJlq9aFCo4iqEjP4vgohbyeNR/Q3n9JNTU7LmtNL6Q86mou
7qnx9H1WXxbvZLXr909kVytrlnSi22A7BOfQ3wJ0cOrJtFgBzjo5pK7RQQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLHZIWnmzyisNDRA8JCbdQcMwzOZMB8GA1UdIwQY
MBaAFFeUr9teahiFeAkgpU/6gkCOqFuhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjVTdjIxNXFHSVY0Q1NDbFRfcUNRSTZvVzZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9kZGNlNGQtOTkxMi00ODdkLWI1NWQt
NDdkODJhNDFhOGYzLzEvc2RraGFlYlBLS3cwTkVEd2tKdDFCd3pETTVrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9kZGNlNGQtOTkxMi00ODdkLWI1NWQtNDdkODJhNDFhOGYz
LzEvVjVTdjIxNXFHSVY0Q1NDbFRfcUNRSTZvVzZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsuzqMA0G
CSqGSIb3DQEBCwUAA4IBAQA23v+vrKeSW3xT8ozM32XCio9OVJqOi2Zz80kiyh2w
01X6MbOqcSaW4VSe/wygVCu4OEFRqFCy25H9TenpYfRhkKw+hMhCIo3Hs8teo0Hs
qnIj93ZYsBpvDZkRZ1nmriGLUlz2Kfx5Anh0p/P589mz0/VoPLoX7k4dh7S0jTUA
BBt14zCA6Y0tShvJ4PUR/L3uu9/Rbj7CC9TY3a/e7yOQaw9v0IA5TGU3fH1g39T6
eoHXXQ1R0f2yTf1AIL1cdye+X7cVo/Cf2PSzrS2KtzjW9gTRN2oa6oj81vIGwLUg
o3jdL6+9M3Ep0qUt1xNHIixHlkNSm1lTx0cDbELZmnYC
-----END CERTIFICATE-----
Generated at Wed Feb 5 16:04:51 2025 by rpki-client