Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/AWpLE7spKuCZAaiwcgrEYb9HbDE.roa
File: AWpLE7spKuCZAaiwcgrEYb9HbDE.roa (raw, json)
Hash identifier: HqSrJdcOFCUWqqNPEe+PAqwdq/X6tR+SRGcYc+ZwSvI=
Subject key identifier: 01:6A:4B:13:BB:29:2A:E0:99:01:A8:B0:72:0A:C4:61:BF:47:6C:31
Certificate issuer: /CN=b3e064e17335fdeb83a09862a735a6e97762d973
Certificate serial: 01942144631AA88B5F6C7C959F630DFF00C7
Authority key identifier: B3:E0:64:E1:73:35:FD:EB:83:A0:98:62:A7:35:A6:E9:77:62:D9:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s-Bk4XM1_euDoJhipzWm6Xdi2XM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/AWpLE7spKuCZAaiwcgrEYb9HbDE.roa
Signing time: Wed 01 Jan 2025 09:48:37 +0000
ROA not before: Wed 01 Jan 2025 09:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13287
IP address blocks: 153.92.42.0/24 maxlen: 24
155.133.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.mft
rsync://rpki.ripe.net/repository/DEFAULT/s-Bk4XM1_euDoJhipzWm6Xdi2XM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:63:1a:a8:8b:5f:6c:7c:95:9f:63:0d:ff:00:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3e064e17335fdeb83a09862a735a6e97762d973
Validity
Not Before: Jan 1 09:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=016a4b13bb292ae09901a8b0720ac461bf476c31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:dd:d9:93:9d:25:b9:3c:fe:b9:31:6e:47:40:
88:65:49:3c:c8:31:ad:a5:d2:de:8a:72:11:0f:f5:
7f:68:ea:eb:6f:6d:4f:e3:7e:45:bb:db:fc:58:e4:
69:58:28:0d:df:7f:11:c6:82:54:5e:7e:e7:12:65:
45:3c:cc:f0:c3:e7:93:e7:67:83:d1:ff:bb:88:89:
af:52:95:3e:f3:52:b3:df:0f:ca:c7:98:ba:d6:e9:
4d:0d:e0:b8:3a:c5:1c:9f:3f:21:1e:4f:b0:9b:76:
44:f3:9c:0b:99:f8:83:82:41:30:8e:7c:9b:ef:1a:
31:f5:00:cf:c0:6c:88:7f:e2:fa:35:6c:be:7d:21:
05:fd:d3:8b:cd:55:78:ee:a8:55:67:49:04:e0:9c:
44:e0:dc:4e:4d:63:e0:cd:b6:34:09:c6:d2:5e:56:
f2:12:4a:78:c6:3e:82:22:e6:e9:20:d8:14:6e:fd:
49:08:27:5f:29:31:2e:0c:f0:30:2e:01:9c:9f:5a:
fc:ce:ca:25:ce:87:16:e1:5f:d1:d3:1d:32:f4:33:
57:b2:11:66:43:db:15:91:17:17:16:2b:9a:cf:5e:
95:84:ce:b1:82:a9:9f:4b:f4:96:82:44:47:01:3c:
08:24:fc:78:46:08:03:fd:f3:b0:b2:01:2d:81:3c:
a9:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:6A:4B:13:BB:29:2A:E0:99:01:A8:B0:72:0A:C4:61:BF:47:6C:31
X509v3 Authority Key Identifier:
keyid:B3:E0:64:E1:73:35:FD:EB:83:A0:98:62:A7:35:A6:E9:77:62:D9:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s-Bk4XM1_euDoJhipzWm6Xdi2XM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/AWpLE7spKuCZAaiwcgrEYb9HbDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.92.42.0/24
155.133.195.0/24
Signature Algorithm: sha256WithRSAEncryption
25:d7:f5:30:31:03:8b:f6:d5:92:75:8e:0c:58:f3:47:df:15:
4c:06:af:d4:5c:be:c1:e9:9c:27:43:38:28:15:52:73:fb:c6:
88:40:9e:a0:a9:cd:c1:93:4b:6a:fa:70:0c:ad:ea:fb:dc:38:
51:75:9c:28:fa:6f:08:3b:35:c7:4e:7f:78:34:72:7e:ae:2c:
32:20:5c:16:3b:c5:c5:03:b2:c2:6f:10:13:91:33:68:ef:f2:
1e:33:68:40:48:db:77:e5:29:25:c4:d2:c9:a9:66:99:74:c5:
b6:29:a9:69:38:fd:c1:a2:16:c5:90:9b:97:0b:ac:04:98:d8:
59:eb:34:88:75:93:f3:c2:da:8f:06:d8:e0:b0:b9:ad:0b:98:
c9:8f:d3:7a:bc:59:a7:7a:e3:eb:e8:86:05:40:b0:8a:19:ed:
36:1b:ab:02:f2:25:12:0c:5f:f5:f6:c2:fe:8c:30:36:30:b3:
e0:22:17:cc:dd:b2:79:49:06:55:c6:4d:44:7f:6c:33:3a:83:
9a:1a:90:5b:7c:33:88:68:a9:2a:76:13:11:f6:8b:49:68:53:
f8:dc:1d:2f:88:2b:85:2d:83:8e:9d:2e:0d:2e:8f:56:9d:f0:
a4:5f:e6:8a:39:24:8a:b5:df:3f:2e:b2:f6:e6:77:31:64:a1:
fb:ba:08:26
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQhRGMaqItfbHyVn2MN/wDHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzZTA2NGUxNzMzNWZkZWI4M2EwOTg2MmE3MzVhNmU5Nzc2
MmQ5NzMwHhcNMjUwMTAxMDk0ODM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMTZhNGIxM2JiMjkyYWUwOTkwMWE4YjA3MjBhYzQ2MWJmNDc2YzMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyd3Zk50luTz+uTFuR0CIZUk8yDGt
pdLeinIRD/V/aOrrb21P435Fu9v8WORpWCgN338RxoJUXn7nEmVFPMzww+eT52eD
0f+7iImvUpU+81Kz3w/Kx5i61ulNDeC4OsUcnz8hHk+wm3ZE85wLmfiDgkEwjnyb
7xox9QDPwGyIf+L6NWy+fSEF/dOLzVV47qhVZ0kE4JxE4NxOTWPgzbY0CcbSXlby
Ekp4xj6CIubpINgUbv1JCCdfKTEuDPAwLgGcn1r8zsolzocW4V/R0x0y9DNXshFm
Q9sVkRcXFiuaz16VhM6xgqmfS/SWgkRHATwIJPx4RggD/fOwsgEtgTypbQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFAFqSxO7KSrgmQGosHIKxGG/R2wxMB8GA1UdIwQY
MBaAFLPgZOFzNf3rg6CYYqc1pul3YtlzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcy1CazRYTTFfZXVEb0poaXB6V202WGRpMlhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8yMTk0NDktZjI0My00NmUzLWJiYTct
MWQ1NTEzYmZmNGQ2LzEvQVdwTEU3c3BLdUNaQWFpd2NnckVZYjlIYkRFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC8yMTk0NDktZjI0My00NmUzLWJiYTctMWQ1NTEzYmZmNGQ2
LzEvcy1CazRYTTFfZXVEb0poaXB6V202WGRpMlhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAmVwqAwQA
m4XDMA0GCSqGSIb3DQEBCwUAA4IBAQAl1/UwMQOL9tWSdY4MWPNH3xVMBq/UXL7B
6ZwnQzgoFVJz+8aIQJ6gqc3Bk0tq+nAMrer73DhRdZwo+m8IOzXHTn94NHJ+riwy
IFwWO8XFA7LCbxATkTNo7/IeM2hASNt35SklxNLJqWaZdMW2KalpOP3BohbFkJuX
C6wEmNhZ6zSIdZPzwtqPBtjgsLmtC5jJj9N6vFmneuPr6IYFQLCKGe02G6sC8iUS
DF/19sL+jDA2MLPgIhfM3bJ5SQZVxk1Ef2wzOoOaGpBbfDOIaKkqdhMR9otJaFP4
3B0viCuFLYOOnS4NLo9WnfCkX+aKOSSKtd8/LrL25ncxZKH7uggm
-----END CERTIFICATE-----
Generated at Sun Apr 6 17:41:35 2025 by rpki-client