Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/PadXYOgLqVZA9ql5KBGvS89vmRo.roa
File: PadXYOgLqVZA9ql5KBGvS89vmRo.roa (raw, json)
Hash identifier: nxJ2UXZ8SywJLT0Mr208cedxyBjVOFCCZZniGKgSLRU=
Subject key identifier: 3D:A7:57:60:E8:0B:A9:56:40:F6:A9:79:28:11:AF:4B:CF:6F:99:1A
Certificate issuer: /CN=87b1396fd11c730ef20448129b282856ac504cb7
Certificate serial: 01941FFAA87F794553039E1C8CE694083882
Authority key identifier: 87:B1:39:6F:D1:1C:73:0E:F2:04:48:12:9B:28:28:56:AC:50:4C:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h7E5b9Eccw7yBEgSmygoVqxQTLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/PadXYOgLqVZA9ql5KBGvS89vmRo.roa
Signing time: Wed 01 Jan 2025 03:48:28 +0000
ROA not before: Wed 01 Jan 2025 03:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49581
IP address blocks: 192.109.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/h7E5b9Eccw7yBEgSmygoVqxQTLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:a8:7f:79:45:53:03:9e:1c:8c:e6:94:08:38:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87b1396fd11c730ef20448129b282856ac504cb7
Validity
Not Before: Jan 1 03:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3da75760e80ba95640f6a9792811af4bcf6f991a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:bd:a0:c1:f1:cf:fd:43:f8:d9:5e:11:a5:ff:
9c:25:47:44:cf:c0:05:38:50:d4:fd:3b:07:46:ed:
69:f1:28:e4:a6:21:7d:fb:54:70:35:7c:47:cd:5b:
ab:a5:94:ae:86:12:61:f7:b6:5b:29:70:10:de:cc:
2c:4d:49:a1:c3:82:ff:05:5f:3e:98:ab:12:de:44:
dd:00:fb:39:55:4a:87:ee:1f:6a:49:db:d8:fb:6c:
52:a8:4d:bb:29:15:e8:4c:c3:d8:ed:6f:4f:66:42:
02:9d:db:81:ad:a2:1a:64:73:ef:6f:2f:b9:be:40:
a6:55:53:06:eb:2e:60:e5:85:9c:0d:8f:97:7b:55:
31:50:12:49:5e:31:b4:ec:a4:b9:f3:ab:b0:7a:08:
4d:4b:c6:5c:47:86:3f:f5:9b:a4:ba:a3:cf:37:1b:
16:ae:f0:2f:5a:41:19:ea:86:5a:32:f6:66:7e:59:
df:aa:6e:1f:31:c1:d4:10:01:a6:6b:6b:fd:4d:4c:
86:85:7d:e4:41:b1:76:8e:c9:64:eb:db:67:97:ab:
85:b6:58:21:d1:07:9f:b5:1b:6f:44:74:7a:78:c1:
a6:99:20:cc:b3:5a:74:b4:b5:a8:b8:1a:57:9b:68:
02:8b:9a:e4:9e:3b:2b:91:99:6d:f6:72:1d:39:07:
83:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:A7:57:60:E8:0B:A9:56:40:F6:A9:79:28:11:AF:4B:CF:6F:99:1A
X509v3 Authority Key Identifier:
keyid:87:B1:39:6F:D1:1C:73:0E:F2:04:48:12:9B:28:28:56:AC:50:4C:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h7E5b9Eccw7yBEgSmygoVqxQTLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/PadXYOgLqVZA9ql5KBGvS89vmRo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.109.206.0/24
Signature Algorithm: sha256WithRSAEncryption
60:fe:c9:ee:cf:ff:dd:34:8f:f8:00:8b:d4:43:38:fe:72:af:
b7:14:28:9a:e6:42:1d:06:e6:e1:b1:2f:55:d5:f5:3b:71:00:
a6:f2:19:6c:9f:2b:b9:5f:86:ae:ce:c6:27:5d:f6:49:af:99:
8e:6a:1a:e2:fe:f6:bc:10:ea:fc:3a:f7:3c:34:7b:1d:61:37:
6a:16:91:71:d4:4d:30:77:a4:fb:e6:74:49:da:9a:dc:64:f3:
1f:70:98:f0:31:48:fa:c7:e0:9e:0f:05:38:f0:92:13:23:c3:
ce:20:15:28:c9:b8:1d:25:47:d9:59:47:7e:93:33:aa:7e:e8:
93:e6:6c:d7:9d:92:b8:b6:39:f1:1d:8c:f8:f4:a6:d8:8f:e9:
df:21:b8:92:08:75:83:a3:75:18:33:39:74:7f:4a:4c:4d:fc:
d4:b0:ee:9e:25:61:ed:a0:be:a7:e4:e8:7c:0c:92:03:8a:af:
74:90:f9:12:78:17:bc:3d:d7:aa:c6:0a:bc:7f:4c:58:df:dd:
3b:a7:1d:c3:33:19:dd:3a:6d:87:9a:66:bd:b9:56:8e:91:0f:
23:1c:2d:8d:b1:e1:f5:79:e5:f6:0b:6f:36:18:59:ee:e2:79:
6c:fa:01:31:69:70:5b:66:a6:3c:e3:b6:a0:37:57:96:c9:1c:
db:54:95:33
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQf+qh/eUVTA54cjOaUCDiCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3YjEzOTZmZDExYzczMGVmMjA0NDgxMjliMjgyODU2YWM1
MDRjYjcwHhcNMjUwMTAxMDM0ODI4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZGE3NTc2MGU4MGJhOTU2NDBmNmE5NzkyODExYWY0YmNmNmY5OTFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1L2gwfHP/UP42V4Rpf+cJUdEz8AF
OFDU/TsHRu1p8SjkpiF9+1RwNXxHzVurpZSuhhJh97ZbKXAQ3swsTUmhw4L/BV8+
mKsS3kTdAPs5VUqH7h9qSdvY+2xSqE27KRXoTMPY7W9PZkICnduBraIaZHPvby+5
vkCmVVMG6y5g5YWcDY+Xe1UxUBJJXjG07KS586uweghNS8ZcR4Y/9ZukuqPPNxsW
rvAvWkEZ6oZaMvZmflnfqm4fMcHUEAGma2v9TUyGhX3kQbF2jslk69tnl6uFtlgh
0QeftRtvRHR6eMGmmSDMs1p0tLWouBpXm2gCi5rknjsrkZlt9nIdOQeDaQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFD2nV2DoC6lWQPapeSgRr0vPb5kaMB8GA1UdIwQY
MBaAFIexOW/RHHMO8gRIEpsoKFasUEy3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDdFNWI5RWNjdzd5QkVnU215Z29WcXhRVExjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8zOGJjOTAtMWQ1My00ZDQ3LWJiZGIt
ZjRlN2M5Y2M0M2ZmLzEvUGFkWFlPZ0xxVlpBOXFsNUtCR3ZTODl2bVJvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC8zOGJjOTAtMWQ1My00ZDQ3LWJiZGItZjRlN2M5Y2M0M2Zm
LzEvaDdFNWI5RWNjdzd5QkVnU215Z29WcXhRVExjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwG3OMA0G
CSqGSIb3DQEBCwUAA4IBAQBg/snuz//dNI/4AIvUQzj+cq+3FCia5kIdBubhsS9V
1fU7cQCm8hlsnyu5X4auzsYnXfZJr5mOahri/va8EOr8Ovc8NHsdYTdqFpFx1E0w
d6T75nRJ2prcZPMfcJjwMUj6x+CeDwU48JITI8POIBUoybgdJUfZWUd+kzOqfuiT
5mzXnZK4tjnxHYz49KbYj+nfIbiSCHWDo3UYMzl0f0pMTfzUsO6eJWHtoL6n5Oh8
DJIDiq90kPkSeBe8Pdeqxgq8f0xY3907px3DMxndOm2Hmma9uVaOkQ8jHC2NseH1
eeX2C282GFnu4nls+gExaXBbZqY847agN1eWyRzbVJUz
-----END CERTIFICATE-----
Generated at Sat Apr 12 15:49:39 2025 by rpki-client