Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/b56504-ed17-4197-bba0-a0adecfd5fa9/1/dc2u-8bkbufd4cw_d9F3xDaopuc.roa
File: dc2u-8bkbufd4cw_d9F3xDaopuc.roa (raw, json)
Hash identifier: Umyl5IxYyTMcYEGSrVHWEMRSVhNtzrLiUEYgvIObXig=
Subject key identifier: 75:CD:AE:FB:C6:E4:6E:E7:DD:E1:CC:3F:77:D1:77:C4:36:A8:A6:E7
Certificate issuer: /CN=b10780df36b5b942f660e403a2fe608a75e4e57d
Certificate serial: 0194244584EE169A4BE3047409640FC850FC
Authority key identifier: B1:07:80:DF:36:B5:B9:42:F6:60:E4:03:A2:FE:60:8A:75:E4:E5:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sQeA3za1uUL2YOQDov5ginXk5X0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/b56504-ed17-4197-bba0-a0adecfd5fa9/1/dc2u-8bkbufd4cw_d9F3xDaopuc.roa
Signing time: Wed 01 Jan 2025 23:48:43 +0000
ROA not before: Wed 01 Jan 2025 23:48:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2852
IP address blocks: 192.108.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/b56504-ed17-4197-bba0-a0adecfd5fa9/1/sQeA3za1uUL2YOQDov5ginXk5X0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/b56504-ed17-4197-bba0-a0adecfd5fa9/1/sQeA3za1uUL2YOQDov5ginXk5X0.mft
rsync://rpki.ripe.net/repository/DEFAULT/sQeA3za1uUL2YOQDov5ginXk5X0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:84:ee:16:9a:4b:e3:04:74:09:64:0f:c8:50:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b10780df36b5b942f660e403a2fe608a75e4e57d
Validity
Not Before: Jan 1 23:48:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=75cdaefbc6e46ee7dde1cc3f77d177c436a8a6e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6a:f6:95:36:10:8b:38:7a:10:1c:02:25:4b:
2a:f0:04:06:99:26:ad:88:d3:5c:19:4a:c0:88:2e:
95:1d:19:26:35:9e:f5:ee:fe:8a:19:78:7f:d7:6b:
03:4a:23:a1:48:48:13:7c:c0:53:1a:10:5c:ca:d6:
5c:79:82:69:bb:b5:55:99:93:51:4f:5a:30:e4:78:
d6:b7:4b:39:cb:73:b8:db:14:06:16:c0:64:05:f3:
44:4a:b0:cd:d9:76:c4:7f:db:7b:9a:65:dc:6e:9f:
b0:2f:8c:13:6b:8b:cd:78:0b:d2:5f:bb:35:ea:18:
14:e8:3b:a0:ff:17:f2:af:41:34:b5:1d:d4:74:e9:
ef:82:47:24:2c:74:6c:6c:67:68:84:ca:50:9e:ad:
b6:ee:7f:83:a1:f5:51:bb:1d:33:e1:84:a5:f6:27:
1b:f0:ac:47:81:a2:a8:24:60:0d:05:70:6c:e4:5d:
ea:1f:34:cc:db:0a:ed:66:d6:9e:5e:92:3d:33:b3:
7c:b9:d1:21:c0:d7:2a:20:f3:be:ad:cb:12:ea:f2:
14:cb:c0:99:fb:90:63:43:31:6f:25:92:16:26:7b:
4e:72:c8:57:7c:a0:89:16:1b:74:40:fc:ff:13:b7:
fb:2a:67:68:48:9f:98:52:d9:49:7d:cc:9a:f1:57:
8a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:CD:AE:FB:C6:E4:6E:E7:DD:E1:CC:3F:77:D1:77:C4:36:A8:A6:E7
X509v3 Authority Key Identifier:
keyid:B1:07:80:DF:36:B5:B9:42:F6:60:E4:03:A2:FE:60:8A:75:E4:E5:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sQeA3za1uUL2YOQDov5ginXk5X0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b56504-ed17-4197-bba0-a0adecfd5fa9/1/dc2u-8bkbufd4cw_d9F3xDaopuc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b56504-ed17-4197-bba0-a0adecfd5fa9/1/sQeA3za1uUL2YOQDov5ginXk5X0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.108.128.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:77:d1:0e:ef:fd:28:e0:88:7d:82:be:63:7a:a9:49:97:13:
eb:4c:46:5a:b8:f9:b6:60:15:e0:01:7b:5f:3d:53:c7:00:9c:
9e:19:6d:06:b2:e1:86:5c:31:43:a0:98:54:f8:43:c1:56:b0:
35:b2:9f:02:d5:1b:55:9f:10:f0:02:26:d8:43:2c:53:a2:87:
fa:b6:3e:73:b1:bd:29:60:e2:68:5f:6e:4d:6d:71:2c:0a:af:
ee:d8:fa:c0:c6:be:7c:1d:d9:db:f9:80:b0:fa:58:12:41:ee:
a4:04:b0:7a:b8:fb:9b:26:00:79:66:e2:39:29:a3:8d:40:35:
8b:3b:3d:85:7b:2a:34:7a:64:ea:29:ec:37:e3:3d:c2:96:71:
18:20:1e:49:c2:11:58:c3:ef:b6:79:01:31:53:60:37:91:5b:
54:74:73:15:7e:72:c9:0d:db:bf:34:5f:3d:cb:04:39:9d:e4:
ef:99:64:f3:f9:61:1e:d8:05:85:ca:4b:a1:b8:58:f4:45:cc:
a8:ff:db:ac:75:38:88:a9:ca:84:95:ee:6e:b8:fd:bf:38:14:
76:10:ce:41:52:dc:99:c9:bd:38:4d:36:8a:9c:7b:bb:57:93:
d6:1a:1f:f6:f5:65:6d:89:c5:b8:2d:00:02:58:59:c7:fb:85:
62:fd:64:82
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQkRYTuFppL4wR0CWQPyFD8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxMDc4MGRmMzZiNWI5NDJmNjYwZTQwM2EyZmU2MDhhNzVl
NGU1N2QwHhcNMjUwMTAxMjM0ODQzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NWNkYWVmYmM2ZTQ2ZWU3ZGRlMWNjM2Y3N2QxNzdjNDM2YThhNmU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWr2lTYQizh6EBwCJUsq8AQGmSat
iNNcGUrAiC6VHRkmNZ717v6KGXh/12sDSiOhSEgTfMBTGhBcytZceYJpu7VVmZNR
T1ow5HjWt0s5y3O42xQGFsBkBfNESrDN2XbEf9t7mmXcbp+wL4wTa4vNeAvSX7s1
6hgU6Dug/xfyr0E0tR3UdOnvgkckLHRsbGdohMpQnq227n+DofVRux0z4YSl9icb
8KxHgaKoJGANBXBs5F3qHzTM2wrtZtaeXpI9M7N8udEhwNcqIPO+rcsS6vIUy8CZ
+5BjQzFvJZIWJntOcshXfKCJFht0QPz/E7f7KmdoSJ+YUtlJfcya8VeKdwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHXNrvvG5G7n3eHMP3fRd8Q2qKbnMB8GA1UdIwQY
MBaAFLEHgN82tblC9mDkA6L+YIp15OV9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1FlQTN6YTF1VUwyWU9RRG92NWdpblhrNVgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9iNTY1MDQtZWQxNy00MTk3LWJiYTAt
YTBhZGVjZmQ1ZmE5LzEvZGMydS04YmtidWZkNGN3X2Q5RjN4RGFvcHVjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS9iNTY1MDQtZWQxNy00MTk3LWJiYTAtYTBhZGVjZmQ1ZmE5
LzEvc1FlQTN6YTF1VUwyWU9RRG92NWdpblhrNVgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwGyAMA0G
CSqGSIb3DQEBCwUAA4IBAQAtd9EO7/0o4Ih9gr5jeqlJlxPrTEZauPm2YBXgAXtf
PVPHAJyeGW0GsuGGXDFDoJhU+EPBVrA1sp8C1RtVnxDwAibYQyxToof6tj5zsb0p
YOJoX25NbXEsCq/u2PrAxr58Hdnb+YCw+lgSQe6kBLB6uPubJgB5ZuI5KaONQDWL
Oz2Feyo0emTqKew34z3ClnEYIB5JwhFYw++2eQExU2A3kVtUdHMVfnLJDdu/NF89
ywQ5neTvmWTz+WEe2AWFykuhuFj0Rcyo/9usdTiIqcqEle5uuP2/OBR2EM5BUtyZ
yb04TTaKnHu7V5PWGh/29WVticW4LQACWFnH+4Vi/WSC
-----END CERTIFICATE-----
Generated at Sun Feb 2 10:09:01 2025 by rpki-client