Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/pYif-zRR213byCwtfAGYu1zMZeM.roa
File: pYif-zRR213byCwtfAGYu1zMZeM.roa (raw, json)
Hash identifier: UUApk8H7qjC7v+fLxh+GD5xcNm7fiKpLQIro+hZI89M=
Subject key identifier: A5:88:9F:FB:34:51:DB:5D:DB:C8:2C:2D:7C:01:98:BB:5C:CC:65:E3
Certificate issuer: /CN=37518d180923a7f3c00653ec12bc702b95aab907
Certificate serial: 0194258F20A6BB4B38AA3349F85BF394EE65
Authority key identifier: 37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/pYif-zRR213byCwtfAGYu1zMZeM.roa
Signing time: Thu 02 Jan 2025 05:48:44 +0000
ROA not before: Thu 02 Jan 2025 05:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212167
IP address blocks: 193.255.52.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:20:a6:bb:4b:38:aa:33:49:f8:5b:f3:94:ee:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37518d180923a7f3c00653ec12bc702b95aab907
Validity
Not Before: Jan 2 05:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a5889ffb3451db5ddbc82c2d7c0198bb5ccc65e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f2:7a:b3:ed:fc:9c:9f:b2:8b:14:05:64:09:
fc:18:0d:0f:ea:78:c9:07:e2:cb:99:a7:8c:b7:73:
eb:f6:b5:ea:9f:82:ef:7e:fb:a5:67:6e:7d:77:22:
9c:4a:c7:70:1e:1b:8a:fc:27:85:f1:ad:49:44:5d:
b5:dd:ef:89:a2:0b:23:e1:8c:80:ef:0c:c4:d6:db:
cd:6c:dd:18:bb:3f:02:47:1a:d8:e4:09:d6:30:b0:
3b:ab:a9:00:f8:3b:7c:37:5c:f2:69:c1:f5:9b:e3:
16:6e:4c:66:16:1f:8e:b5:1b:54:45:ee:a7:35:07:
39:7b:b9:38:0d:86:c0:3c:dd:83:ce:46:0c:37:55:
5c:86:09:0a:43:8c:dd:73:0e:30:f3:fc:09:07:54:
61:4c:13:df:0d:a9:a9:b1:28:3d:f6:2b:fe:c9:be:
c0:ea:98:2e:97:bd:fe:27:74:ff:fa:c5:63:07:06:
6d:03:0a:09:09:22:f6:f8:9a:bc:35:6d:08:1d:f6:
23:61:21:4c:ca:d5:0a:28:09:18:ce:fc:23:35:4b:
4c:23:17:5c:20:58:b6:70:96:9c:bc:5d:70:6c:43:
95:29:9a:c0:3d:1c:da:23:2b:41:4b:d3:aa:57:38:
b5:0d:ff:a1:ed:e6:26:a9:8d:75:de:89:4f:5d:09:
d7:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:88:9F:FB:34:51:DB:5D:DB:C8:2C:2D:7C:01:98:BB:5C:CC:65:E3
X509v3 Authority Key Identifier:
keyid:37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/pYif-zRR213byCwtfAGYu1zMZeM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.255.52.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:17:ff:b8:66:98:93:5a:28:f9:62:5b:03:96:c0:3c:44:70:
f4:85:a1:f8:18:ab:88:ab:22:0f:7e:30:55:62:4e:48:f6:69:
7d:6c:b2:03:5a:63:29:4c:5e:fe:25:ca:cf:16:dd:e4:fa:d7:
ae:03:1b:f1:23:11:f6:94:a7:37:b1:89:22:6c:71:17:19:f2:
85:f2:2d:c0:1c:94:85:8c:4f:39:78:db:48:f3:9b:79:5a:10:
5b:aa:a7:1d:6b:d1:20:2f:9c:c5:13:a6:43:9d:10:e3:4f:27:
78:18:98:28:b5:10:c8:5a:64:91:3b:3e:00:de:e7:45:8a:21:
d7:01:54:36:f5:01:04:68:c4:d2:56:1f:f3:5b:94:04:d9:6a:
fd:dd:a3:12:cc:97:da:1e:5c:44:b5:b1:c5:93:d6:1e:a7:5a:
dc:45:91:17:05:20:a0:9e:58:5d:0e:ab:cb:c9:b8:4d:e6:b3:
89:05:35:46:54:fe:aa:86:5d:6c:8b:4e:3d:00:39:1b:9a:d1:
5f:8a:db:a0:16:2b:fb:a2:13:56:6e:35:ed:49:1e:ec:0f:0d:
db:75:3b:bb:b8:d7:71:ec:01:fd:bb:12:72:22:a4:24:be:42:
dd:b0:e4:66:9b:66:57:1c:53:fe:6d:35:04:67:32:8d:94:fb:
80:49:72:9f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQljyCmu0s4qjNJ+FvzlO5lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3NTE4ZDE4MDkyM2E3ZjNjMDA2NTNlYzEyYmM3MDJiOTVh
YWI5MDcwHhcNMjUwMTAyMDU0ODQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNTg4OWZmYjM0NTFkYjVkZGJjODJjMmQ3YzAxOThiYjVjY2M2NWUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/J6s+38nJ+yixQFZAn8GA0P6njJ
B+LLmaeMt3Pr9rXqn4LvfvulZ259dyKcSsdwHhuK/CeF8a1JRF213e+Jogsj4YyA
7wzE1tvNbN0Yuz8CRxrY5AnWMLA7q6kA+Dt8N1zyacH1m+MWbkxmFh+OtRtURe6n
NQc5e7k4DYbAPN2DzkYMN1VchgkKQ4zdcw4w8/wJB1RhTBPfDampsSg99iv+yb7A
6pgul73+J3T/+sVjBwZtAwoJCSL2+Jq8NW0IHfYjYSFMytUKKAkYzvwjNUtMIxdc
IFi2cJacvF1wbEOVKZrAPRzaIytBS9OqVzi1Df+h7eYmqY113olPXQnXZQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKWIn/s0Udtd28gsLXwBmLtczGXjMB8GA1UdIwQY
MBaAFDdRjRgJI6fzwAZT7BK8cCuVqrkHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjFHTkdBa2pwX1BBQmxQc0VyeHdLNVdxdVFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9mODBlZjMtOWYwYi00YmQxLTgwMTgt
NTk2NzE5MjBmYjYwLzEvcFlpZi16UlIyMTNieUN3dGZBR1l1MXpNWmVNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9mODBlZjMtOWYwYi00YmQxLTgwMTgtNTk2NzE5MjBmYjYw
LzEvTjFHTkdBa2pwX1BBQmxQc0VyeHdLNVdxdVFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwf80MA0G
CSqGSIb3DQEBCwUAA4IBAQBaF/+4ZpiTWij5YlsDlsA8RHD0haH4GKuIqyIPfjBV
Yk5I9ml9bLIDWmMpTF7+JcrPFt3k+teuAxvxIxH2lKc3sYkibHEXGfKF8i3AHJSF
jE85eNtI85t5WhBbqqcda9EgL5zFE6ZDnRDjTyd4GJgotRDIWmSROz4A3udFiiHX
AVQ29QEEaMTSVh/zW5QE2Wr93aMSzJfaHlxEtbHFk9Yep1rcRZEXBSCgnlhdDqvL
ybhN5rOJBTVGVP6qhl1si049ADkbmtFfitugFiv7ohNWbjXtSR7sDw3bdTu7uNdx
7AH9uxJyIqQkvkLdsORmm2ZXHFP+bTUEZzKNlPuASXKf
-----END CERTIFICATE-----
Generated at Mon Apr 7 21:03:55 2025 by rpki-client