Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/8a6692-f646-49f0-8821-0212b3eae97c/1/Re1CMq4a8GRTlVAhciRLdjmNzME.roa
File: Re1CMq4a8GRTlVAhciRLdjmNzME.roa (raw, json)
Hash identifier: e1LlxuTfucQ1ynw/jUhK7unO/vlcuYPu64TBZ3UmBVk=
Subject key identifier: 45:ED:42:32:AE:1A:F0:64:53:95:50:21:72:24:4B:76:39:8D:CC:C1
Certificate issuer: /CN=9d287533ceba0645a148cf10c8c27ea9a721a09d
Certificate serial: 019423D7365DFAC66953CCFB5A4E4B742442
Authority key identifier: 9D:28:75:33:CE:BA:06:45:A1:48:CF:10:C8:C2:7E:A9:A7:21:A0:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSh1M866BkWhSM8QyMJ-qachoJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/8a6692-f646-49f0-8821-0212b3eae97c/1/Re1CMq4a8GRTlVAhciRLdjmNzME.roa
Signing time: Wed 01 Jan 2025 21:48:14 +0000
ROA not before: Wed 01 Jan 2025 21:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210196
IP address blocks: 193.148.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/8a6692-f646-49f0-8821-0212b3eae97c/1/nSh1M866BkWhSM8QyMJ-qachoJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/8a6692-f646-49f0-8821-0212b3eae97c/1/nSh1M866BkWhSM8QyMJ-qachoJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSh1M866BkWhSM8QyMJ-qachoJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 09:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:36:5d:fa:c6:69:53:cc:fb:5a:4e:4b:74:24:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d287533ceba0645a148cf10c8c27ea9a721a09d
Validity
Not Before: Jan 1 21:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=45ed4232ae1af0645395502172244b76398dccc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:4e:65:aa:d7:7e:53:78:3d:ec:8f:18:fa:05:
aa:b8:b8:1d:a1:cf:88:4b:56:82:4a:dc:23:04:26:
e7:86:23:97:a9:b4:f8:09:b3:2e:4d:0b:64:71:4c:
82:1f:fd:45:ba:b6:fd:02:76:e3:c8:b2:bd:82:9a:
44:37:2b:95:1b:f0:59:38:40:3f:11:d1:72:c4:9b:
7d:ca:d4:09:f7:2f:d3:0a:95:ff:db:6f:ae:14:2b:
bc:3b:28:ee:ba:bc:ef:6f:0b:26:96:b4:37:83:12:
f4:e1:85:99:d7:d4:6e:b2:95:72:76:07:3e:84:ca:
2a:48:ab:b9:67:ba:4e:da:12:f0:2a:d9:99:01:60:
da:34:bb:51:c5:f0:40:a6:22:77:4a:7b:2b:bf:02:
2e:1c:49:fb:4f:b4:97:11:eb:16:23:5f:6e:99:4b:
f2:52:a9:36:53:24:d2:24:02:9a:9e:e1:88:e3:25:
d0:5b:39:6e:b4:bd:83:c0:c2:cb:81:5a:c6:c8:45:
78:80:1c:06:98:7e:bd:92:42:83:61:f4:27:45:ac:
95:83:89:3e:5f:70:fc:10:ed:8a:3c:39:0b:62:bf:
4e:07:28:d9:61:1d:55:eb:31:b8:46:77:c5:54:4e:
f2:db:0e:74:5e:6e:d1:66:1e:c5:73:d7:bc:49:15:
97:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:ED:42:32:AE:1A:F0:64:53:95:50:21:72:24:4B:76:39:8D:CC:C1
X509v3 Authority Key Identifier:
keyid:9D:28:75:33:CE:BA:06:45:A1:48:CF:10:C8:C2:7E:A9:A7:21:A0:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSh1M866BkWhSM8QyMJ-qachoJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/8a6692-f646-49f0-8821-0212b3eae97c/1/Re1CMq4a8GRTlVAhciRLdjmNzME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/8a6692-f646-49f0-8821-0212b3eae97c/1/nSh1M866BkWhSM8QyMJ-qachoJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.148.10.0/24
Signature Algorithm: sha256WithRSAEncryption
59:f6:6e:9b:03:aa:75:5a:c3:94:6b:89:04:e8:09:14:6a:b9:
fb:f5:0c:ba:da:c7:03:39:bc:ab:1b:f0:07:ee:cf:45:d5:98:
97:f5:e1:d5:87:b2:18:34:68:05:64:de:bb:be:ad:3a:50:8b:
3f:84:cf:ed:06:cc:8e:06:0d:c9:9a:08:e5:a4:a2:32:14:e5:
be:62:2e:22:46:5a:69:2a:9f:74:0f:2e:1a:61:10:40:1b:e2:
85:34:60:82:60:18:14:ef:0f:b4:b3:3e:27:29:b3:f4:67:2b:
75:d2:4b:5a:53:5b:8d:a1:86:bb:fc:b4:82:24:24:87:19:45:
51:cd:43:62:f4:8e:60:b6:8b:2d:00:69:56:9c:68:b0:bd:5f:
f0:d5:2c:b2:8c:ae:30:ef:5d:11:b4:be:38:43:15:11:7a:c0:
62:26:96:de:d2:a8:90:bf:66:7d:1f:54:cf:40:76:a3:c8:fd:
ed:ed:dd:b1:b9:3c:b0:d4:68:16:c8:53:09:73:39:a4:6d:c0:
49:69:16:c2:b5:bb:69:f3:cf:be:c2:b7:48:84:a3:08:4e:06:
d5:28:a5:7a:28:bc:21:ee:05:74:8c:16:88:0f:06:fb:e9:32:
8b:d1:f4:83:db:be:7a:65:7d:c0:20:90:e1:b0:d2:03:4f:7a:
73:5f:77:a4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQj1zZd+sZpU8z7Wk5LdCRCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMjg3NTMzY2ViYTA2NDVhMTQ4Y2YxMGM4YzI3ZWE5YTcy
MWEwOWQwHhcNMjUwMTAxMjE0ODE0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NWVkNDIzMmFlMWFmMDY0NTM5NTUwMjE3MjI0NGI3NjM5OGRjY2MxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1k5lqtd+U3g97I8Y+gWquLgdoc+I
S1aCStwjBCbnhiOXqbT4CbMuTQtkcUyCH/1Furb9AnbjyLK9gppENyuVG/BZOEA/
EdFyxJt9ytQJ9y/TCpX/22+uFCu8OyjuurzvbwsmlrQ3gxL04YWZ19RuspVydgc+
hMoqSKu5Z7pO2hLwKtmZAWDaNLtRxfBApiJ3SnsrvwIuHEn7T7SXEesWI19umUvy
Uqk2UyTSJAKanuGI4yXQWzlutL2DwMLLgVrGyEV4gBwGmH69kkKDYfQnRayVg4k+
X3D8EO2KPDkLYr9OByjZYR1V6zG4RnfFVE7y2w50Xm7RZh7Fc9e8SRWXCQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEXtQjKuGvBkU5VQIXIkS3Y5jczBMB8GA1UdIwQY
MBaAFJ0odTPOugZFoUjPEMjCfqmnIaCdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNoMU04NjZCa1doU004UXlNSi1xYWNob0owLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC84YTY2OTItZjY0Ni00OWYwLTg4MjEt
MDIxMmIzZWFlOTdjLzEvUmUxQ01xNGE4R1JUbFZBaGNpUkxkam1Oek1FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC84YTY2OTItZjY0Ni00OWYwLTg4MjEtMDIxMmIzZWFlOTdj
LzEvblNoMU04NjZCa1doU004UXlNSi1xYWNob0owLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwZQKMA0G
CSqGSIb3DQEBCwUAA4IBAQBZ9m6bA6p1WsOUa4kE6AkUarn79Qy62scDObyrG/AH
7s9F1ZiX9eHVh7IYNGgFZN67vq06UIs/hM/tBsyOBg3JmgjlpKIyFOW+Yi4iRlpp
Kp90Dy4aYRBAG+KFNGCCYBgU7w+0sz4nKbP0Zyt10ktaU1uNoYa7/LSCJCSHGUVR
zUNi9I5gtostAGlWnGiwvV/w1SyyjK4w710RtL44QxUResBiJpbe0qiQv2Z9H1TP
QHajyP3t7d2xuTyw1GgWyFMJczmkbcBJaRbCtbtp88++wrdIhKMITgbVKKV6KLwh
7gV0jBaIDwb76TKL0fSD2756ZX3AIJDhsNIDT3pzX3ek
-----END CERTIFICATE-----
Generated at Sat Apr 12 18:39:24 2025 by rpki-client