Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/KYs_VMmQL9k2rQHns_O4m4f35bc.roa
File: KYs_VMmQL9k2rQHns_O4m4f35bc.roa (raw, json)
Hash identifier: 1ns98Zta2gRWyrvr5wyrj8EwmfBa9CnA+/wYUmR2SA0=
Subject key identifier: 29:8B:3F:54:C9:90:2F:D9:36:AD:01:E7:B3:F3:B8:9B:87:F7:E5:B7
Certificate issuer: /CN=dc7821e1bcbf6e074ea4814aaa5c63e3ba813c5f
Certificate serial: 019421B1B8A92E5B88AA640DE321502A7894
Authority key identifier: DC:78:21:E1:BC:BF:6E:07:4E:A4:81:4A:AA:5C:63:E3:BA:81:3C:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Hgh4by_bgdOpIFKqlxj47qBPF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/KYs_VMmQL9k2rQHns_O4m4f35bc.roa
Signing time: Wed 01 Jan 2025 11:48:02 +0000
ROA not before: Wed 01 Jan 2025 11:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2541
IP address blocks: 193.169.144.0/24 maxlen: 24
193.169.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/3Hgh4by_bgdOpIFKqlxj47qBPF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/3Hgh4by_bgdOpIFKqlxj47qBPF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Hgh4by_bgdOpIFKqlxj47qBPF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 12:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:b8:a9:2e:5b:88:aa:64:0d:e3:21:50:2a:78:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc7821e1bcbf6e074ea4814aaa5c63e3ba813c5f
Validity
Not Before: Jan 1 11:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=298b3f54c9902fd936ad01e7b3f3b89b87f7e5b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:17:39:b0:72:b2:99:41:24:30:6f:2b:55:29:
ea:d8:f9:b7:5a:37:70:79:b4:16:d9:46:39:51:00:
d6:e4:4d:4b:1f:57:58:e4:7b:30:4b:8a:45:fd:ba:
32:67:75:85:2e:c3:c6:cb:bc:c1:06:2f:c7:e4:fe:
8c:d9:00:43:b0:9a:7b:f9:9a:bb:ec:9c:38:63:a5:
e1:4e:54:9c:f5:99:d5:04:ca:5b:3c:35:1e:41:10:
9a:73:3a:f6:86:35:de:c3:6b:91:88:fe:a3:9f:d0:
7d:b6:22:1c:96:83:9c:1d:ae:39:b4:47:d9:1b:42:
f4:92:fa:d0:28:f9:b3:a3:d3:db:c8:34:81:ff:48:
b0:42:9f:18:a0:df:40:cb:35:38:bd:8a:a0:01:14:
20:b3:69:1c:5d:bf:59:e2:92:7b:73:23:21:2e:85:
75:57:d9:7b:60:fb:93:6d:e7:bf:e7:df:15:d9:f5:
b7:ec:75:60:c4:08:17:9c:33:c3:c3:78:e6:2b:68:
3a:2d:b7:63:75:e2:12:1e:a8:20:87:54:0d:b4:01:
49:60:b3:d9:4e:d9:5b:d7:af:d0:60:d8:2b:0a:d0:
b0:30:22:f4:34:96:be:20:93:b4:a7:12:9e:a9:75:
c1:e4:1c:15:36:d5:e1:51:53:db:e7:5f:81:89:71:
48:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:8B:3F:54:C9:90:2F:D9:36:AD:01:E7:B3:F3:B8:9B:87:F7:E5:B7
X509v3 Authority Key Identifier:
keyid:DC:78:21:E1:BC:BF:6E:07:4E:A4:81:4A:AA:5C:63:E3:BA:81:3C:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Hgh4by_bgdOpIFKqlxj47qBPF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/KYs_VMmQL9k2rQHns_O4m4f35bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/3Hgh4by_bgdOpIFKqlxj47qBPF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.169.144.0/23
Signature Algorithm: sha256WithRSAEncryption
52:83:d6:48:52:76:1f:2e:a5:f0:a6:2b:a6:93:90:06:96:1e:
51:d2:5b:45:65:b9:f3:0d:98:14:46:dd:37:d2:c1:cd:04:42:
65:bf:79:29:72:1d:f7:50:83:4e:c2:62:7a:3e:4b:bb:d2:8d:
4f:ca:a7:9f:a9:9a:3c:c3:05:28:70:f2:5e:ae:11:74:74:80:
9e:0b:e7:bf:3c:db:13:9a:f0:03:d5:b8:2b:2c:08:9e:50:86:
e3:53:56:98:39:23:29:22:90:d2:8f:9a:a3:0f:79:42:48:82:
57:8c:a7:a2:b9:c7:57:02:75:11:a1:83:cb:7b:29:be:59:0f:
1d:35:c3:b3:1a:94:24:40:70:c7:2f:85:44:b7:a9:c2:af:9a:
ec:b7:d3:79:8f:dd:40:23:cb:35:fa:13:82:89:6b:09:49:a9:
00:16:e3:9f:38:23:f8:fa:1a:88:9f:98:08:cd:4e:fe:92:99:
b8:7b:57:02:4b:34:3b:8e:7d:6c:ea:3d:ea:71:16:b0:03:ef:
fb:ee:32:6e:75:0d:31:63:8a:5a:31:09:f7:4c:9f:6b:8e:7d:
ea:3c:f0:e5:dd:db:31:b5:00:30:af:d5:15:8a:ca:b1:c8:3f:
83:50:47:02:f2:9a:ae:34:85:ed:ed:9c:78:f9:e2:08:fb:70:
2c:df:ed:22
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhsbipLluIqmQN4yFQKniUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjNzgyMWUxYmNiZjZlMDc0ZWE0ODE0YWFhNWM2M2UzYmE4
MTNjNWYwHhcNMjUwMTAxMTE0ODAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyOThiM2Y1NGM5OTAyZmQ5MzZhZDAxZTdiM2YzYjg5Yjg3ZjdlNWI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBc5sHKymUEkMG8rVSnq2Pm3Wjdw
ebQW2UY5UQDW5E1LH1dY5HswS4pF/boyZ3WFLsPGy7zBBi/H5P6M2QBDsJp7+Zq7
7Jw4Y6XhTlSc9ZnVBMpbPDUeQRCaczr2hjXew2uRiP6jn9B9tiIcloOcHa45tEfZ
G0L0kvrQKPmzo9PbyDSB/0iwQp8YoN9AyzU4vYqgARQgs2kcXb9Z4pJ7cyMhLoV1
V9l7YPuTbee/598V2fW37HVgxAgXnDPDw3jmK2g6LbdjdeISHqggh1QNtAFJYLPZ
Ttlb16/QYNgrCtCwMCL0NJa+IJO0pxKeqXXB5BwVNtXhUVPb51+BiXFIHQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCmLP1TJkC/ZNq0B57PzuJuH9+W3MB8GA1UdIwQY
MBaAFNx4IeG8v24HTqSBSqpcY+O6gTxfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0hnaDRieV9iZ2RPcElGS3FseGo0N3FCUEY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC85ZGFmZjQtZjE1OC00ODBmLWI0MWYt
ZDQ4YjQyZWYxNTliLzEvS1lzX1ZNbVFMOWsyclFIbnNfTzRtNGYzNWJjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC85ZGFmZjQtZjE1OC00ODBmLWI0MWYtZDQ4YjQyZWYxNTli
LzEvM0hnaDRieV9iZ2RPcElGS3FseGo0N3FCUEY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwamQMA0G
CSqGSIb3DQEBCwUAA4IBAQBSg9ZIUnYfLqXwpiumk5AGlh5R0ltFZbnzDZgURt03
0sHNBEJlv3kpch33UINOwmJ6Pku70o1PyqefqZo8wwUocPJerhF0dICeC+e/PNsT
mvAD1bgrLAieUIbjU1aYOSMpIpDSj5qjD3lCSIJXjKeiucdXAnURoYPLeym+WQ8d
NcOzGpQkQHDHL4VEt6nCr5rst9N5j91AI8s1+hOCiWsJSakAFuOfOCP4+hqIn5gI
zU7+kpm4e1cCSzQ7jn1s6j3qcRawA+/77jJudQ0xY4paMQn3TJ9rjn3qPPDl3dsx
tQAwr9UVisqxyD+DUEcC8pquNIXt7Zx4+eII+3As3+0i
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:17:43 2025 by rpki-client