Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/8-PSvB9rLper4H4Z6i2q7Nh0gdw.roa
File: 8-PSvB9rLper4H4Z6i2q7Nh0gdw.roa (raw, json)
Hash identifier: 2qr0DY7SshfmBWBMPElwvi/+AJH/67rJ01N4KKU7q1A=
Subject key identifier: F3:E3:D2:BC:1F:6B:2E:97:AB:E0:7E:19:EA:2D:AA:EC:D8:74:81:DC
Certificate issuer: /CN=2719412918a6627f99cce55c7aca139057b8574e
Certificate serial: 019463632CD8922CCE97F6D2068B68F7BB47
Authority key identifier: 27:19:41:29:18:A6:62:7F:99:CC:E5:5C:7A:CA:13:90:57:B8:57:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/8-PSvB9rLper4H4Z6i2q7Nh0gdw.roa
Signing time: Tue 14 Jan 2025 05:57:11 +0000
ROA not before: Tue 14 Jan 2025 05:57:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48314
IP address blocks: 194.50.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/JxlBKRimYn-ZzOVcesoTkFe4V04.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/JxlBKRimYn-ZzOVcesoTkFe4V04.mft
rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 05:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:63:63:2c:d8:92:2c:ce:97:f6:d2:06:8b:68:f7:bb:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2719412918a6627f99cce55c7aca139057b8574e
Validity
Not Before: Jan 14 05:57:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f3e3d2bc1f6b2e97abe07e19ea2daaecd87481dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:1d:e3:35:80:6a:a3:0c:cb:14:af:65:ee:15:
63:79:ef:d9:9e:6f:ad:ee:a4:f7:39:fc:00:98:99:
ca:37:75:52:91:12:be:ee:f1:b5:49:54:fe:6e:db:
95:60:77:ca:fc:a0:61:5c:78:31:87:86:b0:63:b8:
ca:7c:c3:24:13:1a:ae:48:80:cb:7d:76:77:c3:e5:
78:3d:1c:18:af:96:4f:81:80:53:4c:40:02:9e:86:
d3:16:9a:64:3a:27:1f:39:b3:12:e5:28:87:97:62:
ea:88:c5:f7:0d:e6:27:d0:16:a6:5b:76:c5:ad:b8:
33:40:6d:e4:00:fe:12:99:6d:e1:64:c1:5e:29:0e:
bc:a5:5f:4e:f9:4c:df:c4:fe:d4:81:7f:29:6c:b0:
4f:07:f3:6d:1c:1c:2d:0c:07:f2:7e:ec:14:3e:7c:
6a:dd:28:71:86:2f:e5:39:86:e9:a8:78:b6:c1:67:
58:70:b8:7e:ff:5e:15:86:9c:a4:96:f0:9c:7f:39:
e8:2d:fe:f6:5c:9e:99:03:cc:f4:00:e0:a8:24:ad:
3a:ef:35:c4:11:67:55:a4:39:87:c6:3e:cc:75:ae:
3a:4f:48:49:2b:32:68:a1:54:45:42:4b:09:f0:43:
f6:b0:83:28:ef:ae:e7:e4:a1:63:ab:5c:87:a6:c3:
8d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:E3:D2:BC:1F:6B:2E:97:AB:E0:7E:19:EA:2D:AA:EC:D8:74:81:DC
X509v3 Authority Key Identifier:
keyid:27:19:41:29:18:A6:62:7F:99:CC:E5:5C:7A:CA:13:90:57:B8:57:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/8-PSvB9rLper4H4Z6i2q7Nh0gdw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/JxlBKRimYn-ZzOVcesoTkFe4V04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.0.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:13:1c:7d:2c:a4:95:cc:ba:43:d0:32:3e:2c:0a:b7:ba:89:
de:4b:d8:7e:2b:a6:9f:0f:18:01:2f:fb:5b:04:47:4c:29:4a:
18:1b:3f:3a:11:aa:65:07:80:2b:5c:85:52:83:b0:8d:8c:d4:
8a:15:9e:bb:e5:b7:0c:d5:06:c8:aa:64:97:12:bd:f6:bc:96:
37:5c:69:90:59:dc:ac:1f:ac:9d:0c:16:22:e0:74:e2:ff:d6:
62:70:52:a0:ba:a3:77:c0:ae:58:b7:76:58:cc:19:61:92:84:
4c:a7:87:b5:22:c9:9d:a3:46:2d:28:3a:62:e8:3f:6f:13:45:
0e:f4:c9:37:53:71:27:fd:fe:3c:40:67:d4:16:7a:64:50:64:
7b:7f:82:49:ab:ae:78:de:cc:23:31:a5:2d:03:e6:2b:30:80:
2c:8c:c8:67:69:b4:1f:99:13:af:3c:3f:75:15:ae:90:38:b6:
40:bf:d6:ee:0b:0f:04:eb:7c:81:88:23:b3:28:aa:ae:38:ab:
dd:3d:80:f1:d6:d4:db:ad:9f:26:7a:7b:1c:d3:e0:a5:01:4f:
f4:9c:01:68:57:9c:bb:4d:cf:5d:b0:b4:00:f2:09:be:c5:7a:
87:b0:07:b4:9d:ab:ae:9d:3b:1d:b9:91:ed:20:2a:4f:20:37:
36:0f:bb:fa
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZRjYyzYkizOl/bSBoto97tHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3MTk0MTI5MThhNjYyN2Y5OWNjZTU1YzdhY2ExMzkwNTdi
ODU3NGUwHhcNMjUwMTE0MDU1NzExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmM2UzZDJiYzFmNmIyZTk3YWJlMDdlMTllYTJkYWFlY2Q4NzQ4MWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6R3jNYBqowzLFK9l7hVjee/Znm+t
7qT3OfwAmJnKN3VSkRK+7vG1SVT+btuVYHfK/KBhXHgxh4awY7jKfMMkExquSIDL
fXZ3w+V4PRwYr5ZPgYBTTEACnobTFppkOicfObMS5SiHl2LqiMX3DeYn0BamW3bF
rbgzQG3kAP4SmW3hZMFeKQ68pV9O+UzfxP7UgX8pbLBPB/NtHBwtDAfyfuwUPnxq
3Shxhi/lOYbpqHi2wWdYcLh+/14VhpyklvCcfznoLf72XJ6ZA8z0AOCoJK067zXE
EWdVpDmHxj7Mda46T0hJKzJooVRFQksJ8EP2sIMo767n5KFjq1yHpsONYQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPPj0rwfay6Xq+B+GeotquzYdIHcMB8GA1UdIwQY
MBaAFCcZQSkYpmJ/mczlXHrKE5BXuFdOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnhsQktSaW1Zbi1aek9WY2Vzb1RrRmU0VjA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9lOTJjNDktYmQ0YS00ZThkLWJiZjYt
NGUyMjM5MTdiODYwLzEvOC1QU3ZCOXJMcGVyNEg0WjZpMnE3TmgwZ2R3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC9lOTJjNDktYmQ0YS00ZThkLWJiZjYtNGUyMjM5MTdiODYw
LzEvSnhsQktSaW1Zbi1aek9WY2Vzb1RrRmU0VjA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwjIAMA0G
CSqGSIb3DQEBCwUAA4IBAQBtExx9LKSVzLpD0DI+LAq3uoneS9h+K6afDxgBL/tb
BEdMKUoYGz86EaplB4ArXIVSg7CNjNSKFZ675bcM1QbIqmSXEr32vJY3XGmQWdys
H6ydDBYi4HTi/9ZicFKguqN3wK5Yt3ZYzBlhkoRMp4e1Ismdo0YtKDpi6D9vE0UO
9Mk3U3En/f48QGfUFnpkUGR7f4JJq6543swjMaUtA+YrMIAsjMhnabQfmROvPD91
Fa6QOLZAv9buCw8E63yBiCOzKKquOKvdPYDx1tTbrZ8mensc0+ClAU/0nAFoV5y7
Tc9dsLQA8gm+xXqHsAe0nauunTsduZHtICpPIDc2D7v6
-----END CERTIFICATE-----
Generated at Sun Apr 6 11:40:25 2025 by rpki-client