Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/c680bf-9b6c-44d3-837f-88cfa3dca6de/1/SmenFq2eO29wVInO8xQQnEozH4M.roa
File: SmenFq2eO29wVInO8xQQnEozH4M.roa (raw, json)
Hash identifier: NLqfCsW+19ubwmofae6n/UEN1RfOh4ZI/s4/YAFk4k4=
Subject key identifier: 4A:67:A7:16:AD:9E:3B:6F:70:54:89:CE:F3:14:10:9C:4A:33:1F:83
Certificate issuer: /CN=76be461eb9f7004f29a17fdddfef2e2ea05eb9af
Certificate serial: 0194228D4CAB32EA3DF5D38BDF3FD3521329
Authority key identifier: 76:BE:46:1E:B9:F7:00:4F:29:A1:7F:DD:DF:EF:2E:2E:A0:5E:B9:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dr5GHrn3AE8poX_d3-8uLqBeua8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/c680bf-9b6c-44d3-837f-88cfa3dca6de/1/SmenFq2eO29wVInO8xQQnEozH4M.roa
Signing time: Wed 01 Jan 2025 15:47:53 +0000
ROA not before: Wed 01 Jan 2025 15:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 680
IP address blocks: 134.109.0.0/16 maxlen: 16
192.108.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/c680bf-9b6c-44d3-837f-88cfa3dca6de/1/dr5GHrn3AE8poX_d3-8uLqBeua8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/c680bf-9b6c-44d3-837f-88cfa3dca6de/1/dr5GHrn3AE8poX_d3-8uLqBeua8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dr5GHrn3AE8poX_d3-8uLqBeua8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 03:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:4c:ab:32:ea:3d:f5:d3:8b:df:3f:d3:52:13:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76be461eb9f7004f29a17fdddfef2e2ea05eb9af
Validity
Not Before: Jan 1 15:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4a67a716ad9e3b6f705489cef314109c4a331f83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:43:8b:0c:4a:24:2b:30:e6:ab:8e:dd:0f:ae:
5f:7c:e6:3e:9f:01:ce:02:f0:6e:27:ad:8d:6a:38:
f0:ef:f0:dc:5c:fd:3a:bb:03:b5:84:f2:97:43:81:
5f:7b:66:bb:a2:88:d9:e4:46:34:c4:79:14:96:33:
a7:22:92:c3:49:f3:8f:3f:ad:0f:15:2b:70:39:41:
99:08:ad:c8:16:8e:cc:0e:d7:91:2f:23:8b:1a:51:
25:59:26:6f:66:6c:f9:83:e0:af:95:18:d1:00:31:
d5:f5:96:f2:6b:fa:26:69:d0:0e:6c:ea:1c:26:66:
83:c8:c7:73:82:23:9a:79:a6:c7:7b:8a:ab:d9:a6:
9f:4a:7e:7e:ce:e1:ec:6d:09:c1:d0:31:16:ab:9c:
5f:18:31:cb:9c:c6:36:f5:c0:d7:2b:ee:0c:9a:17:
a7:07:7b:56:46:34:9f:83:7d:06:31:e8:dc:55:13:
3f:c3:1c:eb:8d:3b:aa:b4:10:25:07:2d:40:4c:eb:
24:a6:31:d5:9c:3f:7f:34:f0:d6:8f:a4:26:47:79:
77:dc:57:96:ca:2f:95:11:ad:49:a3:2a:fb:a0:2b:
fe:91:b6:51:f8:fa:50:be:35:fb:24:9b:81:fd:d6:
fe:6c:72:b8:f2:93:09:ca:91:2a:78:b3:f8:2e:37:
eb:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:67:A7:16:AD:9E:3B:6F:70:54:89:CE:F3:14:10:9C:4A:33:1F:83
X509v3 Authority Key Identifier:
keyid:76:BE:46:1E:B9:F7:00:4F:29:A1:7F:DD:DF:EF:2E:2E:A0:5E:B9:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dr5GHrn3AE8poX_d3-8uLqBeua8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c680bf-9b6c-44d3-837f-88cfa3dca6de/1/SmenFq2eO29wVInO8xQQnEozH4M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c680bf-9b6c-44d3-837f-88cfa3dca6de/1/dr5GHrn3AE8poX_d3-8uLqBeua8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.109.0.0/16
192.108.33.0/24
Signature Algorithm: sha256WithRSAEncryption
94:4a:b9:b5:84:16:06:1a:12:52:37:b3:36:cf:f4:8f:36:75:
b1:6e:7b:29:52:c8:91:a0:47:1b:10:ee:01:9a:77:68:57:ae:
36:b6:08:9e:ed:f3:27:99:01:f0:80:db:b7:6d:f6:1d:4c:dd:
5b:88:29:7f:bc:32:19:86:51:07:2a:2c:35:28:6e:32:78:d6:
98:b5:a4:64:2f:00:be:4c:01:7b:64:29:d1:63:05:a6:15:f6:
3d:31:36:c0:65:a5:be:ef:50:59:66:79:43:15:5c:a9:0c:ac:
f7:48:2a:3c:9b:c3:5c:2f:8e:88:e7:65:c6:03:ea:ce:ed:04:
98:24:00:c3:e9:c8:5a:90:92:98:84:ea:ee:1f:ed:0c:d6:6b:
3f:37:f5:2d:e9:29:e2:95:fb:0a:d2:a3:47:7a:30:62:11:ea:
a6:8f:ea:13:45:25:62:2e:c0:d6:ca:da:31:ce:44:13:e0:fa:
11:5e:db:c5:e2:c0:eb:de:ff:c7:2a:b2:e1:70:1c:bf:a3:70:
9b:ae:ab:11:d8:9f:ee:a2:69:7e:71:91:63:0c:06:25:9a:bd:
72:da:df:0b:82:53:57:67:61:5a:24:b7:f9:07:0b:c9:3b:c5:
98:2f:4f:08:50:fb:f2:09:48:b1:69:2a:ba:5e:a0:d1:62:94:
2a:cd:7e:78
-----BEGIN CERTIFICATE-----
MIIFAjCCA+qgAwIBAgISAZQijUyrMuo99dOL3z/TUhMpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2YmU0NjFlYjlmNzAwNGYyOWExN2ZkZGRmZWYyZTJlYTA1
ZWI5YWYwHhcNMjUwMTAxMTU0NzUzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YTY3YTcxNmFkOWUzYjZmNzA1NDg5Y2VmMzE0MTA5YzRhMzMxZjgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUOLDEokKzDmq47dD65ffOY+nwHO
AvBuJ62Najjw7/DcXP06uwO1hPKXQ4Ffe2a7oojZ5EY0xHkUljOnIpLDSfOPP60P
FStwOUGZCK3IFo7MDteRLyOLGlElWSZvZmz5g+CvlRjRADHV9Zbya/omadAObOoc
JmaDyMdzgiOaeabHe4qr2aafSn5+zuHsbQnB0DEWq5xfGDHLnMY29cDXK+4Mmhen
B3tWRjSfg30GMejcVRM/wxzrjTuqtBAlBy1ATOskpjHVnD9/NPDWj6QmR3l33FeW
yi+VEa1Joyr7oCv+kbZR+PpQvjX7JJuB/db+bHK48pMJypEqeLP4LjfrnwIDAQAB
o4ICDjCCAgowHQYDVR0OBBYEFEpnpxatnjtvcFSJzvMUEJxKMx+DMB8GA1UdIwQY
MBaAFHa+Rh659wBPKaF/3d/vLi6gXrmvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHI1R0hybjNBRThwb1hfZDMtOHVMcUJldWE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9jNjgwYmYtOWI2Yy00NGQzLTgzN2Yt
ODhjZmEzZGNhNmRlLzEvU21lbkZxMmVPMjl3VkluTzh4UVFuRW96SDRNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi9jNjgwYmYtOWI2Yy00NGQzLTgzN2YtODhjZmEzZGNhNmRl
LzEvZHI1R0hybjNBRThwb1hfZDMtOHVMcUJldWE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAATALAwMAhm0DBADA
bCEwDQYJKoZIhvcNAQELBQADggEBAJRKubWEFgYaElI3szbP9I82dbFueylSyJGg
RxsQ7gGad2hXrja2CJ7t8yeZAfCA27dt9h1M3VuIKX+8MhmGUQcqLDUobjJ41pi1
pGQvAL5MAXtkKdFjBaYV9j0xNsBlpb7vUFlmeUMVXKkMrPdIKjybw1wvjojnZcYD
6s7tBJgkAMPpyFqQkpiE6u4f7QzWaz839S3pKeKV+wrSo0d6MGIR6qaP6hNFJWIu
wNbK2jHORBPg+hFe28XiwOve/8cqsuFwHL+jcJuuqxHYn+6iaX5xkWMMBiWavXLa
3wuCU1dnYVokt/kHC8k7xZgvTwhQ+/IJSLFpKrpeoNFilCrNfng=
-----END CERTIFICATE-----
Generated at Sat Apr 12 12:18:45 2025 by rpki-client