Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/d2e8d7-593f-4afb-b6b3-b9d8cfc19cec/1/380YDW07MOVrCK11CLTk18E_sTc.roa
File: 380YDW07MOVrCK11CLTk18E_sTc.roa (raw, json)
Hash identifier: pzHRMdqzu6N1d9SDcGlJcx1JSMXi9O/wGKz1T02CpOQ=
Subject key identifier: DF:CD:18:0D:6D:3B:30:E5:6B:08:AD:75:08:B4:E4:D7:C1:3F:B1:37
Certificate issuer: /CN=545ab2a3712e2556a4434b8badd6c407a5673121
Certificate serial: 0194258FAA83B1BA4F087C883F73CBD95196
Authority key identifier: 54:5A:B2:A3:71:2E:25:56:A4:43:4B:8B:AD:D6:C4:07:A5:67:31:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VFqyo3EuJVakQ0uLrdbEB6VnMSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/d2e8d7-593f-4afb-b6b3-b9d8cfc19cec/1/380YDW07MOVrCK11CLTk18E_sTc.roa
Signing time: Thu 02 Jan 2025 05:49:19 +0000
ROA not before: Thu 02 Jan 2025 05:49:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56727
IP address blocks: 178.237.48.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/d2e8d7-593f-4afb-b6b3-b9d8cfc19cec/1/VFqyo3EuJVakQ0uLrdbEB6VnMSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/d2e8d7-593f-4afb-b6b3-b9d8cfc19cec/1/VFqyo3EuJVakQ0uLrdbEB6VnMSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VFqyo3EuJVakQ0uLrdbEB6VnMSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:aa:83:b1:ba:4f:08:7c:88:3f:73:cb:d9:51:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=545ab2a3712e2556a4434b8badd6c407a5673121
Validity
Not Before: Jan 2 05:49:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dfcd180d6d3b30e56b08ad7508b4e4d7c13fb137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:2c:00:42:32:b0:e4:dc:58:85:fb:1f:d6:df:
21:ed:67:85:e1:1d:d2:5a:e0:aa:50:e6:b9:7d:68:
f7:c4:68:90:24:ef:de:bc:20:e6:25:18:0f:09:c9:
ac:fb:9d:ab:96:d8:e3:33:37:80:b5:a6:e7:8f:d3:
b9:34:12:48:fc:6a:04:9e:a8:c1:7b:77:9f:f7:d2:
b4:b1:b4:ac:b4:f0:f8:06:81:26:ca:6a:2a:c1:8e:
09:bb:5e:f7:62:11:48:99:57:91:ee:b0:60:bf:60:
8c:2c:a4:68:41:00:fa:14:6a:ef:ce:4e:c4:91:ff:
b8:50:cf:b9:85:80:c6:f2:c6:bd:a1:a4:f2:5d:c1:
29:83:b3:d0:db:f7:b7:ae:5f:47:0e:aa:ac:61:b9:
ea:9d:4b:88:dc:6c:36:b3:aa:30:05:db:18:63:33:
13:fe:4b:73:3c:7b:40:5d:38:1f:54:d7:a6:8c:22:
4a:cd:00:59:8a:e2:ae:3c:97:af:3b:f6:82:42:9b:
2f:f6:b7:dc:6f:db:e9:28:bd:b3:0c:23:1b:9d:b6:
0f:f8:4a:c6:82:95:e7:61:f6:75:b9:33:84:d7:6a:
94:d5:63:7c:a6:9a:ef:48:bd:bd:85:c3:7d:f5:af:
e0:61:92:fd:ea:7a:10:62:c5:ac:bb:f4:41:af:39:
79:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:CD:18:0D:6D:3B:30:E5:6B:08:AD:75:08:B4:E4:D7:C1:3F:B1:37
X509v3 Authority Key Identifier:
keyid:54:5A:B2:A3:71:2E:25:56:A4:43:4B:8B:AD:D6:C4:07:A5:67:31:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VFqyo3EuJVakQ0uLrdbEB6VnMSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/d2e8d7-593f-4afb-b6b3-b9d8cfc19cec/1/380YDW07MOVrCK11CLTk18E_sTc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/d2e8d7-593f-4afb-b6b3-b9d8cfc19cec/1/VFqyo3EuJVakQ0uLrdbEB6VnMSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.237.48.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:4e:57:16:9d:84:e3:4a:83:27:59:0d:e2:89:d7:29:ca:eb:
62:3d:d8:e3:62:14:9a:4f:f1:0c:af:ab:27:c8:e0:fd:6f:64:
ec:88:48:3f:30:67:f9:50:48:f2:f1:cd:10:2a:76:8f:af:12:
3d:cd:b4:18:50:93:04:ba:ab:1b:f9:90:b7:f3:b4:4f:c9:57:
c7:71:67:12:b8:1f:5f:82:1a:f2:ba:ac:25:87:12:68:9e:4d:
df:4f:6d:66:85:e2:ac:01:0d:62:17:2f:af:f9:e2:0a:15:f2:
7b:c5:65:37:e0:6d:eb:9e:44:29:2e:d3:89:30:b7:b2:6a:b0:
c8:22:49:76:fd:2e:61:5b:85:9d:26:8a:23:12:aa:81:ea:0c:
83:49:cc:b1:57:5e:a5:56:01:78:cd:c0:4c:df:4b:4e:6c:e3:
f5:c6:b1:49:63:4f:41:f7:47:03:15:1f:47:d6:a2:48:53:92:
f7:08:90:5f:37:38:41:44:e3:4d:39:d5:72:92:66:97:fe:28:
b1:5e:ff:65:4d:87:d0:95:9a:6b:46:86:65:24:1f:0a:f9:be:
c7:98:3b:03:62:21:5e:dc:82:eb:8a:23:06:b2:60:c9:8c:8f:
ac:08:fc:15:28:de:ab:d8:4e:70:cf:20:9a:7a:db:6d:cc:f5:
43:67:a2:2b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlj6qDsbpPCHyIP3PL2VGWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0NWFiMmEzNzEyZTI1NTZhNDQzNGI4YmFkZDZjNDA3YTU2
NzMxMjEwHhcNMjUwMTAyMDU0OTE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZmNkMTgwZDZkM2IzMGU1NmIwOGFkNzUwOGI0ZTRkN2MxM2ZiMTM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5iwAQjKw5NxYhfsf1t8h7WeF4R3S
WuCqUOa5fWj3xGiQJO/evCDmJRgPCcms+52rltjjMzeAtabnj9O5NBJI/GoEnqjB
e3ef99K0sbSstPD4BoEmymoqwY4Ju173YhFImVeR7rBgv2CMLKRoQQD6FGrvzk7E
kf+4UM+5hYDG8sa9oaTyXcEpg7PQ2/e3rl9HDqqsYbnqnUuI3Gw2s6owBdsYYzMT
/ktzPHtAXTgfVNemjCJKzQBZiuKuPJevO/aCQpsv9rfcb9vpKL2zDCMbnbYP+ErG
gpXnYfZ1uTOE12qU1WN8pprvSL29hcN99a/gYZL96noQYsWsu/RBrzl5KQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFN/NGA1tOzDlawitdQi05NfBP7E3MB8GA1UdIwQY
MBaAFFRasqNxLiVWpENLi63WxAelZzEhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkZxeW8zRXVKVmFrUTB1THJkYkVCNlZuTVNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9kMmU4ZDctNTkzZi00YWZiLWI2YjMt
YjlkOGNmYzE5Y2VjLzEvMzgwWURXMDdNT1ZyQ0sxMUNMVGsxOEVfc1RjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9kMmU4ZDctNTkzZi00YWZiLWI2YjMtYjlkOGNmYzE5Y2Vj
LzEvVkZxeW8zRXVKVmFrUTB1THJkYkVCNlZuTVNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCsu0wMA0G
CSqGSIb3DQEBCwUAA4IBAQBqTlcWnYTjSoMnWQ3iidcpyutiPdjjYhSaT/EMr6sn
yOD9b2TsiEg/MGf5UEjy8c0QKnaPrxI9zbQYUJMEuqsb+ZC387RPyVfHcWcSuB9f
ghryuqwlhxJonk3fT21mheKsAQ1iFy+v+eIKFfJ7xWU34G3rnkQpLtOJMLeyarDI
Ikl2/S5hW4WdJoojEqqB6gyDScyxV16lVgF4zcBM30tObOP1xrFJY09B90cDFR9H
1qJIU5L3CJBfNzhBRONNOdVykmaX/iixXv9lTYfQlZprRoZlJB8K+b7HmDsDYiFe
3ILriiMGsmDJjI+sCPwVKN6r2E5wzyCaetttzPVDZ6Ir
-----END CERTIFICATE-----
Generated at Sun Feb 2 10:01:27 2025 by rpki-client