Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/cUeWbg23uzdb5xSz99WNI9WtnoI.roa
File: cUeWbg23uzdb5xSz99WNI9WtnoI.roa (raw, json)
Hash identifier: s+577iLuT/1Ct4G1mVjBy6TiewUwm3DkGU10CzpZuFE=
Subject key identifier: 71:47:96:6E:0D:B7:BB:37:5B:E7:14:B3:F7:D5:8D:23:D5:AD:9E:82
Certificate issuer: /CN=b5b632972547673df0f75aabc839a2422854a22a
Certificate serial: 019426D9FB83C1F5B6A0DB20D021DE7F6905
Authority key identifier: B5:B6:32:97:25:47:67:3D:F0:F7:5A:AB:C8:39:A2:42:28:54:A2:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tbYylyVHZz3w91qryDmiQihUoio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/cUeWbg23uzdb5xSz99WNI9WtnoI.roa
Signing time: Thu 02 Jan 2025 11:50:07 +0000
ROA not before: Thu 02 Jan 2025 11:50:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 680
IP address blocks: 137.193.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.mft
rsync://rpki.ripe.net/repository/DEFAULT/tbYylyVHZz3w91qryDmiQihUoio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:fb:83:c1:f5:b6:a0:db:20:d0:21:de:7f:69:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5b632972547673df0f75aabc839a2422854a22a
Validity
Not Before: Jan 2 11:50:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7147966e0db7bb375be714b3f7d58d23d5ad9e82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8a:8a:27:1b:e8:24:95:62:b6:a8:93:dd:1a:
5b:79:ba:e1:a7:93:61:c7:e7:c8:58:32:d9:cb:5d:
01:ca:dd:c3:ce:b0:57:5c:f2:ff:66:6a:e3:33:2a:
79:75:61:5d:ac:28:48:48:c5:b7:56:a8:0b:b6:28:
ff:9d:60:20:df:d1:6d:a6:ce:7b:e2:b6:85:97:f9:
e1:2d:43:bd:3a:dc:e0:03:23:20:72:b7:9a:19:09:
cb:3c:2f:0d:f1:b3:35:3e:1a:7b:93:50:5b:e0:e9:
b4:24:92:7f:a8:75:9e:57:4c:4e:01:30:cb:b8:3f:
5e:7b:dd:d1:98:4c:fe:03:0a:8d:e3:d8:d3:fb:3a:
68:ea:5a:82:62:3b:b8:fb:ea:27:36:a9:11:92:8d:
e3:ac:67:6b:25:72:45:b0:53:b0:ec:69:6b:db:d1:
07:05:f1:77:c3:6a:b0:f5:d9:1b:ae:57:32:3d:a6:
e7:4b:8f:6d:bf:64:bc:58:b6:fe:61:a8:58:01:6a:
65:b7:f8:64:7d:5d:6d:f6:ab:9a:81:95:49:e6:d8:
0a:46:db:e7:59:8e:1c:e2:f6:69:a7:be:86:33:d2:
1d:d0:66:64:68:ac:c7:39:4f:6c:2b:39:19:9b:a3:
24:f0:d9:a2:6f:03:80:db:03:82:81:4b:04:cc:7d:
1d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:47:96:6E:0D:B7:BB:37:5B:E7:14:B3:F7:D5:8D:23:D5:AD:9E:82
X509v3 Authority Key Identifier:
keyid:B5:B6:32:97:25:47:67:3D:F0:F7:5A:AB:C8:39:A2:42:28:54:A2:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tbYylyVHZz3w91qryDmiQihUoio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/cUeWbg23uzdb5xSz99WNI9WtnoI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
137.193.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ae:f4:80:eb:72:f3:a1:c9:c2:06:a2:2c:83:5f:fb:73:0d:1f:
04:7a:f6:97:f6:7d:f9:6b:11:e0:6f:5b:8c:97:28:ba:41:cd:
9f:90:df:7f:0c:9c:97:4a:e4:2e:48:34:04:0e:74:26:f5:d7:
78:51:d4:47:a2:0d:79:a3:a3:fe:cc:a6:5b:6a:06:3b:b8:09:
9f:22:61:a5:f7:1f:e2:e9:88:4e:52:c5:8a:a2:9c:1d:e8:b1:
69:99:6a:98:1d:37:be:86:2a:86:7c:e9:1c:9e:9a:f6:95:61:
35:75:c5:54:b4:b7:5a:f0:f5:0b:6a:99:53:29:62:a9:e7:7a:
dc:91:51:ca:6c:14:89:cc:b9:5f:fe:ee:ed:49:fd:ac:b2:1f:
78:91:3f:f5:1d:e2:40:cc:3b:92:e4:cd:f0:c0:80:44:a9:35:
94:d2:84:f4:10:de:3b:c9:46:9e:ac:dd:01:7a:38:34:c9:0e:
04:1c:1b:dc:83:20:0c:ab:04:d5:e5:d8:61:8f:5a:9e:80:fc:
81:4f:12:68:40:22:8e:35:e0:f4:06:ef:5d:c1:fe:50:c9:6c:
d2:eb:3d:a9:b1:dc:81:e8:26:d9:8f:ad:86:26:88:f7:5e:d3:
f1:8f:17:8e:cf:e3:fd:c7:7c:48:63:8c:b6:eb:31:02:8f:a6:
4a:a1:a1:88
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgISAZQm2fuDwfW2oNsg0CHef2kFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1YjYzMjk3MjU0NzY3M2RmMGY3NWFhYmM4MzlhMjQyMjg1
NGEyMmEwHhcNMjUwMTAyMTE1MDA3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MTQ3OTY2ZTBkYjdiYjM3NWJlNzE0YjNmN2Q1OGQyM2Q1YWQ5ZTgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYqKJxvoJJVitqiT3Rpbebrhp5Nh
x+fIWDLZy10Byt3DzrBXXPL/ZmrjMyp5dWFdrChISMW3VqgLtij/nWAg39Ftps57
4raFl/nhLUO9OtzgAyMgcreaGQnLPC8N8bM1Php7k1Bb4Om0JJJ/qHWeV0xOATDL
uD9ee93RmEz+AwqN49jT+zpo6lqCYju4++onNqkRko3jrGdrJXJFsFOw7Glr29EH
BfF3w2qw9dkbrlcyPabnS49tv2S8WLb+YahYAWplt/hkfV1t9quagZVJ5tgKRtvn
WY4c4vZpp76GM9Id0GZkaKzHOU9sKzkZm6Mk8NmibwOA2wOCgUsEzH0dGQIDAQAB
o4ICCDCCAgQwHQYDVR0OBBYEFHFHlm4Nt7s3W+cUs/fVjSPVrZ6CMB8GA1UdIwQY
MBaAFLW2MpclR2c98Pdaq8g5okIoVKIqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGJZeWx5VkhaejN3OTFxcnlEbWlRaWhVb2lvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8xYzA2OGUtODg5Yy00MmJlLWJkOGIt
YTZhYmIxMjE1ZGVjLzEvY1VlV2JnMjN1emRiNXhTejk5V05JOVd0bm9JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS8xYzA2OGUtODg5Yy00MmJlLWJkOGItYTZhYmIxMjE1ZGVj
LzEvdGJZeWx5VkhaejN3OTFxcnlEbWlRaWhVb2lvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAicEwDQYJ
KoZIhvcNAQELBQADggEBAK70gOty86HJwgaiLINf+3MNHwR69pf2fflrEeBvW4yX
KLpBzZ+Q338MnJdK5C5INAQOdCb113hR1EeiDXmjo/7MpltqBju4CZ8iYaX3H+Lp
iE5SxYqinB3osWmZapgdN76GKoZ86RyemvaVYTV1xVS0t1rw9QtqmVMpYqnnetyR
UcpsFInMuV/+7u1J/ayyH3iRP/Ud4kDMO5LkzfDAgESpNZTShPQQ3jvJRp6s3QF6
ODTJDgQcG9yDIAyrBNXl2GGPWp6A/IFPEmhAIo414PQG713B/lDJbNLrPamx3IHo
JtmPrYYmiPde0/GPF47P4/3HfEhjjLbrMQKPpkqhoYg=
-----END CERTIFICATE-----
Generated at Sat Apr 12 13:17:28 2025 by rpki-client