Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/64bab8-89b7-4f68-afc3-85a2aeb0798d/1/iUGe5ciIVDZ_vtvHcYAi2dKEvOs.roa
File: iUGe5ciIVDZ_vtvHcYAi2dKEvOs.roa (raw, json)
Hash identifier: GD3GHNZKL4fdpgdi7l7xwFI/fIJOKFQjsdvcNA8UW4E=
Subject key identifier: 89:41:9E:E5:C8:88:54:36:7F:BE:DB:C7:71:80:22:D9:D2:84:BC:EB
Certificate issuer: /CN=9b2dad481cba5483baab0d7a0ccdc1ade832ad16
Certificate serial: 019421B253C81B55AC2C96B0A70B781410D1
Authority key identifier: 9B:2D:AD:48:1C:BA:54:83:BA:AB:0D:7A:0C:CD:C1:AD:E8:32:AD:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/my2tSBy6VIO6qw16DM3BregyrRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/64bab8-89b7-4f68-afc3-85a2aeb0798d/1/iUGe5ciIVDZ_vtvHcYAi2dKEvOs.roa
Signing time: Wed 01 Jan 2025 11:48:42 +0000
ROA not before: Wed 01 Jan 2025 11:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197435
IP address blocks: 194.0.179.0/24 maxlen: 24
2a0a:a300::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/64bab8-89b7-4f68-afc3-85a2aeb0798d/1/my2tSBy6VIO6qw16DM3BregyrRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/64bab8-89b7-4f68-afc3-85a2aeb0798d/1/my2tSBy6VIO6qw16DM3BregyrRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/my2tSBy6VIO6qw16DM3BregyrRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 23:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:53:c8:1b:55:ac:2c:96:b0:a7:0b:78:14:10:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b2dad481cba5483baab0d7a0ccdc1ade832ad16
Validity
Not Before: Jan 1 11:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=89419ee5c88854367fbedbc7718022d9d284bceb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:c8:63:9a:37:39:be:7a:36:96:a6:82:de:53:
eb:97:47:03:ab:85:46:91:6a:dc:11:37:c4:fc:f4:
17:e1:9d:86:37:e4:5a:f5:c5:37:8a:0f:24:0a:e1:
40:21:db:bd:56:bf:60:95:1c:f1:50:52:4b:14:74:
a3:1c:eb:cf:9c:9e:f7:69:2b:a0:95:72:79:56:a8:
14:da:df:c5:39:a4:3c:1c:70:4a:3f:b9:ed:84:f1:
04:7e:d2:96:db:ce:4a:bd:37:ca:3b:f4:4b:af:27:
eb:cd:a3:4b:64:aa:65:e7:62:c1:b7:da:c6:06:7b:
b7:b2:af:9d:f4:b9:f2:59:dd:01:3b:ce:38:65:18:
6d:0d:d6:a3:54:76:f4:c8:98:a3:74:6c:e2:f0:27:
e5:d7:b5:2b:35:87:92:aa:ac:79:5b:f1:9a:7a:53:
99:1e:8a:99:bd:2a:74:1c:ad:62:12:1e:36:7d:4a:
4b:27:7e:34:13:64:cc:28:60:6b:4d:b4:49:71:b1:
49:7f:5f:ff:bf:5d:70:65:1e:3d:ad:5c:aa:b7:df:
02:bf:06:d4:06:34:ab:77:54:17:0c:8a:6b:5f:94:
e0:94:02:f8:83:42:50:0c:69:e3:91:3a:61:cd:91:
35:ac:12:b4:20:22:53:8e:0e:ed:e4:49:d1:68:2a:
8e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:41:9E:E5:C8:88:54:36:7F:BE:DB:C7:71:80:22:D9:D2:84:BC:EB
X509v3 Authority Key Identifier:
keyid:9B:2D:AD:48:1C:BA:54:83:BA:AB:0D:7A:0C:CD:C1:AD:E8:32:AD:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/my2tSBy6VIO6qw16DM3BregyrRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/64bab8-89b7-4f68-afc3-85a2aeb0798d/1/iUGe5ciIVDZ_vtvHcYAi2dKEvOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/64bab8-89b7-4f68-afc3-85a2aeb0798d/1/my2tSBy6VIO6qw16DM3BregyrRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.179.0/24
IPv6:
2a0a:a300::/32
Signature Algorithm: sha256WithRSAEncryption
d2:d9:02:c3:8b:6d:96:82:76:2a:07:02:ad:6d:30:46:65:f2:
2d:29:e9:38:32:c6:c9:36:24:f4:67:7a:c6:ac:e8:8c:fe:55:
00:7e:cc:b0:19:1b:1f:84:3b:c8:e1:1d:0f:79:8f:24:85:b7:
a2:79:62:c0:2a:72:e9:1e:d3:5c:45:e6:ef:d0:ab:45:63:9b:
1d:af:a8:09:c4:62:1a:cb:12:26:c1:fb:02:db:25:5e:d3:ff:
fa:15:6a:e7:7d:b7:8c:43:d6:20:79:5b:29:7d:bc:c1:95:63:
c5:cf:0a:a8:9b:de:48:65:05:73:d2:5b:76:bf:c5:cb:83:bf:
4f:64:e0:63:7e:9c:8c:2f:19:6b:a3:9e:cb:b6:01:23:80:76:
57:f5:5d:f0:a4:07:8b:f5:e9:42:c0:8e:a3:0d:5f:9a:21:c4:
d6:06:e4:b1:a5:5d:ec:c3:75:79:dd:9d:b5:42:1f:22:09:66:
6b:56:90:2b:75:d6:e0:6c:ff:9f:3a:11:0e:46:b0:ad:23:00:
2e:fe:53:72:92:93:96:a2:b4:00:64:eb:0d:4d:08:42:b2:61:
9b:66:b0:22:e2:48:b6:f4:56:fb:a3:0e:4d:66:9a:e4:d8:8c:
45:58:73:02:91:e9:10:cf:67:a6:68:b4:b4:69:ee:c6:d1:0a:
27:fd:14:7f
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQhslPIG1WsLJawpwt4FBDRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliMmRhZDQ4MWNiYTU0ODNiYWFiMGQ3YTBjY2RjMWFkZTgz
MmFkMTYwHhcNMjUwMTAxMTE0ODQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OTQxOWVlNWM4ODg1NDM2N2ZiZWRiYzc3MTgwMjJkOWQyODRiY2ViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA58hjmjc5vno2lqaC3lPrl0cDq4VG
kWrcETfE/PQX4Z2GN+Ra9cU3ig8kCuFAIdu9Vr9glRzxUFJLFHSjHOvPnJ73aSug
lXJ5VqgU2t/FOaQ8HHBKP7nthPEEftKW285KvTfKO/RLryfrzaNLZKpl52LBt9rG
Bnu3sq+d9LnyWd0BO844ZRhtDdajVHb0yJijdGzi8Cfl17UrNYeSqqx5W/GaelOZ
HoqZvSp0HK1iEh42fUpLJ340E2TMKGBrTbRJcbFJf1//v11wZR49rVyqt98CvwbU
BjSrd1QXDIprX5TglAL4g0JQDGnjkTphzZE1rBK0ICJTjg7t5EnRaCqO2wIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFIlBnuXIiFQ2f77bx3GAItnShLzrMB8GA1UdIwQY
MBaAFJstrUgculSDuqsNegzNwa3oMq0WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXkydFNCeTZWSU82cXcxNkRNM0JyZWd5clJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi82NGJhYjgtODliNy00ZjY4LWFmYzMt
ODVhMmFlYjA3OThkLzEvaVVHZTVjaUlWRFpfdnR2SGNZQWkyZEtFdk9zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi82NGJhYjgtODliNy00ZjY4LWFmYzMtODVhMmFlYjA3OThk
LzEvbXkydFNCeTZWSU82cXcxNkRNM0JyZWd5clJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwgCzMA0E
AgACMAcDBQAqCqMAMA0GCSqGSIb3DQEBCwUAA4IBAQDS2QLDi22WgnYqBwKtbTBG
ZfItKek4MsbJNiT0Z3rGrOiM/lUAfsywGRsfhDvI4R0PeY8khbeieWLAKnLpHtNc
Rebv0KtFY5sdr6gJxGIayxImwfsC2yVe0//6FWrnfbeMQ9YgeVspfbzBlWPFzwqo
m95IZQVz0lt2v8XLg79PZOBjfpyMLxlro57LtgEjgHZX9V3wpAeL9elCwI6jDV+a
IcTWBuSxpV3sw3V53Z21Qh8iCWZrVpArddbgbP+fOhEORrCtIwAu/lNykpOWorQA
ZOsNTQhCsmGbZrAi4ki29Fb7ow5NZprk2IxFWHMCkekQz2emaLS0ae7G0Qon/RR/
-----END CERTIFICATE-----
Generated at Sun Feb 2 09:52:32 2025 by rpki-client