Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/l4iAztFdyWZxSOfl8q_e1dKH1is.roa
File: l4iAztFdyWZxSOfl8q_e1dKH1is.roa (raw, json)
Hash identifier: Uv7SVk02b8fR8AImRa4OOMzROmZWxN56DleM+7FbEo4=
Subject key identifier: 97:88:80:CE:D1:5D:C9:66:71:48:E7:E5:F2:AF:DE:D5:D2:87:D6:2B
Certificate issuer: /CN=0e0f4872ad1c1f4fcb213b6b2edb388a2d9c9a23
Certificate serial: 019425FD9B0A6B02AC62D1C523F05598002D
Authority key identifier: 0E:0F:48:72:AD:1C:1F:4F:CB:21:3B:6B:2E:DB:38:8A:2D:9C:9A:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dg9Icq0cH0_LITtrLts4ii2cmiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/l4iAztFdyWZxSOfl8q_e1dKH1is.roa
Signing time: Thu 02 Jan 2025 07:49:24 +0000
ROA not before: Thu 02 Jan 2025 07:49:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35128
IP address blocks: 194.152.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dg9Icq0cH0_LITtrLts4ii2cmiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 08:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:9b:0a:6b:02:ac:62:d1:c5:23:f0:55:98:00:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e0f4872ad1c1f4fcb213b6b2edb388a2d9c9a23
Validity
Not Before: Jan 2 07:49:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=978880ced15dc9667148e7e5f2afded5d287d62b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:7e:73:97:54:91:1f:30:31:b5:b4:22:e7:9c:
dc:91:59:fe:cd:93:ab:09:e1:f5:f4:97:43:b9:f8:
ee:3d:ae:10:1d:f7:97:af:7b:33:1f:ba:b2:c3:db:
07:4f:e3:89:1d:c7:b8:aa:3f:5e:56:5c:1d:69:2f:
6b:3d:d5:1b:b2:42:b4:e5:66:b7:4c:b7:cf:c5:d2:
ea:d8:2e:88:d7:55:08:ca:fe:cf:64:f9:d5:ca:8b:
2f:bc:1a:73:0a:13:f7:94:8c:5c:fe:97:5d:27:95:
86:6d:60:7e:e2:fb:2a:c3:b8:6b:9b:29:df:a8:75:
16:0d:13:6b:cf:01:29:cb:c0:b6:9d:8c:11:da:0f:
23:08:49:d5:55:88:ab:92:9a:fc:9c:eb:e0:40:99:
ca:81:bb:42:4c:7c:09:30:2d:c7:7f:0f:68:3b:d3:
c7:95:d1:8d:65:a2:87:02:ab:06:7d:2b:81:65:40:
62:1a:a8:5d:31:94:71:89:27:be:57:1a:44:f6:ee:
86:05:a5:6f:25:f1:8e:dd:a9:09:35:c5:68:0d:b3:
2c:19:0d:22:80:f4:3c:42:16:7b:53:94:4e:b2:2d:
8c:e5:cf:07:86:18:a9:f5:a9:dc:f2:99:39:f1:86:
3a:83:20:36:bf:aa:5c:17:a6:c5:05:b2:19:a0:26:
d7:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:88:80:CE:D1:5D:C9:66:71:48:E7:E5:F2:AF:DE:D5:D2:87:D6:2B
X509v3 Authority Key Identifier:
keyid:0E:0F:48:72:AD:1C:1F:4F:CB:21:3B:6B:2E:DB:38:8A:2D:9C:9A:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dg9Icq0cH0_LITtrLts4ii2cmiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/l4iAztFdyWZxSOfl8q_e1dKH1is.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.152.246.0/24
Signature Algorithm: sha256WithRSAEncryption
99:1e:cc:55:89:8c:d3:aa:d8:e3:13:ab:ef:df:f8:4d:37:1b:
71:91:36:f8:51:e0:91:ca:5d:57:42:40:67:bd:8c:90:61:31:
67:7f:e4:23:6c:f3:5f:35:7a:1d:ec:8e:7d:68:83:a7:56:88:
91:19:ba:a9:92:ce:62:39:08:ce:dc:0f:79:19:ca:60:55:20:
81:c2:04:3e:2c:e1:c0:51:7e:ef:df:10:28:a4:cd:68:88:15:
9b:e8:6d:07:2a:04:2f:4f:05:14:cb:72:a4:d3:2c:41:91:a3:
c3:2b:c2:de:14:5d:dc:e2:e7:6d:5e:c6:72:9b:80:43:54:90:
18:b1:a4:35:f1:ae:e3:44:88:64:da:a3:51:3a:fd:c3:40:cc:
e7:b7:6b:9d:e7:83:db:20:c3:b4:05:a9:25:66:0e:59:33:89:
06:b0:53:0d:26:6d:2d:5b:c4:3f:da:1c:1f:56:b9:70:53:09:
d1:d4:18:36:fd:9e:86:04:38:68:18:15:0c:93:83:73:85:0a:
c2:19:44:d7:22:4d:ee:7e:1b:86:b7:77:2e:cf:08:52:ac:ac:
fb:4f:fc:87:dd:6e:9e:69:9b:3f:7f:e4:13:50:d6:ec:28:b9:
a6:f9:fa:98:52:06:ad:7b:a3:96:31:21:40:a9:fd:68:89:ac:
4c:e8:d6:5c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQl/ZsKawKsYtHFI/BVmAAtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlMGY0ODcyYWQxYzFmNGZjYjIxM2I2YjJlZGIzODhhMmQ5
YzlhMjMwHhcNMjUwMTAyMDc0OTI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5Nzg4ODBjZWQxNWRjOTY2NzE0OGU3ZTVmMmFmZGVkNWQyODdkNjJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4H5zl1SRHzAxtbQi55zckVn+zZOr
CeH19JdDufjuPa4QHfeXr3szH7qyw9sHT+OJHce4qj9eVlwdaS9rPdUbskK05Wa3
TLfPxdLq2C6I11UIyv7PZPnVyosvvBpzChP3lIxc/pddJ5WGbWB+4vsqw7hrmynf
qHUWDRNrzwEpy8C2nYwR2g8jCEnVVYirkpr8nOvgQJnKgbtCTHwJMC3Hfw9oO9PH
ldGNZaKHAqsGfSuBZUBiGqhdMZRxiSe+VxpE9u6GBaVvJfGO3akJNcVoDbMsGQ0i
gPQ8QhZ7U5ROsi2M5c8Hhhip9anc8pk58YY6gyA2v6pcF6bFBbIZoCbXNwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJeIgM7RXclmcUjn5fKv3tXSh9YrMB8GA1UdIwQY
MBaAFA4PSHKtHB9PyyE7ay7bOIotnJojMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGc5SWNxMGNIMF9MSVR0ckx0czRpaTJjbWlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9kYzVhNjItMDY0Yi00NWIwLWI4OWQt
YzAxZjgwYTFjODA1LzEvbDRpQXp0RmR5V1p4U09mbDhxX2UxZEtIMWlzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9kYzVhNjItMDY0Yi00NWIwLWI4OWQtYzAxZjgwYTFjODA1
LzEvRGc5SWNxMGNIMF9MSVR0ckx0czRpaTJjbWlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwpj2MA0G
CSqGSIb3DQEBCwUAA4IBAQCZHsxViYzTqtjjE6vv3/hNNxtxkTb4UeCRyl1XQkBn
vYyQYTFnf+QjbPNfNXod7I59aIOnVoiRGbqpks5iOQjO3A95GcpgVSCBwgQ+LOHA
UX7v3xAopM1oiBWb6G0HKgQvTwUUy3Kk0yxBkaPDK8LeFF3c4udtXsZym4BDVJAY
saQ18a7jRIhk2qNROv3DQMznt2ud54PbIMO0BaklZg5ZM4kGsFMNJm0tW8Q/2hwf
VrlwUwnR1Bg2/Z6GBDhoGBUMk4NzhQrCGUTXIk3ufhuGt3cuzwhSrKz7T/yH3W6e
aZs/f+QTUNbsKLmm+fqYUgate6OWMSFAqf1oiaxM6NZc
-----END CERTIFICATE-----
Generated at Fri Feb 21 12:41:08 2025 by rpki-client