Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Vkjqd6XqVIhc1qZ8t4QEMova_Nw.roa
File: Vkjqd6XqVIhc1qZ8t4QEMova_Nw.roa (raw, json)
Hash identifier: udtEnyf8wReTGJ0z2VEzoYaPCi1MBiq/jFYXiWnF0p8=
Subject key identifier: 56:48:EA:77:A5:EA:54:88:5C:D6:A6:7C:B7:84:04:32:8B:DA:FC:DC
Certificate issuer: /CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Certificate serial: 019444ECD42707B6BBAA2374A41836E82BEE
Authority key identifier: 5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Vkjqd6XqVIhc1qZ8t4QEMova_Nw.roa
Signing time: Wed 08 Jan 2025 07:59:19 +0000
ROA not before: Wed 08 Jan 2025 07:59:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8618
IP address blocks: 195.130.124.0/22 maxlen: 22
195.251.100.0/23 maxlen: 24
195.251.110.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 09:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:44:ec:d4:27:07:b6:bb:aa:23:74:a4:18:36:e8:2b:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Validity
Not Before: Jan 8 07:59:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5648ea77a5ea54885cd6a67cb78404328bdafcdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:09:00:f4:82:5a:b4:94:e0:b1:70:95:2d:29:
25:56:f5:e4:7f:54:8e:f3:4d:10:da:dd:1a:08:47:
f9:83:a1:b3:2b:15:1a:86:84:ac:6e:ea:52:4f:da:
9d:b2:d0:0a:98:da:09:cc:d5:0f:a1:14:04:ce:d0:
25:0f:1a:ec:ee:8b:4f:6b:43:9f:1e:53:1f:36:77:
62:15:8e:a8:5a:0a:45:3a:0e:8e:31:7a:2c:5a:f6:
1b:fc:d4:0f:19:70:39:e8:e7:a3:1f:09:c4:ef:d4:
a4:42:37:3e:53:fe:12:1f:9f:2e:03:3a:1f:74:05:
8b:7f:a4:12:73:56:c8:2f:75:9a:76:93:48:0c:3a:
f0:16:aa:76:06:37:aa:f7:8d:14:19:52:50:1b:28:
b4:be:a4:d8:61:a3:6c:02:71:2b:ba:2e:cb:6b:ed:
9d:dc:85:c5:9c:2b:ed:9d:a4:08:86:40:2d:79:73:
90:37:7c:fd:cc:f6:81:20:5e:b0:2f:66:84:12:7d:
92:6a:7f:8f:fc:9e:c4:1d:6d:6c:9e:3a:92:6e:92:
9f:98:a8:18:d7:66:45:6a:2e:6c:65:46:fa:4b:de:
61:f2:7a:b4:a4:6c:f3:4e:b6:a6:43:2c:60:0b:3e:
89:37:88:00:c7:11:c3:36:0e:1b:e7:98:7e:b8:8d:
ef:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:48:EA:77:A5:EA:54:88:5C:D6:A6:7C:B7:84:04:32:8B:DA:FC:DC
X509v3 Authority Key Identifier:
keyid:5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Vkjqd6XqVIhc1qZ8t4QEMova_Nw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.130.124.0/22
195.251.100.0/23
195.251.110.0/23
Signature Algorithm: sha256WithRSAEncryption
9d:79:2f:f1:38:5d:ef:db:61:9b:b6:4a:d8:25:f2:e6:bc:5b:
b3:93:cf:02:65:58:a8:05:cd:29:79:86:c7:ad:5b:1b:21:ac:
fb:88:6d:26:41:53:8a:5b:31:be:75:4d:d0:c6:b0:79:0e:83:
c1:f7:62:98:67:82:ac:84:55:3e:8e:ec:63:1e:2f:65:14:7e:
06:82:94:1d:3b:7b:49:d6:f3:18:67:31:38:02:34:73:69:0b:
fa:b8:4c:05:86:f6:5e:1d:b9:6d:63:0a:e6:18:e0:8d:a9:27:
ad:ee:03:61:83:ca:8f:6a:bb:d4:28:38:2d:ef:33:68:a7:e4:
8a:bf:5a:28:3c:c0:e7:2c:89:66:ef:e7:56:48:12:73:42:55:
be:11:e1:4d:aa:c4:9b:49:c5:22:a7:58:f9:b6:3d:35:d3:51:
29:aa:8c:d2:29:8f:04:23:a8:e8:92:4e:41:af:4c:0b:84:52:
0e:9f:11:fd:8c:9d:4d:49:4d:1b:84:6d:7d:01:1d:d3:eb:bb:
33:1c:de:34:84:a4:b7:90:94:6f:66:51:68:5d:11:24:84:bc:
92:43:fe:41:d4:6b:89:83:73:58:75:30:55:84:21:db:06:31:
50:3a:39:2e:8e:21:1d:7b:3e:94:fa:d2:ee:95:b5:58:d0:0e:
80:7a:2c:82
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZRE7NQnB7a7qiN0pBg26CvuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhNmY5Mjk1NTIxZGYzMGExNThmNTA2YmE3Y2I4NzNhYjk1
MjlkYzMwHhcNMjUwMTA4MDc1OTE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NjQ4ZWE3N2E1ZWE1NDg4NWNkNmE2N2NiNzg0MDQzMjhiZGFmY2RjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAkA9IJatJTgsXCVLSklVvXkf1SO
800Q2t0aCEf5g6GzKxUahoSsbupST9qdstAKmNoJzNUPoRQEztAlDxrs7otPa0Of
HlMfNndiFY6oWgpFOg6OMXosWvYb/NQPGXA56OejHwnE79SkQjc+U/4SH58uAzof
dAWLf6QSc1bIL3WadpNIDDrwFqp2Bjeq940UGVJQGyi0vqTYYaNsAnErui7La+2d
3IXFnCvtnaQIhkAteXOQN3z9zPaBIF6wL2aEEn2San+P/J7EHW1snjqSbpKfmKgY
12ZFai5sZUb6S95h8nq0pGzzTramQyxgCz6JN4gAxxHDNg4b55h+uI3vRwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFFZI6nel6lSIXNamfLeEBDKL2vzcMB8GA1UdIwQY
MBaAFFpvkpVSHfMKFY9Qa6fLhzq5Up3DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV20tU2xWSWQ4d29WajFCcnA4dUhPcmxTbmNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOWY5M2ItYmUzMS00NWNmLWFhN2Ut
YWFhNDU1M2QyYWJkLzEvVmtqcWQ2WHFWSWhjMXFaOHQ0UUVNb3ZhX053LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9hOWY5M2ItYmUzMS00NWNmLWFhN2UtYWFhNDU1M2QyYWJk
LzEvV20tU2xWSWQ4d29WajFCcnA4dUhPcmxTbmNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCw4J8AwQB
w/tkAwQBw/tuMA0GCSqGSIb3DQEBCwUAA4IBAQCdeS/xOF3v22GbtkrYJfLmvFuz
k88CZVioBc0peYbHrVsbIaz7iG0mQVOKWzG+dU3QxrB5DoPB92KYZ4KshFU+juxj
Hi9lFH4GgpQdO3tJ1vMYZzE4AjRzaQv6uEwFhvZeHbltYwrmGOCNqSet7gNhg8qP
arvUKDgt7zNop+SKv1ooPMDnLIlm7+dWSBJzQlW+EeFNqsSbScUip1j5tj0101Ep
qozSKY8EI6jokk5Br0wLhFIOnxH9jJ1NSU0bhG19AR3T67szHN40hKS3kJRvZlFo
XREkhLySQ/5B1GuJg3NYdTBVhCHbBjFQOjkujiEdez6U+tLulbVY0A6AeiyC
-----END CERTIFICATE-----
Generated at Sat Apr 19 17:28:07 2025 by rpki-client