Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/UlqMdzKNjKKz7GVAWhNQ0GeC6iE.roa
File: UlqMdzKNjKKz7GVAWhNQ0GeC6iE.roa (raw, json)
Hash identifier: vyjrNuYYOAehZPhyITO+Q5uPp2e1fJC2nVGYypgHEhg=
Subject key identifier: 52:5A:8C:77:32:8D:8C:A2:B3:EC:65:40:5A:13:50:D0:67:82:EA:21
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 019422FC11D5626FD7F7CE1AFCEF9AF79785
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/UlqMdzKNjKKz7GVAWhNQ0GeC6iE.roa
Signing time: Wed 01 Jan 2025 17:48:52 +0000
ROA not before: Wed 01 Jan 2025 17:48:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199058
IP address blocks: 81.22.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 14:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:11:d5:62:6f:d7:f7:ce:1a:fc:ef:9a:f7:97:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Jan 1 17:48:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=525a8c77328d8ca2b3ec65405a1350d06782ea21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2d:6f:58:32:76:d7:4d:69:70:ea:20:8c:dc:
3b:b3:ff:ab:1f:46:fd:0f:ba:a8:c1:e1:13:2c:09:
d3:e9:7d:6f:88:23:1e:86:08:5b:08:8e:4f:7f:80:
81:20:57:02:6c:d9:d0:57:52:cf:f6:67:00:51:21:
b3:ca:b3:35:80:4c:f8:f7:29:8a:77:39:70:ff:e8:
c3:f1:12:fc:47:61:6e:a7:a6:71:8c:19:83:f7:a6:
be:7e:72:5f:7b:83:35:39:3a:d2:b8:d0:18:8c:60:
85:b4:66:50:91:0d:07:e6:84:3c:3c:80:4f:89:d7:
c9:bf:32:4d:e4:b3:e4:2a:7a:29:4c:f9:c7:d6:4d:
f0:41:2e:84:7e:64:8e:1e:2f:94:a0:78:95:b9:4f:
cd:0a:fd:d8:79:20:1f:c4:d8:7d:fb:b9:e6:d0:2c:
7c:56:50:60:7b:8c:4e:4d:c2:c1:2c:78:eb:8f:5e:
a1:8b:da:04:d0:44:24:b7:a1:e9:01:e9:fe:16:24:
62:4f:cc:01:a9:0a:85:a8:bf:96:9f:f7:5a:86:2f:
7e:ed:76:d4:12:11:5f:73:f1:d8:fb:0f:20:9c:f9:
10:c1:0f:f7:17:a2:25:b5:7a:d5:60:61:f1:0b:2b:
69:5f:f4:86:a2:b4:69:92:b1:6e:c9:aa:b6:f0:99:
c5:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:5A:8C:77:32:8D:8C:A2:B3:EC:65:40:5A:13:50:D0:67:82:EA:21
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/UlqMdzKNjKKz7GVAWhNQ0GeC6iE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.132.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:e0:be:4c:23:8f:a9:da:2c:24:8f:73:1e:c5:9b:2d:ab:21:
13:c4:d9:a5:d4:cd:36:71:59:48:f2:55:3c:f9:c9:a2:78:c5:
56:f3:92:7f:b0:af:ba:eb:bf:e6:28:79:3b:f8:f6:4e:f4:be:
0e:3f:25:c0:49:88:09:ae:e7:49:87:29:2d:d5:9d:f9:01:d3:
28:e7:ce:9c:b9:54:37:b0:d5:29:99:f7:bd:7c:18:a5:08:cb:
f0:e6:0a:41:1c:32:7b:51:11:23:bc:dc:3a:b7:87:d0:7f:36:
2b:c3:fb:0c:1f:3d:a6:ce:ce:d6:c1:2e:2f:98:86:62:cc:aa:
34:9d:bc:48:20:e7:49:d4:e3:d0:7d:25:b8:e6:40:e8:3c:ac:
a7:87:65:2b:aa:a4:b8:3d:d9:b2:6b:9d:58:00:ac:4f:8e:5d:
78:65:f2:02:df:6c:73:c8:ca:18:c4:64:fa:fe:68:53:cf:5a:
d3:1d:df:77:dd:62:b7:84:76:25:e4:11:60:84:2a:50:48:14:
e8:68:ad:11:e5:7a:02:4f:08:bf:4d:a3:f7:42:2d:f5:c2:67:
c6:ec:d5:11:9e:00:7a:ac:f0:55:7f:b6:04:f4:11:38:42:83:
c0:6d:d6:8d:3c:82:eb:66:65:14:67:ad:c2:a2:23:5b:74:85:
fe:e9:4d:d3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQi/BHVYm/X984a/O+a95eFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4MmNmODA5YzBlM2U4ZTU1NTJmOWQwZGQyZTI3ZTBkZDJk
OGRhYmUwHhcNMjUwMTAxMTc0ODUyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MjVhOGM3NzMyOGQ4Y2EyYjNlYzY1NDA1YTEzNTBkMDY3ODJlYTIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuS1vWDJ2101pcOogjNw7s/+rH0b9
D7qoweETLAnT6X1viCMehghbCI5Pf4CBIFcCbNnQV1LP9mcAUSGzyrM1gEz49ymK
dzlw/+jD8RL8R2Fup6ZxjBmD96a+fnJfe4M1OTrSuNAYjGCFtGZQkQ0H5oQ8PIBP
idfJvzJN5LPkKnopTPnH1k3wQS6EfmSOHi+UoHiVuU/NCv3YeSAfxNh9+7nm0Cx8
VlBge4xOTcLBLHjrj16hi9oE0EQkt6HpAen+FiRiT8wBqQqFqL+Wn/dahi9+7XbU
EhFfc/HY+w8gnPkQwQ/3F6IltXrVYGHxCytpX/SGorRpkrFuyaq28JnFTwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFJajHcyjYyis+xlQFoTUNBnguohMB8GA1UdIwQY
MBaAFJgs+AnA4+jlVS+dDdLifg3S2Nq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEt
ODJhZDE0NTU1ZWFhLzEvVWxxTWR6S05qS0t6N0dWQVdoTlEwR2VDNmlFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEtODJhZDE0NTU1ZWFh
LzEvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAURaEMA0G
CSqGSIb3DQEBCwUAA4IBAQCl4L5MI4+p2iwkj3MexZstqyETxNml1M02cVlI8lU8
+cmieMVW85J/sK+667/mKHk7+PZO9L4OPyXASYgJrudJhykt1Z35AdMo586cuVQ3
sNUpmfe9fBilCMvw5gpBHDJ7UREjvNw6t4fQfzYrw/sMHz2mzs7WwS4vmIZizKo0
nbxIIOdJ1OPQfSW45kDoPKynh2UrqqS4Pdmya51YAKxPjl14ZfIC32xzyMoYxGT6
/mhTz1rTHd933WK3hHYl5BFghCpQSBToaK0R5XoCTwi/TaP3Qi31wmfG7NURngB6
rPBVf7YE9BE4QoPAbdaNPILrZmUUZ63CoiNbdIX+6U3T
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:34:55 2025 by rpki-client