Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/db0519-4e5a-4b75-88fd-bbc239e897eb/1/DVCmwON0mS6l5sSG4weDe20V1zw.roa
File: DVCmwON0mS6l5sSG4weDe20V1zw.roa (raw, json)
Hash identifier: jRc8aZ9DxIdAIzUKCrei9MUaFGOvyvUWkRGm1QRrv9c=
Subject key identifier: 0D:50:A6:C0:E3:74:99:2E:A5:E6:C4:86:E3:07:83:7B:6D:15:D7:3C
Certificate issuer: /CN=448ca39537597cfae60ae0421db8e098b4e26130
Certificate serial: 019424448401A32C19802BBCB6BCB9B8D151
Authority key identifier: 44:8C:A3:95:37:59:7C:FA:E6:0A:E0:42:1D:B8:E0:98:B4:E2:61:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RIyjlTdZfPrmCuBCHbjgmLTiYTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/db0519-4e5a-4b75-88fd-bbc239e897eb/1/DVCmwON0mS6l5sSG4weDe20V1zw.roa
Signing time: Wed 01 Jan 2025 23:47:37 +0000
ROA not before: Wed 01 Jan 2025 23:47:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51758
IP address blocks: 95.215.184.0/21 maxlen: 24
185.206.232.0/22 maxlen: 24
2a00:51c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/db0519-4e5a-4b75-88fd-bbc239e897eb/1/RIyjlTdZfPrmCuBCHbjgmLTiYTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/db0519-4e5a-4b75-88fd-bbc239e897eb/1/RIyjlTdZfPrmCuBCHbjgmLTiYTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RIyjlTdZfPrmCuBCHbjgmLTiYTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:84:01:a3:2c:19:80:2b:bc:b6:bc:b9:b8:d1:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=448ca39537597cfae60ae0421db8e098b4e26130
Validity
Not Before: Jan 1 23:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0d50a6c0e374992ea5e6c486e307837b6d15d73c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:fd:c2:5e:da:60:7b:7d:d9:1b:66:84:3f:9b:
98:9a:41:c2:1c:1a:2b:a3:63:04:1b:e5:a0:8d:2e:
0f:47:30:7f:22:22:34:54:b4:3d:57:47:d5:61:41:
c8:2a:ed:c0:9b:70:56:12:f4:3e:3b:b4:9c:f3:f2:
d5:69:93:d1:99:a1:0e:4e:39:f5:48:2d:d8:ff:de:
41:44:a3:f7:1a:2a:cd:61:c8:30:79:2a:88:0b:5d:
f1:1b:ba:43:8c:49:10:1d:dd:a9:e6:6a:97:ab:60:
d3:5a:37:e0:c7:4d:db:2c:36:1d:61:83:43:a1:c2:
b6:63:16:ce:31:2f:fd:0b:82:2f:b0:89:6c:44:bb:
94:f9:f1:da:c3:e8:5e:ed:1d:af:6e:21:1e:8e:99:
9a:1a:28:cf:9f:da:f5:d4:24:68:b2:01:f0:3b:7e:
60:6d:69:c7:f7:15:8c:e1:3b:9a:fe:5d:96:60:fa:
82:e2:6f:1e:9d:83:b0:e6:ce:67:83:3f:64:ba:ec:
9f:2e:43:88:8e:cc:a3:51:22:21:f6:5a:e7:77:59:
c3:cd:8b:4e:79:64:98:a6:2f:90:f5:9e:c3:d9:12:
f1:20:31:ca:68:39:33:b7:82:4a:5e:a6:71:8b:95:
4a:38:36:75:ae:03:10:02:87:d1:2d:1a:09:86:db:
7e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:50:A6:C0:E3:74:99:2E:A5:E6:C4:86:E3:07:83:7B:6D:15:D7:3C
X509v3 Authority Key Identifier:
keyid:44:8C:A3:95:37:59:7C:FA:E6:0A:E0:42:1D:B8:E0:98:B4:E2:61:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RIyjlTdZfPrmCuBCHbjgmLTiYTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/db0519-4e5a-4b75-88fd-bbc239e897eb/1/DVCmwON0mS6l5sSG4weDe20V1zw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/db0519-4e5a-4b75-88fd-bbc239e897eb/1/RIyjlTdZfPrmCuBCHbjgmLTiYTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.215.184.0/21
185.206.232.0/22
IPv6:
2a00:51c0::/32
Signature Algorithm: sha256WithRSAEncryption
29:cb:97:bf:43:77:f2:ea:94:a1:ed:36:1b:2f:76:9e:0f:8e:
c2:01:5c:a4:54:fb:96:2f:77:40:58:f9:f5:57:44:ef:ee:57:
c9:8f:97:e5:b7:9f:6b:4a:2c:a7:37:31:10:74:a4:b9:63:99:
0b:0b:5a:90:83:f8:0c:95:10:1d:09:1b:29:bc:1e:7e:43:19:
a1:13:5c:a6:c3:bc:9b:97:87:be:37:2a:94:ff:e3:bc:5e:9c:
a3:0b:68:24:6a:55:66:ba:9e:c0:7c:45:e1:21:69:26:b1:2e:
a9:9a:16:8d:46:eb:1b:5f:4f:16:d2:6c:9c:28:50:c4:be:3b:
cb:73:df:72:1d:a6:0c:a6:83:6a:57:4b:3c:dd:1a:ff:16:66:
25:2a:04:65:6b:2a:98:59:2c:4f:d2:59:e1:b7:cc:78:d5:bd:
37:14:42:fe:f9:07:85:da:d5:32:25:10:a3:5e:e3:b4:df:f3:
42:93:76:d2:d8:ba:fe:d8:e8:4e:90:45:a0:28:c4:1c:e8:b0:
24:48:42:0f:36:11:bb:ab:60:d5:9c:69:3c:97:e4:14:c3:8e:
4d:cc:46:44:f2:24:7d:77:b0:8c:ce:d3:c1:1c:ad:63:05:a5:
73:fa:a4:b7:a3:7a:d0:b9:7b:ab:29:12:d0:47:10:db:f7:95:
c0:45:ec:88
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZQkRIQBoywZgCu8try5uNFRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0OGNhMzk1Mzc1OTdjZmFlNjBhZTA0MjFkYjhlMDk4YjRl
MjYxMzAwHhcNMjUwMTAxMjM0NzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZDUwYTZjMGUzNzQ5OTJlYTVlNmM0ODZlMzA3ODM3YjZkMTVkNzNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/3CXtpge33ZG2aEP5uYmkHCHBor
o2MEG+WgjS4PRzB/IiI0VLQ9V0fVYUHIKu3Am3BWEvQ+O7Sc8/LVaZPRmaEOTjn1
SC3Y/95BRKP3GirNYcgweSqIC13xG7pDjEkQHd2p5mqXq2DTWjfgx03bLDYdYYND
ocK2YxbOMS/9C4IvsIlsRLuU+fHaw+he7R2vbiEejpmaGijPn9r11CRosgHwO35g
bWnH9xWM4Tua/l2WYPqC4m8enYOw5s5ngz9kuuyfLkOIjsyjUSIh9lrnd1nDzYtO
eWSYpi+Q9Z7D2RLxIDHKaDkzt4JKXqZxi5VKODZ1rgMQAofRLRoJhtt+wQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFA1QpsDjdJkupebEhuMHg3ttFdc8MB8GA1UdIwQY
MBaAFESMo5U3WXz65grgQh244Ji04mEwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkl5amxUZFpmUHJtQ3VCQ0hiamdtTFRpWVRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9kYjA1MTktNGU1YS00Yjc1LTg4ZmQt
YmJjMjM5ZTg5N2ViLzEvRFZDbXdPTjBtUzZsNXNTRzR3ZURlMjBWMXp3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC9kYjA1MTktNGU1YS00Yjc1LTg4ZmQtYmJjMjM5ZTg5N2Vi
LzEvUkl5amxUZFpmUHJtQ3VCQ0hiamdtTFRpWVRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDX9e4AwQC
uc7oMA0EAgACMAcDBQAqAFHAMA0GCSqGSIb3DQEBCwUAA4IBAQApy5e/Q3fy6pSh
7TYbL3aeD47CAVykVPuWL3dAWPn1V0Tv7lfJj5flt59rSiynNzEQdKS5Y5kLC1qQ
g/gMlRAdCRspvB5+QxmhE1ymw7ybl4e+NyqU/+O8XpyjC2gkalVmup7AfEXhIWkm
sS6pmhaNRusbX08W0mycKFDEvjvLc99yHaYMpoNqV0s83Rr/FmYlKgRlayqYWSxP
0lnht8x41b03FEL++QeF2tUyJRCjXuO03/NCk3bS2Lr+2OhOkEWgKMQc6LAkSEIP
NhG7q2DVnGk8l+QUw45NzEZE8iR9d7CMztPBHK1jBaVz+qS3o3rQuXurKRLQRxDb
95XAReyI
-----END CERTIFICATE-----
Generated at Fri Apr 18 00:46:26 2025 by rpki-client