Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/DhZk6hM6roky0GXyBISLUGoSmRs.roa
File: DhZk6hM6roky0GXyBISLUGoSmRs.roa (raw, json)
Hash identifier: pC/JWbY4U9zhPfPv2gepydBr/nV7NwyeUglshweIN8g=
Subject key identifier: 0E:16:64:EA:13:3A:AE:89:32:D0:65:F2:04:84:8B:50:6A:12:99:1B
Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Certificate serial: 0195D20CC90368D327A3C2E1597961CCCC5B
Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/DhZk6hM6roky0GXyBISLUGoSmRs.roa
Signing time: Wed 26 Mar 2025 10:43:27 +0000
ROA not before: Wed 26 Mar 2025 10:43:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39378
IP address blocks: 94.247.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.mft
rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d2:0c:c9:03:68:d3:27:a3:c2:e1:59:79:61:cc:cc:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Validity
Not Before: Mar 26 10:43:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0e1664ea133aae8932d065f204848b506a12991b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ec:35:95:30:77:66:e5:96:ab:45:7a:66:cb:
5b:a2:d4:2b:a0:91:56:eb:47:6d:ba:ec:d7:b1:e6:
6d:66:6b:ab:af:5f:44:77:88:a3:68:40:23:ad:26:
d7:ce:67:13:a1:de:e0:b5:3a:e9:a0:ce:fd:c4:4e:
66:d8:1b:ac:b9:c9:4b:98:e3:d3:08:89:99:f5:ce:
7e:a3:1e:bf:b6:ac:0f:86:bd:19:43:35:8f:3d:73:
35:90:e8:46:3b:1c:51:cf:76:10:51:2d:62:c4:53:
f5:f6:cf:1a:3f:f7:24:3d:88:c7:a8:a0:99:93:66:
22:b3:0c:92:1d:2c:3b:24:24:a5:36:b4:16:8d:c6:
8d:ab:80:e2:c2:dd:7b:bf:ad:8c:61:f5:21:86:9a:
73:24:1e:5d:ca:47:ac:d2:a5:33:9e:f6:57:fc:02:
7f:ba:d3:21:32:9c:18:34:8b:a3:5a:03:fe:a5:99:
4f:dd:f0:29:21:bc:e6:fb:5c:1d:c5:5c:a5:e4:d0:
f9:c0:4c:38:55:a4:ec:76:d3:57:81:39:8b:31:7a:
94:d5:68:46:cd:7e:cc:87:89:90:37:c8:ce:59:a3:
1a:5d:a4:e0:bc:19:f7:b9:83:1a:94:33:c6:92:1b:
0e:03:0c:9b:d6:bf:12:d7:3f:08:97:fb:48:74:9f:
01:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:16:64:EA:13:3A:AE:89:32:D0:65:F2:04:84:8B:50:6A:12:99:1B
X509v3 Authority Key Identifier:
keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/DhZk6hM6roky0GXyBISLUGoSmRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.247.44.0/24
Signature Algorithm: sha256WithRSAEncryption
05:46:cc:96:10:09:d8:ec:06:a4:09:f6:53:bd:1e:9b:4d:72:
51:b0:9c:49:36:a2:63:19:2a:b4:f1:61:31:f1:cf:ba:8f:60:
48:c9:83:b8:16:91:90:c2:bf:b8:ad:93:38:87:0e:c5:40:5d:
8f:1b:e2:9b:a4:dd:ef:84:d8:f2:2e:12:63:8d:7d:10:53:05:
82:8e:78:09:f0:52:de:7a:f5:b8:75:4c:17:e3:45:d1:17:69:
b8:8b:99:70:ee:ef:62:d4:23:ab:b5:cc:5d:0e:3b:87:2d:43:
3e:5d:0d:fa:9c:fb:6f:a6:65:6a:96:cf:4f:d2:8d:dc:aa:57:
52:cf:ae:da:72:73:46:6d:73:b7:9e:b3:77:c2:25:0e:b7:84:
f2:31:a8:7b:01:34:d2:bf:50:3b:3b:7c:82:5a:ef:73:d8:7b:
54:ce:62:16:59:4a:2c:73:44:55:98:bb:51:45:15:42:4c:06:
1e:71:cb:49:b0:43:f6:38:ff:b4:00:d8:d1:8e:50:74:2a:db:
22:c2:dc:85:7a:82:b7:3c:f0:02:b2:13:5a:06:4d:c8:e5:af:
d0:cb:e7:4f:b5:56:02:19:59:83:78:cb:f7:28:5f:69:44:a7:
2f:4f:d0:2c:9d:b3:c1:3d:fe:b3:72:73:e7:3d:7c:27:b1:af:
6c:8f:20:ed
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZXSDMkDaNMno8LhWXlhzMxbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MjUzYzRmMjMzY2U5ODQ3Njk5YWU2OGVjYmY1ZDc1MTRi
MGZhZGIwHhcNMjUwMzI2MTA0MzI3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZTE2NjRlYTEzM2FhZTg5MzJkMDY1ZjIwNDg0OGI1MDZhMTI5OTFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOw1lTB3ZuWWq0V6ZstbotQroJFW
60dtuuzXseZtZmurr19Ed4ijaEAjrSbXzmcTod7gtTrpoM79xE5m2BusuclLmOPT
CImZ9c5+ox6/tqwPhr0ZQzWPPXM1kOhGOxxRz3YQUS1ixFP19s8aP/ckPYjHqKCZ
k2YiswySHSw7JCSlNrQWjcaNq4Diwt17v62MYfUhhppzJB5dykes0qUznvZX/AJ/
utMhMpwYNIujWgP+pZlP3fApIbzm+1wdxVyl5ND5wEw4VaTsdtNXgTmLMXqU1WhG
zX7Mh4mQN8jOWaMaXaTgvBn3uYMalDPGkhsOAwyb1r8S1z8Il/tIdJ8BcQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA4WZOoTOq6JMtBl8gSEi1BqEpkbMB8GA1UdIwQY
MBaAFLQlPE8jPOmEdpmuaOy/XXUUsPrbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80MWQ2ZTEtNWNhZC00MGRiLTk3NzMt
NThiMzhmNWFjODBiLzEvRGhaazZoTTZyb2t5MEdYeUJJU0xVR29TbVJzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC80MWQ2ZTEtNWNhZC00MGRiLTk3NzMtNThiMzhmNWFjODBi
LzEvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXvcsMA0G
CSqGSIb3DQEBCwUAA4IBAQAFRsyWEAnY7AakCfZTvR6bTXJRsJxJNqJjGSq08WEx
8c+6j2BIyYO4FpGQwr+4rZM4hw7FQF2PG+KbpN3vhNjyLhJjjX0QUwWCjngJ8FLe
evW4dUwX40XRF2m4i5lw7u9i1COrtcxdDjuHLUM+XQ36nPtvpmVqls9P0o3cqldS
z67acnNGbXO3nrN3wiUOt4TyMah7ATTSv1A7O3yCWu9z2HtUzmIWWUosc0RVmLtR
RRVCTAYecctJsEP2OP+0ANjRjlB0KtsiwtyFeoK3PPACshNaBk3I5a/Qy+dPtVYC
GVmDeMv3KF9pRKcvT9AsnbPBPf6zcnPnPXwnsa9sjyDt
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:03:36 2025 by rpki-client