Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/I8S2hVkDs5WQ9gotPSw5OhIE_XU.roa
File: I8S2hVkDs5WQ9gotPSw5OhIE_XU.roa (raw, json)
Hash identifier: 5OhiLGp3GkkcRYzG4tfq1G76vW7BOIqKJjeoc64Pt4o=
Subject key identifier: 23:C4:B6:85:59:03:B3:95:90:F6:0A:2D:3D:2C:39:3A:12:04:FD:75
Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Certificate serial: 01955B4BA90CA1D46E7BD75D88E3F2F202C9
Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/I8S2hVkDs5WQ9gotPSw5OhIE_XU.roa
Signing time: Mon 03 Mar 2025 09:17:19 +0000
ROA not before: Mon 03 Mar 2025 09:17:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215826
IP address blocks: 193.68.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 04:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5b:4b:a9:0c:a1:d4:6e:7b:d7:5d:88:e3:f2:f2:02:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Validity
Not Before: Mar 3 09:17:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=23c4b6855903b39590f60a2d3d2c393a1204fd75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:22:ea:85:b3:c0:ab:7f:a3:f7:52:eb:9b:15:
f6:b9:67:68:b8:cb:3f:cf:9d:6c:61:97:3b:f3:81:
a4:88:59:1e:cb:5c:d3:57:0a:36:be:dd:93:34:af:
11:5a:39:a4:6f:af:40:35:8b:3e:59:44:3b:2b:d9:
9d:ba:50:e5:dd:bb:3e:6a:32:88:5d:9b:bc:ed:fd:
3c:0b:c2:ee:09:2c:cc:59:91:5a:c1:1d:45:26:42:
45:f3:3a:3d:e6:88:49:88:62:80:cf:bb:8a:9f:b6:
03:03:95:6a:bd:2f:08:20:38:eb:d6:bb:ea:e2:b4:
59:16:03:d1:5d:0b:7e:0d:b8:02:9f:3a:93:fc:3f:
6e:33:86:b1:b1:6b:9b:93:93:3a:8a:c3:c0:8b:68:
a3:09:56:2e:cb:14:15:f0:30:83:26:f9:01:1d:23:
09:0b:bf:55:c8:a2:f6:23:22:a8:8f:21:da:ff:19:
2d:57:d8:25:8e:aa:6f:73:02:e1:8d:90:b0:4f:dc:
fc:da:96:12:88:f5:1f:26:4c:2c:bf:1d:be:83:b8:
74:38:56:0e:a2:77:37:05:85:08:05:d8:27:b5:bc:
24:a4:a4:27:d8:a2:13:4e:4e:d1:4a:a2:0e:f9:94:
5b:9b:ea:e0:42:a4:74:95:72:96:e1:d9:20:eb:65:
c1:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:C4:B6:85:59:03:B3:95:90:F6:0A:2D:3D:2C:39:3A:12:04:FD:75
X509v3 Authority Key Identifier:
keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/I8S2hVkDs5WQ9gotPSw5OhIE_XU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.68.89.0/24
Signature Algorithm: sha256WithRSAEncryption
47:17:3e:a5:3f:4e:09:7a:a5:77:31:57:4b:93:06:42:49:4d:
01:39:a4:2a:a5:f8:aa:8b:bc:09:c8:4a:40:9d:d6:31:8a:44:
35:f5:52:51:a8:95:57:c8:f8:e8:80:93:38:40:f9:57:fd:9f:
c4:54:2a:ec:3d:6a:0f:c5:b4:cd:4e:9e:90:01:f4:e6:bb:4c:
69:cb:a6:56:94:b0:0e:39:49:e5:47:d2:5d:fd:b5:d2:57:9a:
be:ee:0e:42:87:77:e9:93:4a:a1:07:38:1c:b0:4b:f4:36:dd:
aa:5c:ae:0d:bf:6d:c7:77:14:f7:59:db:12:11:63:03:0f:ee:
e5:4d:f5:ac:78:eb:a0:f1:8f:6d:65:21:64:10:5c:78:9b:89:
ac:e8:5c:f5:3f:18:05:c0:6f:92:4d:5c:dd:fc:a5:1c:23:11:
80:cf:ab:ee:a7:54:d7:f3:42:b8:02:c9:af:f4:0f:95:70:05:
f4:97:bb:b1:7e:18:23:1a:d6:ad:6b:f5:bb:c2:aa:53:80:6e:
92:b3:e5:79:9b:d2:0c:bb:5f:e7:ef:6d:6c:77:43:ab:61:39:
23:cd:d8:4e:75:66:86:30:91:b5:7e:36:e2:0c:1f:92:6e:c9:
5d:41:25:6e:4b:2e:f5:b4:96:d7:cb:7f:29:8b:6c:65:d2:de:
fc:ce:0c:1b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZVbS6kModRue9ddiOPy8gLJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjZmRmZTZkY2E4YWM3YmZhMWE5NDUwZWY5OWZkMzE1ZWQw
MmFjZDkwHhcNMjUwMzAzMDkxNzE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyM2M0YjY4NTU5MDNiMzk1OTBmNjBhMmQzZDJjMzkzYTEyMDRmZDc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCLqhbPAq3+j91LrmxX2uWdouMs/
z51sYZc784GkiFkey1zTVwo2vt2TNK8RWjmkb69ANYs+WUQ7K9mdulDl3bs+ajKI
XZu87f08C8LuCSzMWZFawR1FJkJF8zo95ohJiGKAz7uKn7YDA5VqvS8IIDjr1rvq
4rRZFgPRXQt+DbgCnzqT/D9uM4axsWubk5M6isPAi2ijCVYuyxQV8DCDJvkBHSMJ
C79VyKL2IyKojyHa/xktV9gljqpvcwLhjZCwT9z82pYSiPUfJkwsvx2+g7h0OFYO
onc3BYUIBdgntbwkpKQn2KITTk7RSqIO+ZRbm+rgQqR0lXKW4dkg62XBlwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCPEtoVZA7OVkPYKLT0sOToSBP11MB8GA1UdIwQY
MBaAFLz9/m3Kise/oalFDvmf0xXtAqzZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9jOWRlMTMtNWI3NC00MTNkLWIyZmIt
MWFmMjQ2NWE4ZWVjLzEvSThTMmhWa0RzNVdROWdvdFBTdzVPaElFX1hVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9jOWRlMTMtNWI3NC00MTNkLWIyZmItMWFmMjQ2NWE4ZWVj
LzEvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwURZMA0G
CSqGSIb3DQEBCwUAA4IBAQBHFz6lP04JeqV3MVdLkwZCSU0BOaQqpfiqi7wJyEpA
ndYxikQ19VJRqJVXyPjogJM4QPlX/Z/EVCrsPWoPxbTNTp6QAfTmu0xpy6ZWlLAO
OUnlR9Jd/bXSV5q+7g5Ch3fpk0qhBzgcsEv0Nt2qXK4Nv23HdxT3WdsSEWMDD+7l
TfWseOug8Y9tZSFkEFx4m4ms6Fz1PxgFwG+STVzd/KUcIxGAz6vup1TX80K4Asmv
9A+VcAX0l7uxfhgjGtata/W7wqpTgG6Ss+V5m9IMu1/n721sd0OrYTkjzdhOdWaG
MJG1fjbiDB+SbsldQSVuSy71tJbXy38pi2xl0t78zgwb
-----END CERTIFICATE-----
Generated at Sun Apr 6 13:24:17 2025 by rpki-client