Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/n6GsozsAIUsV5q_nwqboXGBIS0o.roa
File: n6GsozsAIUsV5q_nwqboXGBIS0o.roa (raw, json)
Hash identifier: SV+wqJcEFOa4P82VjIfU8axnoITYl7V615IXuKpHvcU=
Subject key identifier: 9F:A1:AC:A3:3B:00:21:4B:15:E6:AF:E7:C2:A6:E8:5C:60:48:4B:4A
Certificate issuer: /CN=5b1c1e0624039bd1f1a946cb513c93386fab6b19
Certificate serial: 01941FFAB44A0B38F15BA1178CC72FEF4F75
Authority key identifier: 5B:1C:1E:06:24:03:9B:D1:F1:A9:46:CB:51:3C:93:38:6F:AB:6B:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WxweBiQDm9HxqUbLUTyTOG-raxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/n6GsozsAIUsV5q_nwqboXGBIS0o.roa
Signing time: Wed 01 Jan 2025 03:48:31 +0000
ROA not before: Wed 01 Jan 2025 03:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29374
IP address blocks: 195.149.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/WxweBiQDm9HxqUbLUTyTOG-raxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 21:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:b4:4a:0b:38:f1:5b:a1:17:8c:c7:2f:ef:4f:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b1c1e0624039bd1f1a946cb513c93386fab6b19
Validity
Not Before: Jan 1 03:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9fa1aca33b00214b15e6afe7c2a6e85c60484b4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3c:bc:31:cd:e0:c4:8f:d3:46:5d:ef:31:7f:
fe:53:dd:93:b8:c6:e3:1e:ba:8e:8c:42:35:2b:14:
79:7b:1e:d4:dc:d0:d4:f0:08:db:87:05:1d:f1:55:
df:27:f9:38:cb:00:0b:72:26:a8:dd:ea:7f:17:04:
d7:c4:15:44:bb:e0:2c:46:fa:cf:25:1c:6d:a3:81:
08:2d:c1:26:22:23:ca:c9:ba:bb:f9:14:d8:2f:46:
5b:8e:3b:b3:72:a1:b1:47:04:86:74:6d:84:25:55:
48:0c:89:7d:7c:09:bf:ff:60:39:0d:f5:ee:57:1b:
37:25:66:43:93:5b:1b:a2:9b:73:c6:12:06:d3:bf:
18:10:7e:39:7c:39:1a:15:9f:4f:aa:b6:3b:e9:8a:
eb:d1:c0:7e:5e:7e:1b:d6:71:be:a7:21:26:0e:5c:
3f:d2:03:ff:5c:00:c4:31:fa:03:03:4b:ce:bc:c3:
6f:84:46:be:ef:b9:3d:f6:e9:66:3f:cd:72:9a:0b:
88:d3:53:d8:95:30:8e:fd:e7:fe:1c:78:07:a5:79:
bc:ea:07:f6:3b:20:4c:76:ac:f4:8e:43:dd:31:09:
1c:78:a3:ba:00:d2:70:91:f0:ed:c9:a7:4c:46:37:
97:77:4b:3a:51:03:b2:64:2e:0f:86:6a:f4:5c:54:
34:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:A1:AC:A3:3B:00:21:4B:15:E6:AF:E7:C2:A6:E8:5C:60:48:4B:4A
X509v3 Authority Key Identifier:
keyid:5B:1C:1E:06:24:03:9B:D1:F1:A9:46:CB:51:3C:93:38:6F:AB:6B:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WxweBiQDm9HxqUbLUTyTOG-raxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/n6GsozsAIUsV5q_nwqboXGBIS0o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.149.94.0/24
Signature Algorithm: sha256WithRSAEncryption
60:18:55:8d:2f:d0:95:31:03:e6:5b:69:ac:97:c3:3c:fc:97:
dc:ac:ff:3f:78:55:ff:e1:14:ba:2b:52:13:a0:46:58:76:94:
82:bd:84:c1:f1:75:a9:02:3e:43:6e:db:e7:7d:65:df:ce:d5:
ae:7e:92:56:9d:ac:8a:2b:d5:06:cd:5d:46:f0:e8:95:bb:4b:
33:3c:38:a8:e0:82:48:7b:72:d4:00:b2:b4:d0:fe:ae:0d:2f:
47:74:eb:71:d7:a6:35:d5:a6:1a:f9:21:bc:84:b4:90:84:f6:
dd:85:5c:77:7d:3b:4c:10:9f:f2:9a:d7:91:bd:3f:71:10:db:
02:35:9a:e5:8e:d1:d9:28:5d:84:9b:35:bb:1f:2a:3e:6b:66:
eb:5e:b6:43:9e:4f:c5:38:22:11:32:20:4a:0f:b9:6d:31:ab:
9d:7c:e9:3c:93:de:d3:3e:e5:c6:b9:90:dd:b5:ea:d3:e4:67:
a1:db:e5:e3:dc:e7:ee:a5:60:92:6c:00:7c:0a:40:ad:c1:4e:
05:fc:de:d6:b7:2d:76:19:31:da:bb:98:ad:82:54:8e:5e:d1:
8a:78:6c:4c:41:c2:0c:6d:74:c0:9c:69:fe:86:95:4b:0e:20:
49:04:9a:41:be:80:3f:3f:9d:02:48:e6:88:36:7a:42:78:d9:
cf:56:63:68
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQf+rRKCzjxW6EXjMcv7091MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViMWMxZTA2MjQwMzliZDFmMWE5NDZjYjUxM2M5MzM4NmZh
YjZiMTkwHhcNMjUwMTAxMDM0ODMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZmExYWNhMzNiMDAyMTRiMTVlNmFmZTdjMmE2ZTg1YzYwNDg0YjRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDy8Mc3gxI/TRl3vMX/+U92TuMbj
HrqOjEI1KxR5ex7U3NDU8AjbhwUd8VXfJ/k4ywALciao3ep/FwTXxBVEu+AsRvrP
JRxto4EILcEmIiPKybq7+RTYL0ZbjjuzcqGxRwSGdG2EJVVIDIl9fAm//2A5DfXu
Vxs3JWZDk1sboptzxhIG078YEH45fDkaFZ9PqrY76Yrr0cB+Xn4b1nG+pyEmDlw/
0gP/XADEMfoDA0vOvMNvhEa+77k99ulmP81ymguI01PYlTCO/ef+HHgHpXm86gf2
OyBMdqz0jkPdMQkceKO6ANJwkfDtyadMRjeXd0s6UQOyZC4Phmr0XFQ0PwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ+hrKM7ACFLFeav58Km6FxgSEtKMB8GA1UdIwQY
MBaAFFscHgYkA5vR8alGy1E8kzhvq2sZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3h3ZUJpUURtOUh4cVViTFVUeVRPRy1yYXhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS8xODQwM2QtNzc5Mi00ZjlkLTkzNjgt
YmZiNmNmMGYwODM1LzEvbjZHc296c0FJVXNWNXFfbndxYm9YR0JJUzBvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS8xODQwM2QtNzc5Mi00ZjlkLTkzNjgtYmZiNmNmMGYwODM1
LzEvV3h3ZUJpUURtOUh4cVViTFVUeVRPRy1yYXhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw5VeMA0G
CSqGSIb3DQEBCwUAA4IBAQBgGFWNL9CVMQPmW2msl8M8/JfcrP8/eFX/4RS6K1IT
oEZYdpSCvYTB8XWpAj5DbtvnfWXfztWufpJWnayKK9UGzV1G8OiVu0szPDio4IJI
e3LUALK00P6uDS9HdOtx16Y11aYa+SG8hLSQhPbdhVx3fTtMEJ/ymteRvT9xENsC
NZrljtHZKF2EmzW7Hyo+a2brXrZDnk/FOCIRMiBKD7ltMaudfOk8k97TPuXGuZDd
terT5Geh2+Xj3OfupWCSbAB8CkCtwU4F/N7Wty12GTHau5itglSOXtGKeGxMQcIM
bXTAnGn+hpVLDiBJBJpBvoA/P50CSOaINnpCeNnPVmNo
-----END CERTIFICATE-----
Generated at Wed Apr 23 05:40:22 2025 by rpki-client