Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/_OTw40dYuvm2lSGl7nH25-3trl0.roa
File: _OTw40dYuvm2lSGl7nH25-3trl0.roa (raw, json)
Hash identifier: p5Ks+k8ODIcgQU/rYDBPfBUWvMQU0O3hHWpG/Svrc7o=
Subject key identifier: FC:E4:F0:E3:47:58:BA:F9:B6:95:21:A5:EE:71:F6:E7:ED:ED:AE:5D
Certificate issuer: /CN=c53b29170b56a84241f4b84fd4daff0836d503c6
Certificate serial: 019423D8003E1BE5D4601AD4BFDB470134D5
Authority key identifier: C5:3B:29:17:0B:56:A8:42:41:F4:B8:4F:D4:DA:FF:08:36:D5:03:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/_OTw40dYuvm2lSGl7nH25-3trl0.roa
Signing time: Wed 01 Jan 2025 21:49:05 +0000
ROA not before: Wed 01 Jan 2025 21:49:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201228
IP address blocks: 193.29.10.0/23 maxlen: 24
193.29.20.0/23 maxlen: 24
2a0f:a580::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d8:00:3e:1b:e5:d4:60:1a:d4:bf:db:47:01:34:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c53b29170b56a84241f4b84fd4daff0836d503c6
Validity
Not Before: Jan 1 21:49:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fce4f0e34758baf9b69521a5ee71f6e7ededae5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1a:f7:ef:86:df:5e:8e:68:76:a3:a0:5f:ad:
b4:9e:e0:08:fd:da:cb:f5:f8:04:d3:58:75:1b:7b:
48:8a:c2:d5:00:d0:63:d0:a2:47:13:ae:b2:ab:01:
fd:44:cd:c6:31:54:06:d6:40:3f:27:93:49:1f:2d:
6e:06:e5:b7:8e:92:03:29:ba:d6:fd:31:a5:ee:a1:
3d:3f:f9:c9:56:16:4d:e2:fa:0b:c3:68:ce:1f:f9:
a8:1b:0b:a2:cc:b7:69:b1:2c:b7:22:1f:b9:95:df:
81:8a:40:fe:80:4f:31:bb:3a:25:33:44:cf:76:25:
64:d0:b4:32:a4:2c:c2:db:3d:e4:95:13:a1:f9:da:
f1:eb:04:5a:37:79:cd:e1:4c:9a:25:39:82:f8:bf:
28:50:f2:21:21:e6:bd:8d:8a:64:48:e3:30:19:32:
1d:2e:35:f0:2e:91:ad:4d:ef:5a:33:c6:e4:55:37:
c1:54:93:71:29:73:ff:77:d1:f3:fe:94:e5:0a:4f:
a3:0c:6f:59:c0:47:02:e6:b9:2d:57:ae:f1:c0:ad:
ab:19:6a:54:0a:e0:9f:59:80:8f:8e:36:7e:74:2a:
e8:d7:d5:d7:cb:11:b9:08:95:62:0f:c6:68:67:6e:
b0:99:f6:53:3e:1f:d3:d3:0c:5b:ea:9f:2d:db:67:
b9:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:E4:F0:E3:47:58:BA:F9:B6:95:21:A5:EE:71:F6:E7:ED:ED:AE:5D
X509v3 Authority Key Identifier:
keyid:C5:3B:29:17:0B:56:A8:42:41:F4:B8:4F:D4:DA:FF:08:36:D5:03:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/_OTw40dYuvm2lSGl7nH25-3trl0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.29.10.0/23
193.29.20.0/23
IPv6:
2a0f:a580::/29
Signature Algorithm: sha256WithRSAEncryption
18:c3:14:ea:43:69:62:94:71:86:dc:73:df:58:49:06:5b:d0:
e6:12:e1:cf:be:02:f1:2f:b8:c2:ba:f5:7f:f1:1f:f1:4d:95:
ed:9f:d8:a9:7e:fb:6c:d6:ad:c1:be:99:3c:5f:3f:f8:16:04:
b8:40:05:5a:f6:d6:ff:1c:a7:97:09:17:e4:21:e3:58:36:56:
87:cf:9a:19:5b:28:52:85:67:27:92:df:bf:e3:72:ec:23:31:
b8:3f:52:13:6a:fb:23:05:62:bf:17:bd:da:ab:40:b8:b2:0d:
f6:50:6e:99:c2:10:72:39:1c:82:6d:85:85:b0:c5:d9:bc:e2:
75:c6:ff:46:52:ef:96:81:ba:1e:a9:ef:cc:fe:44:33:09:ec:
d7:c0:8f:15:02:c7:ec:1b:2a:6a:8d:84:fd:2e:d0:8b:7f:56:
b2:a8:ce:ae:8c:35:b2:af:35:ca:fb:d5:42:1b:bc:32:bc:30:
bc:97:1c:90:a4:d2:ff:d0:93:5a:7a:11:85:0c:55:f9:24:3a:
4e:ef:52:6a:12:3c:49:52:48:b5:4c:8c:9c:ea:48:fa:46:f9:
1e:8b:87:0c:a7:38:9e:17:a1:22:6e:72:35:6c:31:03:21:c3:
5d:de:c7:e2:9f:86:3e:c9:f7:5c:e6:f5:5d:39:e7:8e:99:87:
9a:3c:7f:7c
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZQj2AA+G+XUYBrUv9tHATTVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1M2IyOTE3MGI1NmE4NDI0MWY0Yjg0ZmQ0ZGFmZjA4MzZk
NTAzYzYwHhcNMjUwMTAxMjE0OTA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmY2U0ZjBlMzQ3NThiYWY5YjY5NTIxYTVlZTcxZjZlN2VkZWRhZTVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBr374bfXo5odqOgX620nuAI/drL
9fgE01h1G3tIisLVANBj0KJHE66yqwH9RM3GMVQG1kA/J5NJHy1uBuW3jpIDKbrW
/TGl7qE9P/nJVhZN4voLw2jOH/moGwuizLdpsSy3Ih+5ld+BikD+gE8xuzolM0TP
diVk0LQypCzC2z3klROh+drx6wRaN3nN4UyaJTmC+L8oUPIhIea9jYpkSOMwGTId
LjXwLpGtTe9aM8bkVTfBVJNxKXP/d9Hz/pTlCk+jDG9ZwEcC5rktV67xwK2rGWpU
CuCfWYCPjjZ+dCro19XXyxG5CJViD8ZoZ26wmfZTPh/T0wxb6p8t22e57QIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFPzk8ONHWLr5tpUhpe5x9uft7a5dMB8GA1UdIwQY
MBaAFMU7KRcLVqhCQfS4T9Ta/wg21QPGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFRzcEZ3dFdxRUpCOUxoUDFOcl9DRGJWQThZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS82MGQwMmYtMTE2My00NjY2LTliZTkt
N2RmYmJhZTAzNjhlLzEvX09UdzQwZFl1dm0ybFNHbDduSDI1LTN0cmwwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS82MGQwMmYtMTE2My00NjY2LTliZTktN2RmYmJhZTAzNjhl
LzEveFRzcEZ3dFdxRUpCOUxoUDFOcl9DRGJWQThZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBwR0KAwQB
wR0UMA0EAgACMAcDBQMqD6WAMA0GCSqGSIb3DQEBCwUAA4IBAQAYwxTqQ2lilHGG
3HPfWEkGW9DmEuHPvgLxL7jCuvV/8R/xTZXtn9ipfvts1q3Bvpk8Xz/4FgS4QAVa
9tb/HKeXCRfkIeNYNlaHz5oZWyhShWcnkt+/43LsIzG4P1ITavsjBWK/F73aq0C4
sg32UG6ZwhByORyCbYWFsMXZvOJ1xv9GUu+Wgboeqe/M/kQzCezXwI8VAsfsGypq
jYT9LtCLf1ayqM6ujDWyrzXK+9VCG7wyvDC8lxyQpNL/0JNaehGFDFX5JDpO71Jq
EjxJUki1TIyc6kj6Rvkei4cMpzieF6EibnI1bDEDIcNd3sfin4Y+yfdc5vVdOeeO
mYeaPH98
-----END CERTIFICATE-----
Generated at Thu Apr 17 03:46:22 2025 by rpki-client