Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/pMy1pTrd23eCt39FBZmq2eLeAhA.roa
File: pMy1pTrd23eCt39FBZmq2eLeAhA.roa (raw, json)
Hash identifier: FaNCxf0uGl+BaBHf7OMmzdVmqskH8yLJ+ARyPe7Vb64=
Subject key identifier: A4:CC:B5:A5:3A:DD:DB:77:82:B7:7F:45:05:99:AA:D9:E2:DE:02:10
Certificate issuer: /CN=0eb510d7c915a4be6df6b16ff582fd2d6ad23605
Certificate serial: 019427B4AED7F4149CF1318B61054546D9DD
Authority key identifier: 0E:B5:10:D7:C9:15:A4:BE:6D:F6:B1:6F:F5:82:FD:2D:6A:D2:36:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DrUQ18kVpL5t9rFv9YL9LWrSNgU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/pMy1pTrd23eCt39FBZmq2eLeAhA.roa
Signing time: Thu 02 Jan 2025 15:49:00 +0000
ROA not before: Thu 02 Jan 2025 15:49:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50949
IP address blocks: 194.28.88.0/22 maxlen: 24
2001:67c:320::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/DrUQ18kVpL5t9rFv9YL9LWrSNgU.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/DrUQ18kVpL5t9rFv9YL9LWrSNgU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DrUQ18kVpL5t9rFv9YL9LWrSNgU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b4:ae:d7:f4:14:9c:f1:31:8b:61:05:45:46:d9:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0eb510d7c915a4be6df6b16ff582fd2d6ad23605
Validity
Not Before: Jan 2 15:49:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a4ccb5a53adddb7782b77f450599aad9e2de0210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f5:c6:16:8f:63:24:08:3e:a3:a4:bd:0a:9f:
45:13:5a:29:a3:1d:1a:d4:47:49:91:ca:7d:e8:53:
4a:fe:0e:a7:e6:97:a3:66:a7:bd:c9:94:1c:55:40:
9f:fb:24:97:ae:a2:a4:c5:fb:5b:2d:fc:c7:1a:cd:
9c:13:0e:15:fa:d2:10:d4:24:9b:ee:35:2f:36:36:
c7:c3:a8:ed:ca:e3:f2:2c:4b:04:76:ff:f4:c1:85:
7b:2a:23:1b:78:b3:51:71:15:0d:cb:a3:bd:84:6e:
86:09:b6:a0:ec:71:d6:5d:46:5d:43:4d:41:d9:0c:
48:d8:61:b3:0e:1e:09:c4:c9:46:e0:c5:e7:0a:71:
22:6e:83:9b:fd:2a:b9:f9:1b:56:1a:e1:67:12:eb:
9a:84:6d:a9:c4:99:a4:e9:fe:4d:6c:b0:3d:ab:a2:
32:8b:6f:2a:dd:c8:a6:58:f0:c2:35:8d:ff:5b:2e:
d1:ad:85:5f:81:40:77:19:79:1a:d1:fd:64:da:92:
58:91:d3:77:f9:a7:3d:71:03:48:6f:8c:35:1a:7f:
3a:16:4f:85:31:d1:85:d4:bc:3b:27:f7:68:f4:3b:
74:4d:25:b2:8c:b4:04:55:72:6d:27:07:17:d3:a6:
62:0d:1c:74:b2:25:30:d6:8b:ce:21:78:35:b3:78:
82:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:CC:B5:A5:3A:DD:DB:77:82:B7:7F:45:05:99:AA:D9:E2:DE:02:10
X509v3 Authority Key Identifier:
keyid:0E:B5:10:D7:C9:15:A4:BE:6D:F6:B1:6F:F5:82:FD:2D:6A:D2:36:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DrUQ18kVpL5t9rFv9YL9LWrSNgU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/pMy1pTrd23eCt39FBZmq2eLeAhA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/DrUQ18kVpL5t9rFv9YL9LWrSNgU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.28.88.0/22
IPv6:
2001:67c:320::/48
Signature Algorithm: sha256WithRSAEncryption
56:f6:70:7e:41:95:54:89:0c:5e:51:33:5f:99:f7:c2:fb:de:
ab:06:2b:76:24:79:4d:e9:81:8e:0e:9b:26:70:7d:c1:4e:64:
bc:3d:c6:1d:dd:5c:31:01:8c:42:e8:8b:19:6e:4c:3f:b2:73:
d0:3c:c8:78:a8:04:a4:51:be:91:99:73:4a:c3:ed:fb:89:22:
2c:c9:e4:b9:fb:ac:a6:06:b0:1f:67:93:38:03:a8:c1:f7:cb:
93:5c:fe:27:c4:92:dd:8f:06:5c:95:69:0b:10:73:b6:ea:21:
f9:a3:00:f0:e4:23:a2:f3:92:0b:1c:4c:95:1c:8f:31:a0:7d:
a0:e6:3b:26:61:76:68:02:a5:1d:de:68:fb:25:ef:7b:56:01:
cc:dc:95:7c:45:79:1b:9e:0e:6a:cb:13:03:c1:18:c1:7e:19:
5e:b7:ae:59:b8:53:36:8d:60:6b:8b:b0:3f:0c:c2:f2:8a:35:
fb:55:3f:2e:e9:b8:4e:bb:61:58:7b:13:85:d8:e5:51:0d:fc:
3d:5b:56:8b:41:77:c0:8b:38:a2:4f:7a:59:78:a1:7c:86:df:
f4:41:ae:23:da:23:4e:35:07:1d:72:f3:c6:3b:c6:28:c7:33:
3c:2a:95:c2:86:5d:12:ec:1b:93:e8:77:93:61:00:c7:47:1d:
14:04:04:11
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZQntK7X9BSc8TGLYQVFRtndMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlYjUxMGQ3YzkxNWE0YmU2ZGY2YjE2ZmY1ODJmZDJkNmFk
MjM2MDUwHhcNMjUwMTAyMTU0OTAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNGNjYjVhNTNhZGRkYjc3ODJiNzdmNDUwNTk5YWFkOWUyZGUwMjEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfXGFo9jJAg+o6S9Cp9FE1opox0a
1EdJkcp96FNK/g6n5pejZqe9yZQcVUCf+ySXrqKkxftbLfzHGs2cEw4V+tIQ1CSb
7jUvNjbHw6jtyuPyLEsEdv/0wYV7KiMbeLNRcRUNy6O9hG6GCbag7HHWXUZdQ01B
2QxI2GGzDh4JxMlG4MXnCnEiboOb/Sq5+RtWGuFnEuuahG2pxJmk6f5NbLA9q6Iy
i28q3cimWPDCNY3/Wy7RrYVfgUB3GXka0f1k2pJYkdN3+ac9cQNIb4w1Gn86Fk+F
MdGF1Lw7J/do9Dt0TSWyjLQEVXJtJwcX06ZiDRx0siUw1ovOIXg1s3iCYwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFKTMtaU63dt3grd/RQWZqtni3gIQMB8GA1UdIwQY
MBaAFA61ENfJFaS+bfaxb/WC/S1q0jYFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHJVUTE4a1ZwTDV0OXJGdjlZTDlMV3JTTmdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi85NmJlM2QtZDdkMi00NzUzLWE3ODMt
ZDYzOGEzYmU4OGNhLzEvcE15MXBUcmQyM2VDdDM5RkJabXEyZUxlQWhBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi85NmJlM2QtZDdkMi00NzUzLWE3ODMtZDYzOGEzYmU4OGNh
LzEvRHJVUTE4a1ZwTDV0OXJGdjlZTDlMV3JTTmdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCwhxYMA8E
AgACMAkDBwAgAQZ8AyAwDQYJKoZIhvcNAQELBQADggEBAFb2cH5BlVSJDF5RM1+Z
98L73qsGK3YkeU3pgY4OmyZwfcFOZLw9xh3dXDEBjELoixluTD+yc9A8yHioBKRR
vpGZc0rD7fuJIizJ5Ln7rKYGsB9nkzgDqMH3y5Nc/ifEkt2PBlyVaQsQc7bqIfmj
APDkI6LzkgscTJUcjzGgfaDmOyZhdmgCpR3eaPsl73tWAczclXxFeRueDmrLEwPB
GMF+GV63rlm4UzaNYGuLsD8MwvKKNftVPy7puE67YVh7E4XY5VEN/D1bVotBd8CL
OKJPell4oXyG3/RBriPaI041Bx1y88Y7xijHMzwqlcKGXRLsG5Pod5NhAMdHHRQE
BBE=
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:33:44 2025 by rpki-client