Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/vIfeAKl09iQuJw6UGqaMNu-i1xM.roa
File: vIfeAKl09iQuJw6UGqaMNu-i1xM.roa (raw, json)
Hash identifier: rnTrCrEZ28gshco/rvGtOCS7V1pX6Xki2r8crF4TWeg=
Subject key identifier: BC:87:DE:00:A9:74:F6:24:2E:27:0E:94:1A:A6:8C:36:EF:A2:D7:13
Certificate issuer: /CN=d5c65cda4b630f72bf640d16b41f72f5a0f9d751
Certificate serial: 019426D94D2926ACCECB169AC25B44867776
Authority key identifier: D5:C6:5C:DA:4B:63:0F:72:BF:64:0D:16:B4:1F:72:F5:A0:F9:D7:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1cZc2ktjD3K_ZA0WtB9y9aD511E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/vIfeAKl09iQuJw6UGqaMNu-i1xM.roa
Signing time: Thu 02 Jan 2025 11:49:22 +0000
ROA not before: Thu 02 Jan 2025 11:49:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34964
IP address blocks: 193.189.146.0/24 maxlen: 24
2001:67c:21f8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.mft
rsync://rpki.ripe.net/repository/DEFAULT/1cZc2ktjD3K_ZA0WtB9y9aD511E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:4d:29:26:ac:ce:cb:16:9a:c2:5b:44:86:77:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5c65cda4b630f72bf640d16b41f72f5a0f9d751
Validity
Not Before: Jan 2 11:49:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bc87de00a974f6242e270e941aa68c36efa2d713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:44:c0:7d:cc:ac:8e:96:9d:75:6b:ea:9d:df:
59:7e:47:37:61:c2:54:b8:c3:42:53:f0:f3:bd:c7:
a5:97:ba:ba:34:77:8c:1f:ca:db:e9:31:e1:9b:dd:
cc:d2:77:c5:f5:ef:7d:cd:2b:a1:a8:d9:fc:86:90:
fc:a1:84:67:89:ab:5f:ec:e4:f8:74:30:fe:8f:9f:
54:3a:9b:75:18:92:df:c3:45:a8:32:75:14:bf:60:
fa:4b:07:e7:ef:3c:7b:8a:10:67:e9:de:d8:d7:4c:
27:8e:c5:36:3b:33:f1:bd:54:1b:f8:aa:0b:a8:b8:
60:4e:23:9b:05:64:75:1e:b2:3e:df:98:56:4d:c1:
6e:0b:3b:75:42:04:97:8b:7d:a4:02:d4:ea:6b:f6:
9a:6c:1b:23:6a:58:e1:03:a2:7c:a8:35:42:95:86:
e8:52:02:ba:e2:92:98:24:79:06:56:82:e2:2c:ae:
e4:ef:ad:45:a8:a8:18:77:b3:49:b6:ba:26:f1:15:
61:25:64:87:19:e1:2d:16:12:7b:6b:7d:54:3c:d2:
53:80:88:f8:12:c1:e3:1b:44:59:ce:77:ec:30:09:
19:64:9b:e6:f8:86:86:c6:1b:a3:eb:2b:e2:42:b8:
0d:47:47:f1:a9:3e:90:e2:35:02:a1:8b:79:bc:c8:
76:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:87:DE:00:A9:74:F6:24:2E:27:0E:94:1A:A6:8C:36:EF:A2:D7:13
X509v3 Authority Key Identifier:
keyid:D5:C6:5C:DA:4B:63:0F:72:BF:64:0D:16:B4:1F:72:F5:A0:F9:D7:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cZc2ktjD3K_ZA0WtB9y9aD511E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/vIfeAKl09iQuJw6UGqaMNu-i1xM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.189.146.0/24
IPv6:
2001:67c:21f8::/48
Signature Algorithm: sha256WithRSAEncryption
74:65:e0:71:c8:9a:3c:23:c2:5e:51:64:71:1a:a4:52:d7:49:
c5:8e:6a:b8:59:89:8a:de:e4:29:66:e7:aa:8d:b1:af:ea:aa:
2b:2d:c5:2c:1a:0e:60:98:fe:56:bb:5c:a6:e7:e3:08:9a:91:
95:d0:ec:bd:11:40:53:f1:29:6c:b2:1a:41:c9:6d:36:72:8f:
9f:5c:97:e9:1a:55:5e:21:8f:18:ab:70:b0:b9:47:88:33:23:
99:68:0a:16:46:84:34:19:d7:85:d7:46:6c:86:0d:62:74:7d:
f4:0b:24:0b:ef:ce:0c:53:24:4c:e7:09:4e:3c:5b:34:44:51:
03:5c:7e:8e:c3:e7:67:50:96:16:0d:80:cd:83:ca:a9:e8:1b:
3e:ce:e3:ef:94:9d:dd:7a:7e:22:df:21:56:a7:d5:53:e7:e0:
08:5f:49:cb:22:90:cd:7f:9c:e5:99:24:39:cc:c5:c0:57:7c:
70:51:50:61:c4:6c:f7:53:bc:77:3e:2d:30:84:0d:75:2a:7e:
54:22:08:e5:e3:0c:de:95:3c:3b:25:83:6f:21:db:12:1d:b0:
bf:1d:29:7c:db:ca:d4:15:4b:7e:d6:5f:ca:65:07:d9:03:23:
00:ed:8c:06:25:a3:0f:0c:ab:b3:67:71:75:50:91:fa:bd:2a:
4b:bd:9c:58
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZQm2U0pJqzOyxaawltEhnd2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1YzY1Y2RhNGI2MzBmNzJiZjY0MGQxNmI0MWY3MmY1YTBm
OWQ3NTEwHhcNMjUwMTAyMTE0OTIyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYzg3ZGUwMGE5NzRmNjI0MmUyNzBlOTQxYWE2OGMzNmVmYTJkNzEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUTAfcysjpaddWvqnd9Zfkc3YcJU
uMNCU/Dzvcell7q6NHeMH8rb6THhm93M0nfF9e99zSuhqNn8hpD8oYRniatf7OT4
dDD+j59UOpt1GJLfw0WoMnUUv2D6Swfn7zx7ihBn6d7Y10wnjsU2OzPxvVQb+KoL
qLhgTiObBWR1HrI+35hWTcFuCzt1QgSXi32kAtTqa/aabBsjaljhA6J8qDVClYbo
UgK64pKYJHkGVoLiLK7k761FqKgYd7NJtrom8RVhJWSHGeEtFhJ7a31UPNJTgIj4
EsHjG0RZznfsMAkZZJvm+IaGxhuj6yviQrgNR0fxqT6Q4jUCoYt5vMh21wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFLyH3gCpdPYkLicOlBqmjDbvotcTMB8GA1UdIwQY
MBaAFNXGXNpLYw9yv2QNFrQfcvWg+ddRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWNaYzJrdGpEM0tfWkEwV3RCOXk5YUQ1MTFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi82Mzg3YzgtYzI0OC00MjVmLWJhNDAt
Y2Q2NTU1ZmNkODJlLzEvdklmZUFLbDA5aVF1Snc2VUdxYU1OdS1pMXhNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi82Mzg3YzgtYzI0OC00MjVmLWJhNDAtY2Q2NTU1ZmNkODJl
LzEvMWNaYzJrdGpEM0tfWkEwV3RCOXk5YUQ1MTFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwb2SMA8E
AgACMAkDBwAgAQZ8IfgwDQYJKoZIhvcNAQELBQADggEBAHRl4HHImjwjwl5RZHEa
pFLXScWOarhZiYre5Clm56qNsa/qqistxSwaDmCY/la7XKbn4wiakZXQ7L0RQFPx
KWyyGkHJbTZyj59cl+kaVV4hjxircLC5R4gzI5loChZGhDQZ14XXRmyGDWJ0ffQL
JAvvzgxTJEznCU48WzREUQNcfo7D52dQlhYNgM2DyqnoGz7O4++Und16fiLfIVan
1VPn4AhfScsikM1/nOWZJDnMxcBXfHBRUGHEbPdTvHc+LTCEDXUqflQiCOXjDN6V
PDslg28h2xIdsL8dKXzbytQVS37WX8plB9kDIwDtjAYlow8Mq7NncXVQkfq9Kku9
nFg=
-----END CERTIFICATE-----
Generated at Fri Apr 18 00:36:30 2025 by rpki-client