Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/r3uflPboabvJIaGhEdaIDk06CD4.roa
File: r3uflPboabvJIaGhEdaIDk06CD4.roa (raw, json)
Hash identifier: QFdRnoH0mopWuiJhq5qtq34F0JBoW9vig+Ki8iy8bE4=
Subject key identifier: AF:7B:9F:94:F6:E8:69:BB:C9:21:A1:A1:11:D6:88:0E:4D:3A:08:3E
Certificate issuer: /CN=4d70af1a99886c9101d135f54bd2bdef358b266e
Certificate serial: 0194266BBEAEF08D0E0EFC2F750E0C469D01
Authority key identifier: 4D:70:AF:1A:99:88:6C:91:01:D1:35:F5:4B:D2:BD:EF:35:8B:26:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TXCvGpmIbJEB0TX1S9K97zWLJm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/r3uflPboabvJIaGhEdaIDk06CD4.roa
Signing time: Thu 02 Jan 2025 09:49:42 +0000
ROA not before: Thu 02 Jan 2025 09:49:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35222
IP address blocks: 188.215.113.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TXCvGpmIbJEB0TX1S9K97zWLJm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 12:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:be:ae:f0:8d:0e:0e:fc:2f:75:0e:0c:46:9d:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d70af1a99886c9101d135f54bd2bdef358b266e
Validity
Not Before: Jan 2 09:49:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=af7b9f94f6e869bbc921a1a111d6880e4d3a083e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:da:92:41:e8:36:ba:94:7d:13:4b:d9:48:94:
16:b0:79:fa:f5:9d:f6:d8:eb:0b:b1:68:5f:73:92:
0c:1b:78:97:6c:5e:ee:3a:c0:de:03:10:32:34:1b:
ca:d3:d3:c6:85:5e:5c:32:41:b1:76:16:c3:a8:0b:
1b:0d:ab:31:9d:87:0d:51:59:a3:e7:63:50:b2:25:
10:5e:00:52:a0:82:42:b7:fb:e8:6e:12:9a:f6:ce:
64:3e:9c:0e:b1:96:b4:0d:d5:85:61:c0:1e:1d:88:
f3:73:76:19:a3:d2:f9:01:69:b6:86:1f:c2:b5:ef:
0c:24:27:f6:f7:66:d6:e9:5b:49:22:2b:e3:e8:ff:
ec:fd:f4:98:e7:f5:14:ca:2d:a6:61:b0:3f:5b:8e:
82:bb:7e:28:6f:eb:0e:e4:0f:ad:88:35:ff:b6:13:
2c:79:4a:cf:f6:9d:52:7c:28:8c:e3:cb:48:77:3d:
73:41:c4:67:49:e2:d9:c4:4c:f5:56:6f:cd:49:0e:
24:3b:e3:99:d3:fb:ea:16:7b:a3:63:24:44:5b:48:
7d:a0:9b:44:c6:f5:53:90:98:a1:ce:b8:86:82:d4:
fc:78:74:fc:45:a9:ac:c4:c8:61:a1:a0:e7:65:94:
d8:53:16:75:c9:f5:f5:e6:2f:49:c1:c4:3f:68:47:
f0:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:7B:9F:94:F6:E8:69:BB:C9:21:A1:A1:11:D6:88:0E:4D:3A:08:3E
X509v3 Authority Key Identifier:
keyid:4D:70:AF:1A:99:88:6C:91:01:D1:35:F5:4B:D2:BD:EF:35:8B:26:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TXCvGpmIbJEB0TX1S9K97zWLJm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/r3uflPboabvJIaGhEdaIDk06CD4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.215.113.0/24
Signature Algorithm: sha256WithRSAEncryption
10:a1:96:92:bb:96:e0:52:d1:b2:2e:b9:b7:b4:0e:ae:22:70:
b5:77:e9:3f:96:fc:c9:4e:26:ad:03:19:ac:23:19:64:39:bb:
f8:60:a5:5c:ce:d4:8e:5d:9a:11:e9:31:ee:f3:5f:39:6b:63:
29:30:b4:af:a3:24:c0:25:23:93:92:27:53:bb:48:45:6b:5e:
35:02:79:27:7c:94:46:96:ab:58:47:9e:99:bd:78:65:8d:91:
28:b4:3b:80:13:8f:94:e7:c8:67:d5:2c:2d:d9:2d:bd:68:22:
c0:1b:4e:5d:38:d7:9b:ba:08:d0:ae:9c:0d:a8:fe:cc:34:9d:
de:9c:81:43:f4:b1:8d:96:18:64:75:19:ee:15:ae:81:d4:7c:
55:ff:a3:1b:ff:bc:d5:12:b4:69:3e:7c:f4:ca:69:74:e1:ff:
75:d3:18:b3:ed:63:b5:a7:3f:00:0f:67:cd:dc:8c:b1:98:b8:
d1:bb:46:e7:1b:24:da:af:1c:89:c1:97:ea:34:50:c1:f6:bb:
d5:48:40:16:45:3e:55:df:44:22:dd:55:77:b2:d5:87:de:23:
d6:fb:19:19:90:7d:65:23:78:62:a9:6b:ad:61:fb:2a:0b:e2:
ce:9c:63:0d:a3:ba:60:e5:37:7e:cb:96:be:cf:5e:23:41:49:
f9:c4:2b:20
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQma76u8I0ODvwvdQ4MRp0BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkNzBhZjFhOTk4ODZjOTEwMWQxMzVmNTRiZDJiZGVmMzU4
YjI2NmUwHhcNMjUwMTAyMDk0OTQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZjdiOWY5NGY2ZTg2OWJiYzkyMWExYTExMWQ2ODgwZTRkM2EwODNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA19qSQeg2upR9E0vZSJQWsHn69Z32
2OsLsWhfc5IMG3iXbF7uOsDeAxAyNBvK09PGhV5cMkGxdhbDqAsbDasxnYcNUVmj
52NQsiUQXgBSoIJCt/vobhKa9s5kPpwOsZa0DdWFYcAeHYjzc3YZo9L5AWm2hh/C
te8MJCf292bW6VtJIivj6P/s/fSY5/UUyi2mYbA/W46Cu34ob+sO5A+tiDX/thMs
eUrP9p1SfCiM48tIdz1zQcRnSeLZxEz1Vm/NSQ4kO+OZ0/vqFnujYyREW0h9oJtE
xvVTkJihzriGgtT8eHT8RamsxMhhoaDnZZTYUxZ1yfX15i9JwcQ/aEfw4wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK97n5T26Gm7ySGhoRHWiA5NOgg+MB8GA1UdIwQY
MBaAFE1wrxqZiGyRAdE19UvSve81iyZuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFhDdkdwbUliSkVCMFRYMVM5Szk3eldMSm00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9hOThmYzctNzkzNS00ZWFlLTk2MmEt
NDYxYWIwZWNlZTAxLzEvcjN1ZmxQYm9hYnZKSWFHaEVkYUlEazA2Q0Q0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9hOThmYzctNzkzNS00ZWFlLTk2MmEtNDYxYWIwZWNlZTAx
LzEvVFhDdkdwbUliSkVCMFRYMVM5Szk3eldMSm00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvNdxMA0G
CSqGSIb3DQEBCwUAA4IBAQAQoZaSu5bgUtGyLrm3tA6uInC1d+k/lvzJTiatAxms
IxlkObv4YKVcztSOXZoR6THu8185a2MpMLSvoyTAJSOTkidTu0hFa141AnknfJRG
lqtYR56ZvXhljZEotDuAE4+U58hn1Swt2S29aCLAG05dONebugjQrpwNqP7MNJ3e
nIFD9LGNlhhkdRnuFa6B1HxV/6Mb/7zVErRpPnz0yml04f910xiz7WO1pz8AD2fN
3IyxmLjRu0bnGyTarxyJwZfqNFDB9rvVSEAWRT5V30Qi3VV3stWH3iPW+xkZkH1l
I3hiqWutYfsqC+LOnGMNo7pg5Td+y5a+z14jQUn5xCsg
-----END CERTIFICATE-----
Generated at Thu Apr 17 22:29:07 2025 by rpki-client