Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/50f08f-f907-44de-be94-05764c7edaa7/1/18JawMIQ4IIjxCBNljP_sugctIs.roa
File: 18JawMIQ4IIjxCBNljP_sugctIs.roa (raw, json)
Hash identifier: EGBShqy4nnzMqWs1NYZxzIjsKkDa8M7h19J8gjpdtvA=
Subject key identifier: D7:C2:5A:C0:C2:10:E0:82:23:C4:20:4D:96:33:FF:B2:E8:1C:B4:8B
Certificate issuer: /CN=4ab6d7c468d092c921314d66473cfa53851cd686
Certificate serial: 019422FB5C1BB870CF40837A1A1669C9DC9E
Authority key identifier: 4A:B6:D7:C4:68:D0:92:C9:21:31:4D:66:47:3C:FA:53:85:1C:D6:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SrbXxGjQkskhMU1mRzz6U4Uc1oY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/50f08f-f907-44de-be94-05764c7edaa7/1/18JawMIQ4IIjxCBNljP_sugctIs.roa
Signing time: Wed 01 Jan 2025 17:48:05 +0000
ROA not before: Wed 01 Jan 2025 17:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21183
IP address blocks: 80.91.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/50f08f-f907-44de-be94-05764c7edaa7/1/SrbXxGjQkskhMU1mRzz6U4Uc1oY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/50f08f-f907-44de-be94-05764c7edaa7/1/SrbXxGjQkskhMU1mRzz6U4Uc1oY.mft
rsync://rpki.ripe.net/repository/DEFAULT/SrbXxGjQkskhMU1mRzz6U4Uc1oY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:5c:1b:b8:70:cf:40:83:7a:1a:16:69:c9:dc:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ab6d7c468d092c921314d66473cfa53851cd686
Validity
Not Before: Jan 1 17:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d7c25ac0c210e08223c4204d9633ffb2e81cb48b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:5e:35:f2:dd:86:df:c3:4f:1e:c4:38:6e:60:
a8:3d:a1:10:f4:80:86:f2:d5:b0:99:79:0d:53:d6:
ec:73:f0:dc:90:ba:67:a2:34:a3:04:b4:6c:73:a0:
dd:05:53:b4:9a:fc:ce:89:c4:c3:b6:43:51:eb:f7:
fd:98:91:55:82:07:6f:89:1b:a4:d6:6f:57:2b:67:
45:41:79:ae:4d:7b:10:aa:60:4d:57:5d:c9:a2:4f:
b1:6f:bf:72:d1:25:af:63:d5:2b:ed:6d:c5:39:c2:
0e:22:51:4a:f7:93:61:64:b4:1a:95:dc:b8:f7:c5:
4d:94:d6:79:56:34:bc:38:c3:5f:bd:9c:f5:96:62:
a3:98:31:3f:a2:78:fa:61:c5:00:4f:d1:9b:5a:f1:
e0:d7:bd:73:f9:75:78:d9:57:d1:57:26:18:8a:95:
30:8c:07:97:0a:d5:b1:a1:6a:95:58:89:03:62:58:
2f:7a:30:d4:58:6a:57:84:d4:c6:1c:cd:b4:a6:dc:
f9:80:39:17:07:49:54:93:82:53:c9:eb:29:d7:4c:
d4:bd:b2:44:e9:51:5d:8f:0e:bd:ba:07:00:7f:52:
ca:5a:ce:62:fb:7e:c6:c2:29:6d:4d:5b:8d:cc:8c:
44:1c:64:91:67:56:c8:74:b2:0c:9a:c6:af:84:ef:
53:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:C2:5A:C0:C2:10:E0:82:23:C4:20:4D:96:33:FF:B2:E8:1C:B4:8B
X509v3 Authority Key Identifier:
keyid:4A:B6:D7:C4:68:D0:92:C9:21:31:4D:66:47:3C:FA:53:85:1C:D6:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SrbXxGjQkskhMU1mRzz6U4Uc1oY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/50f08f-f907-44de-be94-05764c7edaa7/1/18JawMIQ4IIjxCBNljP_sugctIs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/50f08f-f907-44de-be94-05764c7edaa7/1/SrbXxGjQkskhMU1mRzz6U4Uc1oY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.91.124.0/24
Signature Algorithm: sha256WithRSAEncryption
47:d0:96:b7:b1:14:19:aa:ff:73:77:28:41:bd:0b:14:b8:4d:
6a:27:72:68:bd:d1:fa:17:ab:a9:f6:25:8d:7f:7f:12:7b:13:
09:d6:66:13:68:c5:70:c7:05:ea:09:47:97:a8:24:c5:4a:79:
15:b4:54:88:ba:cc:45:ca:29:8a:b3:e8:d5:fe:8b:78:ee:ab:
97:2c:09:be:76:a4:a6:fb:83:6e:c7:51:f4:d6:cd:84:0c:d2:
66:49:97:11:c3:e2:d4:32:c5:52:2e:4f:ad:4f:cb:ed:0b:9a:
43:14:f3:fb:18:6a:21:9c:c1:d5:58:b6:e0:fc:32:3b:71:37:
35:e9:f4:30:a7:39:d7:51:ab:3a:4b:5f:4f:d8:01:16:d9:c1:
56:cf:47:92:1e:22:13:12:14:e1:6a:4b:ce:b8:ff:58:1b:bf:
89:1e:3e:f6:b0:9a:4c:2d:cb:23:c9:c0:f7:73:49:35:b9:03:
2d:59:4d:d7:ed:12:81:ca:70:f7:e6:98:11:a0:41:08:bf:3e:
22:9b:43:1c:c8:5e:2b:7e:d5:26:b5:88:cb:c3:69:a0:58:bf:
c2:0a:76:4f:67:4e:3d:b2:c6:e6:b3:9b:10:1d:62:e0:25:a6:
4d:ad:7c:fb:f8:bb:81:cf:e1:10:9c:69:c2:d1:94:79:25:31:
77:d3:d4:c1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQi+1wbuHDPQIN6GhZpydyeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhYjZkN2M0NjhkMDkyYzkyMTMxNGQ2NjQ3M2NmYTUzODUx
Y2Q2ODYwHhcNMjUwMTAxMTc0ODA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkN2MyNWFjMGMyMTBlMDgyMjNjNDIwNGQ5NjMzZmZiMmU4MWNiNDhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0V418t2G38NPHsQ4bmCoPaEQ9ICG
8tWwmXkNU9bsc/DckLpnojSjBLRsc6DdBVO0mvzOicTDtkNR6/f9mJFVggdviRuk
1m9XK2dFQXmuTXsQqmBNV13Jok+xb79y0SWvY9Ur7W3FOcIOIlFK95NhZLQaldy4
98VNlNZ5VjS8OMNfvZz1lmKjmDE/onj6YcUAT9GbWvHg171z+XV42VfRVyYYipUw
jAeXCtWxoWqVWIkDYlgvejDUWGpXhNTGHM20ptz5gDkXB0lUk4JTyesp10zUvbJE
6VFdjw69ugcAf1LKWs5i+37GwiltTVuNzIxEHGSRZ1bIdLIMmsavhO9TzwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNfCWsDCEOCCI8QgTZYz/7LoHLSLMB8GA1UdIwQY
MBaAFEq218Ro0JLJITFNZkc8+lOFHNaGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3JiWHhHalFrc2toTVUxbVJ6ejZVNFVjMW9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy81MGYwOGYtZjkwNy00NGRlLWJlOTQt
MDU3NjRjN2VkYWE3LzEvMThKYXdNSVE0SUlqeENCTmxqUF9zdWdjdElzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy81MGYwOGYtZjkwNy00NGRlLWJlOTQtMDU3NjRjN2VkYWE3
LzEvU3JiWHhHalFrc2toTVUxbVJ6ejZVNFVjMW9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUFt8MA0G
CSqGSIb3DQEBCwUAA4IBAQBH0Ja3sRQZqv9zdyhBvQsUuE1qJ3JovdH6F6up9iWN
f38SexMJ1mYTaMVwxwXqCUeXqCTFSnkVtFSIusxFyimKs+jV/ot47quXLAm+dqSm
+4Nux1H01s2EDNJmSZcRw+LUMsVSLk+tT8vtC5pDFPP7GGohnMHVWLbg/DI7cTc1
6fQwpznXUas6S19P2AEW2cFWz0eSHiITEhThakvOuP9YG7+JHj72sJpMLcsjycD3
c0k1uQMtWU3X7RKBynD35pgRoEEIvz4im0McyF4rftUmtYjLw2mgWL/CCnZPZ049
ssbms5sQHWLgJaZNrXz7+LuBz+EQnGnC0ZR5JTF309TB
-----END CERTIFICATE-----
Generated at Sun Apr 20 04:03:18 2025 by rpki-client