Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/P2DSCIMV0HHkBQvcusVrkVUHJ-k.roa
File: P2DSCIMV0HHkBQvcusVrkVUHJ-k.roa (raw, json)
Hash identifier: UOdNaKMoFJYMlUedUl0GUGdpyC2yCCaGtSt3gBG0pwM=
Subject key identifier: 3F:60:D2:08:83:15:D0:71:E4:05:0B:DC:BA:C5:6B:91:55:07:27:E9
Certificate issuer: /CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Certificate serial: 01941F8C3862ECAD55E6344A572F97A0440B
Authority key identifier: C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/P2DSCIMV0HHkBQvcusVrkVUHJ-k.roa
Signing time: Wed 01 Jan 2025 01:47:50 +0000
ROA not before: Wed 01 Jan 2025 01:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48678
IP address blocks: 193.106.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:38:62:ec:ad:55:e6:34:4a:57:2f:97:a0:44:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Validity
Not Before: Jan 1 01:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3f60d2088315d071e4050bdcbac56b91550727e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:53:b7:a2:a4:2d:88:36:20:e2:64:49:8e:70:
33:de:2d:18:2e:3b:8b:56:06:bd:00:99:96:92:12:
cd:54:63:9d:49:67:21:4e:8b:1e:df:24:33:73:79:
4e:ce:22:65:0e:fa:fc:56:0a:cd:99:8d:69:64:bf:
40:41:47:a9:93:4e:df:4c:1c:65:36:77:2a:80:3e:
46:d6:90:f3:1d:e4:07:42:d1:d7:09:e6:3d:ce:d4:
bb:bc:d6:b9:f5:fb:8e:1d:7c:0f:42:11:e5:89:f3:
ca:27:6c:38:d7:94:3a:de:37:55:2d:60:43:e3:59:
97:ea:3c:a0:9d:36:56:e8:53:9d:c9:ad:bf:ad:37:
98:2a:60:e1:ab:ff:40:58:39:5c:de:f3:29:4d:a2:
cd:fe:02:f3:ac:ae:8d:74:25:20:76:9c:ae:17:6c:
99:07:dd:85:56:7e:4e:bd:c5:06:47:c4:73:50:1c:
4c:86:6a:3c:6c:5c:28:e1:31:f2:b2:c9:e7:75:87:
f3:dd:18:04:c2:6c:ea:fc:f7:04:5b:aa:b4:89:14:
67:db:13:1a:af:f4:3f:98:b9:aa:53:c0:59:27:af:
b5:24:5d:39:37:f4:39:21:67:dc:99:6d:ff:32:17:
8b:f3:1e:56:6a:1d:71:5d:6a:45:34:ce:df:31:73:
19:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:60:D2:08:83:15:D0:71:E4:05:0B:DC:BA:C5:6B:91:55:07:27:E9
X509v3 Authority Key Identifier:
keyid:C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/P2DSCIMV0HHkBQvcusVrkVUHJ-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.106.196.0/24
Signature Algorithm: sha256WithRSAEncryption
53:13:a8:4c:8d:61:a4:87:40:93:61:e3:25:2b:fc:8c:b8:84:
36:ad:6e:5e:4e:2a:91:2f:01:3f:0a:21:18:ba:3f:42:a3:73:
fc:1e:d5:c1:df:4c:67:d3:8a:ad:1f:a4:b6:aa:9c:99:51:8a:
75:61:f4:0e:7b:7a:da:fc:d6:b2:55:a3:62:6b:27:39:46:4e:
9b:38:0d:6a:f3:d9:22:df:9d:74:b3:15:37:29:fb:f7:f3:82:
e9:fc:f7:a3:fb:99:ff:99:32:40:bd:5b:c5:1f:57:c9:9a:37:
10:d6:03:1b:f0:b6:3a:6b:ac:62:0c:e4:89:c3:b3:f4:6b:49:
97:c5:0d:9c:4a:cf:0e:97:21:96:ed:50:5a:15:aa:24:28:4d:
61:ef:54:00:16:93:a1:91:83:eb:cc:27:9d:dc:a4:24:cc:25:
8a:63:58:4d:52:19:ad:48:54:af:bd:4d:2d:73:0d:a1:e7:96:
b9:4a:ea:d0:f3:0f:6a:ec:0c:74:54:cb:6a:53:dc:4e:0f:ea:
2f:76:54:fd:c6:57:b4:bf:7a:76:53:62:e3:f8:0f:b6:4c:de:
2f:9b:88:15:20:ed:48:87:b2:7c:cb:81:20:25:82:8b:3e:84:
21:a7:bb:dc:67:93:53:54:4c:3e:91:76:f1:17:89:55:90:c2:
72:87:fb:b7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQfjDhi7K1V5jRKVy+XoEQLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyZWU0NTQyNmUxMmU1MGZlMzBlOGZmYzM5ZTA0NDg1ZDhm
NzMzMzkwHhcNMjUwMTAxMDE0NzUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZjYwZDIwODgzMTVkMDcxZTQwNTBiZGNiYWM1NmI5MTU1MDcyN2U5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFO3oqQtiDYg4mRJjnAz3i0YLjuL
Vga9AJmWkhLNVGOdSWchTose3yQzc3lOziJlDvr8VgrNmY1pZL9AQUepk07fTBxl
NncqgD5G1pDzHeQHQtHXCeY9ztS7vNa59fuOHXwPQhHlifPKJ2w415Q63jdVLWBD
41mX6jygnTZW6FOdya2/rTeYKmDhq/9AWDlc3vMpTaLN/gLzrK6NdCUgdpyuF2yZ
B92FVn5OvcUGR8RzUBxMhmo8bFwo4THyssnndYfz3RgEwmzq/PcEW6q0iRRn2xMa
r/Q/mLmqU8BZJ6+1JF05N/Q5IWfcmW3/MheL8x5Wah1xXWpFNM7fMXMZawIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFD9g0giDFdBx5AUL3LrFa5FVByfpMB8GA1UdIwQY
MBaAFMLuRUJuEuUP4w6P/DngRIXY9zM5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3U1RlFtNFM1UV9qRG9fOE9lQkVoZGozTXprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC83MGFhMzItOTYwNy00ZGI3LThmMWUt
ZGE3NTQzMGIxNmY2LzEvUDJEU0NJTVYwSEhrQlF2Y3VzVnJrVlVISi1rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC83MGFhMzItOTYwNy00ZGI3LThmMWUtZGE3NTQzMGIxNmY2
LzEvd3U1RlFtNFM1UV9qRG9fOE9lQkVoZGozTXprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWrEMA0G
CSqGSIb3DQEBCwUAA4IBAQBTE6hMjWGkh0CTYeMlK/yMuIQ2rW5eTiqRLwE/CiEY
uj9Co3P8HtXB30xn04qtH6S2qpyZUYp1YfQOe3ra/NayVaNiayc5Rk6bOA1q89ki
3510sxU3Kfv384Lp/Pej+5n/mTJAvVvFH1fJmjcQ1gMb8LY6a6xiDOSJw7P0a0mX
xQ2cSs8OlyGW7VBaFaokKE1h71QAFpOhkYPrzCed3KQkzCWKY1hNUhmtSFSvvU0t
cw2h55a5SurQ8w9q7Ax0VMtqU9xOD+ovdlT9xle0v3p2U2Lj+A+2TN4vm4gVIO1I
h7J8y4EgJYKLPoQhp7vcZ5NTVEw+kXbxF4lVkMJyh/u3
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:22:22 2025 by rpki-client