Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/2mMFFVEf9RI7laeK707TbUw9w1o.roa
File: 2mMFFVEf9RI7laeK707TbUw9w1o.roa (raw, json)
Hash identifier: lJtAZDZI6kWuia4ewbwmh2H0Ib7YOsmGLnMGMcXt0g8=
Subject key identifier: DA:63:05:15:51:1F:F5:12:3B:95:A7:8A:EF:4E:D3:6D:4C:3D:C3:5A
Certificate issuer: /CN=b3c51b0c063cfc16943fc9a47e2c805990f6eaae
Certificate serial: 0194236A006A81C6F65492EA94D1FF334BE1
Authority key identifier: B3:C5:1B:0C:06:3C:FC:16:94:3F:C9:A4:7E:2C:80:59:90:F6:EA:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/2mMFFVEf9RI7laeK707TbUw9w1o.roa
Signing time: Wed 01 Jan 2025 19:48:56 +0000
ROA not before: Wed 01 Jan 2025 19:48:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197389
IP address blocks: 5.172.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.mft
rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:00:6a:81:c6:f6:54:92:ea:94:d1:ff:33:4b:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3c51b0c063cfc16943fc9a47e2c805990f6eaae
Validity
Not Before: Jan 1 19:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=da630515511ff5123b95a78aef4ed36d4c3dc35a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c3:ac:34:e5:c8:de:55:52:34:b0:95:12:fb:
ac:9c:54:9f:59:d2:0c:60:91:2f:ec:6e:d7:75:75:
d3:b4:97:af:9b:d1:68:e4:d6:9e:8b:7c:76:36:c5:
00:78:98:53:da:9f:62:25:3a:ca:e3:0d:be:5a:7d:
f2:f2:16:59:f4:cf:58:84:6c:ea:db:5e:9c:e9:a4:
1b:ec:c6:75:a2:7a:be:2a:54:9e:ef:b1:70:03:14:
3d:0d:6c:72:83:8f:32:96:5c:18:10:4c:79:75:d9:
79:0c:0f:6c:e8:f4:88:0c:4f:06:55:61:13:90:e0:
d2:1d:1f:3e:4e:32:6f:d0:22:ee:31:3c:74:0c:ed:
c3:ff:14:e3:26:d2:9e:01:77:e8:20:ea:bd:be:87:
64:78:5f:f7:ca:26:f4:bb:e2:4a:2d:da:b7:81:c9:
84:37:99:36:69:a6:89:b2:ee:ae:ec:01:fa:c4:d7:
01:b7:53:51:33:76:20:23:1e:77:f3:6b:63:a8:65:
e7:a5:a2:b4:67:18:c3:23:60:75:ec:db:60:cf:6f:
13:c2:26:16:9e:b6:d7:6b:f5:a5:98:67:3a:36:af:
04:b0:2f:a5:a8:d3:81:ec:dc:44:f9:7e:a7:0f:c8:
17:b1:b3:b1:ce:73:d7:46:55:c3:b7:46:87:61:a8:
66:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:63:05:15:51:1F:F5:12:3B:95:A7:8A:EF:4E:D3:6D:4C:3D:C3:5A
X509v3 Authority Key Identifier:
keyid:B3:C5:1B:0C:06:3C:FC:16:94:3F:C9:A4:7E:2C:80:59:90:F6:EA:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/2mMFFVEf9RI7laeK707TbUw9w1o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.172.200.0/24
Signature Algorithm: sha256WithRSAEncryption
81:a1:52:a3:2e:6d:00:6d:fd:21:c0:8f:18:7d:dc:4d:c6:a6:
3f:0e:0d:26:c6:b0:87:2b:cb:cd:35:d6:8a:31:59:22:4e:ed:
83:8b:67:b8:13:c6:b1:cc:04:98:1a:48:c1:08:88:d0:2a:61:
8d:07:62:f7:ab:ed:29:e3:de:e8:46:f2:65:08:e8:b4:02:22:
b3:0d:ec:be:28:70:f0:d0:23:0d:ba:66:9e:85:d4:f5:2e:15:
f5:a3:fc:a2:b7:e3:f0:0a:ff:90:5b:c1:bc:2f:eb:92:8c:c4:
95:b6:a2:a5:1c:e0:05:65:84:6e:70:3c:d4:91:6b:71:92:5b:
e8:0c:7f:23:da:cd:51:f2:2b:55:16:37:0e:04:0c:75:85:7d:
19:4e:d9:1e:bb:48:44:69:89:b1:46:a0:ae:c7:27:c6:25:62:
5e:aa:a7:9b:0f:cb:18:bd:76:46:f2:c7:14:d3:87:13:4b:3c:
1b:7e:d2:33:e6:09:a4:c0:60:89:ed:75:6a:49:bf:a3:f8:81:
38:2f:68:ee:52:1e:21:b0:66:31:5f:f3:2c:5d:76:82:e2:d7:
39:ef:94:8e:e1:e3:7a:2d:c0:03:9b:f6:06:71:2a:67:de:a6:
68:e4:d0:df:15:bf:cc:68:27:cd:63:03:ef:17:dc:9b:73:55:
0b:8e:1c:8d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQjagBqgcb2VJLqlNH/M0vhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzYzUxYjBjMDYzY2ZjMTY5NDNmYzlhNDdlMmM4MDU5OTBm
NmVhYWUwHhcNMjUwMTAxMTk0ODU2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYTYzMDUxNTUxMWZmNTEyM2I5NWE3OGFlZjRlZDM2ZDRjM2RjMzVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcOsNOXI3lVSNLCVEvusnFSfWdIM
YJEv7G7XdXXTtJevm9Fo5Naei3x2NsUAeJhT2p9iJTrK4w2+Wn3y8hZZ9M9YhGzq
216c6aQb7MZ1onq+KlSe77FwAxQ9DWxyg48yllwYEEx5ddl5DA9s6PSIDE8GVWET
kODSHR8+TjJv0CLuMTx0DO3D/xTjJtKeAXfoIOq9vodkeF/3yib0u+JKLdq3gcmE
N5k2aaaJsu6u7AH6xNcBt1NRM3YgIx5382tjqGXnpaK0ZxjDI2B17Ntgz28TwiYW
nrbXa/WlmGc6Nq8EsC+lqNOB7NxE+X6nD8gXsbOxznPXRlXDt0aHYahmQwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNpjBRVRH/USO5Wniu9O021MPcNaMB8GA1UdIwQY
MBaAFLPFGwwGPPwWlD/JpH4sgFmQ9uquMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczhVYkRBWThfQmFVUDhta2ZpeUFXWkQyNnE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi81ODc3OTItYmFlOS00MTgzLWE0YjEt
ZmY1ZjFhZDY5MjY2LzEvMm1NRkZWRWY5Ukk3bGFlSzcwN1RiVXc5dzFvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi81ODc3OTItYmFlOS00MTgzLWE0YjEtZmY1ZjFhZDY5MjY2
LzEvczhVYkRBWThfQmFVUDhta2ZpeUFXWkQyNnE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABazIMA0G
CSqGSIb3DQEBCwUAA4IBAQCBoVKjLm0Abf0hwI8YfdxNxqY/Dg0mxrCHK8vNNdaK
MVkiTu2Di2e4E8axzASYGkjBCIjQKmGNB2L3q+0p497oRvJlCOi0AiKzDey+KHDw
0CMNumaehdT1LhX1o/yit+PwCv+QW8G8L+uSjMSVtqKlHOAFZYRucDzUkWtxklvo
DH8j2s1R8itVFjcOBAx1hX0ZTtkeu0hEaYmxRqCuxyfGJWJeqqebD8sYvXZG8scU
04cTSzwbftIz5gmkwGCJ7XVqSb+j+IE4L2juUh4hsGYxX/MsXXaC4tc575SO4eN6
LcADm/YGcSpn3qZo5NDfFb/MaCfNYwPvF9ybc1ULjhyN
-----END CERTIFICATE-----
Generated at Mon Apr 14 09:37:00 2025 by rpki-client