Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/FeD_-2NSvz_oTh1LHrP44NqzWIo.roa
File: FeD_-2NSvz_oTh1LHrP44NqzWIo.roa (raw, json)
Hash identifier: M0rfgf8nLa/Z7WmSdsaO8N+Wk6yxPhPTCcsAwupLmJk=
Subject key identifier: 15:E0:FF:FB:63:52:BF:3F:E8:4E:1D:4B:1E:B3:F8:E0:DA:B3:58:8A
Certificate issuer: /CN=5753c06290a371994d7577318685f5bc4a538d47
Certificate serial: 0194266B32BD2A310BD1814DA1BD062B2F31
Authority key identifier: 57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/FeD_-2NSvz_oTh1LHrP44NqzWIo.roa
Signing time: Thu 02 Jan 2025 09:49:06 +0000
ROA not before: Thu 02 Jan 2025 09:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209835
IP address blocks: 158.172.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 13:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:32:bd:2a:31:0b:d1:81:4d:a1:bd:06:2b:2f:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5753c06290a371994d7577318685f5bc4a538d47
Validity
Not Before: Jan 2 09:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=15e0fffb6352bf3fe84e1d4b1eb3f8e0dab3588a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b0:e5:d4:2c:ca:cf:f8:7a:e5:89:3c:60:0d:
46:5f:af:fa:30:f8:f0:af:00:3c:0f:3c:3b:b8:0c:
03:22:d4:64:7a:5e:03:af:60:f6:1c:db:f9:cc:ee:
db:fc:a2:f2:a6:1a:b2:e1:16:da:54:24:62:e6:26:
78:f5:3d:03:d4:75:d4:d6:20:02:fd:dd:24:a3:86:
f1:ab:3d:88:d7:4a:6b:36:82:71:d4:a0:eb:08:aa:
ca:02:63:dc:51:f2:a5:dd:e8:03:1a:c0:98:c2:b0:
26:f3:0e:7d:d3:17:88:97:12:e7:9d:12:fb:8e:c1:
fc:c9:18:f0:58:9b:bf:77:72:62:db:54:80:fa:47:
3c:d7:df:f8:1a:b2:29:f8:a9:64:79:ea:98:3c:b8:
ca:7c:94:6f:d7:2f:75:84:b2:0a:0f:3d:4f:b2:b1:
1b:bb:28:e9:57:4e:fd:69:f1:76:f2:fe:1c:44:c8:
67:6f:c9:3e:f0:f7:74:f1:85:d0:7d:c1:66:3b:88:
d4:49:83:fc:45:7c:b8:8a:48:d2:6d:64:3a:fe:a3:
c1:dd:6f:19:e5:df:80:0d:3e:91:13:f4:77:da:2c:
a5:0d:65:42:5e:6a:65:bb:75:ba:03:b6:ab:53:fe:
cc:5a:26:1e:ec:d1:52:45:5d:4a:f7:96:66:16:b6:
a5:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:E0:FF:FB:63:52:BF:3F:E8:4E:1D:4B:1E:B3:F8:E0:DA:B3:58:8A
X509v3 Authority Key Identifier:
keyid:57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/FeD_-2NSvz_oTh1LHrP44NqzWIo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.172.143.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:21:ee:57:89:32:b1:e3:5f:e1:31:d0:c4:36:63:b0:80:23:
b1:67:c3:ac:f7:f8:ef:5c:45:03:0a:86:b4:9d:be:a8:1f:0b:
8d:8a:bf:dd:c6:8e:26:95:b2:2b:7b:ea:02:20:c2:2b:61:8d:
68:fd:0a:0b:a1:50:a4:ea:22:9d:5c:ca:e8:4d:40:b9:67:37:
26:2e:38:5a:37:3e:3e:bf:60:46:a7:2b:cb:f5:b5:45:f2:bc:
42:1d:4c:1c:c9:eb:45:00:9b:14:41:df:c3:5b:64:fc:35:b5:
44:75:5f:7d:84:74:58:0c:b7:5b:d1:6e:44:7e:f5:17:3e:5a:
11:b6:5f:cf:8c:67:28:82:11:c9:88:44:d1:d7:78:a6:70:b4:
9a:ef:4d:8a:5c:cc:79:fc:19:8b:40:e1:2d:6e:61:d4:0c:71:
da:b3:d9:19:a4:b9:07:cd:b0:f9:93:7e:dc:f0:6d:ce:04:95:
8f:0f:b2:a6:8f:78:83:33:c9:81:30:25:59:29:07:5d:03:43:
75:4b:82:ea:7a:d4:57:be:5b:5e:4b:f2:37:d3:e3:b6:ec:38:
3f:f4:5b:ae:99:cf:25:b8:91:36:89:c6:98:aa:15:f1:b2:3f:
59:52:b9:63:0c:a4:91:8e:09:ee:aa:4c:ef:98:88:af:82:af:
26:b8:7b:4e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQmazK9KjEL0YFNob0GKy8xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3NTNjMDYyOTBhMzcxOTk0ZDc1NzczMTg2ODVmNWJjNGE1
MzhkNDcwHhcNMjUwMTAyMDk0OTA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNWUwZmZmYjYzNTJiZjNmZTg0ZTFkNGIxZWIzZjhlMGRhYjM1ODhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbDl1CzKz/h65Yk8YA1GX6/6MPjw
rwA8Dzw7uAwDItRkel4Dr2D2HNv5zO7b/KLyphqy4RbaVCRi5iZ49T0D1HXU1iAC
/d0ko4bxqz2I10prNoJx1KDrCKrKAmPcUfKl3egDGsCYwrAm8w590xeIlxLnnRL7
jsH8yRjwWJu/d3Ji21SA+kc819/4GrIp+KlkeeqYPLjKfJRv1y91hLIKDz1PsrEb
uyjpV079afF28v4cRMhnb8k+8Pd08YXQfcFmO4jUSYP8RXy4ikjSbWQ6/qPB3W8Z
5d+ADT6RE/R32iylDWVCXmplu3W6A7arU/7MWiYe7NFSRV1K95ZmFralCQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBXg//tjUr8/6E4dSx6z+ODas1iKMB8GA1UdIwQY
MBaAFFdTwGKQo3GZTXV3MYaF9bxKU41HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjFQQVlwQ2pjWmxOZFhjeGhvWDF2RXBUalVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9iNDFhYjYtYjlmMy00YjRhLTliN2It
MWVkMTA5NTRiZDk2LzEvRmVEXy0yTlN2el9vVGgxTEhyUDQ0TnF6V0lvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9iNDFhYjYtYjlmMy00YjRhLTliN2ItMWVkMTA5NTRiZDk2
LzEvVjFQQVlwQ2pjWmxOZFhjeGhvWDF2RXBUalVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnqyPMA0G
CSqGSIb3DQEBCwUAA4IBAQBKIe5XiTKx41/hMdDENmOwgCOxZ8Os9/jvXEUDCoa0
nb6oHwuNir/dxo4mlbIre+oCIMIrYY1o/QoLoVCk6iKdXMroTUC5ZzcmLjhaNz4+
v2BGpyvL9bVF8rxCHUwcyetFAJsUQd/DW2T8NbVEdV99hHRYDLdb0W5EfvUXPloR
tl/PjGcoghHJiETR13imcLSa702KXMx5/BmLQOEtbmHUDHHas9kZpLkHzbD5k37c
8G3OBJWPD7Kmj3iDM8mBMCVZKQddA0N1S4LqetRXvlteS/I30+O27Dg/9Fuumc8l
uJE2icaYqhXxsj9ZUrljDKSRjgnuqkzvmIivgq8muHtO
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:05:56 2025 by rpki-client