Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/svu4gQ0pPgVBKQU6339vQZbXEAQ.roa
File: svu4gQ0pPgVBKQU6339vQZbXEAQ.roa (raw, json)
Hash identifier: RAHfZT/d13ig7RU8lQNXL5nHpSOa8CZeRzLwR9xpJH8=
Subject key identifier: B2:FB:B8:81:0D:29:3E:05:41:29:05:3A:DF:7F:6F:41:96:D7:10:04
Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Certificate serial: 01947B2C46570390A9118C61862E7224F01C
Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/svu4gQ0pPgVBKQU6339vQZbXEAQ.roa
Signing time: Sat 18 Jan 2025 20:48:06 +0000
ROA not before: Sat 18 Jan 2025 20:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 53356
IP address blocks: 217.25.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 02:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:7b:2c:46:57:03:90:a9:11:8c:61:86:2e:72:24:f0:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Validity
Not Before: Jan 18 20:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b2fbb8810d293e054129053adf7f6f4196d71004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7f:d8:ec:53:bb:82:9c:23:6a:91:a4:83:1e:
d4:1a:dc:19:4f:29:26:19:b1:d5:ca:e7:ad:40:c4:
5c:09:bf:76:e1:e3:fb:32:07:aa:2c:30:cc:44:2c:
51:e9:bc:04:54:0e:d8:44:7f:ba:c4:e9:39:6b:cf:
96:ce:cf:59:3a:d2:21:aa:05:cf:34:a7:8e:2b:24:
49:2f:db:91:d1:d0:bd:c8:4e:99:db:63:1f:75:69:
6e:24:56:43:78:3e:48:2e:44:7c:e2:f3:bf:bd:4c:
9e:58:1e:2a:d0:92:69:66:87:a2:4e:4a:9c:19:ab:
ac:30:0c:5a:56:a0:8a:8e:4d:e8:f5:86:5d:ba:54:
a0:b2:11:f2:b1:79:62:4b:58:29:57:0b:17:8f:46:
8e:b9:54:3b:37:45:36:49:b5:81:c1:e8:0f:c5:a8:
c7:46:14:5c:a7:f1:51:05:f3:d9:28:39:95:d8:da:
8b:58:6b:1d:5e:c1:13:e4:43:a7:f9:7a:8f:6c:55:
a9:bf:7b:68:2e:5c:49:c8:46:81:5f:9b:ec:39:fa:
14:26:22:ca:99:1b:9a:f5:17:f5:d8:3a:d4:7a:a7:
7f:21:df:50:74:09:46:33:b0:40:3e:a8:4f:06:98:
1f:b6:c9:a2:84:ca:2a:64:06:5b:4e:27:0a:99:84:
c4:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:FB:B8:81:0D:29:3E:05:41:29:05:3A:DF:7F:6F:41:96:D7:10:04
X509v3 Authority Key Identifier:
keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/svu4gQ0pPgVBKQU6339vQZbXEAQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.25.12.0/24
Signature Algorithm: sha256WithRSAEncryption
86:0b:46:ea:90:5d:ee:8d:78:51:90:83:eb:9a:18:b2:fa:f3:
f3:43:e6:0f:1f:20:0e:20:c4:45:93:c9:78:f8:65:d1:5b:ff:
0d:05:3c:22:e3:ec:6e:c1:ea:12:f2:64:71:75:2a:de:ee:b5:
4a:f9:02:c5:66:9d:1f:77:45:f5:d1:64:5d:bc:a2:36:54:7b:
6c:ea:c8:64:96:f2:26:8e:0e:2c:f8:9d:64:01:e9:49:b2:37:
de:f5:34:b0:4b:7a:8f:62:1c:68:21:17:9d:cb:90:08:45:cd:
99:c0:79:d0:2e:4f:d0:0b:81:09:e8:b0:d3:a2:59:63:c4:cb:
ce:79:00:82:35:f7:47:8b:45:e0:5c:94:c7:e3:00:b7:8b:97:
1e:d7:03:b8:ed:ee:33:35:f6:8b:e7:62:7b:4d:0c:5d:96:02:
9a:42:d0:f3:07:4c:23:3a:de:f3:fe:28:56:cb:98:c0:00:38:
00:91:8e:6d:51:ad:04:5b:51:fb:f1:48:60:6d:32:3d:e5:80:
0e:fd:9d:aa:ce:07:7d:b3:cc:2d:3b:d3:dd:19:6d:34:3f:74:
69:85:07:7c:87:09:9b:00:44:98:89:11:71:67:70:42:96:af:
28:95:dd:46:66:0f:87:63:53:3b:2b:85:64:47:47:3e:61:c6:
f7:ff:1e:b8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZR7LEZXA5CpEYxhhi5yJPAcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmZjgwY2JkZmUxODM1NGEzY2ZkYmEyZmUwNzlhYTJlYmM1
OGRjZDQwHhcNMjUwMTE4MjA0ODA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMmZiYjg4MTBkMjkzZTA1NDEyOTA1M2FkZjdmNmY0MTk2ZDcxMDA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApn/Y7FO7gpwjapGkgx7UGtwZTykm
GbHVyuetQMRcCb924eP7MgeqLDDMRCxR6bwEVA7YRH+6xOk5a8+Wzs9ZOtIhqgXP
NKeOKyRJL9uR0dC9yE6Z22MfdWluJFZDeD5ILkR84vO/vUyeWB4q0JJpZoeiTkqc
GausMAxaVqCKjk3o9YZdulSgshHysXliS1gpVwsXj0aOuVQ7N0U2SbWBwegPxajH
RhRcp/FRBfPZKDmV2NqLWGsdXsET5EOn+XqPbFWpv3toLlxJyEaBX5vsOfoUJiLK
mRua9Rf12DrUeqd/Id9QdAlGM7BAPqhPBpgftsmihMoqZAZbTicKmYTE9wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLL7uIENKT4FQSkFOt9/b0GW1xAEMB8GA1UdIwQY
MBaAFA/4DL3+GDVKPP26L+B5qi68WNzUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRF9nTXZmNFlOVW84X2JvdjRIbXFMcnhZM05RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8xMjk1NjQtZjFkYi00ZGM1LTg5MDYt
NmZjZGNkNWFiNjYwLzEvc3Z1NGdRMHBQZ1ZCS1FVNjMzOXZRWmJYRUFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8xMjk1NjQtZjFkYi00ZGM1LTg5MDYtNmZjZGNkNWFiNjYw
LzEvRF9nTXZmNFlOVW84X2JvdjRIbXFMcnhZM05RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2RkMMA0G
CSqGSIb3DQEBCwUAA4IBAQCGC0bqkF3ujXhRkIPrmhiy+vPzQ+YPHyAOIMRFk8l4
+GXRW/8NBTwi4+xuweoS8mRxdSre7rVK+QLFZp0fd0X10WRdvKI2VHts6shklvIm
jg4s+J1kAelJsjfe9TSwS3qPYhxoIRedy5AIRc2ZwHnQLk/QC4EJ6LDTolljxMvO
eQCCNfdHi0XgXJTH4wC3i5ce1wO47e4zNfaL52J7TQxdlgKaQtDzB0wjOt7z/ihW
y5jAADgAkY5tUa0EW1H78UhgbTI95YAO/Z2qzgd9s8wtO9PdGW00P3RphQd8hwmb
AESYiRFxZ3BClq8old1GZg+HY1M7K4VkR0c+Ycb3/x64
-----END CERTIFICATE-----
Generated at Sat Apr 5 08:16:24 2025 by rpki-client