Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/nUgVe_wCiJGaFj6dh7AjUlPsEn0.roa
File: nUgVe_wCiJGaFj6dh7AjUlPsEn0.roa (raw, json)
Hash identifier: jaTBLGxMAzmUNw1xz6jc+rhc56U1GYTnqK8npgQkUZU=
Subject key identifier: 9D:48:15:7B:FC:02:88:91:9A:16:3E:9D:87:B0:23:52:53:EC:12:7D
Certificate issuer: /CN=c8544c778152f0fd85e5dcb44904f001e5987424
Certificate serial: 019422FC13C701F1E458FD5F1C50B0CFA497
Authority key identifier: C8:54:4C:77:81:52:F0:FD:85:E5:DC:B4:49:04:F0:01:E5:98:74:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/nUgVe_wCiJGaFj6dh7AjUlPsEn0.roa
Signing time: Wed 01 Jan 2025 17:48:52 +0000
ROA not before: Wed 01 Jan 2025 17:48:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198203
IP address blocks: 185.142.76.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 20:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:13:c7:01:f1:e4:58:fd:5f:1c:50:b0:cf:a4:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8544c778152f0fd85e5dcb44904f001e5987424
Validity
Not Before: Jan 1 17:48:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9d48157bfc0288919a163e9d87b0235253ec127d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:75:3a:54:d0:15:44:a3:2d:ff:14:88:6a:a5:
c1:35:cd:b9:05:eb:ec:57:43:96:4c:0b:6a:53:b1:
8e:e0:79:fc:6b:7b:e3:8a:03:27:78:65:85:bf:26:
bd:2e:cc:e1:2d:61:53:33:ff:60:0c:ad:43:1f:8f:
2d:79:53:f1:22:b6:41:f7:1d:c5:4a:5e:66:10:30:
c4:0b:94:f3:be:88:2d:37:bc:b7:45:2a:3b:4a:cc:
df:24:2b:a6:45:d1:95:19:4c:18:12:4d:06:b4:cd:
e6:27:1f:42:d6:d0:bc:c9:a3:da:a2:88:fc:d6:63:
33:33:9b:66:b0:3b:a5:47:47:b2:56:e5:86:46:6e:
4c:91:a3:2a:1a:12:8b:cc:5d:bc:a5:22:7d:04:a8:
c8:67:55:56:e7:dd:2b:2a:0a:2f:0b:f4:8c:67:33:
5a:12:a8:88:6b:c3:8d:08:fd:4a:2b:c2:02:78:d9:
f3:22:05:1b:0d:dc:59:cd:03:69:e9:76:23:95:97:
a2:27:c5:ab:1d:bf:9b:06:b1:19:d7:fc:46:94:d3:
c9:bc:92:36:03:ae:d6:a4:b8:a0:9a:e3:84:4c:9c:
7b:e9:2b:6e:7d:6f:88:36:9f:e5:7b:f1:88:d8:48:
61:ab:ce:f4:ac:fc:a4:83:ad:db:5d:80:9f:80:0c:
57:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:48:15:7B:FC:02:88:91:9A:16:3E:9D:87:B0:23:52:53:EC:12:7D
X509v3 Authority Key Identifier:
keyid:C8:54:4C:77:81:52:F0:FD:85:E5:DC:B4:49:04:F0:01:E5:98:74:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/nUgVe_wCiJGaFj6dh7AjUlPsEn0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.142.76.0/22
Signature Algorithm: sha256WithRSAEncryption
19:cc:cc:e0:a2:a0:2a:03:9d:01:13:38:7f:87:40:aa:b3:05:
d9:3e:66:eb:63:71:cd:5e:27:53:c7:25:45:9d:be:28:a2:e1:
34:ea:f7:79:73:09:de:88:af:a7:b8:d4:94:b3:23:3d:94:55:
1c:9f:c9:2b:b7:73:29:64:2d:f5:59:04:42:54:10:4e:46:5a:
b8:89:fe:71:5f:db:d3:c3:b7:a2:77:81:12:19:90:cf:62:d1:
0b:f3:65:52:6b:44:d0:6d:0b:5b:18:9e:11:58:78:fa:76:7b:
78:81:a6:03:5b:5f:d3:01:c0:d1:f9:76:bf:bb:e7:db:d6:cb:
59:0e:a7:6b:73:16:80:e8:a7:6c:cf:be:fb:13:e0:27:a5:bc:
24:0c:41:b2:aa:e3:68:19:cd:d2:18:42:fe:14:98:4d:7c:da:
21:cb:c4:b0:0a:df:ca:08:84:6b:5c:35:2c:88:11:f8:cc:b5:
5f:45:89:12:eb:3a:a1:3e:04:12:92:a2:4f:42:93:01:8a:65:
d0:5e:d0:a0:73:2e:2f:6a:bf:fe:06:0a:08:df:0d:84:e3:40:
4b:1e:72:d8:a9:87:09:78:2f:26:96:eb:15:7b:c4:0e:5e:4f:
04:e2:c5:24:86:c3:a0:82:08:19:ca:7d:0c:d8:c0:12:60:27:
7c:ca:bb:59
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQi/BPHAfHkWP1fHFCwz6SXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4NTQ0Yzc3ODE1MmYwZmQ4NWU1ZGNiNDQ5MDRmMDAxZTU5
ODc0MjQwHhcNMjUwMTAxMTc0ODUyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZDQ4MTU3YmZjMDI4ODkxOWExNjNlOWQ4N2IwMjM1MjUzZWMxMjdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXU6VNAVRKMt/xSIaqXBNc25Bevs
V0OWTAtqU7GO4Hn8a3vjigMneGWFvya9LszhLWFTM/9gDK1DH48teVPxIrZB9x3F
Sl5mEDDEC5TzvogtN7y3RSo7SszfJCumRdGVGUwYEk0GtM3mJx9C1tC8yaPaooj8
1mMzM5tmsDulR0eyVuWGRm5MkaMqGhKLzF28pSJ9BKjIZ1VW590rKgovC/SMZzNa
EqiIa8ONCP1KK8ICeNnzIgUbDdxZzQNp6XYjlZeiJ8WrHb+bBrEZ1/xGlNPJvJI2
A67WpLigmuOETJx76StufW+INp/le/GI2Ehhq870rPykg63bXYCfgAxXpQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ1IFXv8AoiRmhY+nYewI1JT7BJ9MB8GA1UdIwQY
MBaAFMhUTHeBUvD9heXctEkE8AHlmHQkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUZSTWQ0RlM4UDJGNWR5MFNRVHdBZVdZZENRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9hMWYzNTEtNDJmZC00ZDQ0LWE5YjMt
ZDk0MDA1MGU1NmNhLzEvblVnVmVfd0NpSkdhRmo2ZGg3QWpVbFBzRW4wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS9hMWYzNTEtNDJmZC00ZDQ0LWE5YjMtZDk0MDA1MGU1NmNh
LzEveUZSTWQ0RlM4UDJGNWR5MFNRVHdBZVdZZENRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuY5MMA0G
CSqGSIb3DQEBCwUAA4IBAQAZzMzgoqAqA50BEzh/h0CqswXZPmbrY3HNXidTxyVF
nb4oouE06vd5cwneiK+nuNSUsyM9lFUcn8krt3MpZC31WQRCVBBORlq4if5xX9vT
w7eid4ESGZDPYtEL82VSa0TQbQtbGJ4RWHj6dnt4gaYDW1/TAcDR+Xa/u+fb1stZ
DqdrcxaA6Kdsz777E+AnpbwkDEGyquNoGc3SGEL+FJhNfNohy8SwCt/KCIRrXDUs
iBH4zLVfRYkS6zqhPgQSkqJPQpMBimXQXtCgcy4var/+BgoI3w2E40BLHnLYqYcJ
eC8mlusVe8QOXk8E4sUkhsOggggZyn0M2MASYCd8yrtZ
-----END CERTIFICATE-----
Generated at Mon Apr 21 02:56:05 2025 by rpki-client