Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/f97aed-f5c2-4fb7-a7d1-0725f0697b83/1/cBsFVB26JCMAz1JmmMw2rMdGhDc.roa
File: cBsFVB26JCMAz1JmmMw2rMdGhDc.roa (raw, json)
Hash identifier: T49iCpRELOVmeVt8pXk4tghuepmEHEqGlpGQeMuT87g=
Subject key identifier: 70:1B:05:54:1D:BA:24:23:00:CF:52:66:98:CC:36:AC:C7:46:84:37
Certificate issuer: /CN=60e88ffe6f0de5f2f1fc9d14ef62f25670bd5b4a
Certificate serial: 019422FB71DCBA8306429DE81CE0D6C78890
Authority key identifier: 60:E8:8F:FE:6F:0D:E5:F2:F1:FC:9D:14:EF:62:F2:56:70:BD:5B:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YOiP_m8N5fLx_J0U72LyVnC9W0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/f97aed-f5c2-4fb7-a7d1-0725f0697b83/1/cBsFVB26JCMAz1JmmMw2rMdGhDc.roa
Signing time: Wed 01 Jan 2025 17:48:11 +0000
ROA not before: Wed 01 Jan 2025 17:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 52152
IP address blocks: 195.54.190.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/f97aed-f5c2-4fb7-a7d1-0725f0697b83/1/YOiP_m8N5fLx_J0U72LyVnC9W0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/f97aed-f5c2-4fb7-a7d1-0725f0697b83/1/YOiP_m8N5fLx_J0U72LyVnC9W0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/YOiP_m8N5fLx_J0U72LyVnC9W0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:71:dc:ba:83:06:42:9d:e8:1c:e0:d6:c7:88:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60e88ffe6f0de5f2f1fc9d14ef62f25670bd5b4a
Validity
Not Before: Jan 1 17:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=701b05541dba242300cf526698cc36acc7468437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:65:fc:dc:6c:16:df:33:8f:9c:de:cf:a2:68:
34:6a:36:0f:88:1e:7b:9f:a2:36:a4:af:2d:bc:3c:
41:8b:a2:3c:25:18:b7:da:17:6b:ba:4d:fc:a6:0f:
d5:95:32:27:7e:e8:52:2b:e1:cd:63:d8:53:24:55:
05:4f:c1:cf:d7:7d:c5:39:f7:c4:68:fa:aa:49:1b:
d3:57:76:6a:c6:f2:c4:db:f9:cb:d3:a1:82:00:36:
b8:67:8d:97:68:56:7e:5c:a4:f8:1a:62:3b:e3:34:
b8:7a:2e:82:87:fa:fb:e1:e0:00:2d:77:40:63:10:
23:b0:ce:8a:27:b1:35:ef:5b:40:fd:9a:f9:c5:53:
22:0d:20:fb:43:d6:58:1c:19:b8:74:ee:de:89:90:
33:8d:cd:b7:54:21:c5:b3:cf:a2:c8:97:5d:bd:fd:
c7:ad:f1:06:9f:0e:b8:06:f1:3f:7c:77:7e:81:fe:
78:a9:c0:1b:e1:35:14:34:87:02:12:8f:61:15:b8:
10:c0:41:52:8a:c8:b4:2f:65:e5:42:ed:1b:61:79:
ea:16:7a:be:fb:58:c6:81:22:93:40:a1:af:84:4a:
c3:2c:4d:d0:88:6a:ce:63:b7:ee:1a:d2:c8:cb:93:
3d:94:c8:70:03:aa:e2:ab:07:d2:1a:ee:51:cf:27:
03:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:1B:05:54:1D:BA:24:23:00:CF:52:66:98:CC:36:AC:C7:46:84:37
X509v3 Authority Key Identifier:
keyid:60:E8:8F:FE:6F:0D:E5:F2:F1:FC:9D:14:EF:62:F2:56:70:BD:5B:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOiP_m8N5fLx_J0U72LyVnC9W0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f97aed-f5c2-4fb7-a7d1-0725f0697b83/1/cBsFVB26JCMAz1JmmMw2rMdGhDc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f97aed-f5c2-4fb7-a7d1-0725f0697b83/1/YOiP_m8N5fLx_J0U72LyVnC9W0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.54.190.0/23
Signature Algorithm: sha256WithRSAEncryption
04:4b:44:d3:c0:45:86:40:ca:49:a4:c5:72:da:47:7a:1f:ac:
7c:72:91:5b:de:70:b9:b2:50:bf:34:9e:82:a8:46:45:ee:da:
ee:80:84:85:a9:66:76:07:28:b5:c9:30:b3:5e:25:da:ba:9d:
b3:30:84:35:9e:fd:42:58:6e:c2:e6:49:29:33:9c:8b:46:b7:
74:3c:35:86:a5:df:17:ae:19:a7:eb:9f:66:23:fc:0d:f9:9d:
22:47:4a:8f:cf:45:c3:a4:b3:e1:c8:d6:98:b2:c3:c5:20:1e:
aa:ed:b6:97:8c:58:df:c6:07:79:4e:43:66:3b:70:46:f2:49:
7f:34:73:f3:e0:97:0a:d4:67:e7:22:65:b4:c8:3d:47:38:5c:
2a:87:d4:44:d6:7a:c5:b6:f6:8b:50:90:18:ab:40:11:a3:64:
25:05:17:13:57:7e:ee:ff:4f:51:40:19:2c:5b:93:4b:e5:c4:
53:01:d8:c3:53:11:16:01:b8:90:ce:af:e4:9f:3f:08:53:5e:
ba:18:c6:03:56:0c:21:fa:02:51:8c:9c:aa:ba:81:7c:a1:92:
e7:9f:f1:02:ba:d9:4d:26:5b:ce:4d:64:fe:a6:dd:07:51:1b:
e2:a4:43:6c:17:5f:8d:a9:9d:fd:57:ba:4c:3c:0c:bc:ea:54:
9b:1a:5b:65
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQi+3HcuoMGQp3oHODWx4iQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwZTg4ZmZlNmYwZGU1ZjJmMWZjOWQxNGVmNjJmMjU2NzBi
ZDViNGEwHhcNMjUwMTAxMTc0ODExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MDFiMDU1NDFkYmEyNDIzMDBjZjUyNjY5OGNjMzZhY2M3NDY4NDM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmX83GwW3zOPnN7Pomg0ajYPiB57
n6I2pK8tvDxBi6I8JRi32hdruk38pg/VlTInfuhSK+HNY9hTJFUFT8HP133FOffE
aPqqSRvTV3ZqxvLE2/nL06GCADa4Z42XaFZ+XKT4GmI74zS4ei6Ch/r74eAALXdA
YxAjsM6KJ7E171tA/Zr5xVMiDSD7Q9ZYHBm4dO7eiZAzjc23VCHFs8+iyJddvf3H
rfEGnw64BvE/fHd+gf54qcAb4TUUNIcCEo9hFbgQwEFSisi0L2XlQu0bYXnqFnq+
+1jGgSKTQKGvhErDLE3QiGrOY7fuGtLIy5M9lMhwA6riqwfSGu5RzycDpQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHAbBVQduiQjAM9SZpjMNqzHRoQ3MB8GA1UdIwQY
MBaAFGDoj/5vDeXy8fydFO9i8lZwvVtKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWU9pUF9tOE41Zkx4X0owVTcyTHlWbkM5VzBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9mOTdhZWQtZjVjMi00ZmI3LWE3ZDEt
MDcyNWYwNjk3YjgzLzEvY0JzRlZCMjZKQ01BejFKbW1NdzJyTWRHaERjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9mOTdhZWQtZjVjMi00ZmI3LWE3ZDEtMDcyNWYwNjk3Yjgz
LzEvWU9pUF9tOE41Zkx4X0owVTcyTHlWbkM5VzBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwza+MA0G
CSqGSIb3DQEBCwUAA4IBAQAES0TTwEWGQMpJpMVy2kd6H6x8cpFb3nC5slC/NJ6C
qEZF7trugISFqWZ2Byi1yTCzXiXaup2zMIQ1nv1CWG7C5kkpM5yLRrd0PDWGpd8X
rhmn659mI/wN+Z0iR0qPz0XDpLPhyNaYssPFIB6q7baXjFjfxgd5TkNmO3BG8kl/
NHPz4JcK1GfnImW0yD1HOFwqh9RE1nrFtvaLUJAYq0ARo2QlBRcTV37u/09RQBks
W5NL5cRTAdjDUxEWAbiQzq/knz8IU166GMYDVgwh+gJRjJyquoF8oZLnn/ECutlN
JlvOTWT+pt0HURvipENsF1+NqZ39V7pMPAy86lSbGltl
-----END CERTIFICATE-----
Generated at Thu Apr 17 08:54:53 2025 by rpki-client