Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/GtppMOhe-qj4-qKPQwYM7Bndra0.roa
File: GtppMOhe-qj4-qKPQwYM7Bndra0.roa (raw, json)
Hash identifier: DZ7bcQ1MagW/CKYzAoT3tgdmQpZud4AtQbSCkk/MCKU=
Subject key identifier: 1A:DA:69:30:E8:5E:FA:A8:F8:FA:A2:8F:43:06:0C:EC:19:DD:AD:AD
Certificate issuer: /CN=bba35cf8ab6f3eaa2aebadd9e2373dec0893625e
Certificate serial: 0194221FB22CEB23C489B14FB838124EDAF6
Authority key identifier: BB:A3:5C:F8:AB:6F:3E:AA:2A:EB:AD:D9:E2:37:3D:EC:08:93:62:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/GtppMOhe-qj4-qKPQwYM7Bndra0.roa
Signing time: Wed 01 Jan 2025 13:48:10 +0000
ROA not before: Wed 01 Jan 2025 13:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13379
IP address blocks: 157.23.251.0/24 maxlen: 24
157.23.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:b2:2c:eb:23:c4:89:b1:4f:b8:38:12:4e:da:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bba35cf8ab6f3eaa2aebadd9e2373dec0893625e
Validity
Not Before: Jan 1 13:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1ada6930e85efaa8f8faa28f43060cec19ddadad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e0:73:17:1e:4e:cb:37:2b:da:2e:b2:32:ce:
fb:9b:5a:5d:90:f1:cf:24:f4:5f:f0:12:6c:03:52:
af:01:55:2d:01:d8:82:15:c3:ca:eb:b5:e3:2d:f6:
1a:5a:71:8c:b2:1a:8f:51:67:dc:d7:e7:13:06:d2:
22:72:9e:c1:8d:30:05:40:ea:28:5f:94:e2:c0:19:
f1:9d:91:1b:f4:9f:a0:5d:78:51:f7:9d:02:34:1c:
af:68:5f:36:97:1f:d8:2c:10:77:27:07:fa:1c:4e:
2d:d6:f9:1e:3f:f2:d4:42:59:71:15:4d:58:b5:7b:
ee:23:07:fe:ea:4e:89:75:71:94:4e:74:89:75:73:
70:90:34:fb:da:de:b0:67:fd:62:e0:83:1b:0e:aa:
53:e6:dd:06:d7:3f:6a:53:b2:10:24:15:6c:ed:6d:
ee:34:6d:a6:19:27:a2:3c:13:82:ac:bf:c3:df:37:
7e:d0:04:14:b4:a0:63:6c:77:8f:6c:a2:cc:3b:91:
e0:75:a4:b1:bc:19:cc:8c:dd:d4:9b:6f:e4:a2:5d:
fa:f0:43:28:fc:81:05:ad:4b:f4:ac:85:f9:16:ea:
d8:49:d6:ef:d3:b2:7d:71:6d:48:01:3e:10:d7:f0:
e3:27:1f:50:ac:08:82:b3:ef:4d:e8:bc:d9:62:1c:
49:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:DA:69:30:E8:5E:FA:A8:F8:FA:A2:8F:43:06:0C:EC:19:DD:AD:AD
X509v3 Authority Key Identifier:
keyid:BB:A3:5C:F8:AB:6F:3E:AA:2A:EB:AD:D9:E2:37:3D:EC:08:93:62:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/GtppMOhe-qj4-qKPQwYM7Bndra0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.23.251.0/24
157.23.253.0/24
Signature Algorithm: sha256WithRSAEncryption
18:d7:be:ba:c2:d4:6d:24:92:d3:c2:a9:e7:38:a2:65:7d:9d:
2e:cf:12:80:76:01:8d:a3:b6:70:d5:4c:7c:d6:cf:3d:3f:56:
8d:e7:db:1c:37:8d:fe:80:01:76:fe:ab:91:8a:c4:3f:6e:84:
04:6b:bd:b1:40:fa:cc:44:08:72:c1:b4:77:ab:2f:39:a1:30:
a6:92:2e:ac:08:eb:18:b3:9d:29:64:cf:fb:ce:f6:48:21:d7:
9d:7a:80:23:5a:91:37:8e:50:7a:d0:e4:65:d1:c6:55:8b:c0:
76:41:64:fa:20:46:86:e4:d4:73:db:9f:cd:6f:12:0f:c9:e3:
8b:3f:8b:10:b8:fd:18:3a:48:d4:9a:7a:2c:6b:62:9e:5e:18:
c3:51:dc:70:dc:e5:8a:96:b0:9c:40:04:4e:60:91:2b:c3:17:
8c:35:b4:98:3d:20:ce:dd:17:f7:db:c3:be:a1:5c:27:5f:af:
21:15:09:22:60:72:fa:9e:70:d8:fc:01:3a:fa:85:1d:d1:43:
0b:98:41:72:97:b8:0e:04:fe:f0:3a:b6:57:b2:90:81:7b:bd:
8d:84:ff:55:d6:71:42:c3:d5:4d:ee:dd:65:a6:13:b1:1f:ec:
40:a7:5c:84:1a:69:1a:ca:f3:25:98:bd:7f:46:3c:60:c5:3c:
2a:6c:94:8c
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQiH7Is6yPEibFPuDgSTtr2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiYTM1Y2Y4YWI2ZjNlYWEyYWViYWRkOWUyMzczZGVjMDg5
MzYyNWUwHhcNMjUwMTAxMTM0ODEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYWRhNjkzMGU4NWVmYWE4ZjhmYWEyOGY0MzA2MGNlYzE5ZGRhZGFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjeBzFx5Oyzcr2i6yMs77m1pdkPHP
JPRf8BJsA1KvAVUtAdiCFcPK67XjLfYaWnGMshqPUWfc1+cTBtIicp7BjTAFQOoo
X5TiwBnxnZEb9J+gXXhR950CNByvaF82lx/YLBB3Jwf6HE4t1vkeP/LUQllxFU1Y
tXvuIwf+6k6JdXGUTnSJdXNwkDT72t6wZ/1i4IMbDqpT5t0G1z9qU7IQJBVs7W3u
NG2mGSeiPBOCrL/D3zd+0AQUtKBjbHePbKLMO5HgdaSxvBnMjN3Um2/kol368EMo
/IEFrUv0rIX5FurYSdbv07J9cW1IAT4Q1/DjJx9QrAiCs+9N6LzZYhxJhQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBraaTDoXvqo+Pqij0MGDOwZ3a2tMB8GA1UdIwQY
MBaAFLujXPirbz6qKuut2eI3PewIk2JeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTZOYy1LdHZQcW9xNjYzWjRqYzk3QWlUWWw0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9hMGUwMWEtOWJiYy00NGVlLTk4YTMt
NTk3YjZlMjQ5MmFiLzEvR3RwcE1PaGUtcWo0LXFLUFF3WU03Qm5kcmEwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9hMGUwMWEtOWJiYy00NGVlLTk4YTMtNTk3YjZlMjQ5MmFi
LzEvdTZOYy1LdHZQcW9xNjYzWjRqYzk3QWlUWWw0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAnRf7AwQA
nRf9MA0GCSqGSIb3DQEBCwUAA4IBAQAY1766wtRtJJLTwqnnOKJlfZ0uzxKAdgGN
o7Zw1Ux81s89P1aN59scN43+gAF2/quRisQ/boQEa72xQPrMRAhywbR3qy85oTCm
ki6sCOsYs50pZM/7zvZIIdedeoAjWpE3jlB60ORl0cZVi8B2QWT6IEaG5NRz25/N
bxIPyeOLP4sQuP0YOkjUmnosa2KeXhjDUdxw3OWKlrCcQAROYJErwxeMNbSYPSDO
3Rf328O+oVwnX68hFQkiYHL6nnDY/AE6+oUd0UMLmEFyl7gOBP7wOrZXspCBe72N
hP9V1nFCw9VN7t1lphOxH+xAp1yEGmkayvMlmL1/RjxgxTwqbJSM
-----END CERTIFICATE-----
Generated at Sun Apr 13 15:21:19 2025 by rpki-client