Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/uZ3gLoi-baUsKV1SOOe_6eXbk4A.roa
File: uZ3gLoi-baUsKV1SOOe_6eXbk4A.roa (raw, json)
Hash identifier: DF0imGw170/tpFF5iP4nGcWrEFYm61EvjaRvJ/3jKZA=
Subject key identifier: B9:9D:E0:2E:88:BE:6D:A5:2C:29:5D:52:38:E7:BF:E9:E5:DB:93:80
Certificate issuer: /CN=bba35cf8ab6f3eaa2aebadd9e2373dec0893625e
Certificate serial: 0194221FB2E2AC8B316C24229815520550D5
Authority key identifier: BB:A3:5C:F8:AB:6F:3E:AA:2A:EB:AD:D9:E2:37:3D:EC:08:93:62:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/uZ3gLoi-baUsKV1SOOe_6eXbk4A.roa
Signing time: Wed 01 Jan 2025 13:48:10 +0000
ROA not before: Wed 01 Jan 2025 13:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19905
IP address blocks: 157.23.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:b2:e2:ac:8b:31:6c:24:22:98:15:52:05:50:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bba35cf8ab6f3eaa2aebadd9e2373dec0893625e
Validity
Not Before: Jan 1 13:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b99de02e88be6da52c295d5238e7bfe9e5db9380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9f:0c:e4:69:49:f7:9a:73:8f:18:a0:c9:5c:
26:c7:60:98:7d:15:0c:e2:24:ea:db:78:3f:e7:f7:
54:27:f3:b2:21:43:3a:1d:9b:13:06:ab:d3:3d:15:
3d:c1:41:7a:50:09:cb:ae:7a:8b:fe:ba:dd:47:a2:
6a:d6:a7:25:4e:b3:98:7e:38:fd:af:18:f5:b8:ff:
98:d9:0f:12:e0:3b:a6:ec:87:22:2d:82:58:d6:b7:
79:88:59:5a:3a:f7:58:3f:64:82:42:48:6c:ba:be:
d8:5b:41:7b:18:09:eb:3e:ec:07:de:4c:9f:fd:f1:
e3:69:78:0d:59:7e:fd:46:e1:73:28:1e:fb:95:7d:
14:b8:7d:92:fe:20:7a:37:e4:53:5a:d8:be:5a:f4:
27:34:04:c8:cb:a7:dd:13:bb:c5:74:b3:c9:36:c0:
14:12:a0:eb:7c:75:46:9b:f6:81:80:09:de:9f:ff:
6d:d7:bb:2a:d7:bd:73:01:91:8c:4a:9a:a8:37:86:
bc:38:61:6c:8c:8d:c8:88:a9:31:5c:ca:16:02:88:
ee:f8:8f:0f:e2:b8:3c:e9:41:17:95:4b:f5:18:c9:
ae:02:1c:8a:2b:b2:46:61:7b:80:df:89:0b:de:c1:
40:b6:34:e4:2f:ab:b9:97:9e:6d:3f:64:8b:9a:5a:
97:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:9D:E0:2E:88:BE:6D:A5:2C:29:5D:52:38:E7:BF:E9:E5:DB:93:80
X509v3 Authority Key Identifier:
keyid:BB:A3:5C:F8:AB:6F:3E:AA:2A:EB:AD:D9:E2:37:3D:EC:08:93:62:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/uZ3gLoi-baUsKV1SOOe_6eXbk4A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.23.248.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:5f:18:2c:00:f2:11:b6:db:a1:b0:6b:c1:1a:ce:82:80:b3:
08:24:fe:ac:59:23:3a:bc:ee:85:4c:37:16:55:74:87:69:15:
80:18:d4:bb:53:74:ea:cd:70:cb:47:e6:95:cc:2d:0e:59:b4:
fa:42:52:1f:61:4f:39:06:96:3b:2b:72:0c:ca:70:16:55:c3:
c1:93:75:82:94:f2:95:ad:b5:b1:93:99:06:c6:ab:68:6a:b5:
6b:5a:da:41:e9:f1:27:07:e2:f2:b7:e9:5a:f8:2a:80:25:0b:
5d:ee:1c:a1:99:63:bd:98:df:69:32:3f:20:19:4e:91:c2:a9:
6b:39:c3:fe:5c:e5:41:17:20:06:19:c0:5f:20:90:35:15:cd:
8d:a2:e9:fb:37:13:de:f9:e0:6f:4d:2f:dc:86:ba:fd:15:d4:
ce:60:63:7f:fd:4b:91:bb:d3:da:c7:5e:0c:ca:a6:d4:fd:5f:
b7:35:a3:68:76:ac:a6:f2:70:e1:37:35:ca:60:0e:0e:90:7d:
7d:c3:59:60:95:90:16:01:b0:98:b6:e6:e8:1f:70:d6:1d:44:
9c:84:10:7d:07:02:72:c3:d7:98:5e:c7:0d:03:c6:b7:0f:e2:
4a:6b:a3:92:d0:e6:69:5d:02:5d:d5:58:1f:19:b6:53:d6:e0:
cd:87:5c:87
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQiH7LirIsxbCQimBVSBVDVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiYTM1Y2Y4YWI2ZjNlYWEyYWViYWRkOWUyMzczZGVjMDg5
MzYyNWUwHhcNMjUwMTAxMTM0ODEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOTlkZTAyZTg4YmU2ZGE1MmMyOTVkNTIzOGU3YmZlOWU1ZGI5MzgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvp8M5GlJ95pzjxigyVwmx2CYfRUM
4iTq23g/5/dUJ/OyIUM6HZsTBqvTPRU9wUF6UAnLrnqL/rrdR6Jq1qclTrOYfjj9
rxj1uP+Y2Q8S4Dum7IciLYJY1rd5iFlaOvdYP2SCQkhsur7YW0F7GAnrPuwH3kyf
/fHjaXgNWX79RuFzKB77lX0UuH2S/iB6N+RTWti+WvQnNATIy6fdE7vFdLPJNsAU
EqDrfHVGm/aBgAnen/9t17sq171zAZGMSpqoN4a8OGFsjI3IiKkxXMoWAoju+I8P
4rg86UEXlUv1GMmuAhyKK7JGYXuA34kL3sFAtjTkL6u5l55tP2SLmlqXmQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLmd4C6Ivm2lLCldUjjnv+nl25OAMB8GA1UdIwQY
MBaAFLujXPirbz6qKuut2eI3PewIk2JeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTZOYy1LdHZQcW9xNjYzWjRqYzk3QWlUWWw0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9hMGUwMWEtOWJiYy00NGVlLTk4YTMt
NTk3YjZlMjQ5MmFiLzEvdVozZ0xvaS1iYVVzS1YxU09PZV82ZVhiazRBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9hMGUwMWEtOWJiYy00NGVlLTk4YTMtNTk3YjZlMjQ5MmFi
LzEvdTZOYy1LdHZQcW9xNjYzWjRqYzk3QWlUWWw0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnRf4MA0G
CSqGSIb3DQEBCwUAA4IBAQCqXxgsAPIRttuhsGvBGs6CgLMIJP6sWSM6vO6FTDcW
VXSHaRWAGNS7U3TqzXDLR+aVzC0OWbT6QlIfYU85BpY7K3IMynAWVcPBk3WClPKV
rbWxk5kGxqtoarVrWtpB6fEnB+Lyt+la+CqAJQtd7hyhmWO9mN9pMj8gGU6Rwqlr
OcP+XOVBFyAGGcBfIJA1Fc2Noun7NxPe+eBvTS/chrr9FdTOYGN//UuRu9Pax14M
yqbU/V+3NaNodqym8nDhNzXKYA4OkH19w1lglZAWAbCYtuboH3DWHUSchBB9BwJy
w9eYXscNA8a3D+JKa6OS0OZpXQJd1VgfGbZT1uDNh1yH
-----END CERTIFICATE-----
Generated at Sat Apr 12 16:49:33 2025 by rpki-client