Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/2D_1ncLmLPuJXtpl_Q5ttTWBK4k.roa
File: 2D_1ncLmLPuJXtpl_Q5ttTWBK4k.roa (raw, json)
Hash identifier: 0bQuiH2aHkDAf1rtJEQ6AsC0osUnBUOUl2vPm0WmrnY=
Subject key identifier: D8:3F:F5:9D:C2:E6:2C:FB:89:5E:DA:65:FD:0E:6D:B5:35:81:2B:89
Certificate issuer: /CN=bbffc9a9832667ac0d6d1e2406550533c3b55618
Certificate serial: 0194228E425B9FC626C2E7680722F0F66F15
Authority key identifier: BB:FF:C9:A9:83:26:67:AC:0D:6D:1E:24:06:55:05:33:C3:B5:56:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/2D_1ncLmLPuJXtpl_Q5ttTWBK4k.roa
Signing time: Wed 01 Jan 2025 15:48:55 +0000
ROA not before: Wed 01 Jan 2025 15:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8881
IP address blocks: 194.115.182.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.mft
rsync://rpki.ripe.net/repository/DEFAULT/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 18:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:42:5b:9f:c6:26:c2:e7:68:07:22:f0:f6:6f:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbffc9a9832667ac0d6d1e2406550533c3b55618
Validity
Not Before: Jan 1 15:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d83ff59dc2e62cfb895eda65fd0e6db535812b89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c6:7d:1b:39:ab:73:4b:67:7d:26:52:74:7c:
75:d5:f3:d8:73:71:3e:7e:23:28:4b:9a:3d:aa:89:
38:57:11:8a:84:ac:f4:54:4c:bb:a9:1e:63:63:2f:
81:92:48:2e:83:fd:92:ab:66:ff:5c:24:91:fc:ab:
b1:01:93:6d:11:58:42:06:d7:75:54:f9:81:f7:7b:
06:54:b4:fc:fb:a1:86:68:b8:f6:a6:aa:fe:bc:1c:
a3:13:47:9a:17:f2:37:36:36:ed:5e:2d:ce:d0:87:
fb:95:f5:44:5e:9d:8e:40:74:03:46:e8:e3:94:6a:
88:35:52:41:0f:84:ab:bc:c0:5b:17:61:68:56:a0:
c5:c3:5f:f3:81:3c:8c:4c:67:5d:81:ef:8f:53:c4:
40:dd:43:72:a6:86:d5:5e:a0:a0:3f:14:8a:69:dc:
e2:ce:0d:56:89:20:33:d6:81:0a:83:54:5a:fe:aa:
6e:da:88:ca:11:cc:8d:2d:e2:13:01:3a:88:4b:f3:
67:1d:61:91:20:5d:f9:64:53:c2:8e:e5:54:7a:95:
6c:5a:80:dd:66:14:2e:ab:e4:e8:ef:98:78:77:d0:
14:09:08:5d:1b:d8:5f:9f:5e:f4:33:3d:39:dc:b4:
24:48:f1:44:a1:b1:79:16:f4:0a:3a:21:61:d2:a7:
ef:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:3F:F5:9D:C2:E6:2C:FB:89:5E:DA:65:FD:0E:6D:B5:35:81:2B:89
X509v3 Authority Key Identifier:
keyid:BB:FF:C9:A9:83:26:67:AC:0D:6D:1E:24:06:55:05:33:C3:B5:56:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/2D_1ncLmLPuJXtpl_Q5ttTWBK4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.115.182.0/23
Signature Algorithm: sha256WithRSAEncryption
2b:07:8e:c3:1c:79:2e:33:b7:7d:c9:d3:eb:7a:27:f5:6b:cb:
66:a7:66:bc:e5:89:5a:46:99:88:6d:33:02:87:ac:29:32:af:
e2:b1:1f:36:3a:79:e7:04:24:32:59:e5:66:c3:2e:15:64:88:
3f:19:e6:35:42:0f:ad:94:11:b9:fc:43:55:34:76:6c:ea:0d:
12:23:9f:6c:cf:ea:61:a9:39:4f:13:aa:77:5e:ec:b6:bb:e4:
58:65:c6:09:d0:e0:27:78:d0:9b:04:c0:41:35:ac:38:d2:d1:
c4:16:40:10:60:fb:2d:30:75:d0:f6:f2:f9:a3:ef:40:c0:e5:
5b:33:d5:7b:6d:d7:fa:a2:93:44:fb:ce:b1:72:75:ed:9d:c4:
0c:7e:62:7a:6d:55:f8:2e:a1:6b:8a:6d:f1:b1:85:72:68:94:
14:af:67:52:b9:d8:f3:e8:2a:cd:4c:d4:93:7d:08:d6:44:7f:
ad:c6:4b:48:6b:fe:88:b5:c0:6a:72:7f:d2:0a:a5:1b:2b:46:
44:27:d5:33:65:09:ac:e8:ca:10:cc:59:7c:c6:1b:65:5a:a7:
92:cd:22:60:e9:3b:59:bb:cf:e8:2e:9b:d3:50:dd:f1:f9:30:
60:95:be:cd:53:d8:b5:0f:26:07:bf:d0:3f:3b:8c:bd:9f:43:
7a:0f:64:bc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQijkJbn8YmwudoByLw9m8VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiZmZjOWE5ODMyNjY3YWMwZDZkMWUyNDA2NTUwNTMzYzNi
NTU2MTgwHhcNMjUwMTAxMTU0ODU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkODNmZjU5ZGMyZTYyY2ZiODk1ZWRhNjVmZDBlNmRiNTM1ODEyYjg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysZ9Gzmrc0tnfSZSdHx11fPYc3E+
fiMoS5o9qok4VxGKhKz0VEy7qR5jYy+Bkkgug/2Sq2b/XCSR/KuxAZNtEVhCBtd1
VPmB93sGVLT8+6GGaLj2pqr+vByjE0eaF/I3NjbtXi3O0If7lfVEXp2OQHQDRujj
lGqINVJBD4SrvMBbF2FoVqDFw1/zgTyMTGddge+PU8RA3UNypobVXqCgPxSKadzi
zg1WiSAz1oEKg1Ra/qpu2ojKEcyNLeITATqIS/NnHWGRIF35ZFPCjuVUepVsWoDd
ZhQuq+To75h4d9AUCQhdG9hfn170Mz053LQkSPFEobF5FvQKOiFh0qfvXwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNg/9Z3C5iz7iV7aZf0ObbU1gSuJMB8GA1UdIwQY
MBaAFLv/yamDJmesDW0eJAZVBTPDtVYYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdV9fSnFZTW1aNndOYlI0a0JsVUZNOE8xVmhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9mZTFiMjgtMTUxOS00MDU1LWIwZmIt
NzQ5N2U1YThmMTFiLzEvMkRfMW5jTG1MUHVKWHRwbF9RNXR0VFdCSzRrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9mZTFiMjgtMTUxOS00MDU1LWIwZmItNzQ5N2U1YThmMTFi
LzEvdV9fSnFZTW1aNndOYlI0a0JsVUZNOE8xVmhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwnO2MA0G
CSqGSIb3DQEBCwUAA4IBAQArB47DHHkuM7d9ydPreif1a8tmp2a85YlaRpmIbTMC
h6wpMq/isR82OnnnBCQyWeVmwy4VZIg/GeY1Qg+tlBG5/ENVNHZs6g0SI59sz+ph
qTlPE6p3Xuy2u+RYZcYJ0OAneNCbBMBBNaw40tHEFkAQYPstMHXQ9vL5o+9AwOVb
M9V7bdf6opNE+86xcnXtncQMfmJ6bVX4LqFrim3xsYVyaJQUr2dSudjz6CrNTNST
fQjWRH+txktIa/6ItcBqcn/SCqUbK0ZEJ9UzZQms6MoQzFl8xhtlWqeSzSJg6TtZ
u8/oLpvTUN3x+TBglb7NU9i1DyYHv9A/O4y9n0N6D2S8
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:43:41 2025 by rpki-client