Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/jISWNsTxPdEjjPdMy-Whzlvb0Ac.roa
File: jISWNsTxPdEjjPdMy-Whzlvb0Ac.roa (raw, json)
Hash identifier: La/cVhkJ14UaJXVbjX6BzXzgOteVwnmYx6tdmiaM0OE=
Subject key identifier: 8C:84:96:36:C4:F1:3D:D1:23:8C:F7:4C:CB:E5:A1:CE:5B:DB:D0:07
Certificate issuer: /CN=e5a27555c1a5c5ddf7f7acc839fa577aa7ee7a9c
Certificate serial: 019420D607F6B309E2A104F115048FCEEA38
Authority key identifier: E5:A2:75:55:C1:A5:C5:DD:F7:F7:AC:C8:39:FA:57:7A:A7:EE:7A:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aJ1VcGlxd3396zIOfpXeqfuepw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/jISWNsTxPdEjjPdMy-Whzlvb0Ac.roa
Signing time: Wed 01 Jan 2025 07:48:05 +0000
ROA not before: Wed 01 Jan 2025 07:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29518
IP address blocks: 193.26.17.0/24 maxlen: 24
194.145.172.0/22 maxlen: 22
2001:67c:2968::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5aJ1VcGlxd3396zIOfpXeqfuepw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:07:f6:b3:09:e2:a1:04:f1:15:04:8f:ce:ea:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a27555c1a5c5ddf7f7acc839fa577aa7ee7a9c
Validity
Not Before: Jan 1 07:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8c849636c4f13dd1238cf74ccbe5a1ce5bdbd007
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8b:04:36:c0:9b:51:ba:3b:cc:19:e6:8e:a2:
6c:fc:88:cf:4f:4c:26:39:d1:b9:2a:91:de:32:6b:
26:13:25:67:3d:0e:1c:37:85:46:3d:ae:b8:b1:88:
bd:72:1d:a5:f5:57:38:3e:59:a5:aa:43:71:43:6e:
bf:9e:b8:05:fb:d8:a5:2c:2d:3b:88:23:d7:15:7d:
a4:46:8c:32:1e:b9:33:b9:f9:1e:f6:4b:05:7c:8e:
1a:af:73:99:8f:49:80:d9:ce:1a:9f:9d:ee:ba:7d:
38:6d:6c:34:21:d3:e4:2c:b9:dc:ca:5d:19:4d:3f:
57:61:5e:32:f8:be:ba:b5:1e:a3:13:84:c6:8c:cb:
b2:69:c3:72:6a:59:97:b9:12:e0:18:80:b7:60:58:
f3:eb:23:e0:05:da:a0:0c:9f:3f:30:0f:22:b8:79:
90:71:85:76:c7:6c:40:f0:5a:ec:84:c7:64:25:cc:
52:44:17:96:0b:c4:0e:a4:62:dd:ff:b1:9b:cf:1f:
74:8b:70:b3:d1:32:28:6d:36:c8:40:5c:6f:ce:ca:
2a:89:38:43:c5:74:5d:4b:ce:30:66:49:56:50:bb:
3c:6c:29:08:ae:23:86:ea:a4:49:48:bb:7c:2f:42:
8a:ea:05:11:96:20:31:05:b7:1d:19:fa:70:48:e8:
04:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:84:96:36:C4:F1:3D:D1:23:8C:F7:4C:CB:E5:A1:CE:5B:DB:D0:07
X509v3 Authority Key Identifier:
keyid:E5:A2:75:55:C1:A5:C5:DD:F7:F7:AC:C8:39:FA:57:7A:A7:EE:7A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aJ1VcGlxd3396zIOfpXeqfuepw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/jISWNsTxPdEjjPdMy-Whzlvb0Ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.26.17.0/24
194.145.172.0/22
IPv6:
2001:67c:2968::/48
Signature Algorithm: sha256WithRSAEncryption
9a:7a:8f:b7:3c:da:42:04:ac:a4:d1:8c:4c:2b:c0:1e:e6:49:
a0:66:c5:9a:cf:e4:8e:26:db:04:75:53:e3:44:4b:04:fc:ee:
b9:5a:a3:cf:c8:f4:57:51:b3:ad:a5:d4:c6:ef:a6:20:6c:1f:
c5:c8:66:aa:f9:f1:6f:d2:39:9f:35:4f:c0:21:1d:12:e5:a3:
92:c2:ba:53:8f:17:b9:29:5c:64:02:3a:27:57:3a:af:d8:2c:
25:a9:3d:e8:e7:30:52:17:b8:fb:f9:09:df:ee:60:70:96:03:
4b:ec:00:ac:b2:e1:61:5c:71:fe:97:2d:25:6f:2f:d4:15:de:
47:64:9f:61:5f:0a:fb:36:6f:40:5d:0d:33:2c:92:5b:61:01:
ca:90:5c:9f:d6:c1:fc:a4:af:70:ec:3b:d8:19:ca:16:22:0f:
62:9d:79:15:d8:37:e8:9c:42:99:47:8a:aa:d0:6d:09:d7:ae:
37:b2:46:e4:f5:6d:17:89:83:b6:89:c9:23:db:08:23:cc:bf:
d6:b2:05:8f:4d:25:b8:55:4b:69:f1:01:cb:93:4d:fb:b4:42:
af:da:44:9a:c8:71:76:16:b1:36:4f:57:c7:b3:f3:d4:99:0d:
20:59:a6:4e:2a:7f:81:95:db:04:6f:a2:ed:79:ca:bb:13:4c:
ed:a8:42:93
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAZQg1gf2swnioQTxFQSPzuo4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1YTI3NTU1YzFhNWM1ZGRmN2Y3YWNjODM5ZmE1NzdhYTdl
ZTdhOWMwHhcNMjUwMTAxMDc0ODA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4Yzg0OTYzNmM0ZjEzZGQxMjM4Y2Y3NGNjYmU1YTFjZTViZGJkMDA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4sENsCbUbo7zBnmjqJs/IjPT0wm
OdG5KpHeMmsmEyVnPQ4cN4VGPa64sYi9ch2l9Vc4PlmlqkNxQ26/nrgF+9ilLC07
iCPXFX2kRowyHrkzufke9ksFfI4ar3OZj0mA2c4an53uun04bWw0IdPkLLncyl0Z
TT9XYV4y+L66tR6jE4TGjMuyacNyalmXuRLgGIC3YFjz6yPgBdqgDJ8/MA8iuHmQ
cYV2x2xA8FrshMdkJcxSRBeWC8QOpGLd/7Gbzx90i3Cz0TIobTbIQFxvzsoqiThD
xXRdS84wZklWULs8bCkIriOG6qRJSLt8L0KK6gURliAxBbcdGfpwSOgEIQIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFIyEljbE8T3RI4z3TMvloc5b29AHMB8GA1UdIwQY
MBaAFOWidVXBpcXd9/esyDn6V3qn7nqcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWFKMVZjR2x4ZDMzOTZ6SU9mcFhlcWZ1ZXB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8xY2NkOWEtYzMwZS00ZThhLTg5NGEt
ZmQ3MTY2N2EyYjVmLzEvaklTV05zVHhQZEVqalBkTXktV2h6bHZiMEFjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC8xY2NkOWEtYzMwZS00ZThhLTg5NGEtZmQ3MTY2N2EyYjVm
LzEvNWFKMVZjR2x4ZDMzOTZ6SU9mcFhlcWZ1ZXB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAwRoRAwQC
wpGsMA8EAgACMAkDBwAgAQZ8KWgwDQYJKoZIhvcNAQELBQADggEBAJp6j7c82kIE
rKTRjEwrwB7mSaBmxZrP5I4m2wR1U+NESwT87rlao8/I9FdRs62l1MbvpiBsH8XI
Zqr58W/SOZ81T8AhHRLlo5LCulOPF7kpXGQCOidXOq/YLCWpPejnMFIXuPv5Cd/u
YHCWA0vsAKyy4WFccf6XLSVvL9QV3kdkn2FfCvs2b0BdDTMsklthAcqQXJ/Wwfyk
r3DsO9gZyhYiD2KdeRXYN+icQplHiqrQbQnXrjeyRuT1bReJg7aJySPbCCPMv9ay
BY9NJbhVS2nxAcuTTfu0Qq/aRJrIcXYWsTZPV8ez89SZDSBZpk4qf4GV2wRvou15
yrsTTO2oQpM=
-----END CERTIFICATE-----
Generated at Mon Apr 14 03:39:27 2025 by rpki-client