Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/dcoiHdIJxEh6SkH8HdY6P-DUj4g.roa
File: dcoiHdIJxEh6SkH8HdY6P-DUj4g.roa (raw, json)
Hash identifier: 4pgebo0CzF4j1xyhoIwSQdxS46NhQBC6tAsYICm6rWg=
Subject key identifier: 75:CA:22:1D:D2:09:C4:48:7A:4A:41:FC:1D:D6:3A:3F:E0:D4:8F:88
Certificate issuer: /CN=cf14fce9b19a5eea532e17d83da8c1dcd1de18c0
Certificate serial: 0194228D106AC14ABE4901C8B5D26136F222
Authority key identifier: CF:14:FC:E9:B1:9A:5E:EA:53:2E:17:D8:3D:A8:C1:DC:D1:DE:18:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zxT86bGaXupTLhfYPajB3NHeGMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/dcoiHdIJxEh6SkH8HdY6P-DUj4g.roa
Signing time: Wed 01 Jan 2025 15:47:37 +0000
ROA not before: Wed 01 Jan 2025 15:47:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20712
IP address blocks: 193.219.118.0/24 maxlen: 24
2001:67c:788::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zxT86bGaXupTLhfYPajB3NHeGMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 03:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:10:6a:c1:4a:be:49:01:c8:b5:d2:61:36:f2:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf14fce9b19a5eea532e17d83da8c1dcd1de18c0
Validity
Not Before: Jan 1 15:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=75ca221dd209c4487a4a41fc1dd63a3fe0d48f88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f4:aa:19:c3:1b:7d:5d:f9:c4:fd:35:c7:35:
c4:c8:46:59:da:6d:88:39:90:00:df:55:d8:00:5c:
89:9a:34:d4:c4:14:38:9a:d4:cc:54:2d:e4:4a:67:
e7:0f:84:a4:88:db:a6:5a:96:52:8b:f7:99:28:ae:
b7:78:17:3b:79:7a:4f:81:a2:60:35:1c:1b:30:62:
63:c2:c2:f0:7b:b1:49:3a:f7:30:2b:ce:49:56:81:
a5:15:72:64:b3:cb:96:2c:aa:0a:1a:10:fc:ff:a3:
5b:f6:b7:e9:9e:73:ab:cf:c1:97:a1:0f:f4:98:a2:
78:a1:fb:8f:bd:19:98:92:64:0c:9d:79:51:4f:67:
c3:18:56:46:6e:26:c9:76:11:3c:08:27:ec:e9:86:
a2:64:19:87:bd:dd:bc:31:93:02:66:26:39:3f:3a:
45:f0:0b:03:26:91:65:73:b9:99:1a:7b:17:8c:49:
0c:51:3d:be:37:49:1c:8a:c5:11:32:65:2b:90:fe:
a7:da:e0:1a:c3:02:ed:b1:d1:5f:33:d0:58:b1:31:
df:74:54:40:88:a3:ff:93:a2:1e:6c:d9:3f:13:63:
95:0b:17:e1:f3:26:78:58:27:09:71:7e:d7:ec:6c:
7d:a8:54:3e:98:84:3a:82:44:1f:9a:41:5c:11:bf:
ad:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:CA:22:1D:D2:09:C4:48:7A:4A:41:FC:1D:D6:3A:3F:E0:D4:8F:88
X509v3 Authority Key Identifier:
keyid:CF:14:FC:E9:B1:9A:5E:EA:53:2E:17:D8:3D:A8:C1:DC:D1:DE:18:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxT86bGaXupTLhfYPajB3NHeGMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/dcoiHdIJxEh6SkH8HdY6P-DUj4g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.219.118.0/24
IPv6:
2001:67c:788::/48
Signature Algorithm: sha256WithRSAEncryption
26:be:71:85:9e:e4:94:e8:ac:0b:73:8a:e0:68:90:13:6e:5d:
20:9c:a0:ea:55:56:a7:f5:36:43:c6:e7:bd:ef:d4:af:9a:5b:
66:2a:c4:17:bd:8e:36:93:6d:29:9e:f0:c0:7f:4e:1e:7e:6e:
cb:b6:25:32:d6:b2:65:1f:f5:43:a0:c4:01:76:19:02:c8:5c:
df:9c:45:19:06:80:2f:cd:d0:2a:70:56:8a:bd:a1:7f:10:ee:
32:94:2f:e5:97:51:39:d0:d0:db:a7:4a:02:aa:5c:be:e0:a1:
78:4c:6d:b4:dc:58:af:ee:58:b3:fd:50:ab:d5:6e:ea:fd:43:
c5:93:62:aa:04:8e:eb:cd:ca:36:1e:48:85:51:e4:61:31:b3:
60:f7:50:d3:04:a0:ef:e0:cc:e5:95:aa:56:d5:53:db:b5:09:
3a:a3:33:12:c9:67:d7:9f:60:f0:52:ea:47:57:65:52:b3:85:
50:53:b5:6d:e3:23:07:40:37:c2:09:1b:36:cb:5b:57:81:ea:
fb:43:d7:ac:f4:c7:eb:a2:59:aa:05:f6:ad:dd:a3:9f:25:75:
df:5d:6d:d5:65:73:d1:27:ab:46:44:37:f1:8b:79:c8:83:b1:
6f:7f:ba:37:bb:8d:46:9e:71:ab:36:64:de:76:f8:cc:86:95:
3e:5b:ad:29
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZQijRBqwUq+SQHItdJhNvIiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmMTRmY2U5YjE5YTVlZWE1MzJlMTdkODNkYThjMWRjZDFk
ZTE4YzAwHhcNMjUwMTAxMTU0NzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NWNhMjIxZGQyMDljNDQ4N2E0YTQxZmMxZGQ2M2EzZmUwZDQ4Zjg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfSqGcMbfV35xP01xzXEyEZZ2m2I
OZAA31XYAFyJmjTUxBQ4mtTMVC3kSmfnD4SkiNumWpZSi/eZKK63eBc7eXpPgaJg
NRwbMGJjwsLwe7FJOvcwK85JVoGlFXJks8uWLKoKGhD8/6Nb9rfpnnOrz8GXoQ/0
mKJ4ofuPvRmYkmQMnXlRT2fDGFZGbibJdhE8CCfs6YaiZBmHvd28MZMCZiY5PzpF
8AsDJpFlc7mZGnsXjEkMUT2+N0kcisURMmUrkP6n2uAawwLtsdFfM9BYsTHfdFRA
iKP/k6IebNk/E2OVCxfh8yZ4WCcJcX7X7Gx9qFQ+mIQ6gkQfmkFcEb+tGQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFHXKIh3SCcRIekpB/B3WOj/g1I+IMB8GA1UdIwQY
MBaAFM8U/Omxml7qUy4X2D2owdzR3hjAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenhUODZiR2FYdXBUTGhmWVBhakIzTkhlR01BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9hZDNhZTUtY2UyYS00ODVmLWFhYjMt
NTljMTA4N2U0ODU2LzEvZGNvaUhkSUp4RWg2U2tIOEhkWTZQLURVajRnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9hZDNhZTUtY2UyYS00ODVmLWFhYjMtNTljMTA4N2U0ODU2
LzEvenhUODZiR2FYdXBUTGhmWVBhakIzTkhlR01BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwdt2MA8E
AgACMAkDBwAgAQZ8B4gwDQYJKoZIhvcNAQELBQADggEBACa+cYWe5JTorAtziuBo
kBNuXSCcoOpVVqf1NkPG573v1K+aW2YqxBe9jjaTbSme8MB/Th5+bsu2JTLWsmUf
9UOgxAF2GQLIXN+cRRkGgC/N0CpwVoq9oX8Q7jKUL+WXUTnQ0NunSgKqXL7goXhM
bbTcWK/uWLP9UKvVbur9Q8WTYqoEjuvNyjYeSIVR5GExs2D3UNMEoO/gzOWVqlbV
U9u1CTqjMxLJZ9efYPBS6kdXZVKzhVBTtW3jIwdAN8IJGzbLW1eB6vtD16z0x+ui
WaoF9q3do58ldd9dbdVlc9Enq0ZEN/GLeciDsW9/uje7jUaecas2ZN52+MyGlT5b
rSk=
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:05:46 2025 by rpki-client