Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/iSbIp-aerHytPU2-fjaG8-ymLtk.roa
File: iSbIp-aerHytPU2-fjaG8-ymLtk.roa (raw, json)
Hash identifier: 5lCJIwaeBDLERf+wq/fQPToLU2dLgoHIPHAwZb0lLA0=
Subject key identifier: 89:26:C8:A7:E6:9E:AC:7C:AD:3D:4D:BE:7E:36:86:F3:EC:A6:2E:D9
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 019639EEC16D361C345529712B675E61AE88
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/iSbIp-aerHytPU2-fjaG8-ymLtk.roa
Signing time: Tue 15 Apr 2025 14:51:10 +0000
ROA not before: Tue 15 Apr 2025 14:51:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212165
IP address blocks: 195.133.26.0/24 maxlen: 24
212.192.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 17:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:39:ee:c1:6d:36:1c:34:55:29:71:2b:67:5e:61:ae:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Apr 15 14:51:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8926c8a7e69eac7cad3d4dbe7e3686f3eca62ed9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c2:a0:4a:7a:70:eb:50:7d:f9:3a:56:c7:91:
bd:9e:f0:fc:ee:88:b4:10:f4:77:5b:fa:04:a9:25:
24:5a:7c:76:f9:0a:cc:e2:ad:51:f0:a4:91:da:59:
4b:0b:78:c4:97:2e:09:9d:5f:02:d9:d4:29:74:f5:
d0:5a:d5:71:cf:a6:12:7c:6c:52:4b:fb:82:6c:d8:
7c:e3:e1:b1:09:4d:49:74:2a:52:5c:62:51:23:3b:
77:8b:ae:77:71:ce:82:85:46:7b:57:88:e0:47:a3:
ba:a4:cf:cb:c6:f4:0b:e7:3e:e6:ff:1e:61:bd:70:
9a:0a:9b:29:91:6a:ed:65:f9:10:d2:84:b3:46:69:
4d:d0:cc:a4:75:c5:74:ef:89:de:15:13:e9:64:48:
18:dd:21:18:12:20:c1:71:fa:9b:ca:6b:db:38:21:
75:f2:e6:b0:a1:34:6c:dd:7c:0b:b3:9a:4a:82:f8:
0c:41:90:ca:fa:8c:d1:09:6a:a9:46:7c:9d:1d:08:
a5:0e:31:72:1d:19:29:44:42:fa:3e:27:06:a9:d0:
df:cf:a1:12:c0:4f:27:b8:2c:0a:e6:c6:12:c1:a4:
d6:21:b1:9c:6c:32:ed:bd:63:b3:35:07:3b:3a:b2:
71:e3:72:ed:32:61:2d:73:b4:1e:2a:4e:20:a2:53:
ce:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:26:C8:A7:E6:9E:AC:7C:AD:3D:4D:BE:7E:36:86:F3:EC:A6:2E:D9
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/iSbIp-aerHytPU2-fjaG8-ymLtk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.133.26.0/24
212.192.246.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:8d:4b:79:0c:6d:28:1c:fe:f9:57:42:bb:e7:df:d9:06:0a:
6c:81:d8:7a:f7:59:af:23:09:dd:28:50:63:ce:7b:a2:cb:28:
8b:85:2a:47:5f:08:62:50:42:2b:35:68:18:eb:64:bf:2f:07:
b6:6d:4d:d5:d3:1f:c0:da:6c:5b:41:26:ab:23:3e:f1:d9:33:
68:95:2d:bc:12:40:f2:fb:98:02:d7:8e:2e:e1:ab:80:db:82:
6c:22:34:f0:6b:8d:62:4f:f4:01:d4:18:5e:02:14:c6:a6:d3:
39:ab:de:b1:ed:fe:45:f3:fb:7c:64:dd:74:07:23:a6:1b:87:
70:02:eb:80:81:97:7f:c5:cb:87:79:d6:5d:36:43:7f:d4:bb:
2a:f5:9f:ca:31:09:74:fd:36:62:c9:bb:47:84:2b:24:3e:91:
7a:58:cb:28:43:52:4d:55:9e:9a:06:11:9e:59:f4:83:e8:4e:
1b:9c:41:bb:3e:6e:86:66:42:bf:11:64:4d:ab:2b:ab:05:fd:
b0:6d:31:c2:b7:9d:ad:ef:af:74:9b:45:1c:b5:08:96:83:82:
4a:f3:86:cf:cc:f0:4f:ea:72:ae:44:e8:d1:00:11:b5:15:fa:
29:3b:4c:7e:da:d8:22:f6:29:24:19:72:09:14:52:82:94:cd:
a6:f6:31:9f
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZY57sFtNhw0VSlxK2deYa6IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjUwNDE1MTQ1MTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OTI2YzhhN2U2OWVhYzdjYWQzZDRkYmU3ZTM2ODZmM2VjYTYyZWQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMKgSnpw61B9+TpWx5G9nvD87oi0
EPR3W/oEqSUkWnx2+QrM4q1R8KSR2llLC3jEly4JnV8C2dQpdPXQWtVxz6YSfGxS
S/uCbNh84+GxCU1JdCpSXGJRIzt3i653cc6ChUZ7V4jgR6O6pM/LxvQL5z7m/x5h
vXCaCpspkWrtZfkQ0oSzRmlN0MykdcV074neFRPpZEgY3SEYEiDBcfqbymvbOCF1
8uawoTRs3XwLs5pKgvgMQZDK+ozRCWqpRnydHQilDjFyHRkpREL6PicGqdDfz6ES
wE8nuCwK5sYSwaTWIbGcbDLtvWOzNQc7OrJx43LtMmEtc7QeKk4golPOtwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFIkmyKfmnqx8rT1Nvn42hvPspi7ZMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvaVNiSXAtYWVySHl0UFUyLWZqYUc4LXltTHRrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAw4UaAwQA
1MD2MA0GCSqGSIb3DQEBCwUAA4IBAQBsjUt5DG0oHP75V0K759/ZBgpsgdh691mv
IwndKFBjznuiyyiLhSpHXwhiUEIrNWgY62S/Lwe2bU3V0x/A2mxbQSarIz7x2TNo
lS28EkDy+5gC144u4auA24JsIjTwa41iT/QB1BheAhTGptM5q96x7f5F8/t8ZN10
ByOmG4dwAuuAgZd/xcuHedZdNkN/1Lsq9Z/KMQl0/TZiybtHhCskPpF6WMsoQ1JN
VZ6aBhGeWfSD6E4bnEG7Pm6GZkK/EWRNqyurBf2wbTHCt52t7690m0UctQiWg4JK
84bPzPBP6nKuROjRABG1FfopO0x+2tgi9ikkGXIJFFKClM2m9jGf
-----END CERTIFICATE-----
Generated at Sun Apr 27 02:48:10 2025 by rpki-client