Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/s9iYOxy10l9-i1Zqy_As4uSSjUk.roa
File: s9iYOxy10l9-i1Zqy_As4uSSjUk.roa (raw, json)
Hash identifier: 0n52NmQjIf+giy71fwGPYHNLVMMSlIYjTJEygOxPSuw=
Subject key identifier: B3:D8:98:3B:1C:B5:D2:5F:7E:8B:56:6A:CB:F0:2C:E2:E4:92:8D:49
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 019667FB172AFA4E54DF77F2A2172E216CEC
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/s9iYOxy10l9-i1Zqy_As4uSSjUk.roa
Signing time: Thu 24 Apr 2025 13:27:10 +0000
ROA not before: Thu 24 Apr 2025 13:27:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 273192
IP address blocks: 201.77.49.0/24 maxlen: 24
201.77.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:67:fb:17:2a:fa:4e:54:df:77:f2:a2:17:2e:21:6c:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Apr 24 13:27:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b3d8983b1cb5d25f7e8b566acbf02ce2e4928d49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:72:4a:ba:29:eb:71:37:6a:a6:15:b9:e9:f5:
67:8b:51:5a:d0:87:6f:4b:c7:68:26:ff:ed:19:c2:
5f:08:05:1f:19:8a:a3:17:c2:24:8d:af:4d:fb:1b:
36:6e:e9:7a:d5:57:1a:b9:7c:b3:d9:82:27:16:4a:
aa:c7:f0:a7:8d:d5:95:5d:2e:07:5d:ac:5e:df:81:
13:35:a6:7e:17:52:85:a0:fb:43:74:b7:e6:4f:a6:
c7:9b:c6:b3:6d:48:e3:be:63:76:dc:3b:69:da:97:
5d:2e:8f:76:e0:e0:2c:2b:5a:b2:90:93:8a:2b:70:
23:e6:52:a2:40:d7:3b:76:56:9b:c6:69:97:83:11:
55:7a:26:7e:38:5a:fc:cd:17:c8:47:67:7c:df:57:
8b:99:78:28:18:76:5a:ea:1f:a6:91:5d:fc:1b:90:
1a:9d:be:07:38:c3:41:70:38:a4:37:bf:07:62:17:
e4:87:11:d6:ca:6f:86:82:1d:6c:46:a6:61:c3:a2:
98:fc:94:ca:df:5d:45:c3:17:cf:f6:81:fb:db:83:
79:4d:8c:e8:a8:63:d4:ec:d2:eb:e6:c2:39:db:1b:
e5:5d:ec:75:86:28:d0:41:2c:ff:38:e6:86:cb:0e:
44:01:4f:11:4b:8f:ef:00:19:64:de:30:dd:73:e7:
44:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:D8:98:3B:1C:B5:D2:5F:7E:8B:56:6A:CB:F0:2C:E2:E4:92:8D:49
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/s9iYOxy10l9-i1Zqy_As4uSSjUk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.77.49.0/24
201.77.61.0/24
Signature Algorithm: sha256WithRSAEncryption
30:37:79:84:e1:db:da:fc:5c:c9:23:e7:85:0a:ff:f4:45:d3:
b1:15:04:d7:ce:d0:35:54:f4:2a:17:0e:72:76:ef:a5:ca:5e:
98:56:8b:2f:4a:42:91:81:b5:61:b5:3e:c1:c0:1d:46:2e:cc:
f2:8c:d7:fc:e1:7c:df:14:2d:91:4f:5f:7d:8d:92:05:40:b8:
37:63:a6:1d:76:f9:17:c8:aa:3f:57:3b:50:f9:99:92:d7:e6:
b6:d5:43:c8:fb:5a:c2:6d:c7:11:1b:e7:fb:90:76:0e:34:26:
6d:9a:87:58:90:c2:b0:da:2d:28:28:d6:07:cf:e3:fa:7d:ed:
c9:75:6f:0b:21:dd:3e:a2:e3:7c:0d:cb:7b:7e:57:fc:cf:5a:
0b:c5:37:3e:60:72:32:7f:bd:7d:00:69:ae:46:0b:a1:e7:6c:
88:9a:98:49:b8:38:f6:c8:82:eb:7c:5d:40:66:2b:52:b9:df:
73:51:61:68:b3:e6:c8:ff:4b:4e:70:cd:93:0b:ee:36:0f:99:
15:2b:e8:3a:e5:84:a6:00:c2:d4:e4:d6:d6:49:70:f9:4d:1a:
a0:b5:60:ef:12:bb:a9:d1:9d:8b:97:7a:2f:ad:4b:57:3c:6e:
7b:54:59:f8:a0:82:7e:f1:32:48:9f:ab:61:a6:0b:ff:52:f6:
ce:30:9d:51
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZZn+xcq+k5U33fyohcuIWzsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy
N2E0NjcwHhcNMjUwNDI0MTMyNzEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiM2Q4OTgzYjFjYjVkMjVmN2U4YjU2NmFjYmYwMmNlMmU0OTI4ZDQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0XJKuinrcTdqphW56fVni1Fa0Idv
S8doJv/tGcJfCAUfGYqjF8Ikja9N+xs2bul61VcauXyz2YInFkqqx/CnjdWVXS4H
Xaxe34ETNaZ+F1KFoPtDdLfmT6bHm8azbUjjvmN23Dtp2pddLo924OAsK1qykJOK
K3Aj5lKiQNc7dlabxmmXgxFVeiZ+OFr8zRfIR2d831eLmXgoGHZa6h+mkV38G5Aa
nb4HOMNBcDikN78HYhfkhxHWym+Ggh1sRqZhw6KY/JTK311FwxfP9oH724N5TYzo
qGPU7NLr5sI52xvlXex1hijQQSz/OOaGyw5EAU8RS4/vABlk3jDdc+dEXQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLPYmDsctdJffotWasvwLOLkko1JMB8GA1UdIwQY
MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt
Y2Q3ZTA2Y2JiNTMxLzEvczlpWU94eTEwbDktaTFacXlfQXM0dVNTalVrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx
LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAyU0xAwQA
yU09MA0GCSqGSIb3DQEBCwUAA4IBAQAwN3mE4dva/FzJI+eFCv/0RdOxFQTXztA1
VPQqFw5ydu+lyl6YVosvSkKRgbVhtT7BwB1GLszyjNf84XzfFC2RT199jZIFQLg3
Y6YddvkXyKo/VztQ+ZmS1+a21UPI+1rCbccRG+f7kHYONCZtmodYkMKw2i0oKNYH
z+P6fe3JdW8LId0+ouN8Dct7flf8z1oLxTc+YHIyf719AGmuRguh52yImphJuDj2
yILrfF1AZitSud9zUWFos+bI/0tOcM2TC+42D5kVK+g65YSmAMLU5NbWSXD5TRqg
tWDvErup0Z2Ll3ovrUtXPG57VFn4oIJ+8TJIn6thpgv/UvbOMJ1R
-----END CERTIFICATE-----
Generated at Sun Apr 27 04:11:04 2025 by rpki-client