Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/UabrP9SFPinXYIxzV1CHpeuYu-U.roa
File: UabrP9SFPinXYIxzV1CHpeuYu-U.roa (raw, json)
Hash identifier: vZsFY4hIlYsgml0HPRseUEiONs3e+mJi4UxFhq6ZGsU=
Subject key identifier: 51:A6:EB:3F:D4:85:3E:29:D7:60:8C:73:57:50:87:A5:EB:98:BB:E5
Certificate issuer: /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Certificate serial: 019605B8A868C87577FC7757ECB346674C4F
Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/UabrP9SFPinXYIxzV1CHpeuYu-U.roa
Signing time: Sat 05 Apr 2025 11:31:49 +0000
ROA not before: Sat 05 Apr 2025 11:31:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51765
IP address blocks: 195.216.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 14:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:05:b8:a8:68:c8:75:77:fc:77:57:ec:b3:46:67:4c:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Validity
Not Before: Apr 5 11:31:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=51a6eb3fd4853e29d7608c73575087a5eb98bbe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:0c:cf:05:17:03:be:38:17:f2:0c:d6:bb:6d:
9d:01:66:0a:5e:fe:a0:da:0b:d1:e2:89:5b:89:2d:
1b:78:16:7b:f5:08:a6:7d:43:03:8a:d3:03:eb:a0:
91:22:5d:bb:d3:cd:27:b0:bd:40:0d:23:a5:74:2a:
5e:21:dd:ee:d3:c0:96:e7:87:e2:fa:ea:44:88:58:
6a:45:8e:17:6e:dd:9b:96:34:49:c3:c9:70:00:b9:
ca:0f:14:6b:75:27:c9:62:10:27:8b:e4:c6:95:66:
3f:16:6b:dc:6b:02:68:f1:f0:5a:73:b3:4e:29:a0:
f4:30:36:75:a5:ac:a8:54:85:00:c8:65:f1:7d:70:
88:ef:cf:c6:1b:f4:00:a1:63:ab:19:05:e8:c5:87:
37:b2:94:1b:5e:65:ea:31:ff:61:7b:80:63:81:c2:
ee:82:31:f6:f8:16:14:05:5e:e1:1f:b8:8f:08:d9:
20:ca:4d:35:0a:21:22:08:97:7e:71:22:6c:fa:8f:
55:b3:a1:83:9b:aa:3d:29:b1:ad:2a:88:f4:ab:0a:
e4:cc:a6:21:45:32:bd:a6:d5:0b:ef:55:9b:6f:15:
78:75:f2:cb:0c:1f:34:1d:af:17:8e:1b:c1:46:95:
c6:c1:b8:db:57:47:51:34:bc:7d:eb:f1:6b:76:60:
a1:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:A6:EB:3F:D4:85:3E:29:D7:60:8C:73:57:50:87:A5:EB:98:BB:E5
X509v3 Authority Key Identifier:
keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/UabrP9SFPinXYIxzV1CHpeuYu-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.216.160.0/24
Signature Algorithm: sha256WithRSAEncryption
79:f2:e4:e0:14:3f:26:e3:67:4b:9f:92:be:12:b4:57:19:56:
81:57:dd:48:45:5f:5d:5a:33:59:8d:67:41:20:2e:92:42:7a:
77:05:9a:1a:98:76:58:f3:78:f5:67:4a:92:37:95:27:fb:e6:
e3:07:7b:98:7f:61:6b:62:ca:74:b9:8f:7e:d1:01:fe:f7:17:
56:cd:81:4c:69:07:79:e2:8f:df:89:7b:ce:9a:bb:46:3a:f0:
ed:40:60:1e:23:c3:cc:30:ed:34:7a:1d:27:f8:22:21:3c:6a:
ae:70:05:6a:bd:2c:ff:98:f1:94:97:22:1e:e6:ef:18:cc:78:
0a:e5:0b:73:f9:2f:9d:9e:ec:32:5b:8e:9c:f8:24:61:5b:c9:
95:7f:d8:2b:16:1e:6f:0c:a1:74:ca:74:23:33:55:99:0e:e4:
92:0f:ca:6e:94:57:e6:50:a3:c4:db:cb:09:55:da:1f:1f:ff:
1e:a8:70:91:ac:b5:bc:0b:37:20:d3:6b:40:50:46:07:fb:05:
0f:7f:37:ca:2b:36:9e:0c:cd:10:58:eb:a5:1b:fc:64:0c:b4:
15:5a:1e:ee:ce:08:df:2e:0c:2e:41:47:6e:45:64:d2:1d:53:
19:76:70:96:ae:4b:65:a1:8a:e3:d8:31:26:ba:7e:bd:ea:51:
29:37:fc:a9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZYFuKhoyHV3/HdX7LNGZ0xPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1YjdkNjY5OTgzNWJmZTlhODA4MWRmYzExNGRmMWJmNmQy
MTVkYTcwHhcNMjUwNDA1MTEzMTQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MWE2ZWIzZmQ0ODUzZTI5ZDc2MDhjNzM1NzUwODdhNWViOThiYmU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2AzPBRcDvjgX8gzWu22dAWYKXv6g
2gvR4olbiS0beBZ79QimfUMDitMD66CRIl27080nsL1ADSOldCpeId3u08CW54fi
+upEiFhqRY4Xbt2bljRJw8lwALnKDxRrdSfJYhAni+TGlWY/FmvcawJo8fBac7NO
KaD0MDZ1payoVIUAyGXxfXCI78/GG/QAoWOrGQXoxYc3spQbXmXqMf9he4BjgcLu
gjH2+BYUBV7hH7iPCNkgyk01CiEiCJd+cSJs+o9Vs6GDm6o9KbGtKoj0qwrkzKYh
RTK9ptUL71WbbxV4dfLLDB80Ha8XjhvBRpXGwbjbV0dRNLx96/FrdmChvwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFGm6z/UhT4p12CMc1dQh6XrmLvlMB8GA1UdIwQY
MBaAFGW31mmYNb/pqAgd/BFN8b9tIV2nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmJmV2FaZzF2LW1vQ0IzOEVVM3h2MjBoWGFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8wMjVlZTgtM2Y0Ny00NTdkLThkNDct
OWU0MTNlYmY0MmYzLzEvVWFiclA5U0ZQaW5YWUl4elYxQ0hwZXVZdS1VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC8wMjVlZTgtM2Y0Ny00NTdkLThkNDctOWU0MTNlYmY0MmYz
LzEvWmJmV2FaZzF2LW1vQ0IzOEVVM3h2MjBoWGFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw9igMA0G
CSqGSIb3DQEBCwUAA4IBAQB58uTgFD8m42dLn5K+ErRXGVaBV91IRV9dWjNZjWdB
IC6SQnp3BZoamHZY83j1Z0qSN5Un++bjB3uYf2FrYsp0uY9+0QH+9xdWzYFMaQd5
4o/fiXvOmrtGOvDtQGAeI8PMMO00eh0n+CIhPGqucAVqvSz/mPGUlyIe5u8YzHgK
5Qtz+S+dnuwyW46c+CRhW8mVf9grFh5vDKF0ynQjM1WZDuSSD8pulFfmUKPE28sJ
VdofH/8eqHCRrLW8Czcg02tAUEYH+wUPfzfKKzaeDM0QWOulG/xkDLQVWh7uzgjf
LgwuQUduRWTSHVMZdnCWrktloYrj2DEmun696lEpN/yp
-----END CERTIFICATE-----
Generated at Sun Apr 27 00:23:52 2025 by rpki-client