Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/I0285mEqTYvxtf-YdOlMsXqnwE8.roa
File: I0285mEqTYvxtf-YdOlMsXqnwE8.roa (raw, json)
Hash identifier: jUvu2e798qxwWX/SO3R/OaJlKxHtUy0iBk2O74dZKD4=
Subject key identifier: 23:4D:BC:E6:61:2A:4D:8B:F1:B5:FF:98:74:E9:4C:B1:7A:A7:C0:4F
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 0196617096692D16E8E4ADDF796C6F4EA06E
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/I0285mEqTYvxtf-YdOlMsXqnwE8.roa
Signing time: Wed 23 Apr 2025 06:58:10 +0000
ROA not before: Wed 23 Apr 2025 06:58:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215540
IP address blocks: 109.172.54.0/24 maxlen: 24
109.172.55.0/24 maxlen: 24
178.130.46.0/24 maxlen: 24
178.130.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 02:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:61:70:96:69:2d:16:e8:e4:ad:df:79:6c:6f:4e:a0:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: Apr 23 06:58:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=234dbce6612a4d8bf1b5ff9874e94cb17aa7c04f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2f:5b:f6:84:cf:dc:26:ac:03:c6:68:0e:87:
19:d3:b9:bc:f9:33:9b:6d:fb:50:3a:f1:de:ee:58:
e8:57:7d:6f:09:1d:1d:3b:e6:65:63:79:86:5d:59:
a6:e7:b9:4c:11:a2:d3:00:12:38:47:bf:a0:80:44:
f8:f3:c0:be:da:fa:d6:c8:2f:49:ca:27:b3:c2:79:
2c:51:f9:e3:7f:91:6a:95:0e:ba:34:48:38:fa:be:
ad:43:c9:4b:cc:6c:df:8a:84:f4:94:77:fb:0b:90:
06:e0:7e:96:51:ad:eb:01:8c:34:2a:9f:d9:50:4c:
b7:ca:68:24:dd:da:aa:95:11:20:44:fc:a9:9f:e0:
c7:38:c4:95:80:57:bc:da:c6:16:fe:7c:e1:9a:00:
f2:ec:ed:da:7a:34:0a:c3:28:ba:23:ad:b5:3e:4b:
35:10:c2:27:31:90:78:8e:00:e2:ee:f3:6b:93:d3:
e2:42:55:0d:b4:24:2a:0d:ca:5a:e5:65:f9:4c:6e:
e8:cc:fc:75:45:be:65:d5:5f:87:6d:bb:00:09:e8:
21:f5:af:20:77:cd:46:62:57:fa:76:8e:aa:ff:96:
e0:91:03:79:cc:f0:74:70:40:42:80:a6:89:c7:0f:
95:1a:86:17:f3:8b:22:3b:a0:6b:36:07:27:1b:fd:
45:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:4D:BC:E6:61:2A:4D:8B:F1:B5:FF:98:74:E9:4C:B1:7A:A7:C0:4F
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/I0285mEqTYvxtf-YdOlMsXqnwE8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.172.54.0/23
178.130.46.0/23
Signature Algorithm: sha256WithRSAEncryption
85:5f:10:09:25:6c:25:9a:ec:ba:99:7f:46:76:de:a7:74:c6:
e4:da:aa:31:cd:e2:be:8c:cf:9e:43:cf:27:64:3b:8c:89:2c:
32:a7:62:7e:0e:fc:79:c5:0d:12:0d:0d:9b:b8:2d:33:23:6c:
8e:17:fa:58:63:38:df:f2:84:f9:dc:62:27:79:86:d8:98:b8:
59:cd:80:4d:19:a4:15:2c:8f:c6:2a:15:ce:35:04:3e:97:34:
b3:88:b9:68:7b:8b:f6:ba:85:9a:ae:b2:c6:33:4f:e9:7c:5d:
e3:7d:90:77:67:9a:5b:46:8b:88:16:79:11:74:c0:d1:dc:ec:
96:8a:7f:9b:2d:dd:5b:89:07:3c:d8:99:19:38:46:8c:3f:97:
3e:e3:63:11:1d:34:af:ac:b4:54:d8:33:f0:c0:97:06:22:cf:
c0:2d:17:e4:c6:09:a3:a8:d2:2c:96:75:a5:df:96:99:7d:97:
85:c5:9a:cd:41:bf:b3:75:25:f3:57:8d:e6:b0:4b:90:d4:5c:
4a:ca:d4:9b:d9:df:fc:b8:1e:d8:b2:60:52:dc:af:7b:f8:70:
b1:89:09:db:ea:83:a7:17:15:8f:ce:27:63:e4:ff:ba:ca:48:
f2:95:4d:e0:dc:59:2d:81:7e:d1:4b:f8:62:04:7f:99:11:94:
60:21:aa:e6
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZZhcJZpLRbo5K3feWxvTqBuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0NTllYzJhNWZkNTM5MDljNTIzOWY0Y2M4ZDZkMzI5YTI3
NzliYjEwHhcNMjUwNDIzMDY1ODEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMzRkYmNlNjYxMmE0ZDhiZjFiNWZmOTg3NGU5NGNiMTdhYTdjMDRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvy9b9oTP3CasA8ZoDocZ07m8+TOb
bftQOvHe7ljoV31vCR0dO+ZlY3mGXVmm57lMEaLTABI4R7+ggET488C+2vrWyC9J
yiezwnksUfnjf5FqlQ66NEg4+r6tQ8lLzGzfioT0lHf7C5AG4H6WUa3rAYw0Kp/Z
UEy3ymgk3dqqlREgRPypn+DHOMSVgFe82sYW/nzhmgDy7O3aejQKwyi6I621Pks1
EMInMZB4jgDi7vNrk9PiQlUNtCQqDcpa5WX5TG7ozPx1Rb5l1V+HbbsACegh9a8g
d81GYlf6do6q/5bgkQN5zPB0cEBCgKaJxw+VGoYX84siO6BrNgcnG/1FjQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCNNvOZhKk2L8bX/mHTpTLF6p8BPMB8GA1UdIwQY
MBaAFERZ7Cpf1TkJxSOfTMjW0ymid5uxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkZuc0tsX1ZPUW5GSTU5TXlOYlRLYUozbTdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9mMGFlNjItYzEwNy00M2NlLWE4YTkt
NmI0MzcyNjAyMDk2LzEvSTAyODVtRXFUWXZ4dGYtWWRPbE1zWHFud0U4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny9mMGFlNjItYzEwNy00M2NlLWE4YTktNmI0MzcyNjAyMDk2
LzEvUkZuc0tsX1ZPUW5GSTU5TXlOYlRLYUozbTdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBbaw2AwQB
soIuMA0GCSqGSIb3DQEBCwUAA4IBAQCFXxAJJWwlmuy6mX9Gdt6ndMbk2qoxzeK+
jM+eQ88nZDuMiSwyp2J+Dvx5xQ0SDQ2buC0zI2yOF/pYYzjf8oT53GIneYbYmLhZ
zYBNGaQVLI/GKhXONQQ+lzSziLloe4v2uoWarrLGM0/pfF3jfZB3Z5pbRouIFnkR
dMDR3OyWin+bLd1biQc82JkZOEaMP5c+42MRHTSvrLRU2DPwwJcGIs/ALRfkxgmj
qNIslnWl35aZfZeFxZrNQb+zdSXzV43msEuQ1FxKytSb2d/8uB7YsmBS3K97+HCx
iQnb6oOnFxWPzidj5P+6ykjylU3g3FktgX7RS/hiBH+ZEZRgIarm
-----END CERTIFICATE-----
Generated at Sun May 4 11:34:33 2025 by rpki-client