Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/1EKmpmLrhgEWrPL4W3egou3tKhc.roa
File: 1EKmpmLrhgEWrPL4W3egou3tKhc.roa (raw, json)
Hash identifier: ut1VDOBCE4msMsHhztUxD5FDBOfdw81wBHRbz+SOmeA=
Subject key identifier: D4:42:A6:A6:62:EB:86:01:16:AC:F2:F8:5B:77:A0:A2:ED:ED:2A:17
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01968C98425FE051FC46513806F03D473871
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/1EKmpmLrhgEWrPL4W3egou3tKhc.roa
Signing time: Thu 01 May 2025 16:05:10 +0000
ROA not before: Thu 01 May 2025 16:05:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213520
IP address blocks: 193.23.197.0/24 maxlen: 24
193.23.210.0/23 maxlen: 24
193.23.218.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8c:98:42:5f:e0:51:fc:46:51:38:06:f0:3d:47:38:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: May 1 16:05:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d442a6a662eb860116acf2f85b77a0a2eded2a17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:09:92:3b:6c:0a:43:c3:86:24:0e:30:01:28:
06:28:de:4b:70:8b:26:46:7a:c9:dd:7b:c2:c7:b3:
ff:9d:e9:b2:a1:b0:16:d6:cb:0e:b6:30:34:a2:06:
c4:0d:df:64:49:6d:7d:b4:d6:ca:ad:07:4e:a1:26:
e3:f5:86:6f:bf:59:b2:bc:43:ca:46:aa:b9:8a:c9:
de:b3:a5:52:bf:d1:bc:e0:05:43:7b:b6:da:2f:9c:
9f:29:9d:f3:87:5a:1a:e3:e8:e1:90:7f:2c:c6:df:
29:c4:1d:f4:21:d0:fc:53:5e:8e:08:86:7d:9c:97:
25:c7:7e:cf:66:6f:c9:54:30:45:99:06:3a:67:0a:
15:c2:f8:33:b9:ba:75:83:0d:56:1f:e7:c9:1c:b1:
53:8d:5a:42:1c:1c:50:d3:ad:e3:84:8f:df:1b:37:
82:38:5e:3d:5c:9e:ed:f8:4d:74:9f:5b:a8:bc:cc:
33:8e:00:b9:c5:65:ae:e5:4d:2f:04:f9:4f:39:9d:
81:7b:76:e5:95:f3:db:7c:18:40:5d:e8:d7:7e:6d:
fd:c6:5b:64:72:4b:7a:4c:0f:1d:27:6c:29:b7:5a:
c1:69:bc:64:8d:93:79:d1:7c:a6:14:96:ea:3d:84:
2c:f6:70:d7:0e:e8:16:34:92:38:2d:7c:c6:c9:f1:
f7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:42:A6:A6:62:EB:86:01:16:AC:F2:F8:5B:77:A0:A2:ED:ED:2A:17
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/1EKmpmLrhgEWrPL4W3egou3tKhc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.23.197.0/24
193.23.210.0/23
193.23.218.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:9d:1c:6e:3d:92:d4:46:68:06:d4:7c:fd:8e:90:58:b6:a6:
83:c2:85:7b:ae:b3:cb:3d:90:72:c7:e8:85:2e:fd:aa:77:13:
90:0f:1a:37:8c:11:c2:ca:51:90:f8:c6:84:45:2e:74:d4:08:
0f:46:19:74:46:99:b3:79:27:65:d6:8a:6a:c1:20:ba:e4:2d:
2c:e9:bb:e0:6a:6e:ea:06:69:2f:14:4d:99:36:c8:7a:37:fd:
50:1a:2f:2a:8a:c3:d5:c5:88:5a:57:4e:31:7d:e2:8d:e7:08:
9a:06:06:36:cf:a7:c9:19:7d:7a:72:2d:30:92:1e:67:c7:89:
e1:14:04:86:1e:a8:be:eb:68:16:de:89:09:19:8e:32:aa:11:
4d:aa:80:7b:ab:44:de:d5:f4:ac:c8:c3:3a:83:f5:a0:37:02:
d1:20:73:56:38:36:6f:c3:74:df:a8:58:aa:4c:ba:41:4e:6d:
47:b3:e2:8f:3b:89:ae:83:8f:bb:77:ad:e2:36:ed:1b:09:9c:
e7:e1:a0:41:a2:5b:1b:26:e0:d6:a5:b8:01:0d:fd:ad:9d:42:
dd:19:3c:ac:0d:90:42:3f:4d:a6:d6:e3:f5:60:49:db:f2:94:
66:0b:35:62:d1:68:69:27:5c:90:fe:67:e0:e7:32:dc:07:fa:
1e:ff:3a:eb
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZaMmEJf4FH8RlE4BvA9RzhxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjUwNTAxMTYwNTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNDQyYTZhNjYyZWI4NjAxMTZhY2YyZjg1Yjc3YTBhMmVkZWQyYTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwmSO2wKQ8OGJA4wASgGKN5LcIsm
RnrJ3XvCx7P/nemyobAW1ssOtjA0ogbEDd9kSW19tNbKrQdOoSbj9YZvv1myvEPK
Rqq5isnes6VSv9G84AVDe7baL5yfKZ3zh1oa4+jhkH8sxt8pxB30IdD8U16OCIZ9
nJclx37PZm/JVDBFmQY6ZwoVwvgzubp1gw1WH+fJHLFTjVpCHBxQ063jhI/fGzeC
OF49XJ7t+E10n1uovMwzjgC5xWWu5U0vBPlPOZ2Be3bllfPbfBhAXejXfm39xltk
ckt6TA8dJ2wpt1rBabxkjZN50XymFJbqPYQs9nDXDugWNJI4LXzGyfH3RQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFNRCpqZi64YBFqzy+Ft3oKLt7SoXMB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvMUVLbXBtTHJoZ0VXclBMNFczZWdvdTN0S2hjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAwRfFAwQB
wRfSAwQBwRfaMA0GCSqGSIb3DQEBCwUAA4IBAQBKnRxuPZLURmgG1Hz9jpBYtqaD
woV7rrPLPZByx+iFLv2qdxOQDxo3jBHCylGQ+MaERS501AgPRhl0RpmzeSdl1opq
wSC65C0s6bvgam7qBmkvFE2ZNsh6N/1QGi8qisPVxYhaV04xfeKN5wiaBgY2z6fJ
GX16ci0wkh5nx4nhFASGHqi+62gW3okJGY4yqhFNqoB7q0Te1fSsyMM6g/WgNwLR
IHNWODZvw3TfqFiqTLpBTm1Hs+KPO4mug4+7d63iNu0bCZzn4aBBolsbJuDWpbgB
Df2tnULdGTysDZBCP02m1uP1YEnb8pRmCzVi0WhpJ1yQ/mfg5zLcB/oe/zrr
-----END CERTIFICATE-----
Generated at Mon May 5 09:46:31 2025 by rpki-client