Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/D_2KIhXDFuN62BczyPhUW248E3s.roa
File: D_2KIhXDFuN62BczyPhUW248E3s.roa (raw, json)
Hash identifier: xx+IXKxNp8unVM/x/lfJ9B6yhOO6P4T8NVGiB+t3evw=
Subject key identifier: 0F:FD:8A:22:15:C3:16:E3:7A:D8:17:33:C8:F8:54:5B:6E:3C:13:7B
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019639FE54088AD2C9492481968601B623AE
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/D_2KIhXDFuN62BczyPhUW248E3s.roa
Signing time: Tue 15 Apr 2025 15:08:11 +0000
ROA not before: Tue 15 Apr 2025 15:08:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213282
IP address blocks: 93.88.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:39:fe:54:08:8a:d2:c9:49:24:81:96:86:01:b6:23:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Apr 15 15:08:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0ffd8a2215c316e37ad81733c8f8545b6e3c137b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f6:f7:38:d4:96:87:51:db:72:7a:07:8c:c8:
4a:24:bf:48:91:c8:d9:be:8a:58:bf:0f:ca:39:21:
d2:4a:ed:6b:0a:47:c7:5c:11:d3:45:6d:2e:b0:d5:
6b:14:23:df:eb:5e:27:9a:a0:f6:9f:c8:39:ea:50:
e7:d0:e8:8a:d8:99:fb:c7:83:77:23:79:9d:51:45:
c0:d6:a1:29:a4:e9:e5:3c:9c:85:04:a0:16:6e:7d:
e5:3f:e3:1a:dd:8f:b4:ad:7b:a7:94:67:ca:8e:d4:
55:01:4d:e6:10:07:dc:41:65:06:a3:33:df:db:f7:
ec:29:65:dc:9d:c8:0f:8e:b5:b3:cd:79:d9:f9:2b:
eb:1c:22:b8:2b:42:06:12:32:9c:fa:32:49:a1:0c:
14:ad:49:c1:4a:c7:93:97:00:b8:ff:36:0c:75:b6:
04:ee:3a:9c:f8:9f:fe:16:bc:cd:f9:72:70:7f:e3:
32:58:54:8d:7f:28:3d:2f:7b:06:0c:53:c3:bb:f3:
99:2e:0f:7a:70:74:19:99:a5:c6:a8:26:d1:ce:db:
77:0a:4c:55:d2:36:42:aa:28:26:f9:9d:20:f0:7d:
bc:79:a6:8b:cf:61:6e:dc:dd:64:f3:03:6d:56:a4:
39:50:1d:be:c1:f4:1e:e0:49:0f:6d:83:a9:81:d3:
83:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:FD:8A:22:15:C3:16:E3:7A:D8:17:33:C8:F8:54:5B:6E:3C:13:7B
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/D_2KIhXDFuN62BczyPhUW248E3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.88.201.0/24
Signature Algorithm: sha256WithRSAEncryption
54:99:de:e7:e1:43:11:96:d1:e2:f8:7c:6e:e9:da:35:74:30:
77:43:7e:22:1d:cc:0f:d6:42:05:6c:ac:84:4e:9d:29:9c:b2:
16:f3:95:f2:3d:22:3d:bf:6d:11:97:9a:f7:82:5a:b5:f7:4e:
fb:01:33:92:c8:7e:78:15:99:b5:35:6f:75:0e:6e:10:2e:23:
2c:90:ad:c8:e1:2e:7f:08:eb:fb:9e:e3:32:e1:d7:29:a6:de:
22:d4:53:86:92:6b:89:bb:d0:60:f7:ba:be:0c:90:6e:23:b1:
de:ad:1c:83:a9:c5:00:1e:25:4f:5d:c7:14:65:33:46:19:dd:
0d:dd:7a:d7:60:a7:e9:a2:5b:4d:2a:d4:90:6d:35:ea:a8:a8:
82:13:a1:3e:cf:08:88:3f:8d:94:9b:e5:3a:30:e9:7d:c6:71:
84:1c:2b:fb:4f:65:dc:84:d3:ca:e3:ee:7f:e2:20:16:5a:bc:
33:6a:a7:90:5e:0b:d1:8f:52:1f:94:ec:55:a2:7d:ac:ed:4c:
25:78:4d:d6:39:0c:64:e4:aa:e4:30:01:e1:5e:3d:c8:e1:63:
e7:25:58:32:f2:f3:ce:4f:93:bd:49:92:19:cb:41:8f:24:be:
1b:e4:57:94:ad:c3:56:db:ed:2e:b7:18:62:7e:29:b1:d8:c3:
0b:cc:18:b2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZY5/lQIitLJSSSBloYBtiOuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjUwNDE1MTUwODExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZmZkOGEyMjE1YzMxNmUzN2FkODE3MzNjOGY4NTQ1YjZlM2MxMzdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvb3ONSWh1HbcnoHjMhKJL9IkcjZ
vopYvw/KOSHSSu1rCkfHXBHTRW0usNVrFCPf614nmqD2n8g56lDn0OiK2Jn7x4N3
I3mdUUXA1qEppOnlPJyFBKAWbn3lP+Ma3Y+0rXunlGfKjtRVAU3mEAfcQWUGozPf
2/fsKWXcncgPjrWzzXnZ+SvrHCK4K0IGEjKc+jJJoQwUrUnBSseTlwC4/zYMdbYE
7jqc+J/+FrzN+XJwf+MyWFSNfyg9L3sGDFPDu/OZLg96cHQZmaXGqCbRztt3CkxV
0jZCqigm+Z0g8H28eaaLz2Fu3N1k8wNtVqQ5UB2+wfQe4EkPbYOpgdOD7QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA/9iiIVwxbjetgXM8j4VFtuPBN7MB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvRF8yS0loWERGdU42MkJjenlQaFVXMjQ4RTNzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXVjJMA0G
CSqGSIb3DQEBCwUAA4IBAQBUmd7n4UMRltHi+Hxu6do1dDB3Q34iHcwP1kIFbKyE
Tp0pnLIW85XyPSI9v20Rl5r3glq19077ATOSyH54FZm1NW91Dm4QLiMskK3I4S5/
COv7nuMy4dcppt4i1FOGkmuJu9Bg97q+DJBuI7HerRyDqcUAHiVPXccUZTNGGd0N
3XrXYKfpoltNKtSQbTXqqKiCE6E+zwiIP42Um+U6MOl9xnGEHCv7T2XchNPK4+5/
4iAWWrwzaqeQXgvRj1IflOxVon2s7UwleE3WOQxk5KrkMAHhXj3I4WPnJVgy8vPO
T5O9SZIZy0GPJL4b5FeUrcNW2+0utxhifimx2MMLzBiy
-----END CERTIFICATE-----
Generated at Tue May 13 09:13:07 2025 by rpki-client