Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/uC624tGs1354VVQobjFgauWAw4E.roa
File: uC624tGs1354VVQobjFgauWAw4E.roa (raw, json)
Hash identifier: x1Em80ieu4iH6nUR62aBVvhgJuExKvdP4hlIxqezG5U=
Subject key identifier: B8:2E:B6:E2:D1:AC:D7:7E:78:55:54:28:6E:31:60:6A:E5:80:C3:81
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 0196A1B3B337E24D719F287EC582952C595C
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/uC624tGs1354VVQobjFgauWAw4E.roa
Signing time: Mon 05 May 2025 18:27:10 +0000
ROA not before: Mon 05 May 2025 18:27:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216366
IP address blocks: 78.142.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:b3:b3:37:e2:4d:71:9f:28:7e:c5:82:95:2c:59:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: May 5 18:27:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b82eb6e2d1acd77e785554286e31606ae580c381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:87:49:db:05:d9:a7:0a:3a:49:6c:f3:cd:bc:
e3:4a:2c:b9:49:9c:5e:bd:db:bd:1e:c4:35:b2:f9:
3c:67:a5:b3:fa:d7:f0:ff:58:c8:11:8c:e4:3a:4d:
d8:bd:5d:3d:1a:bb:82:18:12:3c:b4:77:7b:68:ab:
dd:31:9b:c1:8c:a3:6a:56:cb:25:c4:24:04:8f:1f:
29:4f:46:c4:31:f1:0d:e6:03:19:1f:7c:0b:11:42:
7a:b1:34:51:27:43:19:71:30:af:c5:4a:20:3b:ab:
70:04:ff:07:d1:ea:2c:36:e5:67:6d:e3:6a:94:25:
9b:48:22:db:d2:f7:bf:a5:20:11:bb:7e:af:85:58:
88:f8:d7:ad:f7:22:e6:38:b8:76:0f:4f:92:ba:12:
8f:c7:38:f9:10:a9:b6:93:e2:9d:61:90:b7:4a:99:
76:78:44:57:da:c3:ea:7b:b7:cb:57:ab:87:56:12:
b8:44:67:dd:f6:4b:c5:cb:34:70:c9:75:85:be:75:
97:85:45:0c:38:35:11:79:36:c7:d9:8b:28:07:0e:
0d:f8:a2:0c:79:a4:4b:c5:cf:bc:2f:c6:41:f2:93:
81:4d:e6:bd:90:11:0a:77:2e:5f:d0:f4:41:6e:bf:
75:aa:62:92:df:31:bd:10:c8:4d:b6:7e:ec:8f:74:
60:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:2E:B6:E2:D1:AC:D7:7E:78:55:54:28:6E:31:60:6A:E5:80:C3:81
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/uC624tGs1354VVQobjFgauWAw4E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.142.239.0/24
Signature Algorithm: sha256WithRSAEncryption
10:ee:8c:ba:f4:46:b3:fd:2a:94:d9:4c:ff:da:dc:fc:e0:a5:
c1:f9:75:d1:c9:36:db:07:d7:2c:5d:f6:11:57:70:a6:98:51:
e6:a0:ae:c4:8c:dd:e3:6d:8f:62:2e:db:2c:7a:2b:0e:5d:be:
f8:bd:ce:6a:2b:2c:77:bf:27:de:f3:42:a3:b5:68:d1:21:f2:
71:31:df:32:7f:70:b0:ae:75:b6:13:54:b1:90:8b:34:e8:72:
3c:3b:70:22:a2:19:2f:4a:a5:27:94:4e:fa:d3:f1:8c:38:e0:
38:39:cd:a2:54:2d:25:39:a0:42:80:9a:e5:f3:7b:b0:ae:99:
ed:e8:12:ff:30:09:a6:43:29:8c:e3:51:ee:58:52:aa:1c:01:
36:f9:3c:09:58:e1:a1:70:2c:3f:cf:f5:14:37:4a:3f:49:a9:
49:74:8e:90:49:56:3b:0e:0f:21:11:3e:c7:36:50:e4:16:b1:
b0:2b:da:9b:d2:75:36:16:db:18:48:3e:6f:d7:8e:11:47:10:
8f:01:db:32:e7:f8:bf:9a:97:c9:40:1d:a5:3c:c8:93:dd:3b:
2e:ae:8d:06:89:c7:3c:7f:2b:86:fb:62:39:f8:3d:7d:36:00:
6c:a1:0e:df:c4:46:01:56:d3:ee:6b:a1:ef:61:5e:24:0f:e1:
df:76:bf:02
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZahs7M34k1xnyh+xYKVLFlcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4
ZmNjNGMwHhcNMjUwNTA1MTgyNzEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiODJlYjZlMmQxYWNkNzdlNzg1NTU0Mjg2ZTMxNjA2YWU1ODBjMzgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4dJ2wXZpwo6SWzzzbzjSiy5SZxe
vdu9HsQ1svk8Z6Wz+tfw/1jIEYzkOk3YvV09GruCGBI8tHd7aKvdMZvBjKNqVssl
xCQEjx8pT0bEMfEN5gMZH3wLEUJ6sTRRJ0MZcTCvxUogO6twBP8H0eosNuVnbeNq
lCWbSCLb0ve/pSARu36vhViI+Net9yLmOLh2D0+SuhKPxzj5EKm2k+KdYZC3Spl2
eERX2sPqe7fLV6uHVhK4RGfd9kvFyzRwyXWFvnWXhUUMODUReTbH2YsoBw4N+KIM
eaRLxc+8L8ZB8pOBTea9kBEKdy5f0PRBbr91qmKS3zG9EMhNtn7sj3RgbwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLgutuLRrNd+eFVUKG4xYGrlgMOBMB8GA1UdIwQY
MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt
MjM5ZDJmZTM5OGIxLzEvdUM2MjR0R3MxMzU0VlZRb2JqRmdhdVdBdzRFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx
LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATo7vMA0G
CSqGSIb3DQEBCwUAA4IBAQAQ7oy69Eaz/SqU2Uz/2tz84KXB+XXRyTbbB9csXfYR
V3CmmFHmoK7EjN3jbY9iLtsseisOXb74vc5qKyx3vyfe80KjtWjRIfJxMd8yf3Cw
rnW2E1SxkIs06HI8O3AiohkvSqUnlE760/GMOOA4Oc2iVC0lOaBCgJrl83uwrpnt
6BL/MAmmQymM41HuWFKqHAE2+TwJWOGhcCw/z/UUN0o/SalJdI6QSVY7Dg8hET7H
NlDkFrGwK9qb0nU2FtsYSD5v144RRxCPAdsy5/i/mpfJQB2lPMiT3Tsuro0Gicc8
fyuG+2I5+D19NgBsoQ7fxEYBVtPua6HvYV4kD+Hfdr8C
-----END CERTIFICATE-----
Generated at Mon May 12 11:07:27 2025 by rpki-client