Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/uDvDp8zh82lxkOoAZjCTTeg6pb4.roa
File: uDvDp8zh82lxkOoAZjCTTeg6pb4.roa (raw, json)
Hash identifier: nfGVAuBHW8NDb1MowPGcyliy+vS2NyUJl2AF0NPS5EY=
Subject key identifier: B8:3B:C3:A7:CC:E1:F3:69:71:90:EA:00:66:30:93:4D:E8:3A:A5:BE
Certificate issuer: /CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Certificate serial: 0196BA673DFF42B9CA1FD8129CBD4A31243A
Authority key identifier: EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/uDvDp8zh82lxkOoAZjCTTeg6pb4.roa
Signing time: Sat 10 May 2025 13:34:10 +0000
ROA not before: Sat 10 May 2025 13:34:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 18894
IP address blocks: 109.122.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 14:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:67:3d:ff:42:b9:ca:1f:d8:12:9c:bd:4a:31:24:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Validity
Not Before: May 10 13:34:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b83bc3a7cce1f3697190ea006630934de83aa5be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:17:9f:aa:f2:04:07:86:6c:99:78:b1:61:b1:
f9:05:aa:d2:cb:80:95:7d:d7:6a:c7:a2:d9:30:09:
09:1e:45:07:f1:8c:95:d9:f9:de:5f:91:28:8f:bf:
1a:35:e2:ba:52:e9:79:1c:57:d9:dc:ac:3e:c0:e7:
77:ca:2c:ee:10:70:d0:07:f5:19:88:1a:7a:b7:5b:
9e:1e:6a:69:5c:24:d8:16:95:47:3d:21:20:43:0d:
c1:20:51:a0:b2:0d:de:56:05:91:b3:ce:7b:b1:d7:
49:93:61:ae:bd:f6:91:a2:6c:ba:e8:75:a3:00:90:
1c:e8:35:55:7c:db:eb:0b:24:8f:37:28:ea:c8:a9:
05:f7:0d:01:b5:4d:f3:65:c8:bf:ec:10:bb:b0:d4:
ef:1f:b0:26:02:e6:b7:3f:78:2e:91:5f:22:53:22:
57:51:d2:0a:e3:8f:17:d7:96:8c:95:22:be:b2:e1:
a8:8e:b1:b2:1e:b8:0f:95:3c:dd:8d:e2:68:90:f1:
bf:9b:2f:ca:c6:97:2e:11:a6:1a:7b:87:d6:91:72:
43:90:df:bb:31:5f:32:54:cd:2c:1e:2d:2b:cc:31:
85:83:46:90:a1:72:a4:fb:15:79:c7:cc:cf:ca:a5:
7f:53:0b:44:90:b6:8d:53:f3:ea:69:05:84:f1:ad:
34:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:3B:C3:A7:CC:E1:F3:69:71:90:EA:00:66:30:93:4D:E8:3A:A5:BE
X509v3 Authority Key Identifier:
keyid:EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/uDvDp8zh82lxkOoAZjCTTeg6pb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.56.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:e0:5e:b7:6c:e0:b9:62:25:bc:d0:35:c3:23:7d:32:8b:05:
a2:35:39:ae:93:2d:1d:b6:e5:fb:70:2e:be:b9:b4:cd:a9:38:
f5:70:cb:36:fd:ed:19:15:78:43:99:f1:b2:64:1c:86:20:f1:
1f:dd:df:bd:4f:1e:bb:92:3d:76:9e:de:00:54:08:29:c9:d1:
3a:60:4a:aa:83:45:51:21:aa:16:66:5d:38:27:1d:ce:4b:00:
da:27:e1:16:06:02:3e:ca:eb:83:17:9b:2b:3d:53:91:70:c7:
a3:99:fb:f1:cd:67:7d:87:30:68:df:a1:f0:3c:4b:16:a4:13:
04:71:d3:9d:18:7e:b4:0d:40:90:74:d4:55:dc:86:c6:4b:9e:
6a:79:cf:2d:02:f4:8c:4f:f8:0f:db:70:82:be:e7:09:e4:cb:
b4:56:4d:bd:e4:4e:e2:f2:85:96:89:13:d6:c5:02:fb:df:64:
37:01:7c:be:67:ae:7d:97:ef:d7:75:44:df:ff:ad:e8:b4:fd:
93:35:fe:26:20:63:3c:6c:4a:4d:88:64:d1:4f:07:e6:ad:28:
01:a5:14:6b:22:27:1e:f9:fc:00:92:1a:b4:c9:d0:27:04:d4:
5a:09:71:c0:7d:99:ec:8e:42:7d:7d:ef:47:1f:e8:4c:10:c5:
e6:76:8b:76
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZa6Zz3/QrnKH9gSnL1KMSQ6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViMzQ5YWYyYWYxMTEzNjFiMjlmY2ZlZjJlMDQzZDViZTc1
ZTNmOTgwHhcNMjUwNTEwMTMzNDEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiODNiYzNhN2NjZTFmMzY5NzE5MGVhMDA2NjMwOTM0ZGU4M2FhNWJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBefqvIEB4ZsmXixYbH5BarSy4CV
fddqx6LZMAkJHkUH8YyV2fneX5Eoj78aNeK6Uul5HFfZ3Kw+wOd3yizuEHDQB/UZ
iBp6t1ueHmppXCTYFpVHPSEgQw3BIFGgsg3eVgWRs857sddJk2GuvfaRomy66HWj
AJAc6DVVfNvrCySPNyjqyKkF9w0BtU3zZci/7BC7sNTvH7AmAua3P3gukV8iUyJX
UdIK448X15aMlSK+suGojrGyHrgPlTzdjeJokPG/my/KxpcuEaYae4fWkXJDkN+7
MV8yVM0sHi0rzDGFg0aQoXKk+xV5x8zPyqV/UwtEkLaNU/PqaQWE8a00gwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLg7w6fM4fNpcZDqAGYwk03oOqW+MB8GA1UdIwQY
MBaAFOs0mvKvERNhsp/P7y4EPVvnXj+YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnpTYThxOFJFMkd5bjhfdkxnUTlXLWRlUDVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8zY2IxNDctYTdjMy00NGU5LWFkYzgt
OWNkNjYyYmM4MzIwLzEvdUR2RHA4emg4Mmx4a09vQVpqQ1RUZWc2cGI0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC8zY2IxNDctYTdjMy00NGU5LWFkYzgtOWNkNjYyYmM4MzIw
LzEvNnpTYThxOFJFMkd5bjhfdkxnUTlXLWRlUDVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXo4MA0G
CSqGSIb3DQEBCwUAA4IBAQCa4F63bOC5YiW80DXDI30yiwWiNTmuky0dtuX7cC6+
ubTNqTj1cMs2/e0ZFXhDmfGyZByGIPEf3d+9Tx67kj12nt4AVAgpydE6YEqqg0VR
IaoWZl04Jx3OSwDaJ+EWBgI+yuuDF5srPVORcMejmfvxzWd9hzBo36HwPEsWpBME
cdOdGH60DUCQdNRV3IbGS55qec8tAvSMT/gP23CCvucJ5Mu0Vk295E7i8oWWiRPW
xQL732Q3AXy+Z659l+/XdUTf/63otP2TNf4mIGM8bEpNiGTRTwfmrSgBpRRrIice
+fwAkhq0ydAnBNRaCXHAfZnsjkJ9fe9HH+hMEMXmdot2
-----END CERTIFICATE-----
Generated at Thu May 15 20:12:48 2025 by rpki-client