Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/SiOaG_svw5mq1mySk_tlab4mwO8.roa
File: SiOaG_svw5mq1mySk_tlab4mwO8.roa (raw, json)
Hash identifier: OwICndtFeFpWfwcLhA1KX09qIk5YAu3nAE4xG8jGDzc=
Subject key identifier: 4A:23:9A:1B:FB:2F:C3:99:AA:D6:6C:92:93:FB:65:69:BE:26:C0:EF
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0196A0CB27AE0E436BD964CAB64D6A679938
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/SiOaG_svw5mq1mySk_tlab4mwO8.roa
Signing time: Mon 05 May 2025 14:13:10 +0000
ROA not before: Mon 05 May 2025 14:13:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 84.21.188.0/24 maxlen: 24
2a06:a600::/29 maxlen: 29
2a06:b5c0::/29 maxlen: 29
2a06:bf40::/29 maxlen: 29
2a0a:2d06:acab::/48 maxlen: 48
2a0e:1a84::/32 maxlen: 32
2a0e:f600:5f::/48 maxlen: 48
2a0f:1e84:20::/48 maxlen: 48
2a0f:7d00:1::/48 maxlen: 48
2a0f:bc00:a1c4::/48 maxlen: 48
2a13:2b40::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:cb:27:ae:0e:43:6b:d9:64:ca:b6:4d:6a:67:99:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: May 5 14:13:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4a239a1bfb2fc399aad66c9293fb6569be26c0ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1b:18:14:8f:58:be:46:cd:71:9d:18:e3:59:
2a:da:49:f8:ee:9c:b2:97:29:4a:62:b9:91:d4:20:
b4:2f:80:a5:d6:ca:8f:2b:8e:16:aa:0a:8d:b3:fc:
22:44:c3:99:00:76:72:fe:29:88:9c:81:b8:ba:23:
56:11:d8:30:73:d7:55:94:41:3a:86:70:f1:b4:60:
c8:df:38:9c:cc:fa:8d:55:38:69:c0:81:76:8d:37:
af:9b:ef:2f:05:cc:d9:0f:74:27:4d:20:59:c1:ab:
bf:dd:9f:b1:7a:37:2e:3f:90:4b:24:0c:8f:4d:4b:
a1:bc:f8:7c:a8:c2:74:46:e1:1e:11:2f:d1:53:75:
64:d3:64:bb:85:7d:23:ee:94:63:fc:f1:35:16:0d:
ea:51:9f:24:99:91:d0:0c:a5:46:8d:4a:e8:91:bb:
64:27:6b:ce:56:89:72:ec:45:c5:b5:f9:65:4b:af:
d6:4e:70:b7:fb:44:a1:92:44:b5:0c:40:d0:e1:8d:
a1:ba:d5:e5:7b:a3:3b:85:c6:09:c2:4d:2b:ce:7c:
82:37:26:98:01:13:11:c9:89:fe:30:98:95:20:72:
7a:ee:1c:af:8f:ce:d6:f0:a8:f6:8d:8d:8e:d1:6d:
9d:47:bc:76:b9:e1:73:1b:57:bd:83:57:65:e4:2b:
f3:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:23:9A:1B:FB:2F:C3:99:AA:D6:6C:92:93:FB:65:69:BE:26:C0:EF
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/SiOaG_svw5mq1mySk_tlab4mwO8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.21.188.0/24
IPv6:
2a06:a600::/29
2a06:b5c0::/29
2a06:bf40::/29
2a0a:2d06:acab::/48
2a0e:1a84::/32
2a0e:f600:5f::/48
2a0f:1e84:20::/48
2a0f:7d00:1::/48
2a0f:bc00:a1c4::/48
2a13:2b40::/29
Signature Algorithm: sha256WithRSAEncryption
9a:a0:57:9b:ef:0f:fc:cb:82:bb:75:51:fb:e5:0c:60:48:91:
c5:cc:70:ef:b7:9b:e7:0e:5d:7a:4b:17:e3:88:0e:f4:6d:1f:
34:d7:44:93:5f:d8:ff:34:ed:ae:e6:2b:6b:6c:4c:1e:55:a5:
d8:2e:b3:5f:15:ea:ff:00:e7:79:55:e9:e6:46:18:b5:ae:4f:
7e:75:1d:e4:d0:15:4a:58:32:86:2a:41:0c:06:cf:fa:e0:14:
6b:01:61:cd:b2:24:0a:6c:5e:70:b5:26:f8:77:33:fc:1d:f5:
03:14:95:66:7e:bf:56:f3:d8:61:db:59:b7:09:61:21:23:5c:
18:f1:9d:26:c6:c2:b4:52:ba:f2:40:b7:95:05:4f:6a:b2:3e:
d2:f2:b5:5d:a8:ca:fd:4e:5a:4e:74:80:06:c5:2a:a5:2a:4e:
55:0e:d2:ca:70:49:9f:3f:77:dd:75:b3:42:2e:8d:57:0d:6f:
c1:66:12:da:e2:11:c5:b3:36:b3:22:0f:a5:71:a7:bc:1f:8e:
40:c0:7a:b2:96:88:f4:c0:df:72:65:f3:52:8f:56:a7:1c:46:
2e:dd:2c:cc:e2:6c:b9:f9:26:18:24:6e:b0:f6:31:25:fe:31:
4a:9b:42:1b:9b:a6:d4:19:82:a1:ed:c3:57:75:19:5d:a6:30:
c4:a2:4f:88
-----BEGIN CERTIFICATE-----
MIIFVTCCBD2gAwIBAgISAZagyyeuDkNr2WTKtk1qZ5k4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjUwNTA1MTQxMzEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YTIzOWExYmZiMmZjMzk5YWFkNjZjOTI5M2ZiNjU2OWJlMjZjMGVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhsYFI9YvkbNcZ0Y41kq2kn47pyy
lylKYrmR1CC0L4Cl1sqPK44WqgqNs/wiRMOZAHZy/imInIG4uiNWEdgwc9dVlEE6
hnDxtGDI3ziczPqNVThpwIF2jTevm+8vBczZD3QnTSBZwau/3Z+xejcuP5BLJAyP
TUuhvPh8qMJ0RuEeES/RU3Vk02S7hX0j7pRj/PE1Fg3qUZ8kmZHQDKVGjUrokbtk
J2vOVoly7EXFtfllS6/WTnC3+0ShkkS1DEDQ4Y2hutXle6M7hcYJwk0rznyCNyaY
ARMRyYn+MJiVIHJ67hyvj87W8Kj2jY2O0W2dR7x2ueFzG1e9g1dl5CvzNQIDAQAB
o4ICYTCCAl0wHQYDVR0OBBYEFEojmhv7L8OZqtZskpP7ZWm+JsDvMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvU2lPYUdfc3Z3NW1xMW15U2tfdGxhYjRtd084LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHcGCCsGAQUFBwEHAQH/BGgwZjAMBAIAATAGAwQAVBW8MFYE
AgACMFADBQMqBqYAAwUDKga1wAMFAyoGv0ADBwAqCi0GrKsDBQAqDhqEAwcAKg72
AABfAwcAKg8ehAAgAwcAKg99AAABAwcAKg+8AKHEAwUDKhMrQDANBgkqhkiG9w0B
AQsFAAOCAQEAmqBXm+8P/MuCu3VR++UMYEiRxcxw77eb5w5deksX44gO9G0fNNdE
k1/Y/zTtruYra2xMHlWl2C6zXxXq/wDneVXp5kYYta5PfnUd5NAVSlgyhipBDAbP
+uAUawFhzbIkCmxecLUm+Hcz/B31AxSVZn6/VvPYYdtZtwlhISNcGPGdJsbCtFK6
8kC3lQVParI+0vK1XajK/U5aTnSABsUqpSpOVQ7SynBJnz933XWzQi6NVw1vwWYS
2uIRxbM2syIPpXGnvB+OQMB6spaI9MDfcmXzUo9WpxxGLt0szOJsufkmGCRusPYx
Jf4xSptCG5um1BmCoe3DV3UZXaYwxKJPiA==
-----END CERTIFICATE-----
Generated at Sun May 11 04:31:16 2025 by rpki-client