Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/5NarqgL1IqRhroqsljH0A9V5qCo.roa
File: 5NarqgL1IqRhroqsljH0A9V5qCo.roa (raw, json)
Hash identifier: 8kRquWjA2VpTsIouS+9omLPNkeJK9gTo7+86zZ6sCIM=
Subject key identifier: E4:D6:AB:AA:02:F5:22:A4:61:AE:8A:AC:96:31:F4:03:D5:79:A8:2A
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 01968F88D119481A03C4021C0A391A3A5F39
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/5NarqgL1IqRhroqsljH0A9V5qCo.roa
Signing time: Fri 02 May 2025 05:47:10 +0000
ROA not before: Fri 02 May 2025 05:47:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197450
IP address blocks: 91.92.41.0/24 maxlen: 24
93.152.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 20:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8f:88:d1:19:48:1a:03:c4:02:1c:0a:39:1a:3a:5f:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: May 2 05:47:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e4d6abaa02f522a461ae8aac9631f403d579a82a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:11:81:58:4f:38:9a:76:84:c2:5f:9f:81:09:
16:53:40:d1:03:35:1d:41:b5:f8:31:fe:ea:8b:27:
5c:67:d4:99:a3:e5:64:e3:da:36:85:51:34:91:8d:
5b:28:49:82:56:ca:e9:ae:a6:5d:c7:5d:b1:6c:7c:
6d:b6:69:0b:83:28:20:81:09:27:80:2a:ce:cf:87:
f1:66:0a:1a:72:df:f7:de:59:a8:bb:4f:cd:93:42:
cc:93:bf:b0:cb:19:58:c6:23:ec:f7:9d:83:27:f5:
91:90:e2:da:d9:02:a8:e0:5d:08:9c:56:0a:0d:35:
d4:a9:46:aa:57:93:3e:07:7e:3f:ab:ce:e2:1c:7f:
9f:65:c6:cf:4a:03:18:aa:24:57:d1:fb:e8:62:ef:
b7:f8:a6:df:30:4f:fe:07:d7:e6:dc:54:a0:f2:73:
71:d6:50:9f:fa:a7:82:ad:57:58:a0:9a:cc:bf:66:
0e:20:74:83:d3:6e:d1:4e:a9:1b:d0:bf:2c:59:ff:
4d:63:7b:38:b1:ce:28:67:16:b1:ca:cb:e6:13:21:
f4:15:1e:11:a4:c6:cc:2b:cb:1c:88:17:50:ac:47:
2e:1d:a1:33:72:64:9f:7c:7a:07:48:a7:b5:e4:d2:
77:10:ed:95:6e:3e:3e:22:65:58:37:c0:d7:28:25:
d4:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:D6:AB:AA:02:F5:22:A4:61:AE:8A:AC:96:31:F4:03:D5:79:A8:2A
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/5NarqgL1IqRhroqsljH0A9V5qCo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.92.41.0/24
93.152.225.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:27:22:87:ac:d9:07:ea:35:24:93:12:ab:c9:f1:74:c1:62:
16:df:6d:32:d1:46:62:42:ad:f7:b1:41:67:d5:78:32:e4:56:
6c:46:7e:c8:79:b8:65:0d:b1:5b:29:d6:1b:bc:26:1b:01:87:
af:13:52:c2:07:7b:59:31:ce:11:6c:85:07:cc:21:43:bb:7b:
ec:eb:dc:6b:60:11:b0:bf:df:56:a4:6b:ae:5a:2b:f1:d6:2c:
89:df:9e:2e:d9:13:62:e7:01:f0:47:3d:17:ec:f6:43:3f:9d:
1b:44:cc:73:f6:38:d7:57:40:ee:ac:09:88:89:f6:97:36:12:
be:ce:16:ca:17:26:45:a5:83:62:c7:fa:dd:b0:33:f4:36:78:
88:e7:f1:e4:b2:79:39:97:c2:ea:2e:49:9f:9c:47:9d:07:18:
47:b3:98:97:94:44:78:f5:fb:b3:4e:49:b6:e1:30:fe:fc:36:
5b:18:7f:63:55:24:67:84:ef:df:9d:fa:9e:d8:f2:4c:a8:f7:
97:97:93:c2:3a:f1:49:57:07:a1:ea:b0:e1:1f:ec:5e:55:6e:
10:11:21:c7:a4:4b:71:09:5d:54:40:a0:d2:9a:23:ea:a8:5e:
8f:8e:01:ea:95:f1:7d:c7:ee:9f:f2:ca:95:f3:b4:e4:8f:66:
c8:fb:64:fe
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZaPiNEZSBoDxAIcCjkaOl85MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkMWNhYTY5MzU4ZjhjOThmN2E3MTlmMjU5N2Q1ZGFkZGJk
MDAxOGMwHhcNMjUwNTAyMDU0NzEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNGQ2YWJhYTAyZjUyMmE0NjFhZThhYWM5NjMxZjQwM2Q1NzlhODJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2BGBWE84mnaEwl+fgQkWU0DRAzUd
QbX4Mf7qiydcZ9SZo+Vk49o2hVE0kY1bKEmCVsrprqZdx12xbHxttmkLgygggQkn
gCrOz4fxZgoact/33lmou0/Nk0LMk7+wyxlYxiPs952DJ/WRkOLa2QKo4F0InFYK
DTXUqUaqV5M+B34/q87iHH+fZcbPSgMYqiRX0fvoYu+3+KbfME/+B9fm3FSg8nNx
1lCf+qeCrVdYoJrMv2YOIHSD027RTqkb0L8sWf9NY3s4sc4oZxaxysvmEyH0FR4R
pMbMK8sciBdQrEcuHaEzcmSffHoHSKe15NJ3EO2Vbj4+ImVYN8DXKCXUXQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFOTWq6oC9SKkYa6KrJYx9APVeagqMB8GA1UdIwQY
MBaAFC0cqmk1j4yY96cZ8ll9Xa3b0AGMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2Yjct
MjliMDg1ZGQyM2FkLzEvNU5hcnFnTDFJcVJocm9xc2xqSDBBOVY1cUNvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2YjctMjliMDg1ZGQyM2Fk
LzEvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW1wpAwQA
XZjhMA0GCSqGSIb3DQEBCwUAA4IBAQAKJyKHrNkH6jUkkxKryfF0wWIW320y0UZi
Qq33sUFn1Xgy5FZsRn7IebhlDbFbKdYbvCYbAYevE1LCB3tZMc4RbIUHzCFDu3vs
69xrYBGwv99WpGuuWivx1iyJ354u2RNi5wHwRz0X7PZDP50bRMxz9jjXV0DurAmI
ifaXNhK+zhbKFyZFpYNix/rdsDP0NniI5/Hksnk5l8LqLkmfnEedBxhHs5iXlER4
9fuzTkm24TD+/DZbGH9jVSRnhO/fnfqe2PJMqPeXl5PCOvFJVweh6rDhH+xeVW4Q
ESHHpEtxCV1UQKDSmiPqqF6PjgHqlfF9x+6f8sqV87Tkj2bI+2T+
-----END CERTIFICATE-----
Generated at Wed May 14 01:35:44 2025 by rpki-client