Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/raPkT2KWJeKCRGMnLBqXVOcCh6c.roa
File: raPkT2KWJeKCRGMnLBqXVOcCh6c.roa (raw, json)
Hash identifier: AxKEGemelOmDh2SMtY0ZCfbnhb9j8WRYHJt5TuaikL8=
Subject key identifier: AD:A3:E4:4F:62:96:25:E2:82:44:63:27:2C:1A:97:54:E7:02:87:A7
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 0194DC93936F38C39680650BB26947BEE6D7
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/raPkT2KWJeKCRGMnLBqXVOcCh6c.roa
Signing time: Thu 06 Feb 2025 18:44:06 +0000
ROA not before: Thu 06 Feb 2025 18:44:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214025
IP address blocks: 92.62.240.0/24 maxlen: 24
92.62.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 13:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:dc:93:93:6f:38:c3:96:80:65:0b:b2:69:47:be:e6:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Feb 6 18:44:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ada3e44f629625e2824463272c1a9754e70287a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:75:f8:53:ad:f5:9a:81:a2:89:28:48:37:38:
64:26:50:fb:b3:d9:ac:83:d3:cb:90:c6:cb:31:b5:
75:6e:32:6c:b4:4b:89:7e:8c:13:50:14:aa:43:88:
25:b4:1a:da:51:49:1e:4f:b1:e1:ee:2c:a3:b5:45:
ee:57:26:bd:13:75:ac:41:2d:87:84:49:5a:35:19:
4c:15:68:84:f5:c3:24:21:4e:0a:e8:50:20:87:98:
63:7f:b2:32:cd:3a:fa:bb:4f:9f:82:72:c0:51:34:
b0:fd:a4:cb:bc:fa:2e:e6:c2:6f:6c:96:96:83:ff:
ec:fe:60:05:4e:40:1f:21:40:d3:a7:d7:7c:25:61:
8c:5e:61:c0:3b:19:d5:2a:8c:0e:ad:15:1a:09:1a:
ba:70:1a:a5:f7:dd:95:1b:a2:71:2e:0e:e1:7e:78:
22:7b:2d:43:4e:d5:88:6f:f0:d4:e3:88:5b:89:e0:
5d:59:52:66:d6:b9:f8:b7:82:50:78:1b:81:d8:48:
8b:70:12:3d:01:d7:23:2d:20:56:f1:c2:c1:13:92:
0b:a2:3f:91:af:0e:a0:3d:2d:87:a4:27:2f:4b:21:
ea:65:d2:5e:cf:6d:2d:d2:93:b3:6d:5e:77:c1:29:
5f:76:f3:97:f1:d9:88:e5:c9:bb:56:7a:14:db:b0:
c7:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:A3:E4:4F:62:96:25:E2:82:44:63:27:2C:1A:97:54:E7:02:87:A7
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/raPkT2KWJeKCRGMnLBqXVOcCh6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.62.240.0/23
Signature Algorithm: sha256WithRSAEncryption
34:97:46:11:c2:e7:f4:9b:5c:4b:c0:23:e2:e2:45:b6:4a:3b:
b2:06:d3:64:5b:08:d8:99:5d:41:e7:7d:3d:3b:06:6a:0b:41:
70:8b:6a:84:ac:40:73:3a:ba:0c:08:ff:6e:1c:aa:c7:9f:bc:
61:8d:1c:22:08:cc:36:82:37:6d:c8:62:10:0f:1e:9b:7c:c0:
99:71:ca:5f:53:c8:0b:c8:6f:1f:b3:c7:4d:54:f5:2c:99:5e:
57:78:9b:f8:a8:5e:84:01:90:50:92:50:e1:f0:1a:94:03:67:
5c:b2:fc:fc:1c:ac:d9:08:52:8c:44:8c:cf:27:1c:86:7c:da:
be:fc:03:47:d8:62:b6:52:1b:24:c7:38:2f:73:16:71:5b:13:
e3:7a:4c:bd:16:9d:65:ca:67:b7:d3:c1:4b:e0:17:4f:e7:ab:
d0:9f:52:a2:d7:bb:a1:df:15:5f:52:3e:eb:6d:01:3e:f5:6d:
2f:1e:f7:3e:da:f6:fa:e3:64:9b:93:61:27:79:40:af:b8:21:
7f:b8:10:33:52:60:86:f4:98:f8:f5:63:e0:61:49:03:f3:df:
41:36:af:90:87:12:6e:bc:b3:00:b9:a4:be:9e:71:e9:59:0b:
e9:1b:e7:b6:da:19:d6:57:72:40:99:12:3a:65:1b:0f:16:3e:
8b:fd:dd:a7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZTck5NvOMOWgGULsmlHvubXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5ZDJkYWZmMWM1YmI2MWEwYWM4YjNjYWVhZDRiOGExZmEy
ODRkMGYwHhcNMjUwMjA2MTg0NDA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZGEzZTQ0ZjYyOTYyNWUyODI0NDYzMjcyYzFhOTc1NGU3MDI4N2E3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6HX4U631moGiiShINzhkJlD7s9ms
g9PLkMbLMbV1bjJstEuJfowTUBSqQ4gltBraUUkeT7Hh7iyjtUXuVya9E3WsQS2H
hElaNRlMFWiE9cMkIU4K6FAgh5hjf7IyzTr6u0+fgnLAUTSw/aTLvPou5sJvbJaW
g//s/mAFTkAfIUDTp9d8JWGMXmHAOxnVKowOrRUaCRq6cBql992VG6JxLg7hfngi
ey1DTtWIb/DU44hbieBdWVJm1rn4t4JQeBuB2EiLcBI9AdcjLSBW8cLBE5ILoj+R
rw6gPS2HpCcvSyHqZdJez20t0pOzbV53wSlfdvOX8dmI5cm7VnoU27DHYQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK2j5E9iliXigkRjJywal1TnAoenMB8GA1UdIwQY
MBaAFCnS2v8cW7YaCsizyurUuKH6KE0PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3Zjgt
NGY1N2Q5Y2Y1Y2FhLzEvcmFQa1QyS1dKZUtDUkdNbkxCcVhWT2NDaDZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3ZjgtNGY1N2Q5Y2Y1Y2Fh
LzEvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBXD7wMA0G
CSqGSIb3DQEBCwUAA4IBAQA0l0YRwuf0m1xLwCPi4kW2SjuyBtNkWwjYmV1B5309
OwZqC0Fwi2qErEBzOroMCP9uHKrHn7xhjRwiCMw2gjdtyGIQDx6bfMCZccpfU8gL
yG8fs8dNVPUsmV5XeJv4qF6EAZBQklDh8BqUA2dcsvz8HKzZCFKMRIzPJxyGfNq+
/ANH2GK2UhskxzgvcxZxWxPjeky9Fp1lyme308FL4BdP56vQn1Ki17uh3xVfUj7r
bQE+9W0vHvc+2vb642Sbk2EneUCvuCF/uBAzUmCG9Jj49WPgYUkD899BNq+QhxJu
vLMAuaS+nnHpWQvpG+e22hnWV3JAmRI6ZRsPFj6L/d2n
-----END CERTIFICATE-----
Generated at Wed Feb 19 21:59:03 2025 by rpki-client