Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/rkB6ZT4GVIEcFUggvDsLXXKKsP4.roa
File: rkB6ZT4GVIEcFUggvDsLXXKKsP4.roa (raw, json)
Hash identifier: 1cWx6TTKEhhXNoJyxGva8yTvgB9y6I2MuAM6qLMtCZA=
Subject key identifier: AE:40:7A:65:3E:06:54:81:1C:15:48:20:BC:3B:0B:5D:72:8A:B0:FE
Certificate issuer: /CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Certificate serial: 019421B24401793F4DBF23DE91C90AE36C30
Authority key identifier: 2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/rkB6ZT4GVIEcFUggvDsLXXKKsP4.roa
Signing time: Wed 01 Jan 2025 11:48:38 +0000
ROA not before: Wed 01 Jan 2025 11:48:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213389
IP address blocks: 194.36.80.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:44:01:79:3f:4d:bf:23:de:91:c9:0a:e3:6c:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Validity
Not Before: Jan 1 11:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ae407a653e0654811c154820bc3b0b5d728ab0fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:47:c0:09:e0:e1:41:08:a7:4c:5c:d3:a3:c1:
80:a0:e8:80:12:46:e2:b6:c0:20:a9:eb:e8:29:12:
c0:7a:ab:8a:29:c9:9a:7b:cc:9e:20:7b:68:9a:9a:
63:da:a2:f9:2b:e5:31:d1:1a:f5:69:b0:f1:a9:46:
1e:0e:97:c6:ed:75:8f:91:59:05:85:70:ee:c1:b1:
13:e0:88:e2:24:13:c7:1a:90:23:9d:68:fb:c7:f4:
a5:89:60:76:76:c3:e5:af:12:29:95:08:03:f9:5d:
77:9a:fb:da:a1:35:05:02:de:22:62:3f:a2:97:c5:
47:38:40:2b:f1:45:aa:ef:0c:51:14:9f:9c:55:d2:
a7:6b:64:1b:39:01:14:24:2c:18:88:da:84:24:4e:
b3:af:bc:96:9d:5e:44:9e:ff:61:0f:9e:ad:d2:9c:
f0:5c:94:54:81:4d:8e:87:ad:bd:97:d9:43:b4:cd:
e3:e9:09:dd:44:64:f6:fb:a8:00:bd:60:ed:44:c6:
0f:ce:b7:8b:e1:d6:d9:84:4b:f0:61:41:0c:c6:41:
13:07:dc:dd:7e:97:12:63:45:32:cd:0b:d6:1e:1b:
df:b5:2a:79:5a:76:a9:df:f8:ed:fc:84:61:2f:b6:
6f:44:d7:c9:13:a9:19:9b:97:49:02:2f:54:2c:d1:
64:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:40:7A:65:3E:06:54:81:1C:15:48:20:BC:3B:0B:5D:72:8A:B0:FE
X509v3 Authority Key Identifier:
keyid:2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/rkB6ZT4GVIEcFUggvDsLXXKKsP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.36.80.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:c4:0f:36:a2:2c:9b:47:63:fe:53:18:04:9c:9c:3f:f1:87:
92:41:9a:61:99:52:44:75:ca:30:75:1d:88:e6:8a:9f:0e:a5:
17:19:9e:0a:86:d9:59:fb:36:4a:58:82:6c:e8:4d:19:6e:d7:
43:d8:ae:ea:b7:08:88:be:6c:d8:e6:b2:44:63:c1:d3:ea:73:
d0:f0:34:3b:03:f8:ca:2c:b4:cb:6b:a9:62:00:f2:b6:36:20:
a9:a7:69:c4:f3:48:ad:b1:6a:f4:8a:23:5a:62:7d:46:80:f8:
41:2e:41:b5:74:7e:0d:be:a9:48:19:51:2b:85:b3:79:ef:75:
7f:cf:fe:1b:17:a6:d7:57:e6:35:9d:d5:16:0a:a2:83:07:4e:
ff:0f:49:88:91:d3:5b:fa:55:b7:c2:5a:32:56:e4:b8:91:f7:
1a:05:9b:9b:98:48:81:65:b3:95:a5:cb:2d:ed:70:ed:31:37:
2e:9a:d7:b9:7d:7d:ad:2e:7b:e2:26:b0:49:fb:f0:99:84:06:
7c:d3:25:a6:7b:f0:b7:4e:d3:c4:6c:a6:89:c4:01:76:ac:48:
2f:96:91:1a:ea:99:4b:a7:f7:a9:49:18:0f:5f:3b:58:5c:0c:
05:e0:93:3d:5f:8d:b0:5d:3c:10:48:36:81:19:57:a8:aa:1b:
9d:d7:1a:16
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhskQBeT9NvyPekckK42wwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmOTNkM2JhMTk3ZjVjZTMwOThiZmE3NzAwYjQzODU0ZWFh
ODBlOWUwHhcNMjUwMTAxMTE0ODM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZTQwN2E2NTNlMDY1NDgxMWMxNTQ4MjBiYzNiMGI1ZDcyOGFiMGZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA10fACeDhQQinTFzTo8GAoOiAEkbi
tsAgqevoKRLAequKKcmae8yeIHtomppj2qL5K+Ux0Rr1abDxqUYeDpfG7XWPkVkF
hXDuwbET4IjiJBPHGpAjnWj7x/SliWB2dsPlrxIplQgD+V13mvvaoTUFAt4iYj+i
l8VHOEAr8UWq7wxRFJ+cVdKna2QbOQEUJCwYiNqEJE6zr7yWnV5Env9hD56t0pzw
XJRUgU2Oh629l9lDtM3j6QndRGT2+6gAvWDtRMYPzreL4dbZhEvwYUEMxkETB9zd
fpcSY0UyzQvWHhvftSp5Wnap3/jt/IRhL7ZvRNfJE6kZm5dJAi9ULNFkLwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK5AemU+BlSBHBVIILw7C11yirD+MB8GA1UdIwQY
MBaAFC+T07oZf1zjCYv6dwC0OFTqqA6eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDVQVHVobF9YT01KaV9wM0FMUTRWT3FvRHA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC83YTg3YTAtODAxNC00NjA1LTlmYjUt
OWU3MWRjMjRhNjgzLzEvcmtCNlpUNEdWSUVjRlVnZ3ZEc0xYWEtLc1A0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC83YTg3YTAtODAxNC00NjA1LTlmYjUtOWU3MWRjMjRhNjgz
LzEvTDVQVHVobF9YT01KaV9wM0FMUTRWT3FvRHA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwiRQMA0G
CSqGSIb3DQEBCwUAA4IBAQCPxA82oiybR2P+UxgEnJw/8YeSQZphmVJEdcowdR2I
5oqfDqUXGZ4KhtlZ+zZKWIJs6E0ZbtdD2K7qtwiIvmzY5rJEY8HT6nPQ8DQ7A/jK
LLTLa6liAPK2NiCpp2nE80itsWr0iiNaYn1GgPhBLkG1dH4NvqlIGVErhbN573V/
z/4bF6bXV+Y1ndUWCqKDB07/D0mIkdNb+lW3wloyVuS4kfcaBZubmEiBZbOVpcst
7XDtMTcumte5fX2tLnviJrBJ+/CZhAZ80yWme/C3TtPEbKaJxAF2rEgvlpEa6plL
p/epSRgPXztYXAwF4JM9X42wXTwQSDaBGVeoqhud1xoW
-----END CERTIFICATE-----
Generated at Mon Apr 7 16:30:12 2025 by rpki-client