Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/_lT4fkaMoWdr8qyjDYgJWGLKNqk.roa
File: _lT4fkaMoWdr8qyjDYgJWGLKNqk.roa (raw, json)
Hash identifier: cVeyU0qmwSSa/gArA5yocN/Gvczol71ofdn37Qssh2E=
Subject key identifier: FE:54:F8:7E:46:8C:A1:67:6B:F2:AC:A3:0D:88:09:58:62:CA:36:A9
Certificate issuer: /CN=4cf8ffc088591e4f243baafa21b4298bfb366026
Certificate serial: 0194282792A95ECC9988046EC2DF36E21ADD
Authority key identifier: 4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/_lT4fkaMoWdr8qyjDYgJWGLKNqk.roa
Signing time: Thu 02 Jan 2025 17:54:29 +0000
ROA not before: Thu 02 Jan 2025 17:54:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206484
IP address blocks: 62.192.11.0/24 maxlen: 24
213.173.161.0/24 maxlen: 24
217.111.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 08:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:92:a9:5e:cc:99:88:04:6e:c2:df:36:e2:1a:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cf8ffc088591e4f243baafa21b4298bfb366026
Validity
Not Before: Jan 2 17:54:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fe54f87e468ca1676bf2aca30d88095862ca36a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:13:42:77:82:29:a0:a1:2e:cc:f8:03:0b:d4:
59:c4:3b:16:a5:da:f6:f1:85:db:8b:2a:be:3d:f9:
1e:8b:b2:05:0a:14:7f:e6:a5:ac:c0:e9:b3:3b:6c:
ab:ab:fd:b3:b0:a7:2e:20:2d:68:08:74:34:70:c4:
f9:f8:d4:07:0d:73:43:4c:bc:6a:94:08:3d:c4:43:
91:42:57:50:43:f8:36:e1:b2:30:ca:9c:48:c1:73:
a0:16:c4:02:6a:b4:da:39:6a:38:aa:25:e0:6d:d4:
25:27:e7:83:17:2b:9e:d9:4a:06:a2:7d:8a:a4:de:
a0:8c:64:ec:ee:19:0b:f3:82:b2:43:a8:a3:74:02:
68:09:a7:7f:e8:46:3b:19:8d:fc:c2:a4:de:87:1b:
df:65:9a:99:2e:f4:91:10:f0:c9:df:97:4b:f9:6f:
81:89:1b:1c:73:69:58:3c:82:84:da:af:02:dc:81:
5b:ca:82:30:52:89:4b:da:fa:67:e2:2a:cc:2b:60:
3c:8e:69:80:b9:13:63:d9:63:3a:bc:4b:79:2b:05:
91:c6:b6:fe:34:34:4d:63:e5:00:eb:2a:c3:a6:b1:
82:82:4a:7d:42:63:86:22:d5:68:db:50:ba:41:ac:
b9:0e:f8:f4:30:e6:ab:e1:ee:75:2e:81:b3:83:3f:
8c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:54:F8:7E:46:8C:A1:67:6B:F2:AC:A3:0D:88:09:58:62:CA:36:A9
X509v3 Authority Key Identifier:
keyid:4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/_lT4fkaMoWdr8qyjDYgJWGLKNqk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.192.11.0/24
213.173.161.0/24
217.111.138.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:aa:6c:60:34:90:87:b3:9f:51:8b:5c:06:63:96:53:11:15:
86:da:10:d9:71:93:e6:b7:1f:47:ae:44:7a:ed:03:0b:07:2f:
ac:91:8e:08:57:c3:b3:9b:03:d9:aa:6c:7e:b5:f2:19:15:02:
ed:ae:a2:5a:b9:b1:22:de:03:37:9d:ea:aa:44:81:80:ee:14:
7f:ad:52:35:8a:c0:47:39:d1:85:36:2a:0e:5e:19:8a:26:c8:
ab:19:45:90:56:e0:05:73:40:f1:9d:b5:0a:84:76:74:a5:f6:
a3:c6:d8:4a:b7:73:ae:6d:ca:04:47:9f:c8:c4:2a:b9:be:ae:
62:9c:d8:a5:a4:21:10:b3:39:ba:77:b6:bf:39:e4:0e:48:f7:
0a:e8:e9:d3:b2:cc:41:00:db:de:bb:43:40:ff:12:31:19:ea:
7e:b5:9c:6e:7a:3f:25:a4:ae:4c:60:cc:cb:e2:60:4f:07:3b:
f2:25:a8:a2:aa:80:48:c4:95:d5:c2:9a:c6:b3:15:fd:38:0a:
fd:69:90:e9:1c:89:f9:a3:cc:47:c3:dd:78:b5:19:58:5c:64:
bd:ff:da:71:2b:44:a2:b1:4a:2f:31:f6:6c:c2:8c:53:5a:92:
df:da:2e:dc:f3:ef:3a:12:66:60:71:27:a4:56:0b:db:f3:e0:
2d:1a:d2:3b
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQoJ5KpXsyZiARuwt824hrdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjZjhmZmMwODg1OTFlNGYyNDNiYWFmYTIxYjQyOThiZmIz
NjYwMjYwHhcNMjUwMTAyMTc1NDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZTU0Zjg3ZTQ2OGNhMTY3NmJmMmFjYTMwZDg4MDk1ODYyY2EzNmE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBNCd4IpoKEuzPgDC9RZxDsWpdr2
8YXbiyq+Pfkei7IFChR/5qWswOmzO2yrq/2zsKcuIC1oCHQ0cMT5+NQHDXNDTLxq
lAg9xEORQldQQ/g24bIwypxIwXOgFsQCarTaOWo4qiXgbdQlJ+eDFyue2UoGon2K
pN6gjGTs7hkL84KyQ6ijdAJoCad/6EY7GY38wqTehxvfZZqZLvSREPDJ35dL+W+B
iRscc2lYPIKE2q8C3IFbyoIwUolL2vpn4irMK2A8jmmAuRNj2WM6vEt5KwWRxrb+
NDRNY+UA6yrDprGCgkp9QmOGItVo21C6Qay5Dvj0MOar4e51LoGzgz+MRwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFP5U+H5GjKFna/Ksow2ICVhiyjapMB8GA1UdIwQY
MBaAFEz4/8CIWR5PJDuq+iG0KYv7NmAmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFBqX3dJaFpIazhrTzZyNkliUXBpX3MyWUNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9hMGEzOWMtYmUwMy00N2JiLWJkYjMt
YjNiNzhiMGI2NmVhLzEvX2xUNGZrYU1vV2RyOHF5akRZZ0pXR0xLTnFrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9hMGEzOWMtYmUwMy00N2JiLWJkYjMtYjNiNzhiMGI2NmVh
LzEvVFBqX3dJaFpIazhrTzZyNkliUXBpX3MyWUNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAPsALAwQA
1a2hAwQA2W+KMA0GCSqGSIb3DQEBCwUAA4IBAQCtqmxgNJCHs59Ri1wGY5ZTERWG
2hDZcZPmtx9HrkR67QMLBy+skY4IV8OzmwPZqmx+tfIZFQLtrqJaubEi3gM3neqq
RIGA7hR/rVI1isBHOdGFNioOXhmKJsirGUWQVuAFc0DxnbUKhHZ0pfajxthKt3Ou
bcoER5/IxCq5vq5inNilpCEQszm6d7a/OeQOSPcK6OnTssxBANveu0NA/xIxGep+
tZxuej8lpK5MYMzL4mBPBzvyJaiiqoBIxJXVwprGsxX9OAr9aZDpHIn5o8xHw914
tRlYXGS9/9pxK0SisUovMfZswoxTWpLf2i7c8+86EmZgcSekVgvb8+AtGtI7
-----END CERTIFICATE-----
Generated at Mon Apr 7 13:10:59 2025 by rpki-client