Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/dL6NU49k6HbeSIU7QVDGoeBlKvM.roa
File: dL6NU49k6HbeSIU7QVDGoeBlKvM.roa (raw, json)
Hash identifier: D8I1MGPzQuGFKjsxT8JBT5WNbzUdy6FOkd6uHqQy/oo=
Subject key identifier: 74:BE:8D:53:8F:64:E8:76:DE:48:85:3B:41:50:C6:A1:E0:65:2A:F3
Certificate issuer: /CN=c576ba0c098dc472186223c91e7def5216e239f1
Certificate serial: 019421444F4B5BC25E7CECD24C9C658EA355
Authority key identifier: C5:76:BA:0C:09:8D:C4:72:18:62:23:C9:1E:7D:EF:52:16:E2:39:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xXa6DAmNxHIYYiPJHn3vUhbiOfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/dL6NU49k6HbeSIU7QVDGoeBlKvM.roa
Signing time: Wed 01 Jan 2025 09:48:32 +0000
ROA not before: Wed 01 Jan 2025 09:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15682
IP address blocks: 212.74.232.0/24 maxlen: 24
212.74.234.0/24 maxlen: 24
212.74.235.0/24 maxlen: 24
212.74.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xXa6DAmNxHIYYiPJHn3vUhbiOfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:4f:4b:5b:c2:5e:7c:ec:d2:4c:9c:65:8e:a3:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c576ba0c098dc472186223c91e7def5216e239f1
Validity
Not Before: Jan 1 09:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=74be8d538f64e876de48853b4150c6a1e0652af3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:97:80:21:5b:ec:88:a1:ae:87:93:d1:40:3c:
af:29:f6:b2:94:bc:53:d4:6a:e5:71:67:55:d7:00:
ed:aa:ca:95:76:5d:8e:35:f8:36:c3:fb:50:86:a0:
8a:6e:3c:ba:1f:5e:8b:d4:b7:fb:2b:7e:db:ed:a6:
03:d7:b9:54:bc:16:1b:8c:b0:90:c5:72:29:53:0c:
80:5c:90:33:25:70:7b:fe:5f:1a:71:e3:96:58:b1:
4c:3e:17:79:76:57:3a:a9:a1:6a:94:19:90:d1:ca:
ce:17:45:43:31:68:64:7a:ff:cf:52:60:eb:f6:96:
09:da:a1:77:71:08:19:3d:d5:e0:6f:f2:07:48:59:
6b:ee:5d:f0:62:44:c0:ab:12:9a:d4:27:3d:eb:95:
6c:5e:ae:f1:f5:fa:4b:e9:2b:b3:a0:1a:51:f9:6b:
70:ae:f3:8c:dd:86:42:29:39:e7:f5:1c:c6:e7:d2:
67:cb:94:3b:16:02:67:9f:dc:c8:31:be:c0:29:dc:
22:c0:f1:e7:46:63:87:83:29:fc:25:03:fc:e4:dd:
77:87:32:2f:57:cf:0c:db:6e:d9:df:58:5b:74:22:
c7:09:c9:39:31:e4:2c:81:f1:56:4f:2d:9d:bd:d9:
89:80:d7:df:27:00:96:3b:94:0e:c9:6f:86:05:85:
5c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:BE:8D:53:8F:64:E8:76:DE:48:85:3B:41:50:C6:A1:E0:65:2A:F3
X509v3 Authority Key Identifier:
keyid:C5:76:BA:0C:09:8D:C4:72:18:62:23:C9:1E:7D:EF:52:16:E2:39:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xXa6DAmNxHIYYiPJHn3vUhbiOfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/dL6NU49k6HbeSIU7QVDGoeBlKvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.74.232.0/24
212.74.234.0-212.74.236.255
Signature Algorithm: sha256WithRSAEncryption
b4:0e:90:17:85:88:6d:38:99:fa:a7:d5:5b:50:21:4c:a1:16:
7d:ff:b6:dd:e9:ad:4a:4d:0b:d0:82:1f:35:38:36:9a:d2:b9:
16:e6:c3:69:b1:b1:5a:04:6e:13:05:5a:63:29:4c:b9:58:63:
88:cd:e9:0c:18:19:2f:af:e3:e9:8f:5d:d8:20:d8:71:e4:0a:
1f:32:3f:0a:09:33:92:6d:99:c3:08:61:53:01:8c:69:34:27:
04:51:89:19:6d:e7:e7:4f:c0:39:3b:42:2c:ae:0e:de:f2:c2:
be:9c:f6:51:4b:a1:7a:66:67:4c:91:4d:d5:18:62:93:5b:1e:
35:e7:d8:91:37:65:7c:2c:bd:69:33:ee:05:ac:66:b1:73:d1:
d2:a6:48:83:7e:4c:9b:43:18:ba:1b:b8:72:ba:c5:7d:c1:77:
0b:8a:6a:c7:af:5b:65:0d:cf:ea:6a:92:ac:ce:89:93:02:5c:
50:c3:4d:20:8d:99:61:30:2f:9f:24:1b:d1:2c:99:19:e2:54:
7d:85:15:3f:50:9f:d1:86:b5:e9:e8:cc:dc:0a:37:67:b2:b2:
5d:8b:19:0b:88:3a:2b:da:d6:23:cf:06:61:fa:b8:09:d9:e2:
b0:11:6e:43:2a:8a:42:8b:19:73:33:fc:c1:eb:1e:33:d4:45:
aa:df:33:d2
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZQhRE9LW8JefOzSTJxljqNVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1NzZiYTBjMDk4ZGM0NzIxODYyMjNjOTFlN2RlZjUyMTZl
MjM5ZjEwHhcNMjUwMTAxMDk0ODMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NGJlOGQ1MzhmNjRlODc2ZGU0ODg1M2I0MTUwYzZhMWUwNjUyYWYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4JeAIVvsiKGuh5PRQDyvKfaylLxT
1GrlcWdV1wDtqsqVdl2ONfg2w/tQhqCKbjy6H16L1Lf7K37b7aYD17lUvBYbjLCQ
xXIpUwyAXJAzJXB7/l8aceOWWLFMPhd5dlc6qaFqlBmQ0crOF0VDMWhkev/PUmDr
9pYJ2qF3cQgZPdXgb/IHSFlr7l3wYkTAqxKa1Cc965VsXq7x9fpL6SuzoBpR+Wtw
rvOM3YZCKTnn9RzG59Jny5Q7FgJnn9zIMb7AKdwiwPHnRmOHgyn8JQP85N13hzIv
V88M227Z31hbdCLHCck5MeQsgfFWTy2dvdmJgNffJwCWO5QOyW+GBYVcFwIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFHS+jVOPZOh23kiFO0FQxqHgZSrzMB8GA1UdIwQY
MBaAFMV2ugwJjcRyGGIjyR5971IW4jnxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFhhNkRBbU54SElZWWlQSkhuM3ZVaGJpT2ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi85ZDYyZDQtZDAzMy00NmU5LWJmZDMt
MzJlZTQ1OGE2MzQ4LzEvZEw2TlU0OWs2SGJlU0lVN1FWREdvZUJsS3ZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi85ZDYyZDQtZDAzMy00NmU5LWJmZDMtMzJlZTQ1OGE2MzQ4
LzEveFhhNkRBbU54SElZWWlQSkhuM3ZVaGJpT2ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQA1EroMAwD
BAHUSuoDBADUSuwwDQYJKoZIhvcNAQELBQADggEBALQOkBeFiG04mfqn1VtQIUyh
Fn3/tt3prUpNC9CCHzU4NprSuRbmw2mxsVoEbhMFWmMpTLlYY4jN6QwYGS+v4+mP
Xdgg2HHkCh8yPwoJM5JtmcMIYVMBjGk0JwRRiRlt5+dPwDk7QiyuDt7ywr6c9lFL
oXpmZ0yRTdUYYpNbHjXn2JE3ZXwsvWkz7gWsZrFz0dKmSIN+TJtDGLobuHK6xX3B
dwuKasevW2UNz+pqkqzOiZMCXFDDTSCNmWEwL58kG9EsmRniVH2FFT9Qn9GGteno
zNwKN2eysl2LGQuIOiva1iPPBmH6uAnZ4rARbkMqikKLGXMz/MHrHjPURarfM9I=
-----END CERTIFICATE-----
Generated at Tue Apr 22 18:01:11 2025 by rpki-client