Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/6rcNFpA9OUIHOHJZd3RQ4Nq4JOQ.roa
File: 6rcNFpA9OUIHOHJZd3RQ4Nq4JOQ.roa (raw, json)
Hash identifier: 8DalHmkqlYHfZ/UiruC9ySCew9dMOULJFQbWBLs8o00=
Subject key identifier: EA:B7:0D:16:90:3D:39:42:07:38:72:59:77:74:50:E0:DA:B8:24:E4
Certificate issuer: /CN=09f0dcceb74f1185acd97aeeaac25dda5e9b0936
Certificate serial: 019427B59B2897E81C6DDE6537E1B2923B2F
Authority key identifier: 09:F0:DC:CE:B7:4F:11:85:AC:D9:7A:EE:AA:C2:5D:DA:5E:9B:09:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CfDczrdPEYWs2XruqsJd2l6bCTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/6rcNFpA9OUIHOHJZd3RQ4Nq4JOQ.roa
Signing time: Thu 02 Jan 2025 15:50:00 +0000
ROA not before: Thu 02 Jan 2025 15:50:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30981
IP address blocks: 82.205.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CfDczrdPEYWs2XruqsJd2l6bCTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Mar 2025 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:9b:28:97:e8:1c:6d:de:65:37:e1:b2:92:3b:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09f0dcceb74f1185acd97aeeaac25dda5e9b0936
Validity
Not Before: Jan 2 15:50:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eab70d16903d394207387259777450e0dab824e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:4f:4e:fa:35:e4:18:5d:53:35:da:af:61:a9:
af:d6:26:e3:15:e4:55:0b:06:08:58:c4:50:d2:ba:
c0:79:c2:d9:b9:39:4e:0e:cd:cd:27:bb:83:cf:3a:
ec:59:7f:a6:21:64:08:78:49:6e:0b:ab:86:dc:4d:
81:61:3d:f8:02:1f:ab:0b:86:96:d7:d2:73:3f:4c:
77:7e:eb:09:7d:24:6e:b8:4f:93:54:bc:05:16:7c:
24:aa:2e:2e:f8:76:01:7a:48:bf:e0:c0:86:81:d3:
06:13:1f:c9:11:70:87:94:32:9b:15:ef:a7:7a:94:
70:27:11:76:db:a6:98:f1:e0:51:30:b2:1b:4c:34:
a2:27:82:4b:d5:68:94:2e:10:42:8b:09:0e:43:79:
58:d9:1d:ee:0d:23:69:57:ef:0a:66:78:13:9f:be:
71:82:14:0c:3c:90:bf:7c:83:8d:fb:6e:2f:9e:03:
56:e5:db:3f:20:6f:12:a7:b1:3f:e5:4f:0d:04:ab:
11:8e:ef:dc:b3:c2:94:f1:84:02:cf:35:8f:dc:c6:
d6:e4:6a:8e:28:1f:d0:d9:ba:1e:d5:50:f0:8c:0e:
4e:b8:3a:82:c0:c2:b9:41:58:df:6c:3b:71:d6:d0:
37:1a:03:e5:ab:55:a6:ad:69:bc:1b:df:5b:39:04:
af:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:B7:0D:16:90:3D:39:42:07:38:72:59:77:74:50:E0:DA:B8:24:E4
X509v3 Authority Key Identifier:
keyid:09:F0:DC:CE:B7:4F:11:85:AC:D9:7A:EE:AA:C2:5D:DA:5E:9B:09:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CfDczrdPEYWs2XruqsJd2l6bCTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/6rcNFpA9OUIHOHJZd3RQ4Nq4JOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.205.201.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:75:2c:67:ba:6a:14:f0:bf:18:fb:28:dd:b1:c3:88:a6:0a:
70:86:7e:49:5e:c3:a7:d4:13:2e:cf:09:bd:aa:f7:f9:ce:38:
8c:54:4d:a0:5e:8d:4c:4c:87:d5:3d:58:51:c7:5d:a6:0f:a5:
4c:4f:4e:e8:3c:9f:fe:d3:90:01:fe:6b:08:16:e0:14:2f:c6:
76:9e:05:00:db:cf:ad:6c:61:21:5e:10:92:81:81:8d:d5:bb:
d9:71:41:ad:ff:54:94:1b:db:6f:77:f5:96:1e:60:10:7e:1f:
4e:10:e9:7a:40:a4:d4:bb:41:91:39:7e:48:13:1f:93:16:43:
8e:4c:29:15:ef:0c:3c:4d:75:2f:5c:be:a4:c1:bb:5b:00:6c:
c8:72:0c:e8:ef:0f:25:eb:0e:93:15:e9:52:26:17:eb:bf:c8:
bc:da:c3:b9:82:8b:e6:77:88:36:14:a2:a3:e7:a8:52:23:f3:
c5:f5:b2:6c:3a:59:b6:2f:2c:39:41:71:5c:4d:c1:7a:1b:bf:
f0:b1:f0:da:eb:ea:0c:15:8f:15:ef:04:f2:2c:49:59:32:35:
1d:9d:3b:7c:8b:8d:d3:fa:ac:63:04:90:f4:18:3c:c7:67:20:
7a:d0:d2:ee:2b:4c:50:ef:ad:e7:a8:7a:94:82:a4:59:ff:71:
0f:df:80:4f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQntZsol+gcbd5lN+GykjsvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5ZjBkY2NlYjc0ZjExODVhY2Q5N2FlZWFhYzI1ZGRhNWU5
YjA5MzYwHhcNMjUwMTAyMTU1MDAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYWI3MGQxNjkwM2QzOTQyMDczODcyNTk3Nzc0NTBlMGRhYjgyNGU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl09O+jXkGF1TNdqvYamv1ibjFeRV
CwYIWMRQ0rrAecLZuTlODs3NJ7uDzzrsWX+mIWQIeEluC6uG3E2BYT34Ah+rC4aW
19JzP0x3fusJfSRuuE+TVLwFFnwkqi4u+HYBeki/4MCGgdMGEx/JEXCHlDKbFe+n
epRwJxF226aY8eBRMLIbTDSiJ4JL1WiULhBCiwkOQ3lY2R3uDSNpV+8KZngTn75x
ghQMPJC/fION+24vngNW5ds/IG8Sp7E/5U8NBKsRju/cs8KU8YQCzzWP3MbW5GqO
KB/Q2boe1VDwjA5OuDqCwMK5QVjfbDtx1tA3GgPlq1WmrWm8G99bOQSvUwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOq3DRaQPTlCBzhyWXd0UODauCTkMB8GA1UdIwQY
MBaAFAnw3M63TxGFrNl67qrCXdpemwk2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2ZEY3pyZFBFWVdzMlhydXFzSmQybDZiQ1RZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi80NWFjMGYtMzgzYS00ZWI0LWIxODgt
OTk2MTg5ZjljZTE0LzEvNnJjTkZwQTlPVUlIT0hKWmQzUlE0TnE0Sk9RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi80NWFjMGYtMzgzYS00ZWI0LWIxODgtOTk2MTg5ZjljZTE0
LzEvQ2ZEY3pyZFBFWVdzMlhydXFzSmQybDZiQ1RZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUs3JMA0G
CSqGSIb3DQEBCwUAA4IBAQCwdSxnumoU8L8Y+yjdscOIpgpwhn5JXsOn1BMuzwm9
qvf5zjiMVE2gXo1MTIfVPVhRx12mD6VMT07oPJ/+05AB/msIFuAUL8Z2ngUA28+t
bGEhXhCSgYGN1bvZcUGt/1SUG9tvd/WWHmAQfh9OEOl6QKTUu0GROX5IEx+TFkOO
TCkV7ww8TXUvXL6kwbtbAGzIcgzo7w8l6w6TFelSJhfrv8i82sO5govmd4g2FKKj
56hSI/PF9bJsOlm2Lyw5QXFcTcF6G7/wsfDa6+oMFY8V7wTyLElZMjUdnTt8i43T
+qxjBJD0GDzHZyB60NLuK0xQ763nqHqUgqRZ/3EP34BP
-----END CERTIFICATE-----
Generated at Fri Mar 14 11:41:15 2025 by rpki-client