Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/L9TmHTRJ4KmbROihaZqVw4CH0R4.roa
File: L9TmHTRJ4KmbROihaZqVw4CH0R4.roa (raw, json)
Hash identifier: fJF5ITsoVPcI+16TtpbepHN9ZUSlaxu/fL62paN4YkU=
Subject key identifier: 2F:D4:E6:1D:34:49:E0:A9:9B:44:E8:A1:69:9A:95:C3:80:87:D1:1E
Certificate issuer: /CN=08d2bc3e397289ce9c3aa02e156e20c03d4d7342
Certificate serial: 01942067F17766140B32D2F8A49D9FEAB9ED
Authority key identifier: 08:D2:BC:3E:39:72:89:CE:9C:3A:A0:2E:15:6E:20:C0:3D:4D:73:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/L9TmHTRJ4KmbROihaZqVw4CH0R4.roa
Signing time: Wed 01 Jan 2025 05:47:50 +0000
ROA not before: Wed 01 Jan 2025 05:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 195.69.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:f1:77:66:14:0b:32:d2:f8:a4:9d:9f:ea:b9:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d2bc3e397289ce9c3aa02e156e20c03d4d7342
Validity
Not Before: Jan 1 05:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2fd4e61d3449e0a99b44e8a1699a95c38087d11e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d3:eb:39:14:12:b1:73:a9:37:cf:4d:ba:72:
db:46:62:8a:b5:c6:71:2d:b7:7a:04:7e:94:1a:f0:
fa:c3:54:a5:fa:8f:50:67:57:bc:29:17:89:e2:01:
be:cd:92:b2:be:3f:2e:01:71:81:7b:58:63:df:14:
c6:ed:8e:13:cf:d0:8b:17:c6:e4:b6:0e:89:77:3c:
38:e4:83:8d:39:b5:a4:4c:3a:57:8e:b2:c4:45:aa:
fd:29:53:7c:ec:87:98:fe:04:2f:e4:7e:53:23:d5:
e5:bf:92:d8:f8:6f:de:a5:85:2b:29:f0:b9:c7:66:
16:1c:4e:ca:cd:2d:68:96:84:47:39:28:7f:a6:c5:
a1:c9:34:75:e1:0b:e7:97:82:49:9b:8e:e4:53:0d:
eb:e6:4d:cc:de:91:b2:1c:c3:88:97:ed:d7:74:64:
69:1e:a3:6f:98:7c:2c:eb:60:c7:82:e2:41:9c:7d:
f0:31:fe:de:84:08:09:d3:3d:b3:22:70:ee:d0:e9:
6d:72:ee:c8:1e:5f:55:24:a9:d1:67:57:62:07:32:
40:e8:70:d1:28:f3:16:64:59:67:d7:39:ef:8e:e0:
8e:fb:19:ea:b0:6d:27:fa:9d:6f:c4:c6:2c:97:27:
77:ce:d5:d2:b8:a9:f1:e5:fe:bf:5d:d8:1f:d0:f8:
2e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:D4:E6:1D:34:49:E0:A9:9B:44:E8:A1:69:9A:95:C3:80:87:D1:1E
X509v3 Authority Key Identifier:
keyid:08:D2:BC:3E:39:72:89:CE:9C:3A:A0:2E:15:6E:20:C0:3D:4D:73:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/L9TmHTRJ4KmbROihaZqVw4CH0R4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.69.163.0/24
Signature Algorithm: sha256WithRSAEncryption
60:a8:8f:d8:16:63:26:4b:52:77:59:4f:18:9d:c8:b9:4b:98:
93:13:74:85:ab:ca:8a:6a:62:09:c5:b4:33:15:7b:6e:07:61:
30:eb:6e:ea:e3:4a:f8:90:77:4f:87:85:d0:64:ea:00:67:41:
7f:32:b6:42:36:d9:4b:a3:02:e1:a2:b3:c9:56:ed:1c:cb:c9:
cd:5e:95:b0:0e:73:84:d8:d1:cf:08:ce:cf:40:41:69:8d:ad:
40:b4:e4:cd:8a:e2:b6:89:d2:f9:d9:33:4a:41:6e:9b:8a:29:
a1:55:51:29:66:5d:43:cd:8f:49:0a:1f:4f:8f:01:0f:4b:3c:
60:80:21:58:4c:61:44:f0:83:3d:08:22:c4:03:b7:58:a2:8c:
96:42:84:0a:c1:9a:fb:6c:8c:0c:b9:f5:6c:07:00:3a:f4:ee:
4a:d9:f1:44:dd:d6:4b:96:a0:ec:c4:05:0f:04:6b:23:0a:ef:
cf:e6:72:c0:ef:19:eb:de:dd:29:6b:46:13:1e:23:d8:19:80:
03:c6:a9:ec:a3:f1:59:3c:bd:83:2f:c4:9e:b3:e1:21:00:81:
45:2c:bd:83:b9:be:9f:1e:7e:02:87:b1:21:93:ac:df:cc:f7:
99:e9:50:a3:e4:95:f8:90:ae:c4:60:49:82:07:f4:6c:c3:dc:
91:50:79:5f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQgZ/F3ZhQLMtL4pJ2f6rntMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ZDJiYzNlMzk3Mjg5Y2U5YzNhYTAyZTE1NmUyMGMwM2Q0
ZDczNDIwHhcNMjUwMTAxMDU0NzUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZmQ0ZTYxZDM0NDllMGE5OWI0NGU4YTE2OTlhOTVjMzgwODdkMTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdPrORQSsXOpN89NunLbRmKKtcZx
Lbd6BH6UGvD6w1Sl+o9QZ1e8KReJ4gG+zZKyvj8uAXGBe1hj3xTG7Y4Tz9CLF8bk
tg6Jdzw45IONObWkTDpXjrLERar9KVN87IeY/gQv5H5TI9Xlv5LY+G/epYUrKfC5
x2YWHE7KzS1oloRHOSh/psWhyTR14Qvnl4JJm47kUw3r5k3M3pGyHMOIl+3XdGRp
HqNvmHws62DHguJBnH3wMf7ehAgJ0z2zInDu0Oltcu7IHl9VJKnRZ1diBzJA6HDR
KPMWZFln1znvjuCO+xnqsG0n+p1vxMYslyd3ztXSuKnx5f6/Xdgf0PgugwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC/U5h00SeCpm0TooWmalcOAh9EeMB8GA1UdIwQY
MBaAFAjSvD45conOnDqgLhVuIMA9TXNCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ05LOFBqbHlpYzZjT3FBdUZXNGd3RDFOYzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS85MTMwODktODk4Ni00MmE2LTg4MWUt
MmUwZWI0ZjQ2ZmE0LzEvTDlUbUhUUko0S21iUk9paGFacVZ3NENIMFI0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS85MTMwODktODk4Ni00MmE2LTg4MWUtMmUwZWI0ZjQ2ZmE0
LzEvQ05LOFBqbHlpYzZjT3FBdUZXNGd3RDFOYzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw0WjMA0G
CSqGSIb3DQEBCwUAA4IBAQBgqI/YFmMmS1J3WU8Ynci5S5iTE3SFq8qKamIJxbQz
FXtuB2Ew627q40r4kHdPh4XQZOoAZ0F/MrZCNtlLowLhorPJVu0cy8nNXpWwDnOE
2NHPCM7PQEFpja1AtOTNiuK2idL52TNKQW6biimhVVEpZl1DzY9JCh9PjwEPSzxg
gCFYTGFE8IM9CCLEA7dYooyWQoQKwZr7bIwMufVsBwA69O5K2fFE3dZLlqDsxAUP
BGsjCu/P5nLA7xnr3t0pa0YTHiPYGYADxqnso/FZPL2DL8Ses+EhAIFFLL2Dub6f
Hn4Ch7Ehk6zfzPeZ6VCj5JX4kK7EYEmCB/Rsw9yRUHlf
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:21:44 2025 by rpki-client