Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/9tlDKzUphocr6UGhO-Bks3Yaom8.roa
File: 9tlDKzUphocr6UGhO-Bks3Yaom8.roa (raw, json)
Hash identifier: BRduwiSJ99alp3YMwAZ/m+i0BIozSINRtSDFCo85qHY=
Subject key identifier: F6:D9:43:2B:35:29:86:87:2B:E9:41:A1:3B:E0:64:B3:76:1A:A2:6F
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0194282515F81B279DF8A18D319650554E2B
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/9tlDKzUphocr6UGhO-Bks3Yaom8.roa
Signing time: Thu 02 Jan 2025 17:51:46 +0000
ROA not before: Thu 02 Jan 2025 17:51:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215796
IP address blocks: 194.87.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 07:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:15:f8:1b:27:9d:f8:a1:8d:31:96:50:55:4e:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 2 17:51:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f6d9432b352986872be941a13be064b3761aa26f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ec:2a:ce:21:4b:58:21:73:df:d2:21:3e:2f:
a8:93:6d:ac:65:a2:8d:ae:e1:75:0b:46:3f:3c:a5:
18:fe:46:05:6c:96:ad:78:ea:0b:d8:60:3b:4e:77:
6c:43:9c:03:6a:8f:0f:96:8a:8b:f3:37:66:d7:08:
85:06:74:af:6b:ce:c4:36:e2:b5:e5:58:17:d1:63:
de:0b:85:a9:f6:24:79:56:c2:91:76:ed:ca:ab:c6:
9e:64:82:a2:64:e1:bb:f2:1f:5b:6c:6e:18:f9:1a:
73:a8:2a:e9:b8:8f:50:dc:ed:e2:c2:79:32:a6:43:
54:49:f0:56:4e:a8:11:00:05:c8:fc:cd:c8:59:a7:
08:e3:47:e4:fe:15:80:0c:6a:3b:73:b5:0e:13:de:
ce:d0:84:37:2b:4e:2c:ee:31:46:22:39:6f:b8:df:
93:4b:28:fa:f5:5f:ad:bc:62:7a:11:cb:e7:f3:31:
9e:f4:2e:26:7f:81:5f:7c:5d:26:3f:0f:c8:75:65:
f3:7f:57:67:88:fa:7e:7a:cc:cb:2b:ca:f5:0b:b8:
4e:31:ad:0e:a9:1e:c9:07:5b:f7:7a:39:cb:bf:ec:
1b:4d:0c:f0:4f:c6:b1:8f:10:1f:5f:ec:ba:f8:92:
50:1b:79:96:3c:15:97:35:2e:b4:94:0f:35:4e:3e:
10:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:D9:43:2B:35:29:86:87:2B:E9:41:A1:3B:E0:64:B3:76:1A:A2:6F
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/9tlDKzUphocr6UGhO-Bks3Yaom8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.104.0/24
Signature Algorithm: sha256WithRSAEncryption
83:4d:3d:a2:36:0a:92:6b:60:f5:d0:70:b1:68:3b:7c:1d:bd:
82:6e:87:b8:e1:ac:e4:98:44:3b:3a:85:b8:ea:c8:8b:c8:b4:
0c:ae:87:f3:6c:e5:4b:c5:7a:9c:9d:c5:88:e5:ea:fc:37:16:
c4:eb:67:6b:7f:f3:6a:65:5d:37:27:d1:90:10:54:a1:55:34:
fb:40:4b:91:60:50:00:e4:20:44:39:79:2d:e3:9a:56:3c:a7:
24:e8:6a:f5:01:0f:2a:8d:81:01:59:96:13:67:3d:83:ce:97:
11:33:44:23:ae:84:1a:3e:03:b0:0f:3e:02:14:0f:b3:6b:a6:
71:96:27:aa:45:83:14:4d:24:b8:9f:65:31:65:38:6a:4a:d0:
62:d8:b1:8d:5f:87:c1:d0:69:73:c8:cd:32:52:37:2a:36:6a:
da:22:11:f5:23:a6:9a:90:fe:01:52:93:68:c7:be:8f:36:30:
0b:ee:d1:01:05:cc:3d:c1:f2:19:5d:0e:bb:b7:62:5c:60:59:
d2:9e:f8:af:dc:c4:d4:01:5e:0e:a4:96:ef:29:3b:6d:3d:1b:
41:dd:98:10:d8:70:53:35:e4:7f:7a:a5:ea:28:30:86:b0:cd:
f1:d1:23:50:f2:e1:6b:4a:3f:c5:39:eb:bb:ec:a3:87:5a:33:
6d:de:4f:b5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQoJRX4Gyed+KGNMZZQVU4rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjUwMTAyMTc1MTQ2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNmQ5NDMyYjM1Mjk4Njg3MmJlOTQxYTEzYmUwNjRiMzc2MWFhMjZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+wqziFLWCFz39IhPi+ok22sZaKN
ruF1C0Y/PKUY/kYFbJateOoL2GA7TndsQ5wDao8PloqL8zdm1wiFBnSva87ENuK1
5VgX0WPeC4Wp9iR5VsKRdu3Kq8aeZIKiZOG78h9bbG4Y+RpzqCrpuI9Q3O3iwnky
pkNUSfBWTqgRAAXI/M3IWacI40fk/hWADGo7c7UOE97O0IQ3K04s7jFGIjlvuN+T
Syj69V+tvGJ6Ecvn8zGe9C4mf4FffF0mPw/IdWXzf1dniPp+eszLK8r1C7hOMa0O
qR7JB1v3ejnLv+wbTQzwT8axjxAfX+y6+JJQG3mWPBWXNS60lA81Tj4QAQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPbZQys1KYaHK+lBoTvgZLN2GqJvMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvOXRsREt6VXBob2NyNlVHaE8tQmtzM1lhb204LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwldoMA0G
CSqGSIb3DQEBCwUAA4IBAQCDTT2iNgqSa2D10HCxaDt8Hb2Cboe44azkmEQ7OoW4
6siLyLQMrofzbOVLxXqcncWI5er8NxbE62drf/NqZV03J9GQEFShVTT7QEuRYFAA
5CBEOXkt45pWPKck6Gr1AQ8qjYEBWZYTZz2DzpcRM0QjroQaPgOwDz4CFA+za6Zx
lieqRYMUTSS4n2UxZThqStBi2LGNX4fB0GlzyM0yUjcqNmraIhH1I6aakP4BUpNo
x76PNjAL7tEBBcw9wfIZXQ67t2JcYFnSnviv3MTUAV4OpJbvKTttPRtB3ZgQ2HBT
NeR/eqXqKDCGsM3x0SNQ8uFrSj/FOeu77KOHWjNt3k+1
-----END CERTIFICATE-----
Generated at Wed Apr 9 13:01:07 2025 by rpki-client