Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/gC97AQKQbgiW9Krq-_q2apqCHmc.roa
File: gC97AQKQbgiW9Krq-_q2apqCHmc.roa (raw, json)
Hash identifier: IvEX/4r+S7SQha7hWBWTDBpux0NlV5BKH8odMNrPeJQ=
Subject key identifier: 80:2F:7B:01:02:90:6E:08:96:F4:AA:EA:FB:FA:B6:6A:9A:82:1E:67
Certificate issuer: /CN=27029a36fc0cca2e0a8d045f022dfc831a517308
Certificate serial: 0194266B75722F2C3F3785B03B192AC30D41
Authority key identifier: 27:02:9A:36:FC:0C:CA:2E:0A:8D:04:5F:02:2D:FC:83:1A:51:73:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JwKaNvwMyi4KjQRfAi38gxpRcwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/gC97AQKQbgiW9Krq-_q2apqCHmc.roa
Signing time: Thu 02 Jan 2025 09:49:24 +0000
ROA not before: Thu 02 Jan 2025 09:49:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41697
IP address blocks: 69.94.125.0/24 maxlen: 24
85.132.240.0/24 maxlen: 24
85.132.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/JwKaNvwMyi4KjQRfAi38gxpRcwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 06:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:75:72:2f:2c:3f:37:85:b0:3b:19:2a:c3:0d:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27029a36fc0cca2e0a8d045f022dfc831a517308
Validity
Not Before: Jan 2 09:49:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=802f7b0102906e0896f4aaeafbfab66a9a821e67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:49:e6:aa:32:db:39:94:63:51:01:d9:31:71:
dd:46:6c:23:fb:17:8f:f2:95:30:92:08:bc:96:40:
9e:25:a3:ed:a4:6f:61:1b:c3:e6:81:4c:6a:67:34:
23:49:f6:9c:40:e3:0d:fc:ea:d5:a3:34:cb:a3:97:
2d:94:06:1b:ef:70:06:58:bc:e8:d0:99:63:1c:35:
66:fd:3b:8b:0a:50:c2:b5:88:bf:2d:d3:2f:ea:2f:
28:8f:c3:06:c6:c0:26:c1:9d:73:cc:d4:44:73:c7:
39:46:65:2f:49:db:e7:a8:c6:88:29:59:f6:c7:b1:
bb:27:c9:86:28:ee:c0:e3:5f:04:c7:12:39:61:27:
c7:01:f9:79:3b:62:6d:f2:cd:74:34:77:9a:46:66:
90:6a:85:f0:55:30:dc:77:c7:0a:d4:09:9e:2e:7d:
be:a0:1a:8b:d1:66:7f:d0:ec:86:e3:06:99:1a:55:
71:1c:8f:59:2a:9a:02:86:b9:70:ff:8c:67:a6:b6:
d8:a4:56:d4:af:9d:25:ca:e6:f8:74:f2:e7:67:b5:
d6:29:b8:a7:b3:2c:77:45:c5:ae:47:ac:58:78:0e:
8a:22:84:75:c2:86:9f:1c:a9:9b:7d:2c:64:d8:66:
ea:16:b6:9e:74:dc:88:46:55:f5:38:31:6b:ec:38:
1b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:2F:7B:01:02:90:6E:08:96:F4:AA:EA:FB:FA:B6:6A:9A:82:1E:67
X509v3 Authority Key Identifier:
keyid:27:02:9A:36:FC:0C:CA:2E:0A:8D:04:5F:02:2D:FC:83:1A:51:73:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JwKaNvwMyi4KjQRfAi38gxpRcwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/gC97AQKQbgiW9Krq-_q2apqCHmc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
69.94.125.0/24
85.132.240.0/24
85.132.250.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:a4:f2:6e:f5:ca:7d:b2:29:c4:16:8e:d4:9c:a8:02:12:14:
f4:47:40:7c:64:b9:3c:02:9c:41:6e:c3:91:12:72:47:57:e6:
b5:1f:b9:7c:2c:8a:88:aa:37:24:44:4d:b6:b3:02:e9:c0:4c:
6c:c4:07:93:e6:93:99:b3:3f:8c:5a:00:b5:de:f8:bf:dd:6d:
11:ec:cc:ba:73:29:e4:6b:b3:9e:85:31:65:07:7e:e5:ea:c8:
09:24:7b:6c:8b:ba:24:df:cd:68:b5:a6:b8:76:57:4d:b7:7f:
92:40:6d:af:59:e8:b6:68:63:6f:6b:aa:2f:65:fc:31:b7:2e:
10:35:66:97:8c:3a:ed:1b:4f:49:b3:36:9f:ed:53:36:94:92:
59:27:30:ab:4a:13:61:83:bd:3e:ac:9a:8b:2a:f5:45:2a:c4:
3d:44:73:62:76:d9:67:e7:f9:5a:fd:f1:57:02:54:05:89:a3:
f7:a1:56:6e:70:52:2a:82:d1:ae:1b:ad:d2:f4:18:38:21:18:
6c:0e:e0:8b:05:ef:d3:e3:3b:af:74:f7:ca:b7:2d:32:b0:d1:
4c:f7:e3:0e:ba:45:e1:54:0b:0a:65:79:23:f2:86:5e:9b:60:
f4:97:81:ed:8b:5b:4e:66:e0:ff:e6:fe:a7:45:0f:6c:8c:d0:
94:c5:86:8f
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQma3VyLyw/N4WwOxkqww1BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3MDI5YTM2ZmMwY2NhMmUwYThkMDQ1ZjAyMmRmYzgzMWE1
MTczMDgwHhcNMjUwMTAyMDk0OTI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MDJmN2IwMTAyOTA2ZTA4OTZmNGFhZWFmYmZhYjY2YTlhODIxZTY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUnmqjLbOZRjUQHZMXHdRmwj+xeP
8pUwkgi8lkCeJaPtpG9hG8PmgUxqZzQjSfacQOMN/OrVozTLo5ctlAYb73AGWLzo
0JljHDVm/TuLClDCtYi/LdMv6i8oj8MGxsAmwZ1zzNREc8c5RmUvSdvnqMaIKVn2
x7G7J8mGKO7A418ExxI5YSfHAfl5O2Jt8s10NHeaRmaQaoXwVTDcd8cK1AmeLn2+
oBqL0WZ/0OyG4waZGlVxHI9ZKpoChrlw/4xnprbYpFbUr50lyub4dPLnZ7XWKbin
syx3RcWuR6xYeA6KIoR1woafHKmbfSxk2GbqFraedNyIRlX1ODFr7DgbWQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFIAvewECkG4IlvSq6vv6tmqagh5nMB8GA1UdIwQY
MBaAFCcCmjb8DMouCo0EXwIt/IMaUXMIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSndLYU52d015aTRLalFSZkFpMzhneHBSY3dnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS81M2JiMjMtZGZhOC00NzkyLWIzMTct
NTBkMGE1MzIzNjQxLzEvZ0M5N0FRS1FiZ2lXOUtycS1fcTJhcHFDSG1jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS81M2JiMjMtZGZhOC00NzkyLWIzMTctNTBkMGE1MzIzNjQx
LzEvSndLYU52d015aTRLalFSZkFpMzhneHBSY3dnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQARV59AwQA
VYTwAwQAVYT6MA0GCSqGSIb3DQEBCwUAA4IBAQAspPJu9cp9sinEFo7UnKgCEhT0
R0B8ZLk8ApxBbsOREnJHV+a1H7l8LIqIqjckRE22swLpwExsxAeT5pOZsz+MWgC1
3vi/3W0R7My6cynka7OehTFlB37l6sgJJHtsi7ok381otaa4dldNt3+SQG2vWei2
aGNva6ovZfwxty4QNWaXjDrtG09Jszaf7VM2lJJZJzCrShNhg70+rJqLKvVFKsQ9
RHNidtln5/la/fFXAlQFiaP3oVZucFIqgtGuG63S9Bg4IRhsDuCLBe/T4zuvdPfK
ty0ysNFM9+MOukXhVAsKZXkj8oZem2D0l4Hti1tOZuD/5v6nRQ9sjNCUxYaP
-----END CERTIFICATE-----
Generated at Fri Feb 21 12:41:00 2025 by rpki-client