Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/thinNa1P3ZJUaDEVnZ8FbvGDQfM.roa
File: thinNa1P3ZJUaDEVnZ8FbvGDQfM.roa (raw, json)
Hash identifier: CYpLWQQg8JodrUK5Tb2ZnyWzes+vvTno27KxaS3uako=
Subject key identifier: B6:18:A7:35:AD:4F:DD:92:54:68:31:15:9D:9F:05:6E:F1:83:41:F3
Certificate issuer: /CN=f879988e0f49971a326f419e5cfacbfddcc993e7
Certificate serial: 0194282329C7B89B6769FB54E3F00F600F0F
Authority key identifier: F8:79:98:8E:0F:49:97:1A:32:6F:41:9E:5C:FA:CB:FD:DC:C9:93:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/thinNa1P3ZJUaDEVnZ8FbvGDQfM.roa
Signing time: Thu 02 Jan 2025 17:49:40 +0000
ROA not before: Thu 02 Jan 2025 17:49:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61317
IP address blocks: 83.136.208.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:29:c7:b8:9b:67:69:fb:54:e3:f0:0f:60:0f:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f879988e0f49971a326f419e5cfacbfddcc993e7
Validity
Not Before: Jan 2 17:49:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b618a735ad4fdd92546831159d9f056ef18341f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:73:9a:66:96:fe:98:cd:19:d2:01:bc:ab:50:
1e:f3:f0:72:0c:e5:2d:81:de:dc:bf:c5:e6:05:4a:
54:df:89:75:3d:f6:dc:38:93:99:b6:71:9b:ee:32:
f4:35:f4:b5:3a:30:b6:a9:6c:6c:0e:9c:46:54:39:
c7:7f:5a:22:2c:d4:63:58:86:2a:ab:42:ed:dd:83:
52:e7:2a:02:46:73:09:60:60:7d:56:86:3b:e6:84:
13:49:9d:34:a7:9f:d7:36:ec:c7:54:38:0a:82:14:
59:e5:61:40:cd:96:1d:ea:35:07:15:5a:bc:f1:7f:
b2:b2:b6:24:48:49:67:dc:c6:95:0e:31:a5:cd:0a:
f1:c1:3b:81:7f:f6:02:57:0e:fb:a5:cc:e8:66:c2:
21:22:22:59:b7:cd:43:5f:71:b3:70:65:54:24:0f:
4f:aa:d8:be:6a:3e:84:bf:73:a5:6b:91:d5:c4:a5:
71:40:7b:84:a5:09:1b:3a:a0:29:17:ca:97:c5:6e:
77:dd:17:1a:97:7b:b8:c5:bf:be:eb:e2:8f:1e:d5:
16:d3:0d:62:a0:97:67:79:1c:68:51:a3:7e:86:3e:
bd:61:4d:a2:ea:67:11:04:b5:f1:60:94:66:97:fd:
60:90:d0:eb:d0:52:a9:6c:3f:ef:82:a5:b8:12:21:
26:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:18:A7:35:AD:4F:DD:92:54:68:31:15:9D:9F:05:6E:F1:83:41:F3
X509v3 Authority Key Identifier:
keyid:F8:79:98:8E:0F:49:97:1A:32:6F:41:9E:5C:FA:CB:FD:DC:C9:93:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/thinNa1P3ZJUaDEVnZ8FbvGDQfM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.136.208.0/21
Signature Algorithm: sha256WithRSAEncryption
9e:fc:40:36:00:ac:a8:de:6e:cd:be:2d:5d:2a:b6:6e:96:c0:
39:8c:96:dd:0a:20:cc:ef:f7:4a:19:cf:9e:bd:7b:04:46:e5:
6f:74:0f:81:b6:23:e7:c5:4f:22:26:41:6d:24:12:06:8a:96:
45:4f:bb:92:0c:20:2b:b0:e7:f4:35:82:41:25:6e:5c:de:0c:
49:2d:5d:4c:b0:7c:6b:5c:8c:5e:74:b8:71:d9:5c:1a:59:2c:
cb:cd:4c:11:e7:75:ea:c0:e9:5e:2a:d3:0d:d3:4a:99:04:4c:
53:56:e1:87:88:e0:bd:ab:b3:1b:f3:1f:86:71:75:ce:33:7a:
88:26:4a:53:e0:6b:99:8a:46:96:45:e1:5a:6b:5e:91:f9:46:
49:d0:35:3d:7e:66:24:13:ca:3a:35:54:7d:04:2e:72:50:df:
6d:ae:c9:54:16:4d:c9:c5:f7:cb:4c:62:5b:1e:a2:f8:e0:c3:
96:6f:1d:1b:7a:ab:21:14:15:9f:97:33:5c:ea:36:dc:47:3c:
64:91:bc:c9:19:29:31:3b:62:41:93:2b:d9:e1:46:e5:64:4d:
bd:10:ce:11:94:95:9a:3e:a3:8d:47:e3:04:ce:c7:0c:b9:2e:
5f:7a:9d:38:7a:a6:c5:64:91:01:e6:45:9a:19:a8:a2:6b:29:
89:ff:83:9f
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZQoIynHuJtnaftU4/APYA8PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4Nzk5ODhlMGY0OTk3MWEzMjZmNDE5ZTVjZmFjYmZkZGNj
OTkzZTcwHhcNMjUwMTAyMTc0OTQwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNjE4YTczNWFkNGZkZDkyNTQ2ODMxMTU5ZDlmMDU2ZWYxODM0MWYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXOaZpb+mM0Z0gG8q1Ae8/ByDOUt
gd7cv8XmBUpU34l1PfbcOJOZtnGb7jL0NfS1OjC2qWxsDpxGVDnHf1oiLNRjWIYq
q0Lt3YNS5yoCRnMJYGB9VoY75oQTSZ00p5/XNuzHVDgKghRZ5WFAzZYd6jUHFVq8
8X+ysrYkSEln3MaVDjGlzQrxwTuBf/YCVw77pczoZsIhIiJZt81DX3GzcGVUJA9P
qti+aj6Ev3Ola5HVxKVxQHuEpQkbOqApF8qXxW533Rcal3u4xb++6+KPHtUW0w1i
oJdneRxoUaN+hj69YU2i6mcRBLXxYJRml/1gkNDr0FKpbD/vgqW4EiEmYQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFLYYpzWtT92SVGgxFZ2fBW7xg0HzMB8GA1UdIwQY
MBaAFPh5mI4PSZcaMm9Bnlz6y/3cyZPnMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1IbVlqZzlKbHhveWIwR2VYUHJMX2R6SmstYy5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDUvYWYzZDgxLTAwNDctNDEzYy05MWY0
LTA0NzBiNGJiMzBkYi8xL3RoaW5OYTFQM1pKVWFERVZuWjhGYnZHRFFmTS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMDUvYWYzZDgxLTAwNDctNDEzYy05MWY0LTA0NzBiNGJiMzBk
Yi8xLzEtSG1Zamc5Smx4b3liMEdlWFByTF9kekprLWMuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBANTiNAw
DQYJKoZIhvcNAQELBQADggEBAJ78QDYArKjebs2+LV0qtm6WwDmMlt0KIMzv90oZ
z569ewRG5W90D4G2I+fFTyImQW0kEgaKlkVPu5IMICuw5/Q1gkElblzeDEktXUyw
fGtcjF50uHHZXBpZLMvNTBHnderA6V4q0w3TSpkETFNW4YeI4L2rsxvzH4Zxdc4z
eogmSlPga5mKRpZF4VprXpH5RknQNT1+ZiQTyjo1VH0ELnJQ322uyVQWTcnF98tM
Ylseovjgw5ZvHRt6qyEUFZ+XM1zqNtxHPGSRvMkZKTE7YkGTK9nhRuVkTb0QzhGU
lZo+o41H4wTOxwy5Ll96nTh6psVkkQHmRZoZqKJrKYn/g58=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:50:58 2025 by rpki-client