Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/m0XExKmyfiqbc39X_t0r3f-rPnw.roa
File: m0XExKmyfiqbc39X_t0r3f-rPnw.roa (raw, json)
Hash identifier: FEVTKa9GfQK+wd1z7OERkMrYF0fGkCabFyfJNv3Ffiw=
Subject key identifier: 9B:45:C4:C4:A9:B2:7E:2A:9B:73:7F:57:FE:DD:2B:DD:FF:AB:3E:7C
Certificate issuer: /CN=2841262acd62c90e68081a6f777375df2c3713c2
Certificate serial: 019426D95A4A91395214D08888207464E288
Authority key identifier: 28:41:26:2A:CD:62:C9:0E:68:08:1A:6F:77:73:75:DF:2C:37:13:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KEEmKs1iyQ5oCBpvd3N13yw3E8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/m0XExKmyfiqbc39X_t0r3f-rPnw.roa
Signing time: Thu 02 Jan 2025 11:49:26 +0000
ROA not before: Thu 02 Jan 2025 11:49:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39834
IP address blocks: 79.173.0.0/18 maxlen: 18
2a02:f740::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/KEEmKs1iyQ5oCBpvd3N13yw3E8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/KEEmKs1iyQ5oCBpvd3N13yw3E8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/KEEmKs1iyQ5oCBpvd3N13yw3E8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 20:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:5a:4a:91:39:52:14:d0:88:88:20:74:64:e2:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2841262acd62c90e68081a6f777375df2c3713c2
Validity
Not Before: Jan 2 11:49:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9b45c4c4a9b27e2a9b737f57fedd2bddffab3e7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:04:eb:c7:4f:82:83:2e:b8:80:e7:1d:f4:a9:
59:6e:64:f7:4a:66:4c:1d:37:4b:4e:91:5e:36:c8:
1f:85:5c:ff:7e:f5:18:ce:c3:35:60:dd:5f:0d:03:
fc:1b:41:60:40:cf:19:25:15:64:bc:1d:a1:6f:55:
fb:ac:6e:37:39:e9:59:0b:d3:1f:00:2c:e0:8e:25:
78:ff:c7:80:8d:13:7c:5d:9c:a0:76:eb:24:6b:80:
5c:8d:2e:0a:10:53:e8:0f:15:a6:b6:d1:b5:86:95:
01:b8:1d:75:34:81:5c:c9:7b:b5:3f:01:35:5d:19:
d7:1f:7f:f1:d6:7b:a1:69:3f:89:20:69:8e:e2:1c:
44:ef:d2:50:56:b1:d9:da:5a:a0:41:ce:32:fb:45:
b8:bb:6c:ea:e2:c5:a7:fa:6d:62:1d:fc:3d:2f:80:
2b:25:0c:41:a4:8f:e4:0e:af:0e:eb:da:8d:14:a5:
1c:f1:a8:19:ba:77:0b:5f:bb:a3:e9:a1:47:03:53:
b1:de:99:5a:d7:16:fa:fb:71:a8:33:4c:14:73:ff:
8a:63:39:48:ed:d5:11:96:80:c3:66:4b:81:8e:63:
df:a5:bd:d9:e1:1f:0b:7f:37:a0:dc:3f:4b:44:61:
05:b6:3d:0d:eb:88:87:3e:b7:24:b4:16:a0:d8:8d:
b2:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:45:C4:C4:A9:B2:7E:2A:9B:73:7F:57:FE:DD:2B:DD:FF:AB:3E:7C
X509v3 Authority Key Identifier:
keyid:28:41:26:2A:CD:62:C9:0E:68:08:1A:6F:77:73:75:DF:2C:37:13:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KEEmKs1iyQ5oCBpvd3N13yw3E8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/m0XExKmyfiqbc39X_t0r3f-rPnw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/KEEmKs1iyQ5oCBpvd3N13yw3E8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.173.0.0/18
IPv6:
2a02:f740::/29
Signature Algorithm: sha256WithRSAEncryption
02:8c:a8:e6:a8:77:e1:78:66:ad:32:27:fd:fb:c6:c5:3c:8b:
8b:37:a6:7a:fc:80:2c:5a:cf:86:d1:ec:cf:01:de:bd:26:c2:
17:ef:2b:e9:cc:ca:35:98:71:3c:f3:32:5a:7e:c9:ad:38:63:
e5:14:b6:21:5d:cd:4d:6f:0c:89:ef:0e:a4:bc:a3:fb:74:78:
c2:62:20:b1:05:2a:a7:70:c0:0d:41:85:5a:fa:75:4c:af:2e:
74:55:c3:8b:8d:07:65:f5:46:bd:f7:01:c1:46:db:d1:57:4e:
0f:98:de:df:c0:d0:45:90:12:7b:25:ba:d5:b1:18:17:24:96:
78:d6:01:2a:35:2f:ad:07:5b:45:f4:00:a7:62:3a:bb:e9:8f:
35:38:11:b9:1a:9b:5c:f0:dc:87:8a:4a:b3:a1:33:d8:3a:f6:
cf:06:82:b6:33:21:b0:14:3b:f0:13:f0:c7:e9:43:1e:63:f7:
e0:d0:a8:5f:8a:2b:49:2d:1b:ea:d6:ad:ea:20:af:f1:a9:b0:
a6:13:82:8e:83:b8:8c:49:7b:9a:d4:13:c1:d2:62:90:c8:80:
9b:7d:97:2a:c3:5b:98:53:7a:9b:72:5a:da:6f:80:6f:97:64:
2b:3d:6e:05:41:ab:6d:6f:6c:73:f2:d3:54:21:af:8a:2a:f3:
ef:fe:31:b4
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQm2VpKkTlSFNCIiCB0ZOKIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4NDEyNjJhY2Q2MmM5MGU2ODA4MWE2Zjc3NzM3NWRmMmMz
NzEzYzIwHhcNMjUwMTAyMTE0OTI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YjQ1YzRjNGE5YjI3ZTJhOWI3MzdmNTdmZWRkMmJkZGZmYWIzZTdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2gTrx0+Cgy64gOcd9KlZbmT3SmZM
HTdLTpFeNsgfhVz/fvUYzsM1YN1fDQP8G0FgQM8ZJRVkvB2hb1X7rG43OelZC9Mf
ACzgjiV4/8eAjRN8XZygduska4BcjS4KEFPoDxWmttG1hpUBuB11NIFcyXu1PwE1
XRnXH3/x1nuhaT+JIGmO4hxE79JQVrHZ2lqgQc4y+0W4u2zq4sWn+m1iHfw9L4Ar
JQxBpI/kDq8O69qNFKUc8agZuncLX7uj6aFHA1Ox3pla1xb6+3GoM0wUc/+KYzlI
7dURloDDZkuBjmPfpb3Z4R8Lfzeg3D9LRGEFtj0N64iHPrcktBag2I2ykQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFJtFxMSpsn4qm3N/V/7dK93/qz58MB8GA1UdIwQY
MBaAFChBJirNYskOaAgab3dzdd8sNxPCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0VFbUtzMWl5UTVvQ0JwdmQzTjEzeXczRThJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi8wMzIyNzYtMjVkYy00YzMwLThhN2It
OTVhMzNlMTJhM2FkLzEvbTBYRXhLbXlmaXFiYzM5WF90MHIzZi1yUG53LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi8wMzIyNzYtMjVkYy00YzMwLThhN2ItOTVhMzNlMTJhM2Fk
LzEvS0VFbUtzMWl5UTVvQ0JwdmQzTjEzeXczRThJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQGT60AMA0E
AgACMAcDBQMqAvdAMA0GCSqGSIb3DQEBCwUAA4IBAQACjKjmqHfheGatMif9+8bF
PIuLN6Z6/IAsWs+G0ezPAd69JsIX7yvpzMo1mHE88zJafsmtOGPlFLYhXc1NbwyJ
7w6kvKP7dHjCYiCxBSqncMANQYVa+nVMry50VcOLjQdl9Ua99wHBRtvRV04PmN7f
wNBFkBJ7JbrVsRgXJJZ41gEqNS+tB1tF9ACnYjq76Y81OBG5Gptc8NyHikqzoTPY
OvbPBoK2MyGwFDvwE/DH6UMeY/fg0KhfiitJLRvq1q3qIK/xqbCmE4KOg7iMSXua
1BPB0mKQyICbfZcqw1uYU3qbclrab4Bvl2QrPW4FQattb2xz8tNUIa+KKvPv/jG0
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:51:57 2025 by rpki-client