Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/pnzGJ4U9axy4lLwZnaehAwpRVaQ.roa
File: pnzGJ4U9axy4lLwZnaehAwpRVaQ.roa (raw, json)
Hash identifier: rLQUf7uZTpB79YDcuBoB9yRmzU3aEUgIa9XP7frMy3M=
Subject key identifier: A6:7C:C6:27:85:3D:6B:1C:B8:94:BC:19:9D:A7:A1:03:0A:51:55:A4
Certificate issuer: /CN=706d3abbb478b74ef2adef9bb7c4336e34111d51
Certificate serial: 0194221FA2EC940440C038FF0412B9BC62BC
Authority key identifier: 70:6D:3A:BB:B4:78:B7:4E:F2:AD:EF:9B:B7:C4:33:6E:34:11:1D:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/pnzGJ4U9axy4lLwZnaehAwpRVaQ.roa
Signing time: Wed 01 Jan 2025 13:48:06 +0000
ROA not before: Wed 01 Jan 2025 13:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212477
IP address blocks: 217.119.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:a2:ec:94:04:40:c0:38:ff:04:12:b9:bc:62:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=706d3abbb478b74ef2adef9bb7c4336e34111d51
Validity
Not Before: Jan 1 13:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a67cc627853d6b1cb894bc199da7a1030a5155a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a3:24:a4:ae:cc:c1:94:5a:71:aa:fb:2e:23:
1f:22:c7:d9:1f:51:6e:55:13:ca:0b:5b:67:d1:65:
de:7e:c5:6c:29:30:ff:4a:6c:8e:9c:52:a7:07:b2:
22:3c:2d:47:92:29:51:36:02:29:ea:74:c1:66:b8:
a4:a8:0d:45:95:26:37:c3:63:90:e4:c1:d8:9d:d5:
e5:36:69:fa:1e:60:5f:db:d3:c2:f2:ed:fe:b5:3c:
db:4c:38:40:2d:b2:78:03:89:8c:db:d8:64:ce:5a:
ad:4f:4f:50:2a:08:8e:51:f2:49:6b:7f:d9:19:71:
7a:6d:be:c0:f7:a5:50:86:c1:87:62:51:5e:81:e1:
db:79:a4:d1:b0:4a:d5:48:21:e4:92:9f:d3:e3:32:
fb:fd:e3:9d:2a:e8:39:a9:68:cf:a0:44:c2:e6:3c:
aa:f8:73:c7:a3:07:92:bf:39:13:da:e1:25:85:d0:
c6:e5:f1:58:2e:88:57:bf:74:2a:da:b8:34:23:4b:
14:b0:ec:bf:d9:2f:a4:1c:e1:f9:ee:c0:fb:45:2b:
0c:91:52:c1:84:2b:03:92:4c:2e:3a:fd:48:06:56:
ab:2c:c6:40:1b:78:28:74:59:33:3a:ae:04:ae:02:
92:b1:af:37:3b:e4:bb:9a:67:e4:bf:7f:35:e2:fa:
d2:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:7C:C6:27:85:3D:6B:1C:B8:94:BC:19:9D:A7:A1:03:0A:51:55:A4
X509v3 Authority Key Identifier:
keyid:70:6D:3A:BB:B4:78:B7:4E:F2:AD:EF:9B:B7:C4:33:6E:34:11:1D:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/pnzGJ4U9axy4lLwZnaehAwpRVaQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.119.132.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:a4:6c:dd:d2:5d:6d:51:7e:b0:5b:22:db:16:58:49:64:50:
d7:1c:ad:90:b9:12:02:3d:2e:84:06:e4:21:db:6c:f8:f7:73:
8a:e3:20:c9:d0:5d:7f:b9:77:a0:1c:49:f2:48:2a:3c:fa:43:
b9:8a:3e:25:96:4b:54:76:ce:90:d7:65:0b:85:e4:c1:24:21:
0c:d4:f5:54:0c:69:c1:51:e9:68:a8:94:6a:26:e6:d1:dd:2c:
47:01:77:57:5a:3f:fe:98:95:34:94:e4:2e:a2:a0:0a:22:42:
00:67:c1:b2:3b:a1:71:0c:3a:28:cd:ce:3d:3a:64:bf:94:74:
6e:b1:85:23:f2:c6:b9:ae:c9:84:04:2c:c3:4b:13:d5:6e:43:
ef:77:44:a3:3f:5b:84:cb:9f:81:bb:e6:02:91:fd:47:06:1b:
02:67:03:26:d6:4e:7b:bf:54:57:5e:6d:2c:8a:b8:95:87:ed:
65:63:8e:91:ec:fb:5f:fe:f5:58:ed:ad:e9:13:4e:c8:31:59:
45:6a:d9:ca:26:86:c7:67:92:97:31:43:45:91:b6:f3:76:ea:
d8:7d:92:3f:15:dd:83:3d:cd:05:c5:3c:9d:f5:43:cd:3b:f0:
49:0d:ec:6b:7e:8f:0c:10:e7:d7:44:a8:94:dd:9c:37:d5:b3:
1c:b6:d2:17
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQiH6LslARAwDj/BBK5vGK8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwNmQzYWJiYjQ3OGI3NGVmMmFkZWY5YmI3YzQzMzZlMzQx
MTFkNTEwHhcNMjUwMTAxMTM0ODA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNjdjYzYyNzg1M2Q2YjFjYjg5NGJjMTk5ZGE3YTEwMzBhNTE1NWE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKMkpK7MwZRacar7LiMfIsfZH1Fu
VRPKC1tn0WXefsVsKTD/SmyOnFKnB7IiPC1HkilRNgIp6nTBZrikqA1FlSY3w2OQ
5MHYndXlNmn6HmBf29PC8u3+tTzbTDhALbJ4A4mM29hkzlqtT09QKgiOUfJJa3/Z
GXF6bb7A96VQhsGHYlFegeHbeaTRsErVSCHkkp/T4zL7/eOdKug5qWjPoETC5jyq
+HPHoweSvzkT2uElhdDG5fFYLohXv3Qq2rg0I0sUsOy/2S+kHOH57sD7RSsMkVLB
hCsDkkwuOv1IBlarLMZAG3godFkzOq4ErgKSsa83O+S7mmfkv3814vrSsQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKZ8xieFPWscuJS8GZ2noQMKUVWkMB8GA1UdIwQY
MBaAFHBtOru0eLdO8q3vm7fEM240ER1RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0cwNnU3UjR0MDd5cmUtYnQ4UXpialFSSFZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8wYzZmNDctNDcxMy00NDcxLWIwOGYt
YTQyMTNjOTNmMWY3LzEvcG56R0o0VTlheHk0bEx3Wm5hZWhBd3BSVmFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy8wYzZmNDctNDcxMy00NDcxLWIwOGYtYTQyMTNjOTNmMWY3
LzEvY0cwNnU3UjR0MDd5cmUtYnQ4UXpialFSSFZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2XeEMA0G
CSqGSIb3DQEBCwUAA4IBAQAbpGzd0l1tUX6wWyLbFlhJZFDXHK2QuRICPS6EBuQh
22z493OK4yDJ0F1/uXegHEnySCo8+kO5ij4llktUds6Q12ULheTBJCEM1PVUDGnB
UeloqJRqJubR3SxHAXdXWj/+mJU0lOQuoqAKIkIAZ8GyO6FxDDoozc49OmS/lHRu
sYUj8sa5rsmEBCzDSxPVbkPvd0SjP1uEy5+Bu+YCkf1HBhsCZwMm1k57v1RXXm0s
iriVh+1lY46R7Ptf/vVY7a3pE07IMVlFatnKJobHZ5KXMUNFkbbzdurYfZI/Fd2D
Pc0FxTyd9UPNO/BJDexrfo8MEOfXRKiU3Zw31bMcttIX
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:45:48 2025 by rpki-client