Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/RDfRFkINmnxAYr0i5lo-RrZfvvM.roa
File: RDfRFkINmnxAYr0i5lo-RrZfvvM.roa (raw, json)
Hash identifier: OK1hJOOaClcL1ul04CJbPRYEerL2hSCv/3xJn1BxpKo=
Subject key identifier: 44:37:D1:16:42:0D:9A:7C:40:62:BD:22:E6:5A:3E:46:B6:5F:BE:F3
Certificate issuer: /CN=f9856d674f0e9dbf6012d5b5d3d96b43afd76473
Certificate serial: 0194228D7EDF8BE0C20951C811B15BACE202
Authority key identifier: F9:85:6D:67:4F:0E:9D:BF:60:12:D5:B5:D3:D9:6B:43:AF:D7:64:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-YVtZ08Onb9gEtW109lrQ6_XZHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/RDfRFkINmnxAYr0i5lo-RrZfvvM.roa
Signing time: Wed 01 Jan 2025 15:48:05 +0000
ROA not before: Wed 01 Jan 2025 15:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9116
IP address blocks: 82.102.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-YVtZ08Onb9gEtW109lrQ6_XZHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:7e:df:8b:e0:c2:09:51:c8:11:b1:5b:ac:e2:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9856d674f0e9dbf6012d5b5d3d96b43afd76473
Validity
Not Before: Jan 1 15:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4437d116420d9a7c4062bd22e65a3e46b65fbef3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:3a:74:3b:62:ff:87:03:8e:4b:f9:af:d5:0b:
a2:08:b4:3c:9d:65:af:cd:e9:11:6a:83:da:2b:8c:
a5:7c:0d:5a:42:66:fc:ab:8b:16:2c:17:f1:43:b3:
72:c6:95:4f:0b:fd:c2:05:de:50:38:b8:2a:4a:de:
4c:8d:a0:6b:f5:78:e8:04:c8:d7:96:50:b8:e0:39:
4a:f1:4b:07:3b:59:ef:df:09:4c:f6:ed:d9:c0:cd:
73:e3:61:2d:9c:02:fa:dd:69:c8:c1:6a:a3:cb:a0:
42:40:6b:28:d7:5a:81:36:c0:39:bd:e8:b1:1f:7e:
32:5f:27:27:2b:bb:f9:92:11:37:ef:36:d6:2f:a9:
3d:ae:ac:b6:78:3e:7a:55:28:66:77:96:6f:00:04:
e9:ae:76:0b:3a:cf:9d:3a:f1:0b:03:5d:22:17:ca:
9c:07:f4:4a:17:13:b7:1c:38:81:67:e1:e6:b5:de:
11:24:61:76:50:41:21:2b:1f:a1:75:80:da:4a:f2:
23:38:c1:fe:ce:da:c3:ab:45:ab:6e:c8:33:52:f5:
df:21:10:6f:22:ad:b9:10:af:4c:f7:39:bb:fd:5d:
96:52:65:dc:ca:f4:36:7c:54:ea:b4:c9:15:7b:ea:
75:2c:f1:68:af:4b:86:68:b3:78:1a:f8:34:c5:53:
de:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:37:D1:16:42:0D:9A:7C:40:62:BD:22:E6:5A:3E:46:B6:5F:BE:F3
X509v3 Authority Key Identifier:
keyid:F9:85:6D:67:4F:0E:9D:BF:60:12:D5:B5:D3:D9:6B:43:AF:D7:64:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-YVtZ08Onb9gEtW109lrQ6_XZHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/RDfRFkINmnxAYr0i5lo-RrZfvvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.102.161.0/24
Signature Algorithm: sha256WithRSAEncryption
99:a1:00:84:a4:4e:de:77:7a:8a:33:92:06:6d:20:53:c9:07:
51:fb:5e:d3:0a:cf:fd:29:6d:5e:62:a6:e6:25:df:ce:e0:c1:
0c:7b:6b:43:1b:65:3b:b4:e0:e1:a0:fd:7c:be:4a:5d:97:a0:
d9:73:ed:6d:32:b9:00:d2:2b:6d:40:17:af:d8:dd:b8:1d:84:
36:e5:af:0d:48:be:61:c6:1f:19:9b:f6:29:96:27:0d:56:21:
ca:d9:bd:3c:81:90:99:6b:97:ad:2f:36:0e:c5:c8:3b:dc:0b:
f9:29:20:a1:15:90:68:4a:f1:4c:5a:5a:89:18:99:c5:55:54:
21:98:3e:ca:90:da:a7:48:d6:f2:ce:65:11:56:0a:92:23:f8:
22:48:ba:79:8e:cb:2b:d0:a5:b1:fe:c0:56:e2:70:5d:27:d2:
89:93:a6:76:85:fe:79:f1:50:df:1b:78:91:0a:c1:80:b3:df:
15:ba:10:c5:c6:8b:36:5b:a4:23:58:fb:bb:02:60:19:b1:88:
9b:8e:4b:33:f4:0c:21:59:ea:7b:7a:07:b7:8e:d7:f7:bb:71:
14:9c:42:57:e3:45:48:d2:88:4f:40:e6:6e:2f:8b:e0:c8:c2:
4b:1d:24:72:7c:3c:7f:84:0b:77:ab:74:cd:3f:4f:a3:0b:b0:
7e:c7:98:93
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZQijX7fi+DCCVHIEbFbrOICMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5ODU2ZDY3NGYwZTlkYmY2MDEyZDViNWQzZDk2YjQzYWZk
NzY0NzMwHhcNMjUwMTAxMTU0ODA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NDM3ZDExNjQyMGQ5YTdjNDA2MmJkMjJlNjVhM2U0NmI2NWZiZWYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljp0O2L/hwOOS/mv1QuiCLQ8nWWv
zekRaoPaK4ylfA1aQmb8q4sWLBfxQ7NyxpVPC/3CBd5QOLgqSt5MjaBr9XjoBMjX
llC44DlK8UsHO1nv3wlM9u3ZwM1z42EtnAL63WnIwWqjy6BCQGso11qBNsA5veix
H34yXycnK7v5khE37zbWL6k9rqy2eD56VShmd5ZvAATprnYLOs+dOvELA10iF8qc
B/RKFxO3HDiBZ+Hmtd4RJGF2UEEhKx+hdYDaSvIjOMH+ztrDq0WrbsgzUvXfIRBv
Iq25EK9M9zm7/V2WUmXcyvQ2fFTqtMkVe+p1LPFor0uGaLN4Gvg0xVPe8QIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFEQ30RZCDZp8QGK9IuZaPka2X77zMB8GA1UdIwQY
MBaAFPmFbWdPDp2/YBLVtdPZa0Ov12RzMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1ZVnRaMDhPbmI5Z0V0VzEwOWxyUTZfWFpITS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGEvOWY5NTkwLTdmMGEtNDFiMy1hYzRm
LWVmZDE0ZGI5NTdmYi8xL1JEZlJGa0lObW54QVlyMGk1bG8tUnJaZnZ2TS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMGEvOWY5NTkwLTdmMGEtNDFiMy1hYzRmLWVmZDE0ZGI5NTdm
Yi8xLzEtWVZ0WjA4T25iOWdFdFcxMDlsclE2X1haSE0uY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABSZqEw
DQYJKoZIhvcNAQELBQADggEBAJmhAISkTt53eoozkgZtIFPJB1H7XtMKz/0pbV5i
puYl387gwQx7a0MbZTu04OGg/Xy+Sl2XoNlz7W0yuQDSK21AF6/Y3bgdhDblrw1I
vmHGHxmb9imWJw1WIcrZvTyBkJlrl60vNg7FyDvcC/kpIKEVkGhK8UxaWokYmcVV
VCGYPsqQ2qdI1vLOZRFWCpIj+CJIunmOyyvQpbH+wFbicF0n0omTpnaF/nnxUN8b
eJEKwYCz3xW6EMXGizZbpCNY+7sCYBmxiJuOSzP0DCFZ6nt6B7eO1/e7cRScQlfj
RUjSiE9A5m4vi+DIwksdJHJ8PH+EC3erdM0/T6MLsH7HmJM=
-----END CERTIFICATE-----
Generated at Tue Apr 22 03:30:39 2025 by rpki-client