Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/pLMH0ozDSiYZXzqiHdSEzphkheE.roa
File: pLMH0ozDSiYZXzqiHdSEzphkheE.roa (raw, json)
Hash identifier: CFbM9K2hMJ4HkUaVbEdJq2H47xHqfonXY2RvABtKsw8=
Subject key identifier: A4:B3:07:D2:8C:C3:4A:26:19:5F:3A:A2:1D:D4:84:CE:98:64:85:E1
Certificate issuer: /CN=2dfef2b839ad07786833b1bedca8b0b19203e111
Certificate serial: 01942669D539B3EB617ACC2FE9D380C44B18
Authority key identifier: 2D:FE:F2:B8:39:AD:07:78:68:33:B1:BE:DC:A8:B0:B1:92:03:E1:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lf7yuDmtB3hoM7G-3KiwsZID4RE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/pLMH0ozDSiYZXzqiHdSEzphkheE.roa
Signing time: Thu 02 Jan 2025 09:47:37 +0000
ROA not before: Thu 02 Jan 2025 09:47:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34568
IP address blocks: 109.234.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lf7yuDmtB3hoM7G-3KiwsZID4RE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:69:d5:39:b3:eb:61:7a:cc:2f:e9:d3:80:c4:4b:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dfef2b839ad07786833b1bedca8b0b19203e111
Validity
Not Before: Jan 2 09:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a4b307d28cc34a26195f3aa21dd484ce986485e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:9f:78:86:1e:2c:5e:7c:60:6f:b2:74:a2:79:
20:e3:b3:33:b9:70:a8:e6:d0:20:25:0b:a8:56:11:
3f:e7:80:21:5a:ee:90:d6:6f:05:f7:59:43:cf:31:
82:97:15:66:fa:8f:47:56:20:1b:23:a1:55:58:54:
99:12:7b:75:aa:02:a7:97:e3:a4:0d:92:20:16:6d:
dc:eb:c5:17:eb:c2:8e:88:dd:c2:a6:09:e9:73:f4:
77:31:c3:ba:cb:3d:49:29:1c:a2:c4:5b:31:4c:89:
34:b8:28:a7:c2:d4:4e:29:ef:03:81:dd:4d:80:07:
f3:92:51:5a:dc:6a:1c:ab:36:ea:8f:99:55:4e:4d:
b8:e3:63:69:c0:5e:a6:90:a1:93:0b:d9:3e:41:a4:
d3:0f:d3:58:69:a4:8d:5b:0b:7b:ed:35:45:40:a9:
c9:f5:a0:99:b8:e4:8f:72:f0:37:1c:19:b1:a5:cd:
df:88:11:55:75:9a:1a:70:5b:92:4a:0f:1e:d2:86:
1a:df:05:c1:4a:ee:0b:ce:84:fb:71:79:b1:ba:5d:
4e:b0:11:04:e1:35:e7:8b:b4:de:88:4d:04:99:0e:
ab:25:41:d1:71:96:5a:9d:db:44:96:1f:5e:05:23:
15:32:fc:fa:9d:6d:fd:b2:0f:0c:48:a9:dd:39:c7:
36:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:B3:07:D2:8C:C3:4A:26:19:5F:3A:A2:1D:D4:84:CE:98:64:85:E1
X509v3 Authority Key Identifier:
keyid:2D:FE:F2:B8:39:AD:07:78:68:33:B1:BE:DC:A8:B0:B1:92:03:E1:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lf7yuDmtB3hoM7G-3KiwsZID4RE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/pLMH0ozDSiYZXzqiHdSEzphkheE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.234.223.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:be:a3:c3:c2:e4:1b:33:35:be:20:f0:23:d4:23:a5:d0:10:
34:bf:41:0f:4d:23:d2:4d:d2:90:75:a5:15:06:33:7c:c1:e4:
fd:1c:20:fc:1d:47:98:6c:f1:1c:a7:bc:d3:31:b2:e2:59:0a:
7d:e4:42:2a:e9:f1:44:58:f1:8b:bd:c6:e1:7b:a3:bd:04:52:
c3:f6:48:44:d0:20:0e:45:a2:49:46:c6:a3:92:da:d9:20:61:
47:a2:70:07:d0:fd:c6:5a:64:ad:fc:f1:ee:af:53:3d:75:53:
b9:b9:bf:f1:0c:ca:4f:e9:5e:12:cd:d9:65:a7:13:49:e7:0f:
08:84:c2:0b:68:1c:de:6b:a9:9d:55:91:70:d9:85:55:55:ad:
ee:5a:e2:aa:3a:f9:da:63:a7:dd:a2:2b:39:11:6a:20:c2:bd:
47:48:d9:f8:ac:ca:0b:27:e2:ae:8d:e1:f7:4b:4c:36:d9:0f:
81:bf:3d:9d:04:d1:09:a1:f9:df:d8:dd:4b:16:eb:a5:11:67:
ca:85:a8:92:69:08:4b:ef:b1:e3:5e:c4:74:27:04:58:96:6c:
89:02:55:cd:9c:34:5c:43:d6:03:6a:9d:b7:d3:88:43:63:d9:
c5:4e:fa:be:5a:45:74:f9:5b:df:1c:07:e6:73:1e:b0:cc:83:
d7:f6:14:62
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQmadU5s+theswv6dOAxEsYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkZmVmMmI4MzlhZDA3Nzg2ODMzYjFiZWRjYThiMGIxOTIw
M2UxMTEwHhcNMjUwMTAyMDk0NzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNGIzMDdkMjhjYzM0YTI2MTk1ZjNhYTIxZGQ0ODRjZTk4NjQ4NWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZ94hh4sXnxgb7J0onkg47MzuXCo
5tAgJQuoVhE/54AhWu6Q1m8F91lDzzGClxVm+o9HViAbI6FVWFSZEnt1qgKnl+Ok
DZIgFm3c68UX68KOiN3Cpgnpc/R3McO6yz1JKRyixFsxTIk0uCinwtROKe8Dgd1N
gAfzklFa3Gocqzbqj5lVTk2442NpwF6mkKGTC9k+QaTTD9NYaaSNWwt77TVFQKnJ
9aCZuOSPcvA3HBmxpc3fiBFVdZoacFuSSg8e0oYa3wXBSu4LzoT7cXmxul1OsBEE
4TXni7TeiE0EmQ6rJUHRcZZandtElh9eBSMVMvz6nW39sg8MSKndOcc2vwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKSzB9KMw0omGV86oh3UhM6YZIXhMB8GA1UdIwQY
MBaAFC3+8rg5rQd4aDOxvtyosLGSA+ERMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGY3eXVEbXRCM2hvTTdHLTNLaXdzWklENFJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8wMzU3ZTgtM2VhMC00OTY4LTllZjkt
N2Q3MDUxOWI3NmRhLzEvcExNSDBvekRTaVlaWHpxaUhkU0V6cGhraGVFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC8wMzU3ZTgtM2VhMC00OTY4LTllZjktN2Q3MDUxOWI3NmRh
LzEvTGY3eXVEbXRCM2hvTTdHLTNLaXdzWklENFJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAberfMA0G
CSqGSIb3DQEBCwUAA4IBAQA7vqPDwuQbMzW+IPAj1COl0BA0v0EPTSPSTdKQdaUV
BjN8weT9HCD8HUeYbPEcp7zTMbLiWQp95EIq6fFEWPGLvcbhe6O9BFLD9khE0CAO
RaJJRsajktrZIGFHonAH0P3GWmSt/PHur1M9dVO5ub/xDMpP6V4SzdllpxNJ5w8I
hMILaBzea6mdVZFw2YVVVa3uWuKqOvnaY6fdois5EWogwr1HSNn4rMoLJ+KujeH3
S0w22Q+Bvz2dBNEJofnf2N1LFuulEWfKhaiSaQhL77HjXsR0JwRYlmyJAlXNnDRc
Q9YDap2304hDY9nFTvq+WkV0+VvfHAfmcx6wzIPX9hRi
-----END CERTIFICATE-----
Generated at Sun Feb 2 07:51:17 2025 by rpki-client