Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/iRTljilS88fdbTnqXefNcD2KdQw.roa
File: iRTljilS88fdbTnqXefNcD2KdQw.roa (raw, json)
Hash identifier: SYC9aJR60HZt276fl/3G18s2lWN51c7daVgQyb0yCnk=
Subject key identifier: 89:14:E5:8E:29:52:F3:C7:DD:6D:39:EA:5D:E7:CD:70:3D:8A:75:0C
Certificate issuer: /CN=9145ead8d3f1284402b6f75614a87257503ce1bc
Certificate serial: 01942143F9A3571BF0A8B59B46991D52AEEB
Authority key identifier: 91:45:EA:D8:D3:F1:28:44:02:B6:F7:56:14:A8:72:57:50:3C:E1:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUXq2NPxKEQCtvdWFKhyV1A84bw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/iRTljilS88fdbTnqXefNcD2KdQw.roa
Signing time: Wed 01 Jan 2025 09:48:10 +0000
ROA not before: Wed 01 Jan 2025 09:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50244
IP address blocks: 89.36.77.0/24 maxlen: 24
89.41.25.0/24 maxlen: 24
89.47.244.0/23 maxlen: 24
94.177.80.0/21 maxlen: 24
188.212.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/kUXq2NPxKEQCtvdWFKhyV1A84bw.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/kUXq2NPxKEQCtvdWFKhyV1A84bw.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUXq2NPxKEQCtvdWFKhyV1A84bw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 14:13:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:f9:a3:57:1b:f0:a8:b5:9b:46:99:1d:52:ae:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9145ead8d3f1284402b6f75614a87257503ce1bc
Validity
Not Before: Jan 1 09:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8914e58e2952f3c7dd6d39ea5de7cd703d8a750c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9e:fc:f8:c4:2b:a5:af:e6:04:5b:8d:f4:cd:
a1:2a:a9:d4:a1:0c:1a:b7:0c:30:08:e3:81:c4:55:
64:f6:87:5e:c1:2e:00:9b:92:be:ed:e4:a9:7e:b3:
d8:6a:c0:3f:ea:65:93:74:ff:d7:8f:15:a5:87:94:
fc:ff:43:fa:d3:56:3a:eb:53:7e:30:08:52:0c:55:
de:6f:d3:9c:56:cc:f0:24:59:71:38:41:50:c4:59:
f5:f0:ff:4d:fa:54:9d:6d:4d:48:e9:84:90:43:9d:
ce:09:5b:be:fa:8b:28:c1:a5:d5:eb:bd:7d:19:76:
06:88:3c:1a:23:97:2d:08:61:7a:74:31:2a:cb:54:
12:3c:78:85:7a:e6:82:6a:a8:35:7f:6a:9a:03:74:
15:ed:28:0e:79:eb:b6:44:fd:5b:84:56:4f:b9:ac:
02:1b:21:b2:74:32:fd:81:c8:65:b5:82:7d:8b:2e:
cc:2f:59:07:96:bc:53:82:d9:ee:5f:ea:3d:c1:7c:
f5:4f:fb:59:15:31:70:cd:98:7d:d8:30:3b:0a:24:
8f:ec:66:fe:07:f1:c9:ee:7b:bf:64:17:62:a6:a0:
8b:84:46:8d:4a:a0:3c:0b:a9:89:85:d4:aa:8d:53:
72:7f:a4:b0:de:e8:73:26:28:2e:63:ae:8d:07:04:
5f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:14:E5:8E:29:52:F3:C7:DD:6D:39:EA:5D:E7:CD:70:3D:8A:75:0C
X509v3 Authority Key Identifier:
keyid:91:45:EA:D8:D3:F1:28:44:02:B6:F7:56:14:A8:72:57:50:3C:E1:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUXq2NPxKEQCtvdWFKhyV1A84bw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/iRTljilS88fdbTnqXefNcD2KdQw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/kUXq2NPxKEQCtvdWFKhyV1A84bw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.36.77.0/24
89.41.25.0/24
89.47.244.0/23
94.177.80.0/21
188.212.129.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:2f:6f:5d:a0:7d:f5:97:e6:33:68:38:ea:59:37:66:2b:e9:
47:a2:65:da:3b:89:b6:fc:f8:c4:98:98:df:cf:6a:f4:32:88:
00:ca:3f:78:ff:d1:c7:24:a7:8d:96:82:1f:15:bc:fc:b9:d5:
ce:66:f2:b6:b2:28:13:fe:34:e7:af:c0:11:06:43:2f:82:7e:
0a:87:1f:94:8a:ff:83:ce:42:15:a2:9e:1a:f1:0c:0f:f9:b8:
3c:8c:63:f9:de:be:3e:1c:c9:31:3d:66:4a:51:67:5b:e1:3a:
54:69:be:be:85:15:d0:e4:e8:fc:22:32:53:ac:a2:cd:9a:df:
d0:d0:b6:9d:64:2c:dc:93:83:5c:9b:c3:b0:ab:af:b3:46:06:
06:5f:f5:c7:86:7e:61:cb:ea:c0:0c:bc:f8:ad:53:ca:9e:00:
cc:96:82:b3:ce:cb:96:14:31:1e:16:3c:c7:3a:b3:00:9a:96:
fe:ec:7f:a1:b8:45:93:6b:95:e8:fe:ea:26:18:df:30:ab:a0:
77:66:67:fc:f5:f7:24:c7:ab:f3:f7:69:8f:6e:e4:8c:54:75:
69:61:94:aa:c7:56:18:92:b2:ea:84:4f:bf:2c:72:4a:9f:ea:
1d:5b:f5:70:ee:6e:13:d5:7b:55:d5:7f:13:c8:1d:f2:e5:7a:
6c:d0:9a:92
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZQhQ/mjVxvwqLWbRpkdUq7rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxNDVlYWQ4ZDNmMTI4NDQwMmI2Zjc1NjE0YTg3MjU3NTAz
Y2UxYmMwHhcNMjUwMTAxMDk0ODEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OTE0ZTU4ZTI5NTJmM2M3ZGQ2ZDM5ZWE1ZGU3Y2Q3MDNkOGE3NTBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJ78+MQrpa/mBFuN9M2hKqnUoQwa
twwwCOOBxFVk9odewS4Am5K+7eSpfrPYasA/6mWTdP/XjxWlh5T8/0P601Y661N+
MAhSDFXeb9OcVszwJFlxOEFQxFn18P9N+lSdbU1I6YSQQ53OCVu++osowaXV6719
GXYGiDwaI5ctCGF6dDEqy1QSPHiFeuaCaqg1f2qaA3QV7SgOeeu2RP1bhFZPuawC
GyGydDL9gchltYJ9iy7ML1kHlrxTgtnuX+o9wXz1T/tZFTFwzZh92DA7CiSP7Gb+
B/HJ7nu/ZBdipqCLhEaNSqA8C6mJhdSqjVNyf6Sw3uhzJiguY66NBwRfwQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFIkU5Y4pUvPH3W056l3nzXA9inUMMB8GA1UdIwQY
MBaAFJFF6tjT8ShEArb3VhSocldQPOG8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1VYcTJOUHhLRVFDdHZkV0ZLaHlWMUE4NGJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9hNTIzNWYtNjJmYi00YWJiLTgwMzct
MmFkMTk1MjY0YzcyLzEvaVJUbGppbFM4OGZkYlRucVhlZk5jRDJLZFF3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9hNTIzNWYtNjJmYi00YWJiLTgwMzctMmFkMTk1MjY0Yzcy
LzEva1VYcTJOUHhLRVFDdHZkV0ZLaHlWMUE4NGJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAWSRNAwQA
WSkZAwQBWS/0AwQDXrFQAwQAvNSBMA0GCSqGSIb3DQEBCwUAA4IBAQC3L29doH31
l+YzaDjqWTdmK+lHomXaO4m2/PjEmJjfz2r0MogAyj94/9HHJKeNloIfFbz8udXO
ZvK2sigT/jTnr8ARBkMvgn4Khx+Uiv+DzkIVop4a8QwP+bg8jGP53r4+HMkxPWZK
UWdb4TpUab6+hRXQ5Oj8IjJTrKLNmt/Q0LadZCzck4Ncm8Owq6+zRgYGX/XHhn5h
y+rADLz4rVPKngDMloKzzsuWFDEeFjzHOrMAmpb+7H+huEWTa5Xo/uomGN8wq6B3
Zmf89fckx6vz92mPbuSMVHVpYZSqx1YYkrLqhE+/LHJKn+odW/Vw7m4T1XtV1X8T
yB3y5Xps0JqS
-----END CERTIFICATE-----
Generated at Wed Apr 9 17:27:25 2025 by rpki-client