Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/1-8RBH9_tnlklqBBmz5_-icsaMpc.roa
File: 1-8RBH9_tnlklqBBmz5_-icsaMpc.roa (raw, json)
Hash identifier: FKJ+h2K7CI08LvxPUFTvSg4EnAnN5YMIv8nzp9YkZ/0=
Subject key identifier: FB:C4:41:1F:DF:ED:9E:59:25:A8:10:66:CF:9F:FE:89:CB:1A:32:97
Certificate issuer: /CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Certificate serial: 019425FCB576659E7F59321C58F9F74E8B92
Authority key identifier: 68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/1-8RBH9_tnlklqBBmz5_-icsaMpc.roa
Signing time: Thu 02 Jan 2025 07:48:26 +0000
ROA not before: Thu 02 Jan 2025 07:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202081
IP address blocks: 77.79.249.0/24 maxlen: 24
195.167.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:b5:76:65:9e:7f:59:32:1c:58:f9:f7:4e:8b:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Validity
Not Before: Jan 2 07:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fbc4411fdfed9e5925a81066cf9ffe89cb1a3297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:de:c0:54:40:34:9c:6c:fa:70:a5:a5:01:19:
5d:69:a6:8d:62:b2:a6:7a:6a:04:05:4f:f0:46:fb:
1e:bb:20:2b:d3:da:eb:13:5a:50:f6:8b:d6:3a:0e:
17:29:7d:c4:e8:1e:92:ba:52:85:80:eb:81:bb:44:
9c:88:ff:70:4d:02:54:6c:65:f1:6f:29:a1:33:1c:
e0:9a:d4:01:91:b1:1a:8e:44:d2:15:04:01:5e:22:
13:b8:68:80:2a:c5:eb:9c:2b:30:37:48:b2:d1:c0:
10:8a:de:86:10:4f:6b:4a:75:31:fa:0f:10:ec:fc:
79:1c:d5:e9:4c:b4:49:7b:63:c7:cb:86:e1:32:5a:
98:e0:b4:91:d7:56:d6:7d:98:7f:67:d1:38:fc:fc:
e3:25:cd:a9:29:c5:0e:2d:c8:a2:35:11:c4:87:5b:
21:a6:a5:f7:51:d1:64:48:8e:51:dc:80:bb:5b:69:
04:36:aa:19:50:03:ba:33:46:74:e4:75:33:7c:c9:
9b:90:da:7c:02:c5:9b:c6:55:bf:d8:de:12:8b:39:
95:21:58:b5:29:a0:d1:77:14:84:40:b5:49:8f:3d:
d7:46:c5:52:86:a4:2a:b5:9a:10:03:ec:2c:16:46:
7b:1c:1a:b6:ae:ab:6b:b0:64:4d:d3:bc:92:15:e2:
60:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:C4:41:1F:DF:ED:9E:59:25:A8:10:66:CF:9F:FE:89:CB:1A:32:97
X509v3 Authority Key Identifier:
keyid:68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/1-8RBH9_tnlklqBBmz5_-icsaMpc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.79.249.0/24
195.167.152.0/24
Signature Algorithm: sha256WithRSAEncryption
97:24:6f:c6:12:f0:8c:c2:c6:59:09:97:6c:41:58:eb:98:ce:
b1:34:c7:e7:f4:7f:a4:3b:4d:4f:c5:45:0e:9b:f8:72:bd:fb:
81:88:82:05:83:15:b9:66:02:9f:65:44:7d:5c:4c:f1:91:9c:
4b:fc:19:aa:bc:5f:b8:89:ec:46:ec:61:65:0e:03:02:4e:13:
46:d7:9c:06:0a:10:ec:3e:1f:f6:3a:ec:94:ab:32:c7:5f:b6:
5d:77:b8:4c:2b:98:4c:02:64:c1:9f:e0:b8:8f:4a:78:99:09:
c5:4b:76:24:88:ba:4c:74:7c:6d:ef:23:06:37:e0:9d:6c:e5:
3d:86:37:8a:66:42:f0:46:87:74:a6:2a:c2:48:0b:d7:90:3a:
89:17:c5:e3:a1:c2:4f:ea:7d:42:23:53:c1:01:6b:e7:fd:1e:
1b:2b:be:02:49:97:02:a4:47:78:e5:8c:6f:ae:97:82:bc:90:
af:7a:18:1f:da:5d:96:4f:7b:68:d6:46:e8:06:ff:08:2e:4f:
e8:38:1f:7f:d2:3b:72:2d:5b:88:71:fd:c3:e4:0a:92:c4:2a:
bd:e5:c5:aa:30:5c:27:1b:36:b6:8f:fc:75:5e:dc:95:aa:8a:
60:fd:fa:93:e7:7e:cf:19:20:53:a5:bf:a9:5a:b5:0f:5f:34:
16:25:1a:8d
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgISAZQl/LV2ZZ5/WTIcWPn3TouSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4YzUxMGZjOWI4NjVkOTZlM2FmYzdjNTYwNTZlZmFkOWEz
MzBjNWIwHhcNMjUwMTAyMDc0ODI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYmM0NDExZmRmZWQ5ZTU5MjVhODEwNjZjZjlmZmU4OWNiMWEzMjk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAut7AVEA0nGz6cKWlARldaaaNYrKm
emoEBU/wRvseuyAr09rrE1pQ9ovWOg4XKX3E6B6SulKFgOuBu0SciP9wTQJUbGXx
bymhMxzgmtQBkbEajkTSFQQBXiITuGiAKsXrnCswN0iy0cAQit6GEE9rSnUx+g8Q
7Px5HNXpTLRJe2PHy4bhMlqY4LSR11bWfZh/Z9E4/PzjJc2pKcUOLciiNRHEh1sh
pqX3UdFkSI5R3IC7W2kENqoZUAO6M0Z05HUzfMmbkNp8AsWbxlW/2N4SizmVIVi1
KaDRdxSEQLVJjz3XRsVShqQqtZoQA+wsFkZ7HBq2rqtrsGRN07ySFeJgMwIDAQAB
o4ICEDCCAgwwHQYDVR0OBBYEFPvEQR/f7Z5ZJagQZs+f/onLGjKXMB8GA1UdIwQY
MBaAFGjFEPybhl2W46/HxWBW762aMwxbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYU1VUV9KdUdYWmJqcjhmRllGYnZyWm96REZzLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9lMGYyZjYtM2E4YS00ZGFhLTgyNzEt
NWQ2NjVlOTk4ZjZhLzEvMS04UkJIOV90bmxrbHFCQm16NV8taWNzYU1wYy5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMTgvZTBmMmY2LTNhOGEtNGRhYS04MjcxLTVkNjY1ZTk5OGY2
YS8xL2FNVVFfSnVHWFpianI4ZkZZRmJ2clpvekRGcy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAE1P+QME
AMOnmDANBgkqhkiG9w0BAQsFAAOCAQEAlyRvxhLwjMLGWQmXbEFY65jOsTTH5/R/
pDtNT8VFDpv4cr37gYiCBYMVuWYCn2VEfVxM8ZGcS/wZqrxfuInsRuxhZQ4DAk4T
RtecBgoQ7D4f9jrslKsyx1+2XXe4TCuYTAJkwZ/guI9KeJkJxUt2JIi6THR8be8j
BjfgnWzlPYY3imZC8EaHdKYqwkgL15A6iRfF46HCT+p9QiNTwQFr5/0eGyu+AkmX
AqRHeOWMb66XgryQr3oYH9pdlk97aNZG6Ab/CC5P6Dgff9I7ci1biHH9w+QKksQq
veXFqjBcJxs2to/8dV7claqKYP36k+d+zxkgU6W/qVq1D180FiUajQ==
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:38:50 2025 by rpki-client