Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/2yO0ZDrHd8OJFuwn55d-HtQZzoc.roa
File: 2yO0ZDrHd8OJFuwn55d-HtQZzoc.roa (raw, json)
Hash identifier: TfV5gjjTMgj1xj0Upkt0peRpp3goSL2reEN8E3rsU9U=
Subject key identifier: DB:23:B4:64:3A:C7:77:C3:89:16:EC:27:E7:97:7E:1E:D4:19:CE:87
Certificate issuer: /CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Certificate serial: 01942747F4882D3585D0E5C101F9FB47EFEA
Authority key identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/2yO0ZDrHd8OJFuwn55d-HtQZzoc.roa
Signing time: Thu 02 Jan 2025 13:50:14 +0000
ROA not before: Thu 02 Jan 2025 13:50:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 55701
IP address blocks: 86.110.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 21:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:f4:88:2d:35:85:d0:e5:c1:01:f9:fb:47:ef:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Validity
Not Before: Jan 2 13:50:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=db23b4643ac777c38916ec27e7977e1ed419ce87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5c:91:3e:e5:27:11:0f:53:22:c2:2a:9a:f5:
ef:a9:4e:48:9c:71:5f:57:dc:8b:d8:53:49:e8:19:
58:67:94:e3:d0:6a:bf:c0:cf:c0:b3:25:4c:f2:db:
19:f0:36:20:22:c6:e5:c5:a3:13:6b:5b:40:c5:4a:
44:a4:b0:71:54:95:af:5b:48:3d:f3:08:92:b7:8e:
72:7d:76:72:46:9b:e4:57:bf:83:f3:02:b4:fc:0a:
aa:05:03:e4:b6:91:dc:b3:9c:cf:a4:35:5b:b4:e7:
cf:23:16:88:ce:68:f7:72:49:6e:ff:69:f5:3e:f7:
c2:9e:f5:53:89:21:9d:93:80:73:78:9a:6d:a0:f0:
88:17:eb:fa:5a:99:16:05:1d:a2:9b:94:b6:46:c5:
2e:fc:9d:8a:fd:98:f1:ea:0a:5e:91:a5:7b:6a:99:
26:29:e6:51:88:45:ce:a6:32:80:12:8e:ea:7b:9e:
06:eb:f9:b8:7b:e3:01:83:ba:1e:b0:0b:ec:5c:74:
d4:c1:b0:e2:11:c5:7b:45:39:e1:62:c1:4e:8f:99:
8d:98:27:78:e2:cb:8f:2f:f0:83:1b:5a:08:10:2c:
11:fd:a9:2b:7f:54:4d:52:45:1f:05:0b:e9:b6:74:
54:cc:2d:53:19:61:51:34:bb:78:fa:a9:c9:e0:54:
1d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:23:B4:64:3A:C7:77:C3:89:16:EC:27:E7:97:7E:1E:D4:19:CE:87
X509v3 Authority Key Identifier:
keyid:17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/2yO0ZDrHd8OJFuwn55d-HtQZzoc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.110.37.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:b0:ec:c5:a3:09:e9:4f:17:33:92:c7:ae:07:d5:00:1e:8c:
13:fd:16:00:2d:b0:23:05:f3:6f:c8:2f:91:62:e5:f5:f4:e8:
8a:7e:43:7f:b9:d7:32:5d:95:a7:31:19:6c:3e:6e:5b:2d:4f:
af:1d:15:ec:58:f6:17:c5:f7:44:72:8b:21:8f:2a:ff:d5:ea:
d5:bb:c2:93:89:51:ab:12:f8:a9:fa:f5:9a:f4:47:20:4e:67:
d2:ef:65:6b:19:60:d5:95:e9:88:ac:65:7f:f5:f8:7b:ff:dd:
fe:b5:83:cb:11:c3:28:fc:c5:db:eb:36:f7:51:f2:76:6c:08:
8f:97:8b:47:0b:a9:c7:f9:00:48:67:c5:19:91:14:f6:1f:34:
0a:51:a8:5a:71:63:91:05:81:6f:2a:c8:a0:2b:54:10:67:c0:
87:20:11:41:fb:79:d1:1c:70:be:62:27:cb:e8:06:87:91:78:
19:74:e2:3e:dd:a0:21:92:32:c4:31:7c:c1:bb:d9:16:5c:cf:
ff:38:c6:c1:00:82:09:2f:df:b0:fd:1f:ad:7a:4f:05:c1:a6:
a9:5b:fc:44:5f:60:15:4c:ca:64:27:f9:2f:bf:a7:3b:99:19:
c5:1b:5c:93:8e:3f:72:d0:f7:01:62:46:f8:80:d4:c0:05:8f:
9e:de:ee:af
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnR/SILTWF0OXBAfn7R+/qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3MDY3OTc3ZWZkMTRiYzg5ZmIwZGFiYTAzYmIwZjYwMGZi
YjAxODQwHhcNMjUwMTAyMTM1MDE0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYjIzYjQ2NDNhYzc3N2MzODkxNmVjMjdlNzk3N2UxZWQ0MTljZTg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVyRPuUnEQ9TIsIqmvXvqU5InHFf
V9yL2FNJ6BlYZ5Tj0Gq/wM/AsyVM8tsZ8DYgIsblxaMTa1tAxUpEpLBxVJWvW0g9
8wiSt45yfXZyRpvkV7+D8wK0/AqqBQPktpHcs5zPpDVbtOfPIxaIzmj3cklu/2n1
PvfCnvVTiSGdk4BzeJptoPCIF+v6WpkWBR2im5S2RsUu/J2K/Zjx6gpekaV7apkm
KeZRiEXOpjKAEo7qe54G6/m4e+MBg7oesAvsXHTUwbDiEcV7RTnhYsFOj5mNmCd4
4suPL/CDG1oIECwR/akrf1RNUkUfBQvptnRUzC1TGWFRNLt4+qnJ4FQdSwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNsjtGQ6x3fDiRbsJ+eXfh7UGc6HMB8GA1UdIwQY
MBaAFBcGeXfv0UvIn7DaugO7D2APuwGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRndaNWQtX1JTOGlmc05xNkE3c1BZQS03QVlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUt
ZDFhNzc3MmRiMDc2LzEvMnlPMFpEckhkOE9KRnV3bjU1ZC1IdFFaem9jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUtZDFhNzc3MmRiMDc2
LzEvRndaNWQtX1JTOGlmc05xNkE3c1BZQS03QVlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVm4lMA0G
CSqGSIb3DQEBCwUAA4IBAQAbsOzFownpTxczkseuB9UAHowT/RYALbAjBfNvyC+R
YuX19OiKfkN/udcyXZWnMRlsPm5bLU+vHRXsWPYXxfdEcoshjyr/1erVu8KTiVGr
Evip+vWa9EcgTmfS72VrGWDVlemIrGV/9fh7/93+tYPLEcMo/MXb6zb3UfJ2bAiP
l4tHC6nH+QBIZ8UZkRT2HzQKUahacWORBYFvKsigK1QQZ8CHIBFB+3nRHHC+YifL
6AaHkXgZdOI+3aAhkjLEMXzBu9kWXM//OMbBAIIJL9+w/R+tek8FwaapW/xEX2AV
TMpkJ/kvv6c7mRnFG1yTjj9y0PcBYkb4gNTABY+e3u6v
-----END CERTIFICATE-----
Generated at Sun Apr 6 00:02:22 2025 by rpki-client