Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/lPe8zCf8lIzsUd0sirQC3PnV-rE.roa
File: lPe8zCf8lIzsUd0sirQC3PnV-rE.roa (raw, json)
Hash identifier: +0U/J/rWUSte6FGLIKYZ67KQ8QCEjE/9rcggvXz7rfs=
Subject key identifier: 94:F7:BC:CC:27:FC:94:8C:EC:51:DD:2C:8A:B4:02:DC:F9:D5:FA:B1
Certificate issuer: /CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Certificate serial: 01942747F1F8745D28B9DB91ACAB6FDF8F61
Authority key identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/lPe8zCf8lIzsUd0sirQC3PnV-rE.roa
Signing time: Thu 02 Jan 2025 13:50:13 +0000
ROA not before: Thu 02 Jan 2025 13:50:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14445
IP address blocks: 86.110.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:f1:f8:74:5d:28:b9:db:91:ac:ab:6f:df:8f:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Validity
Not Before: Jan 2 13:50:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=94f7bccc27fc948cec51dd2c8ab402dcf9d5fab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b5:e8:50:71:50:55:76:10:c0:ac:e3:e4:9d:
b7:3e:15:85:33:f4:dd:8a:1f:96:4d:d4:51:d9:c9:
c3:57:67:39:87:5e:ba:41:d7:fa:b8:0a:3c:08:29:
35:93:ea:2e:a5:ab:a6:ce:e3:2b:e8:11:1a:9e:e3:
d7:ce:2c:e8:86:a4:f0:78:b9:6e:56:d1:89:2d:00:
82:19:af:85:ad:72:ce:0c:c3:ed:79:af:7a:cd:ac:
30:3f:42:eb:35:65:25:34:88:72:7f:e4:d1:ea:69:
53:c2:3e:a8:21:6e:74:be:39:37:00:62:47:c9:e8:
bc:b1:49:3d:fa:f2:b3:52:2a:90:ec:ad:f8:0c:1a:
0f:45:06:d6:b9:96:4a:e0:bd:26:a3:6f:4a:2c:74:
0f:24:64:75:4b:82:ea:f9:4c:02:8b:0d:3b:69:7a:
bd:49:d3:bc:21:bf:25:e9:e4:82:6e:01:19:4a:c9:
1f:ea:66:5a:ba:e3:03:a2:09:34:50:d8:e3:cb:8e:
b4:c0:f2:5d:44:57:22:a0:b4:3c:1d:0a:80:e9:8b:
3f:03:7e:36:02:c2:94:af:d7:6e:d6:b9:f2:4b:0e:
a1:9d:e5:7e:e3:7c:9a:5f:af:da:4c:1c:9a:e0:0d:
35:74:59:05:ab:81:3a:b9:b9:5b:1e:d1:f9:f9:9b:
b6:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:F7:BC:CC:27:FC:94:8C:EC:51:DD:2C:8A:B4:02:DC:F9:D5:FA:B1
X509v3 Authority Key Identifier:
keyid:17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/lPe8zCf8lIzsUd0sirQC3PnV-rE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.110.55.0/24
Signature Algorithm: sha256WithRSAEncryption
47:86:57:ed:83:e1:51:68:57:ef:01:f5:ee:7e:70:ff:e1:27:
fc:a4:8b:fe:51:72:b9:12:11:b7:03:48:2f:03:bb:89:df:9a:
2b:c1:1d:68:3c:ae:3c:d4:f8:dc:e9:24:89:69:b1:44:35:9e:
c2:fa:1b:cb:29:54:c0:62:75:6d:f5:10:30:53:d3:4e:25:6c:
b6:52:e3:82:99:10:d9:ff:9b:92:8e:33:de:17:30:e5:8d:76:
20:dd:1b:3e:7e:40:03:47:cc:95:1d:c6:1d:ef:97:23:81:6c:
2c:57:59:e7:6d:21:5e:5d:61:04:34:bf:7d:bf:ed:8c:33:f3:
1b:6c:71:a9:97:91:3a:ea:67:90:d0:fd:a5:ad:75:82:9a:f4:
bb:97:6a:5a:58:b6:24:52:ab:b4:67:01:57:a6:98:27:32:39:
42:80:66:b4:9f:c6:ea:51:2b:1b:1c:87:8a:ab:64:c4:2e:42:
09:82:20:b0:a6:ba:22:e5:47:16:98:4a:3f:e3:18:b5:9b:41:
4e:c4:37:0d:9d:ee:73:c2:98:79:67:fd:8a:50:1e:56:71:70:
4c:7b:78:c6:0b:9b:7b:44:e7:05:5c:99:e7:e0:4c:4a:f6:58:
c1:12:c0:43:2a:04:9a:82:ba:04:76:69:59:80:b3:e8:2a:c6:
1d:bd:b5:70
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnR/H4dF0ouduRrKtv349hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3MDY3OTc3ZWZkMTRiYzg5ZmIwZGFiYTAzYmIwZjYwMGZi
YjAxODQwHhcNMjUwMTAyMTM1MDEzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NGY3YmNjYzI3ZmM5NDhjZWM1MWRkMmM4YWI0MDJkY2Y5ZDVmYWIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLXoUHFQVXYQwKzj5J23PhWFM/Td
ih+WTdRR2cnDV2c5h166Qdf6uAo8CCk1k+oupaumzuMr6BEanuPXzizohqTweLlu
VtGJLQCCGa+FrXLODMPtea96zawwP0LrNWUlNIhyf+TR6mlTwj6oIW50vjk3AGJH
yei8sUk9+vKzUiqQ7K34DBoPRQbWuZZK4L0mo29KLHQPJGR1S4Lq+UwCiw07aXq9
SdO8Ib8l6eSCbgEZSskf6mZauuMDogk0UNjjy460wPJdRFcioLQ8HQqA6Ys/A342
AsKUr9du1rnySw6hneV+43yaX6/aTBya4A01dFkFq4E6ublbHtH5+Zu29QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJT3vMwn/JSM7FHdLIq0Atz51fqxMB8GA1UdIwQY
MBaAFBcGeXfv0UvIn7DaugO7D2APuwGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRndaNWQtX1JTOGlmc05xNkE3c1BZQS03QVlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUt
ZDFhNzc3MmRiMDc2LzEvbFBlOHpDZjhsSXpzVWQwc2lyUUMzUG5WLXJFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUtZDFhNzc3MmRiMDc2
LzEvRndaNWQtX1JTOGlmc05xNkE3c1BZQS03QVlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVm43MA0G
CSqGSIb3DQEBCwUAA4IBAQBHhlftg+FRaFfvAfXufnD/4Sf8pIv+UXK5EhG3A0gv
A7uJ35orwR1oPK481Pjc6SSJabFENZ7C+hvLKVTAYnVt9RAwU9NOJWy2UuOCmRDZ
/5uSjjPeFzDljXYg3Rs+fkADR8yVHcYd75cjgWwsV1nnbSFeXWEENL99v+2MM/Mb
bHGpl5E66meQ0P2lrXWCmvS7l2paWLYkUqu0ZwFXppgnMjlCgGa0n8bqUSsbHIeK
q2TELkIJgiCwproi5UcWmEo/4xi1m0FOxDcNne5zwph5Z/2KUB5WcXBMe3jGC5t7
ROcFXJnn4ExK9ljBEsBDKgSagroEdmlZgLPoKsYdvbVw
-----END CERTIFICATE-----
Generated at Wed Feb 5 07:54:04 2025 by rpki-client