Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/92biv5HuF4-MCYX3-JYKsYM_9oQ.roa
File: 92biv5HuF4-MCYX3-JYKsYM_9oQ.roa (raw, json)
Hash identifier: lEdkt5OxgfIQLcK/b1IaxhpYCzESUh8WNTGGBlxICaA=
Subject key identifier: F7:66:E2:BF:91:EE:17:8F:8C:09:85:F7:F8:96:0A:B1:83:3F:F6:84
Certificate issuer: /CN=b3b6f54ea9b15a8bd4f33825386cb277b03439dd
Certificate serial: 019427477967A1B9A76E5544B0E13023B468
Authority key identifier: B3:B6:F5:4E:A9:B1:5A:8B:D4:F3:38:25:38:6C:B2:77:B0:34:39:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s7b1TqmxWovU8zglOGyyd7A0Od0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/92biv5HuF4-MCYX3-JYKsYM_9oQ.roa
Signing time: Thu 02 Jan 2025 13:49:43 +0000
ROA not before: Thu 02 Jan 2025 13:49:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42184
IP address blocks: 45.82.124.0/22 maxlen: 24
91.190.224.0/21 maxlen: 24
178.251.8.0/21 maxlen: 24
185.64.168.0/22 maxlen: 24
185.143.168.0/22 maxlen: 24
188.64.248.0/21 maxlen: 24
194.15.152.0/22 maxlen: 24
2a02:f08::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.mft
rsync://rpki.ripe.net/repository/DEFAULT/s7b1TqmxWovU8zglOGyyd7A0Od0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 22:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:79:67:a1:b9:a7:6e:55:44:b0:e1:30:23:b4:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3b6f54ea9b15a8bd4f33825386cb277b03439dd
Validity
Not Before: Jan 2 13:49:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f766e2bf91ee178f8c0985f7f8960ab1833ff684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:91:5f:90:67:70:2a:b9:ec:c5:08:4e:c7:7d:
39:c2:e2:21:a6:31:23:7b:19:3e:e6:1c:97:96:f9:
55:da:16:e1:a6:03:28:55:8a:91:07:a5:b6:ec:02:
df:44:37:2d:99:57:be:34:5f:5f:7d:d3:3e:35:2f:
0e:a5:2f:29:10:4f:85:a6:72:0b:6d:3a:ce:7c:01:
ce:15:59:58:17:0b:7e:4f:7a:8d:cf:bb:19:d1:42:
bc:ee:94:17:06:50:66:51:fb:3a:5a:5a:95:58:3a:
10:96:1b:53:85:92:80:e7:3c:28:5e:8a:4b:f9:64:
82:c1:a2:c2:e9:ac:fa:f9:66:fe:fd:11:9f:21:3b:
f5:69:59:02:6d:59:ac:b3:40:93:36:1e:8a:b3:9c:
e1:b7:d5:01:74:e0:e6:05:f7:aa:94:72:ff:63:87:
9f:75:8b:79:3c:48:e6:42:30:bd:22:1c:ff:cd:b0:
8b:56:f3:06:97:b7:73:c7:54:82:a3:3c:0c:0f:bc:
49:9a:0e:45:cc:c5:92:81:8c:3e:7b:23:19:54:c0:
32:17:5a:53:57:63:c4:cd:54:fe:1c:ab:0d:28:7a:
c1:4c:5a:b3:75:47:02:e5:46:5d:d2:a0:d2:5d:bc:
53:cb:b1:7e:8d:ad:fd:e0:6e:d1:11:dc:65:0f:14:
1e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:66:E2:BF:91:EE:17:8F:8C:09:85:F7:F8:96:0A:B1:83:3F:F6:84
X509v3 Authority Key Identifier:
keyid:B3:B6:F5:4E:A9:B1:5A:8B:D4:F3:38:25:38:6C:B2:77:B0:34:39:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7b1TqmxWovU8zglOGyyd7A0Od0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/92biv5HuF4-MCYX3-JYKsYM_9oQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/8de4a3-8d5a-46b1-a735-2f46e9317cc6/1/s7b1TqmxWovU8zglOGyyd7A0Od0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.124.0/22
91.190.224.0/21
178.251.8.0/21
185.64.168.0/22
185.143.168.0/22
188.64.248.0/21
194.15.152.0/22
IPv6:
2a02:f08::/32
Signature Algorithm: sha256WithRSAEncryption
49:13:12:6c:bb:97:ff:08:37:5f:60:bd:ce:ec:fb:9b:bb:20:
ee:bd:3c:56:24:1b:02:f6:aa:84:6c:10:ef:17:77:33:b3:f7:
d6:50:0f:98:83:78:90:56:e5:68:e8:4a:80:29:ff:5a:2a:ef:
37:af:3a:8c:39:f6:91:49:a2:74:ca:dd:d8:71:28:e0:9f:29:
8e:aa:28:01:29:89:5a:bc:97:51:a6:1f:ab:4d:a6:56:b8:95:
b7:27:9a:dc:b5:a1:cc:dc:22:4c:0e:d7:f3:a3:cc:39:19:23:
4e:cd:ef:3d:c5:e7:08:22:3e:2a:33:8b:f9:72:bd:3a:d6:3f:
42:24:3f:61:f6:a6:f9:40:5e:d8:e9:05:25:aa:ea:0d:d7:39:
80:41:8c:90:e0:6b:c6:d0:e7:44:5c:9a:53:10:ab:54:ea:62:
a5:59:e7:a7:12:49:c3:f8:bb:b4:cf:15:9a:d2:ee:ad:97:e1:
88:2b:d3:96:f9:ff:a4:e5:9b:e2:c2:39:7a:24:1f:80:d6:5f:
96:20:6f:2e:c4:e8:d7:70:15:9a:ca:42:6f:31:51:ca:8c:e9:
4d:24:b2:0c:64:8b:f9:0d:77:c5:a7:21:e7:46:c0:9c:1d:d5:
43:48:6d:64:fd:37:3b:3f:fd:c7:23:5f:15:85:66:2c:27:e9:
71:ed:35:e6
-----BEGIN CERTIFICATE-----
MIIFMDCCBBigAwIBAgISAZQnR3lnobmnblVEsOEwI7RoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzYjZmNTRlYTliMTVhOGJkNGYzMzgyNTM4NmNiMjc3YjAz
NDM5ZGQwHhcNMjUwMTAyMTM0OTQzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNzY2ZTJiZjkxZWUxNzhmOGMwOTg1ZjdmODk2MGFiMTgzM2ZmNjg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JFfkGdwKrnsxQhOx305wuIhpjEj
exk+5hyXlvlV2hbhpgMoVYqRB6W27ALfRDctmVe+NF9ffdM+NS8OpS8pEE+FpnIL
bTrOfAHOFVlYFwt+T3qNz7sZ0UK87pQXBlBmUfs6WlqVWDoQlhtThZKA5zwoXopL
+WSCwaLC6az6+Wb+/RGfITv1aVkCbVmss0CTNh6Ks5zht9UBdODmBfeqlHL/Y4ef
dYt5PEjmQjC9Ihz/zbCLVvMGl7dzx1SCozwMD7xJmg5FzMWSgYw+eyMZVMAyF1pT
V2PEzVT+HKsNKHrBTFqzdUcC5UZd0qDSXbxTy7F+ja394G7REdxlDxQe3wIDAQAB
o4ICPDCCAjgwHQYDVR0OBBYEFPdm4r+R7hePjAmF9/iWCrGDP/aEMB8GA1UdIwQY
MBaAFLO29U6psVqL1PM4JThssnewNDndMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczdiMVRxbXhXb3ZVOHpnbE9HeXlkN0EwT2QwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi84ZGU0YTMtOGQ1YS00NmIxLWE3MzUt
MmY0NmU5MzE3Y2M2LzEvOTJiaXY1SHVGNC1NQ1lYMy1KWUtzWU1fOW9RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi84ZGU0YTMtOGQ1YS00NmIxLWE3MzUtMmY0NmU5MzE3Y2M2
LzEvczdiMVRxbXhXb3ZVOHpnbE9HeXlkN0EwT2QwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFIGCCsGAQUFBwEHAQH/BEMwQTAwBAIAATAqAwQCLVJ8AwQD
W77gAwQDsvsIAwQCuUCoAwQCuY+oAwQDvED4AwQCwg+YMA0EAgACMAcDBQAqAg8I
MA0GCSqGSIb3DQEBCwUAA4IBAQBJExJsu5f/CDdfYL3O7PubuyDuvTxWJBsC9qqE
bBDvF3czs/fWUA+Yg3iQVuVo6EqAKf9aKu83rzqMOfaRSaJ0yt3YcSjgnymOqigB
KYlavJdRph+rTaZWuJW3J5rctaHM3CJMDtfzo8w5GSNOze89xecIIj4qM4v5cr06
1j9CJD9h9qb5QF7Y6QUlquoN1zmAQYyQ4GvG0OdEXJpTEKtU6mKlWeenEknD+Lu0
zxWa0u6tl+GIK9OW+f+k5Zviwjl6JB+A1l+WIG8uxOjXcBWaykJvMVHKjOlNJLIM
ZIv5DXfFpyHnRsCcHdVDSG1k/Tc7P/3HI18VhWYsJ+lx7TXm
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:15:24 2025 by rpki-client