Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/V2Ei32pldnvEfX7-MOV98CBbvqs.roa
File: V2Ei32pldnvEfX7-MOV98CBbvqs.roa (raw, json)
Hash identifier: pkd2u2AiMIDj1vMjt09XptY7JsRn5R0rojUcZBXfHoY=
Subject key identifier: 57:61:22:DF:6A:65:76:7B:C4:7D:7E:FE:30:E5:7D:F0:20:5B:BE:AB
Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9
Certificate serial: 0194282678B0F14C15FC09E2CBD52403397E
Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/V2Ei32pldnvEfX7-MOV98CBbvqs.roa
Signing time: Thu 02 Jan 2025 17:53:17 +0000
ROA not before: Thu 02 Jan 2025 17:53:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 395954
IP address blocks: 89.249.192.0/24 maxlen: 24
212.42.192.0/24 maxlen: 24
212.42.195.0/24 maxlen: 24
212.42.199.0/24 maxlen: 24
212.42.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 11:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:78:b0:f1:4c:15:fc:09:e2:cb:d5:24:03:39:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9
Validity
Not Before: Jan 2 17:53:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=576122df6a65767bc47d7efe30e57df0205bbeab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:60:83:8d:95:73:d2:56:e3:57:c7:cd:3c:7e:
73:fe:72:a6:e5:2c:6d:76:1b:82:c4:21:f5:85:85:
83:04:7d:42:15:8f:dd:00:a9:53:0b:dc:7d:92:68:
46:3e:c4:e4:e0:f3:8a:89:24:5a:35:5d:65:47:87:
54:07:2d:ef:5c:5a:de:59:6b:6a:f2:e3:b5:cc:05:
26:ff:13:8c:3c:a7:85:c6:09:8d:eb:9c:d0:97:88:
ed:8e:d8:7b:97:fe:73:31:f7:1d:35:2e:3e:82:8f:
80:47:e1:d5:b3:9d:60:4d:d5:7e:23:ca:52:97:fd:
17:42:ae:86:a8:c2:fe:f2:21:52:02:9e:ba:42:2a:
5f:48:e9:b5:45:12:35:5f:c2:1e:0a:cd:b4:52:53:
0d:13:96:45:53:f4:38:ac:6f:d2:b6:c4:fd:e8:06:
c9:c4:dc:8e:c7:38:de:17:48:4c:75:49:4e:67:2f:
22:2a:b6:c1:20:e8:20:9b:cf:51:fc:1a:3d:3b:19:
1f:66:26:72:fd:3a:59:90:c3:29:64:e3:d1:e8:38:
23:47:28:8f:72:93:cd:80:b6:ee:8d:41:cf:a7:7e:
e6:52:45:83:1a:33:da:92:d6:b0:7b:7f:13:d1:47:
44:df:ff:98:f4:dd:52:39:f5:19:42:04:55:73:6c:
79:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:61:22:DF:6A:65:76:7B:C4:7D:7E:FE:30:E5:7D:F0:20:5B:BE:AB
X509v3 Authority Key Identifier:
keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/V2Ei32pldnvEfX7-MOV98CBbvqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.249.192.0/24
212.42.192.0/24
212.42.195.0/24
212.42.199.0/24
212.42.203.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:66:b1:fb:2f:9e:67:e1:57:1a:10:d4:08:f3:87:a0:35:4d:
1b:ce:e8:ab:3c:1a:8a:26:72:03:0d:a1:63:f2:1b:33:78:71:
7b:dc:b6:2c:6f:c3:40:1e:f1:eb:c4:26:42:01:b2:44:e2:c4:
85:69:0d:3b:1c:6e:3f:d0:db:ba:72:a1:14:f9:b1:1b:68:48:
fd:89:66:0c:80:8d:5d:79:1d:e8:0a:cd:9c:33:95:2a:98:e4:
23:9e:7d:ce:ba:50:76:6c:11:57:95:cd:4c:bf:f3:33:a6:dc:
ce:66:89:58:65:9a:1d:35:ae:40:cd:72:02:88:15:14:4d:69:
e1:86:86:8f:66:92:25:fe:aa:55:72:8e:db:ec:9a:32:be:61:
56:cf:c3:24:75:48:54:44:a7:3a:e2:dd:77:c9:9d:60:78:3a:
19:da:f1:a7:bf:9a:8f:3b:15:af:bd:e7:12:c1:77:6c:0d:2f:
45:5f:89:f2:a7:78:05:bc:63:7b:c6:7b:52:0b:20:7c:da:ef:
1a:eb:16:b0:7d:60:56:86:1d:7e:8e:3c:02:98:fe:cc:c3:35:
2f:8e:42:08:d3:e8:90:5a:21:d9:7f:05:f0:93:0b:14:bf:7d:
c1:98:8b:f0:84:3d:4f:b4:b7:2a:98:c4:c5:be:99:42:7a:4c:
70:c4:9d:eb
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZQoJniw8UwV/Aniy9UkAzl+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkNzIyZTQ1MTNhMzk2NzhkOGFiMjNiMmQ2NDk3NzUzNDA1
MThjYjkwHhcNMjUwMTAyMTc1MzE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NzYxMjJkZjZhNjU3NjdiYzQ3ZDdlZmUzMGU1N2RmMDIwNWJiZWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2GCDjZVz0lbjV8fNPH5z/nKm5Sxt
dhuCxCH1hYWDBH1CFY/dAKlTC9x9kmhGPsTk4POKiSRaNV1lR4dUBy3vXFreWWtq
8uO1zAUm/xOMPKeFxgmN65zQl4jtjth7l/5zMfcdNS4+go+AR+HVs51gTdV+I8pS
l/0XQq6GqML+8iFSAp66QipfSOm1RRI1X8IeCs20UlMNE5ZFU/Q4rG/StsT96AbJ
xNyOxzjeF0hMdUlOZy8iKrbBIOggm89R/Bo9OxkfZiZy/TpZkMMpZOPR6DgjRyiP
cpPNgLbujUHPp37mUkWDGjPaktawe38T0UdE3/+Y9N1SOfUZQgRVc2x5KQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFFdhIt9qZXZ7xH1+/jDlffAgW76rMB8GA1UdIwQY
MBaAFA1yLkUTo5Z42KsjstZJd1NAUYy5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDIt
MzQyNWIxMjVlYWE3LzEvVjJFaTMycGxkbnZFZlg3LU1PVjk4Q0JidnFzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDItMzQyNWIxMjVlYWE3
LzEvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAWfnAAwQA
1CrAAwQA1CrDAwQA1CrHAwQA1CrLMA0GCSqGSIb3DQEBCwUAA4IBAQCqZrH7L55n
4VcaENQI84egNU0bzuirPBqKJnIDDaFj8hszeHF73LYsb8NAHvHrxCZCAbJE4sSF
aQ07HG4/0Nu6cqEU+bEbaEj9iWYMgI1deR3oCs2cM5UqmOQjnn3OulB2bBFXlc1M
v/MzptzOZolYZZodNa5AzXICiBUUTWnhhoaPZpIl/qpVco7b7JoyvmFWz8MkdUhU
RKc64t13yZ1geDoZ2vGnv5qPOxWvvecSwXdsDS9FX4nyp3gFvGN7xntSCyB82u8a
6xawfWBWhh1+jjwCmP7MwzUvjkII0+iQWiHZfwXwkwsUv33BmIvwhD1PtLcqmMTF
vplCekxwxJ3r
-----END CERTIFICATE-----
Generated at Wed Feb 5 18:59:36 2025 by rpki-client