Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/aw9onhWyE0X_G2dqIAr21daa77Y.roa
File: aw9onhWyE0X_G2dqIAr21daa77Y.roa (raw, json)
Hash identifier: x+QX04yDVmZf+2LdMkeQARN3ELWJN+aDlPdYgim8Xno=
Subject key identifier: 6B:0F:68:9E:15:B2:13:45:FF:1B:67:6A:20:0A:F6:D5:D6:9A:EF:B6
Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9
Certificate serial: 01942826795AC03B92B4F294934DC1EE991A
Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/aw9onhWyE0X_G2dqIAr21daa77Y.roa
Signing time: Thu 02 Jan 2025 17:53:17 +0000
ROA not before: Thu 02 Jan 2025 17:53:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396356
IP address blocks: 89.249.197.0/24 maxlen: 24
89.249.198.0/24 maxlen: 24
212.42.201.0/24 maxlen: 24
212.42.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 11:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:79:5a:c0:3b:92:b4:f2:94:93:4d:c1:ee:99:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9
Validity
Not Before: Jan 2 17:53:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6b0f689e15b21345ff1b676a200af6d5d69aefb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ce:35:9e:13:e0:88:31:74:47:bb:57:1f:29:
3e:a7:c9:e2:4f:c6:30:dc:1b:32:14:da:14:98:d4:
b9:23:b2:a3:16:42:5f:32:83:f7:d9:94:31:f3:f6:
4f:16:ba:4f:82:9e:e3:22:56:3a:96:6f:ff:29:ab:
1c:25:2e:fa:7d:ad:bf:bb:74:bc:84:ce:88:a5:17:
b6:87:b4:4e:c7:5f:ac:c5:6a:7d:22:68:5a:9e:ea:
9f:89:b6:e5:9a:af:19:4a:28:fe:c3:f1:b2:e5:54:
63:8d:56:e1:11:f1:96:bd:13:94:2d:52:e0:f7:bf:
0b:cd:d1:80:31:0d:e8:e2:27:96:cd:fe:39:1b:0a:
e7:ba:e6:1a:bc:53:24:4d:33:20:70:5b:a6:4b:e0:
90:87:3e:19:cf:7b:1d:a8:8e:ed:36:5c:78:39:9e:
53:77:48:01:92:ef:02:fe:a8:45:8b:9c:4a:d1:d5:
45:73:01:33:ef:2d:f1:3e:c0:1b:4e:7f:75:65:71:
ce:1d:d6:d4:3f:aa:68:c8:8f:2a:6a:fe:6a:5a:ac:
cb:11:53:84:9f:e4:6a:5d:f4:3b:65:26:62:a2:a3:
ed:4c:7c:c2:fc:a4:39:ff:d7:8b:e1:b4:98:5a:3f:
0b:78:11:67:a5:a8:14:58:b3:b1:27:64:6c:53:1e:
b4:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:0F:68:9E:15:B2:13:45:FF:1B:67:6A:20:0A:F6:D5:D6:9A:EF:B6
X509v3 Authority Key Identifier:
keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/aw9onhWyE0X_G2dqIAr21daa77Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.249.197.0-89.249.198.255
212.42.201.0/24
212.42.204.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:38:fa:2b:96:98:b9:4a:43:25:56:18:9f:9a:3a:51:1e:5a:
d5:34:f7:1d:7a:26:aa:7b:3a:01:d9:59:a7:46:87:ab:2a:8b:
0b:73:78:15:07:2e:5c:2e:d5:a2:9d:cd:16:c1:41:20:5e:1b:
59:a7:c6:c0:cb:21:cb:ad:33:67:52:9c:5b:e6:d6:47:90:ae:
c9:53:67:92:c2:18:dc:20:a6:98:f2:f0:41:e4:c5:fc:95:e5:
75:1d:cd:1f:45:8b:4a:8f:fe:a6:b7:ee:14:d9:67:b0:a3:56:
d1:7a:64:79:7b:3b:08:f1:59:16:8a:c2:4d:6d:17:b8:57:22:
fe:4f:c4:95:20:6a:da:58:ca:8e:90:d7:5c:0f:44:e0:b4:92:
5e:c2:38:23:0d:2c:84:3e:ab:0b:6f:2c:f4:8d:9b:93:4f:43:
e5:70:da:ca:b9:f2:3c:04:e8:fe:05:37:d4:06:92:e5:ea:26:
f4:09:2f:d6:74:96:da:d8:03:2e:c9:94:93:ef:33:37:06:ae:
14:8b:68:98:0a:69:17:13:53:93:89:7e:da:3e:33:f2:69:46:
7c:de:25:c0:f6:bd:32:e7:c4:16:4b:52:f3:c9:7b:61:8a:84:
94:e0:2b:c8:98:5b:40:44:af:d1:3f:57:b7:53:8c:96:1b:e8:
f3:74:65:e1
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAZQoJnlawDuStPKUk03B7pkaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkNzIyZTQ1MTNhMzk2NzhkOGFiMjNiMmQ2NDk3NzUzNDA1
MThjYjkwHhcNMjUwMTAyMTc1MzE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YjBmNjg5ZTE1YjIxMzQ1ZmYxYjY3NmEyMDBhZjZkNWQ2OWFlZmI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAks41nhPgiDF0R7tXHyk+p8niT8Yw
3BsyFNoUmNS5I7KjFkJfMoP32ZQx8/ZPFrpPgp7jIlY6lm//KascJS76fa2/u3S8
hM6IpRe2h7ROx1+sxWp9Imhanuqfibblmq8ZSij+w/Gy5VRjjVbhEfGWvROULVLg
978LzdGAMQ3o4ieWzf45GwrnuuYavFMkTTMgcFumS+CQhz4Zz3sdqI7tNlx4OZ5T
d0gBku8C/qhFi5xK0dVFcwEz7y3xPsAbTn91ZXHOHdbUP6poyI8qav5qWqzLEVOE
n+RqXfQ7ZSZioqPtTHzC/KQ5/9eL4bSYWj8LeBFnpagUWLOxJ2RsUx60XQIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFGsPaJ4VshNF/xtnaiAK9tXWmu+2MB8GA1UdIwQY
MBaAFA1yLkUTo5Z42KsjstZJd1NAUYy5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDIt
MzQyNWIxMjVlYWE3LzEvYXc5b25oV3lFMFhfRzJkcUlBcjIxZGFhNzdZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDItMzQyNWIxMjVlYWE3
LzEvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBABZ+cUD
BABZ+cYDBADUKskDBADUKswwDQYJKoZIhvcNAQELBQADggEBAMg4+iuWmLlKQyVW
GJ+aOlEeWtU09x16Jqp7OgHZWadGh6sqiwtzeBUHLlwu1aKdzRbBQSBeG1mnxsDL
IcutM2dSnFvm1keQrslTZ5LCGNwgppjy8EHkxfyV5XUdzR9Fi0qP/qa37hTZZ7Cj
VtF6ZHl7OwjxWRaKwk1tF7hXIv5PxJUgatpYyo6Q11wPROC0kl7COCMNLIQ+qwtv
LPSNm5NPQ+Vw2sq58jwE6P4FN9QGkuXqJvQJL9Z0ltrYAy7JlJPvMzcGrhSLaJgK
aRcTU5OJfto+M/JpRnzeJcD2vTLnxBZLUvPJe2GKhJTgK8iYW0BEr9E/V7dTjJYb
6PN0ZeE=
-----END CERTIFICATE-----
Generated at Wed Feb 5 18:51:31 2025 by rpki-client