Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/aRKgFuNEew699NwvZOmMVRESxJw.roa
File: aRKgFuNEew699NwvZOmMVRESxJw.roa (raw, json)
Hash identifier: BbnnNcBf5b80ecOVIfxt6czSFR5JGmFsnVDqmj8IYKc=
Subject key identifier: 69:12:A0:16:E3:44:7B:0E:BD:F4:DC:2F:64:E9:8C:55:11:12:C4:9C
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 019580B2E032C23C5F7BDB9E8385CD29A417
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/aRKgFuNEew699NwvZOmMVRESxJw.roa
Signing time: Mon 10 Mar 2025 15:36:01 +0000
ROA not before: Mon 10 Mar 2025 15:36:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 77.90.178.0/24 maxlen: 24
213.209.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:80:b2:e0:32:c2:3c:5f:7b:db:9e:83:85:cd:29:a4:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Mar 10 15:36:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6912a016e3447b0ebdf4dc2f64e98c551112c49c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:29:3f:15:71:c8:93:f8:c1:bc:70:c8:e2:73:
3a:94:63:ec:74:52:68:ab:1e:25:87:97:be:48:38:
63:14:aa:1d:a3:4f:b0:b5:cb:b4:d8:4b:db:f8:7b:
4a:51:e0:01:bc:04:2b:61:15:df:8f:64:a2:27:2b:
c2:58:d6:9d:e6:13:f6:28:d6:13:a0:22:a4:68:5a:
c4:6f:6f:d5:46:5f:ef:80:18:83:f1:8f:04:22:ee:
a6:08:b3:de:72:44:93:ca:23:93:76:75:62:e7:aa:
40:67:26:ad:99:03:87:3e:d7:b0:dc:c3:96:57:2f:
26:10:b7:e3:e5:80:b8:02:7c:a6:68:13:c7:27:c6:
3c:94:35:0c:04:64:59:1d:fc:d1:70:6d:18:00:4d:
e3:9c:d6:7c:85:a4:ed:a1:c2:55:ea:18:32:3f:ef:
51:e2:9f:10:e4:9e:64:45:c9:f9:06:9f:a3:6e:2c:
f7:a1:e9:b3:b5:7c:dc:12:0d:cd:8d:c9:d9:df:26:
fb:7a:87:cc:53:09:a1:09:73:8f:c5:41:47:0c:77:
53:bc:f5:fe:5d:46:6a:fd:fe:fe:f0:64:79:f9:00:
cc:4c:50:53:84:85:94:b1:0f:b8:f8:37:fb:2d:f5:
de:c7:e1:83:56:be:d4:b7:76:5e:37:14:6f:a9:f3:
e0:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:12:A0:16:E3:44:7B:0E:BD:F4:DC:2F:64:E9:8C:55:11:12:C4:9C
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/aRKgFuNEew699NwvZOmMVRESxJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.178.0/24
213.209.130.0/24
Signature Algorithm: sha256WithRSAEncryption
48:1a:9c:c2:dc:f0:c2:b4:cd:13:67:bb:60:99:2e:28:28:67:
cf:ca:ca:a1:67:cf:f7:00:03:e9:0a:ee:7c:a1:60:86:bf:af:
1c:27:5c:5f:ff:e1:21:22:1b:fe:9d:82:b0:20:03:04:46:95:
57:b1:f5:bf:e8:f0:0a:ec:d6:9f:58:ab:89:75:95:35:06:36:
35:69:0e:a2:e4:af:e5:5e:d1:23:ee:1a:43:bf:a5:7f:ac:4b:
cc:50:db:07:2f:11:57:b0:cf:fa:3e:a7:2a:a5:a2:39:0e:c0:
61:3f:b3:6b:a2:a3:af:f3:92:fc:cf:a2:04:43:cb:97:a7:b3:
19:7a:6c:5d:83:1d:9c:67:ee:83:87:47:9c:a6:79:1f:74:8f:
17:b4:40:9d:5c:cc:91:da:35:40:29:0d:f6:88:ba:a9:2d:fb:
f6:02:cd:aa:e6:63:55:be:36:93:c2:29:5d:45:99:87:75:ad:
74:6f:ce:df:3d:c0:f8:8e:8d:56:e2:02:05:39:3d:19:3d:45:
58:98:bd:8f:c9:70:6b:8d:9c:04:fe:4e:7c:50:6c:f5:d8:e1:
12:bd:69:9c:61:68:6e:f1:41:74:41:b2:37:a1:0d:07:1d:9c:
c8:b1:b6:db:00:63:d0:cb:3f:62:9a:88:46:95:cd:35:43:3a:
87:ce:58:91
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZWAsuAywjxfe9ueg4XNKaQXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiNDc2ZTEyZTg5ODdlNWIzMDJjZGMyNGJkZDlkYjNmZTgz
Yzg0NDkwHhcNMjUwMzEwMTUzNjAxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OTEyYTAxNmUzNDQ3YjBlYmRmNGRjMmY2NGU5OGM1NTExMTJjNDljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ik/FXHIk/jBvHDI4nM6lGPsdFJo
qx4lh5e+SDhjFKodo0+wtcu02Evb+HtKUeABvAQrYRXfj2SiJyvCWNad5hP2KNYT
oCKkaFrEb2/VRl/vgBiD8Y8EIu6mCLPeckSTyiOTdnVi56pAZyatmQOHPtew3MOW
Vy8mELfj5YC4AnymaBPHJ8Y8lDUMBGRZHfzRcG0YAE3jnNZ8haTtocJV6hgyP+9R
4p8Q5J5kRcn5Bp+jbiz3oemztXzcEg3NjcnZ3yb7eofMUwmhCXOPxUFHDHdTvPX+
XUZq/f7+8GR5+QDMTFBThIWUsQ+4+Df7LfXex+GDVr7Ut3ZeNxRvqfPgXQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGkSoBbjRHsOvfTcL2TpjFUREsScMB8GA1UdIwQY
MBaAFDtHbhLomH5bMCzcJL3Z2z/oPIRJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMt
NmNiZmYzYzRkYTAxLzEvYVJLZ0Z1TkVldzY5OU53dlpPbU1WUkVTeEp3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMtNmNiZmYzYzRkYTAx
LzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATVqyAwQA
1dGCMA0GCSqGSIb3DQEBCwUAA4IBAQBIGpzC3PDCtM0TZ7tgmS4oKGfPysqhZ8/3
AAPpCu58oWCGv68cJ1xf/+EhIhv+nYKwIAMERpVXsfW/6PAK7NafWKuJdZU1BjY1
aQ6i5K/lXtEj7hpDv6V/rEvMUNsHLxFXsM/6PqcqpaI5DsBhP7NroqOv85L8z6IE
Q8uXp7MZemxdgx2cZ+6Dh0ecpnkfdI8XtECdXMyR2jVAKQ32iLqpLfv2As2q5mNV
vjaTwildRZmHda10b87fPcD4jo1W4gIFOT0ZPUVYmL2PyXBrjZwE/k58UGz12OES
vWmcYWhu8UF0QbI3oQ0HHZzIsbbbAGPQyz9imohGlc01QzqHzliR
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:15:48 2025 by rpki-client