Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/a50NC_KbZ3PAjC1mndgRcsuXyn8.roa
File: a50NC_KbZ3PAjC1mndgRcsuXyn8.roa (raw, json)
Hash identifier: s97CymR7q1YMF5NI8Qg8aTQzotgVHDsGx5ZdFa/dmDM=
Subject key identifier: 6B:9D:0D:0B:F2:9B:67:73:C0:8C:2D:66:9D:D8:11:72:CB:97:CA:7F
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 019427B551D19694CE1211BF5AF7C949F4FE
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/a50NC_KbZ3PAjC1mndgRcsuXyn8.roa
Signing time: Thu 02 Jan 2025 15:49:41 +0000
ROA not before: Thu 02 Jan 2025 15:49:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25369
IP address blocks: 109.121.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 19:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:51:d1:96:94:ce:12:11:bf:5a:f7:c9:49:f4:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jan 2 15:49:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6b9d0d0bf29b6773c08c2d669dd81172cb97ca7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1e:70:70:f5:6c:e6:bc:87:0e:72:68:3b:b1:
aa:da:4f:40:0b:36:e8:0d:fd:6d:b2:57:ee:2f:6a:
29:17:f7:66:71:d3:95:eb:e8:ee:dd:df:ec:72:b9:
b9:51:d7:aa:6a:ce:d8:8a:a8:40:73:44:03:d6:c1:
9e:c8:1e:78:22:7d:f2:75:7f:97:be:4a:54:71:bc:
66:1b:df:12:61:b5:1f:63:a3:c0:cc:f6:18:16:20:
40:3b:c6:09:e6:c6:0a:81:81:17:f6:a0:a1:81:5d:
e0:cd:08:68:f1:5e:c9:fb:c3:59:32:96:2d:68:b8:
f1:31:82:f2:62:83:01:86:cf:89:bd:7b:55:36:9b:
1d:4f:f8:e1:e4:7f:91:2f:5d:47:a9:22:3e:b6:e2:
4c:80:d9:83:93:71:a5:1e:29:16:75:d2:ac:75:ce:
15:37:12:28:f2:62:9a:72:9a:fd:77:61:33:3d:7f:
f3:5d:b7:2d:ea:5d:3a:5b:31:b0:c4:23:10:e7:20:
c1:bc:83:b8:8e:03:c5:7a:e9:c6:97:12:3e:26:e1:
e1:b9:6e:73:2f:d8:81:c5:8c:1f:68:d0:e3:33:3f:
66:d5:d8:75:4e:3a:ad:89:20:84:1b:05:54:af:e2:
af:04:d7:4c:5d:bd:87:b8:6f:0a:00:1e:78:26:18:
0d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:9D:0D:0B:F2:9B:67:73:C0:8C:2D:66:9D:D8:11:72:CB:97:CA:7F
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/a50NC_KbZ3PAjC1mndgRcsuXyn8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.44.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:11:3a:69:80:a1:a3:ea:30:42:fa:6f:ae:f1:65:ce:a7:90:
b1:9b:72:c1:db:56:c6:2f:55:e0:6b:2f:03:7e:43:b7:56:e9:
0f:b2:1f:e9:c0:39:e5:bd:9d:f6:0f:c5:70:73:ba:ec:87:f5:
7e:e7:23:3a:f3:f4:d8:7c:7d:35:44:16:10:46:27:1f:6b:9c:
30:23:32:45:1e:b7:7b:f2:c5:f9:cc:c4:8e:e4:ba:63:25:04:
ec:16:e9:49:58:8d:0d:bf:24:8a:3f:91:d8:0c:12:bf:c7:20:
4d:5f:09:12:a6:66:30:4f:49:5e:3e:6e:2b:5a:66:ca:7a:a3:
a3:4d:f2:d6:c9:0b:28:71:78:3e:c0:f8:00:64:e7:9f:e9:b4:
6e:b2:42:52:e9:96:6b:53:1e:fb:6f:30:0f:b1:4b:2f:08:58:
00:4b:99:69:52:bb:b3:99:3b:b0:65:7d:51:7a:41:ee:c7:aa:
a1:3a:3b:f8:b9:b2:2c:2b:c8:4a:a3:9d:c5:db:5d:de:fc:70:
05:de:e2:cc:8e:8e:a7:26:8c:cc:b1:82:bc:6b:31:e3:87:55:
e8:16:d8:fa:3a:74:f3:dd:b2:de:5f:58:b9:4b:47:49:42:4c:
2f:6e:f8:2a:32:2f:d8:ca:39:1b:08:63:f1:33:f0:f7:0b:ea:
1e:79:a6:c5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQntVHRlpTOEhG/WvfJSfT+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj
N2U5MTUwHhcNMjUwMTAyMTU0OTQxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YjlkMGQwYmYyOWI2NzczYzA4YzJkNjY5ZGQ4MTE3MmNiOTdjYTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwh5wcPVs5ryHDnJoO7Gq2k9ACzbo
Df1tslfuL2opF/dmcdOV6+ju3d/scrm5Udeqas7YiqhAc0QD1sGeyB54In3ydX+X
vkpUcbxmG98SYbUfY6PAzPYYFiBAO8YJ5sYKgYEX9qChgV3gzQho8V7J+8NZMpYt
aLjxMYLyYoMBhs+JvXtVNpsdT/jh5H+RL11HqSI+tuJMgNmDk3GlHikWddKsdc4V
NxIo8mKacpr9d2EzPX/zXbct6l06WzGwxCMQ5yDBvIO4jgPFeunGlxI+JuHhuW5z
L9iBxYwfaNDjMz9m1dh1TjqtiSCEGwVUr+KvBNdMXb2HuG8KAB54JhgNbQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGudDQvym2dzwIwtZp3YEXLLl8p/MB8GA1UdIwQY
MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt
ZmFlNWRiZWQzYjFiLzEvYTUwTkNfS2JaM1BBakMxbW5kZ1Jjc3VYeW44LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi
LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXksMA0G
CSqGSIb3DQEBCwUAA4IBAQAaETppgKGj6jBC+m+u8WXOp5Cxm3LB21bGL1Xgay8D
fkO3VukPsh/pwDnlvZ32D8Vwc7rsh/V+5yM68/TYfH01RBYQRicfa5wwIzJFHrd7
8sX5zMSO5LpjJQTsFulJWI0NvySKP5HYDBK/xyBNXwkSpmYwT0lePm4rWmbKeqOj
TfLWyQsocXg+wPgAZOef6bRuskJS6ZZrUx77bzAPsUsvCFgAS5lpUruzmTuwZX1R
ekHux6qhOjv4ubIsK8hKo53F213e/HAF3uLMjo6nJozMsYK8azHjh1XoFtj6OnTz
3bLeX1i5S0dJQkwvbvgqMi/YyjkbCGPxM/D3C+oeeabF
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:09:59 2025 by rpki-client