Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/6a99dc-9555-46cd-ab2d-14655c03c033/1/Ur1p6KL9NTfFRBrJ7C7-zJCCRXo.roa
File: Ur1p6KL9NTfFRBrJ7C7-zJCCRXo.roa (raw, json)
Hash identifier: lsHocd823a47v2/eGKZz1waiHC7kKATLJJz6RHG9Ic0=
Subject key identifier: 52:BD:69:E8:A2:FD:35:37:C5:44:1A:C9:EC:2E:FE:CC:90:82:45:7A
Certificate issuer: /CN=70214e7eacb1d24e211e2f25fee4ad757e6c965d
Certificate serial: 019425FDD1A34863B7394F17289D494F957A
Authority key identifier: 70:21:4E:7E:AC:B1:D2:4E:21:1E:2F:25:FE:E4:AD:75:7E:6C:96:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cCFOfqyx0k4hHi8l_uStdX5sll0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/6a99dc-9555-46cd-ab2d-14655c03c033/1/Ur1p6KL9NTfFRBrJ7C7-zJCCRXo.roa
Signing time: Thu 02 Jan 2025 07:49:38 +0000
ROA not before: Thu 02 Jan 2025 07:49:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209599
IP address blocks: 213.139.248.0/24 maxlen: 24
213.139.249.0/24 maxlen: 24
213.139.250.0/24 maxlen: 24
213.139.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/6a99dc-9555-46cd-ab2d-14655c03c033/1/cCFOfqyx0k4hHi8l_uStdX5sll0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/6a99dc-9555-46cd-ab2d-14655c03c033/1/cCFOfqyx0k4hHi8l_uStdX5sll0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cCFOfqyx0k4hHi8l_uStdX5sll0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:d1:a3:48:63:b7:39:4f:17:28:9d:49:4f:95:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70214e7eacb1d24e211e2f25fee4ad757e6c965d
Validity
Not Before: Jan 2 07:49:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=52bd69e8a2fd3537c5441ac9ec2efecc9082457a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f6:02:0d:a2:70:16:ee:be:60:83:ef:49:77:
74:b0:de:73:dc:be:b7:93:4a:2d:b4:36:cf:53:3c:
76:77:54:4e:92:0f:a3:2c:29:ef:59:e2:14:0c:5a:
6d:72:3d:2c:e6:b6:9e:25:bc:74:5e:ba:23:ab:5d:
14:77:5a:66:8c:97:9d:11:87:fc:88:0d:ab:e9:cd:
a0:db:5e:5a:db:2f:8e:c5:49:80:32:c8:a3:12:8e:
91:ab:b3:c0:a5:c5:3f:9f:23:99:0f:0f:0b:e3:09:
49:b5:4d:96:7b:f4:59:1f:4b:61:18:4d:43:0e:28:
91:66:25:d6:e3:4b:5f:4e:e4:9d:bb:9c:a9:01:a6:
47:73:12:e2:e6:0c:4d:db:d4:9e:31:33:82:07:97:
fc:5b:5a:1a:b5:8e:ab:f0:51:0f:40:a4:99:bf:40:
a8:78:bc:ca:fe:d5:50:2e:69:03:49:84:49:d3:7b:
aa:d1:0f:8d:fd:2c:ff:52:15:a7:35:c9:2e:c2:ba:
8c:fd:0c:9f:c1:96:9a:4b:5a:82:91:3c:3b:fe:8d:
c0:26:d8:2b:c7:b0:c8:56:9e:cc:50:f1:46:79:b1:
77:fa:c8:d5:a9:2b:b0:3c:b9:cc:48:65:c9:50:9f:
ae:56:2e:fd:a6:21:08:9a:d1:83:79:36:9e:a7:e2:
b2:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:BD:69:E8:A2:FD:35:37:C5:44:1A:C9:EC:2E:FE:CC:90:82:45:7A
X509v3 Authority Key Identifier:
keyid:70:21:4E:7E:AC:B1:D2:4E:21:1E:2F:25:FE:E4:AD:75:7E:6C:96:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cCFOfqyx0k4hHi8l_uStdX5sll0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/6a99dc-9555-46cd-ab2d-14655c03c033/1/Ur1p6KL9NTfFRBrJ7C7-zJCCRXo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/6a99dc-9555-46cd-ab2d-14655c03c033/1/cCFOfqyx0k4hHi8l_uStdX5sll0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.248.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:34:b9:85:a0:3e:d9:ee:40:a6:88:6e:37:fb:89:57:f9:96:
79:61:fb:ba:c3:6b:3f:15:08:61:e7:2e:bc:b4:00:1f:66:ab:
d6:08:be:9c:1b:2e:06:e8:8f:9d:a3:e4:71:7a:3a:7e:ee:38:
71:d6:3c:6f:01:e0:5b:0a:41:8f:bf:c3:4d:f8:4e:4d:70:2f:
f5:d6:ac:ef:30:d4:e7:3f:26:05:5c:06:0d:45:47:99:08:90:
5b:22:17:5c:b8:e5:c1:ab:5a:f3:46:61:d4:1c:2e:20:41:3f:
1e:85:85:8e:af:d1:df:87:d0:9d:83:f4:29:85:3d:c3:03:76:
47:f3:3a:02:ab:d1:6a:11:08:29:00:57:09:96:00:37:0b:4a:
f0:f4:da:15:fe:5e:a0:fa:7e:94:c2:64:18:59:8f:80:6f:11:
5e:7d:57:05:d6:db:81:25:12:4c:8d:70:cf:57:64:36:57:3f:
f4:8b:7e:7c:a0:75:51:11:13:7d:10:4c:7d:ad:12:6d:b4:b7:
02:a4:ad:61:72:2f:70:35:c6:44:e1:37:71:67:8d:02:52:63:
0c:4f:7a:17:02:38:f5:d3:bb:0d:59:f9:69:d9:03:b7:bc:4c:
e7:73:90:25:a6:59:b9:a5:e2:c0:9a:42:cd:c3:ed:4b:16:c7:
4f:56:a9:14
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQl/dGjSGO3OU8XKJ1JT5V6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwMjE0ZTdlYWNiMWQyNGUyMTFlMmYyNWZlZTRhZDc1N2U2
Yzk2NWQwHhcNMjUwMTAyMDc0OTM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MmJkNjllOGEyZmQzNTM3YzU0NDFhYzllYzJlZmVjYzkwODI0NTdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPYCDaJwFu6+YIPvSXd0sN5z3L63
k0ottDbPUzx2d1ROkg+jLCnvWeIUDFptcj0s5raeJbx0Xrojq10Ud1pmjJedEYf8
iA2r6c2g215a2y+OxUmAMsijEo6Rq7PApcU/nyOZDw8L4wlJtU2We/RZH0thGE1D
DiiRZiXW40tfTuSdu5ypAaZHcxLi5gxN29SeMTOCB5f8W1oatY6r8FEPQKSZv0Co
eLzK/tVQLmkDSYRJ03uq0Q+N/Sz/UhWnNckuwrqM/QyfwZaaS1qCkTw7/o3AJtgr
x7DIVp7MUPFGebF3+sjVqSuwPLnMSGXJUJ+uVi79piEImtGDeTaep+KyiQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFK9aeii/TU3xUQayewu/syQgkV6MB8GA1UdIwQY
MBaAFHAhTn6ssdJOIR4vJf7krXV+bJZdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0NGT2ZxeXgwazRoSGk4bF91U3RkWDVzbGwwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC82YTk5ZGMtOTU1NS00NmNkLWFiMmQt
MTQ2NTVjMDNjMDMzLzEvVXIxcDZLTDlOVGZGUkJySjdDNy16SkNDUlhvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC82YTk5ZGMtOTU1NS00NmNkLWFiMmQtMTQ2NTVjMDNjMDMz
LzEvY0NGT2ZxeXgwazRoSGk4bF91U3RkWDVzbGwwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC1Yv4MA0G
CSqGSIb3DQEBCwUAA4IBAQB9NLmFoD7Z7kCmiG43+4lX+ZZ5Yfu6w2s/FQhh5y68
tAAfZqvWCL6cGy4G6I+do+Rxejp+7jhx1jxvAeBbCkGPv8NN+E5NcC/11qzvMNTn
PyYFXAYNRUeZCJBbIhdcuOXBq1rzRmHUHC4gQT8ehYWOr9Hfh9Cdg/QphT3DA3ZH
8zoCq9FqEQgpAFcJlgA3C0rw9NoV/l6g+n6UwmQYWY+AbxFefVcF1tuBJRJMjXDP
V2Q2Vz/0i358oHVRERN9EEx9rRJttLcCpK1hci9wNcZE4TdxZ40CUmMMT3oXAjj1
07sNWflp2QO3vEznc5Alplm5peLAmkLNw+1LFsdPVqkU
-----END CERTIFICATE-----
Generated at Sun Feb 2 10:05:12 2025 by rpki-client