Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/8vJ7ABj3xVyEwXenD9W0ncMrU1A.roa
File: 8vJ7ABj3xVyEwXenD9W0ncMrU1A.roa (raw, json)
Hash identifier: 5gnWjjNTmQRrWBLMz2vS6KZph20DEPN6rQfmfIVo1TE=
Subject key identifier: F2:F2:7B:00:18:F7:C5:5C:84:C1:77:A7:0F:D5:B4:9D:C3:2B:53:50
Certificate issuer: /CN=9d9a0c84b30720f4d4ce4bdba01dd0544d028ecd
Certificate serial: 0194221F75B49CE8D3E81F2D0313CBCB5D43
Authority key identifier: 9D:9A:0C:84:B3:07:20:F4:D4:CE:4B:DB:A0:1D:D0:54:4D:02:8E:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nZoMhLMHIPTUzkvboB3QVE0Cjs0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/8vJ7ABj3xVyEwXenD9W0ncMrU1A.roa
Signing time: Wed 01 Jan 2025 13:47:54 +0000
ROA not before: Wed 01 Jan 2025 13:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205676
IP address blocks: 185.207.32.0/24 maxlen: 24
2a0b:1d40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nZoMhLMHIPTUzkvboB3QVE0Cjs0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:75:b4:9c:e8:d3:e8:1f:2d:03:13:cb:cb:5d:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d9a0c84b30720f4d4ce4bdba01dd0544d028ecd
Validity
Not Before: Jan 1 13:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f2f27b0018f7c55c84c177a70fd5b49dc32b5350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e3:36:41:c4:da:f0:45:07:ea:14:e6:e8:d0:
50:f6:2d:54:ca:5c:80:a9:8c:e8:83:90:ad:7f:87:
00:ce:5d:fe:aa:c3:dc:2d:4d:bd:99:4b:94:49:1c:
c6:d2:06:7d:94:f5:ad:c6:a9:10:71:a0:10:e6:96:
2e:75:7d:09:a0:da:73:df:28:42:98:48:b8:f8:96:
b4:6a:be:07:58:00:19:b9:b6:90:c0:9d:7a:9d:3f:
f6:85:44:11:5f:c2:1d:c4:aa:d9:02:ef:b7:43:6f:
e0:38:49:91:4c:c3:9a:14:2e:e5:22:cf:1c:34:9f:
68:56:31:7d:ba:f0:31:95:db:1b:56:a4:33:1d:3a:
64:58:d5:f1:d6:c0:0f:ba:57:f6:82:3d:f9:3d:52:
4e:aa:d7:f3:78:8d:bf:ca:23:fa:2d:cf:9a:a4:64:
5a:d8:75:8f:04:6b:44:e0:b5:df:d4:f5:f1:fb:d7:
b1:21:6f:8f:a1:2a:ae:07:cd:71:ff:20:7e:0d:9a:
52:41:d5:1f:fe:0e:39:56:81:c0:3f:20:99:dd:37:
3d:f4:6b:87:d0:0d:c8:36:6b:a3:b0:75:f1:a4:35:
a2:97:9f:43:63:bf:17:99:8d:d6:de:b2:57:2c:1d:
2b:7f:56:dd:e6:51:73:fd:ec:45:12:fa:58:f3:66:
87:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:F2:7B:00:18:F7:C5:5C:84:C1:77:A7:0F:D5:B4:9D:C3:2B:53:50
X509v3 Authority Key Identifier:
keyid:9D:9A:0C:84:B3:07:20:F4:D4:CE:4B:DB:A0:1D:D0:54:4D:02:8E:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nZoMhLMHIPTUzkvboB3QVE0Cjs0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/8vJ7ABj3xVyEwXenD9W0ncMrU1A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.207.32.0/24
IPv6:
2a0b:1d40::/32
Signature Algorithm: sha256WithRSAEncryption
48:0a:7a:5b:1f:a1:4c:25:7d:98:67:79:ad:f3:30:ca:02:d3:
43:42:23:a4:12:89:ce:b9:42:ee:b0:a3:d3:be:e2:87:1c:ae:
89:80:17:f1:fb:c6:30:8c:80:d1:d9:26:cf:42:0f:e7:0b:fa:
be:5b:6b:56:c5:15:8b:da:37:a2:bf:f2:11:09:85:16:e6:0d:
08:d1:85:6e:b6:46:93:f6:2e:24:9b:ca:b0:43:77:a0:de:b3:
f4:83:fc:3e:c3:17:5f:43:5d:de:ee:82:33:d9:19:0f:23:8c:
bf:a1:39:62:30:af:5a:35:cf:5d:c3:85:20:19:31:12:a9:6c:
28:2f:b9:43:3f:70:fc:e8:65:b9:06:45:bb:1b:01:a5:24:e6:
5b:3a:b7:96:ef:64:6b:10:b2:dc:87:0b:6f:b0:3e:ed:bc:99:
14:29:86:0b:5c:ca:94:c4:23:e2:fd:dd:17:54:58:29:6d:75:
c2:86:28:6a:2c:b6:e3:8a:29:67:6c:47:36:6f:bc:97:6d:88:
4e:c9:59:da:06:c8:75:72:33:b4:30:11:a7:7f:9c:22:9b:a7:
a0:a6:7c:20:9e:50:2e:10:80:79:11:19:0e:d5:03:d3:b5:cf:
1c:5f:41:f4:ac:58:2e:34:cd:22:67:3e:98:67:9f:71:fd:05:
b5:13:1c:ad
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQiH3W0nOjT6B8tAxPLy11DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkOWEwYzg0YjMwNzIwZjRkNGNlNGJkYmEwMWRkMDU0NGQw
MjhlY2QwHhcNMjUwMTAxMTM0NzU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMmYyN2IwMDE4ZjdjNTVjODRjMTc3YTcwZmQ1YjQ5ZGMzMmI1MzUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAreM2QcTa8EUH6hTm6NBQ9i1UylyA
qYzog5Ctf4cAzl3+qsPcLU29mUuUSRzG0gZ9lPWtxqkQcaAQ5pYudX0JoNpz3yhC
mEi4+Ja0ar4HWAAZubaQwJ16nT/2hUQRX8IdxKrZAu+3Q2/gOEmRTMOaFC7lIs8c
NJ9oVjF9uvAxldsbVqQzHTpkWNXx1sAPulf2gj35PVJOqtfzeI2/yiP6Lc+apGRa
2HWPBGtE4LXf1PXx+9exIW+PoSquB81x/yB+DZpSQdUf/g45VoHAPyCZ3Tc99GuH
0A3INmujsHXxpDWil59DY78XmY3W3rJXLB0rf1bd5lFz/exFEvpY82aHQQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFPLyewAY98VchMF3pw/VtJ3DK1NQMB8GA1UdIwQY
MBaAFJ2aDISzByD01M5L26Ad0FRNAo7NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblpvTWhMTUhJUFRVemt2Ym9CM1FWRTBDanMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8xZThkNGQtNTNiZi00YWNiLWJjMGMt
NTJjYWQ2Njc1ZmM2LzEvOHZKN0FCajN4VnlFd1hlbkQ5VzBuY01yVTFBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS8xZThkNGQtNTNiZi00YWNiLWJjMGMtNTJjYWQ2Njc1ZmM2
LzEvblpvTWhMTUhJUFRVemt2Ym9CM1FWRTBDanMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuc8gMA0E
AgACMAcDBQAqCx1AMA0GCSqGSIb3DQEBCwUAA4IBAQBICnpbH6FMJX2YZ3mt8zDK
AtNDQiOkEonOuULusKPTvuKHHK6JgBfx+8YwjIDR2SbPQg/nC/q+W2tWxRWL2jei
v/IRCYUW5g0I0YVutkaT9i4km8qwQ3eg3rP0g/w+wxdfQ13e7oIz2RkPI4y/oTli
MK9aNc9dw4UgGTESqWwoL7lDP3D86GW5BkW7GwGlJOZbOreW72RrELLchwtvsD7t
vJkUKYYLXMqUxCPi/d0XVFgpbXXChihqLLbjiilnbEc2b7yXbYhOyVnaBsh1cjO0
MBGnf5wim6egpnwgnlAuEIB5ERkO1QPTtc8cX0H0rFguNM0iZz6YZ59x/QW1Exyt
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:37:46 2025 by rpki-client