Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/21R7B0PZj4S2nfPcu6UWFcUKPgw.roa
File: 21R7B0PZj4S2nfPcu6UWFcUKPgw.roa (raw, json)
Hash identifier: qB6ZX383pt5nIhJxyHETDpwIazDIAavubmmD8LzTgMY=
Subject key identifier: DB:54:7B:07:43:D9:8F:84:B6:9D:F3:DC:BB:A5:16:15:C5:0A:3E:0C
Certificate issuer: /CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Certificate serial: 01942369BB8C9CF651A395555AD16759CCCE
Authority key identifier: D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/21R7B0PZj4S2nfPcu6UWFcUKPgw.roa
Signing time: Wed 01 Jan 2025 19:48:39 +0000
ROA not before: Wed 01 Jan 2025 19:48:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 81.199.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 06:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:bb:8c:9c:f6:51:a3:95:55:5a:d1:67:59:cc:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Validity
Not Before: Jan 1 19:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=db547b0743d98f84b69df3dcbba51615c50a3e0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:30:48:50:ff:54:88:bf:0f:5d:0c:75:7b:39:
59:6d:ac:9d:61:e4:e5:44:00:0a:82:77:11:53:37:
c3:ef:56:27:ab:ea:b0:aa:da:54:47:43:3a:1d:fe:
1a:56:cc:7d:bf:13:94:3b:c8:7a:b3:f0:59:7f:79:
b7:28:21:30:f3:af:3a:dc:2b:db:4c:c4:46:4e:61:
1b:b3:ab:bd:08:a1:d5:9b:f7:d6:52:c9:d6:ae:d8:
10:01:1d:88:f3:0c:ca:25:09:9b:1b:c4:01:bf:47:
7b:a6:2f:d1:25:d0:d7:33:6c:74:2c:d5:ed:af:73:
52:e2:f3:b6:58:da:bf:9c:ec:68:08:05:60:54:c5:
53:43:a4:dc:38:5d:93:df:10:ec:0e:65:47:a0:d3:
e6:88:83:74:71:2d:53:70:fa:ae:04:33:18:00:b8:
26:b2:b6:24:dc:16:70:cb:90:10:36:3f:84:43:ea:
13:2e:f6:41:23:d5:0a:e1:31:d0:1d:cf:f6:75:78:
c1:c2:61:cb:13:a4:b4:1d:ec:c2:a3:18:26:39:f4:
29:74:3b:cc:05:09:8e:47:9e:0e:78:09:3f:c9:cc:
27:db:3e:7d:d9:d2:60:30:bd:ad:e0:ec:33:93:18:
97:4d:7b:08:7e:fd:23:4e:4d:1f:51:87:40:a9:0b:
6e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:54:7B:07:43:D9:8F:84:B6:9D:F3:DC:BB:A5:16:15:C5:0A:3E:0C
X509v3 Authority Key Identifier:
keyid:D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/21R7B0PZj4S2nfPcu6UWFcUKPgw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.199.28.0/24
Signature Algorithm: sha256WithRSAEncryption
37:5d:09:80:f1:94:d8:94:f6:8b:3c:58:6d:85:4d:1c:f0:71:
60:29:5c:23:ee:8f:43:51:a2:c6:20:47:f7:cb:81:9d:e8:df:
b1:fd:55:b5:3a:f4:34:c2:52:19:91:6d:bb:70:93:04:3e:c3:
e7:a3:64:2a:29:e0:7d:f5:95:65:26:3e:30:81:02:f2:bd:fa:
44:de:62:c9:f0:ef:b6:af:d1:0d:b4:63:b4:b9:6f:77:8d:6e:
67:29:88:4d:12:20:b8:62:65:ce:38:0e:84:2b:0e:45:d8:c6:
ad:90:89:4d:1f:75:44:04:f5:b0:0d:13:4f:5b:bf:6d:48:58:
9e:2b:43:34:cc:31:5f:2c:23:ba:51:dc:49:0b:2e:2f:6e:f8:
f1:5e:a0:fb:0c:62:01:c4:c1:50:21:27:bd:35:23:a1:65:bc:
2c:a1:f2:16:fe:71:ec:0f:d9:4c:a7:cb:97:27:74:17:d8:bc:
2e:6c:bb:3e:f4:5a:17:92:8e:e2:71:d3:14:cc:71:f8:e3:6c:
0f:5b:71:6c:02:75:e8:d9:8d:c4:16:d7:b6:7e:ff:5f:e4:60:
df:82:9c:b9:fe:43:82:d4:d0:50:c2:8f:dd:ee:f5:fd:75:16:
01:a5:4c:41:60:be:49:8c:7d:07:c8:64:f0:6d:bc:f4:b2:e4:
d5:c6:ff:c6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQjabuMnPZRo5VVWtFnWczOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxZGUxMjRlMGY4YWRiNGU3ZDk1NzZjZWFlMzI1ZjY2OGRk
MjI0YjEwHhcNMjUwMTAxMTk0ODM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYjU0N2IwNzQzZDk4Zjg0YjY5ZGYzZGNiYmE1MTYxNWM1MGEzZTBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7DBIUP9UiL8PXQx1ezlZbaydYeTl
RAAKgncRUzfD71Ynq+qwqtpUR0M6Hf4aVsx9vxOUO8h6s/BZf3m3KCEw86863Cvb
TMRGTmEbs6u9CKHVm/fWUsnWrtgQAR2I8wzKJQmbG8QBv0d7pi/RJdDXM2x0LNXt
r3NS4vO2WNq/nOxoCAVgVMVTQ6TcOF2T3xDsDmVHoNPmiIN0cS1TcPquBDMYALgm
srYk3BZwy5AQNj+EQ+oTLvZBI9UK4THQHc/2dXjBwmHLE6S0HezCoxgmOfQpdDvM
BQmOR54OeAk/ycwn2z592dJgML2t4OwzkxiXTXsIfv0jTk0fUYdAqQtuPQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNtUewdD2Y+Etp3z3LulFhXFCj4MMB8GA1UdIwQY
MBaAFNHeEk4PittOfZV2zq4yX2aN0iSxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGQ0U1RnLUsyMDU5bFhiT3JqSmZabzNTSkxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9hYmUxMzQtMDA5My00NjUyLTkwNTct
NGY0YzliMzQzZTkwLzEvMjFSN0IwUFpqNFMybmZQY3U2VVdGY1VLUGd3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS9hYmUxMzQtMDA5My00NjUyLTkwNTctNGY0YzliMzQzZTkw
LzEvMGQ0U1RnLUsyMDU5bFhiT3JqSmZabzNTSkxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUcccMA0G
CSqGSIb3DQEBCwUAA4IBAQA3XQmA8ZTYlPaLPFhthU0c8HFgKVwj7o9DUaLGIEf3
y4Gd6N+x/VW1OvQ0wlIZkW27cJMEPsPno2QqKeB99ZVlJj4wgQLyvfpE3mLJ8O+2
r9ENtGO0uW93jW5nKYhNEiC4YmXOOA6EKw5F2MatkIlNH3VEBPWwDRNPW79tSFie
K0M0zDFfLCO6UdxJCy4vbvjxXqD7DGIBxMFQISe9NSOhZbwsofIW/nHsD9lMp8uX
J3QX2LwubLs+9FoXko7icdMUzHH442wPW3FsAnXo2Y3EFte2fv9f5GDfgpy5/kOC
1NBQwo/d7vX9dRYBpUxBYL5JjH0HyGTwbbz0suTVxv/G
-----END CERTIFICATE-----
Generated at Wed Feb 5 10:48:42 2025 by rpki-client