Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/eeb0c0-94f5-441a-8dd9-97b89c47d50a/1/21s8U-775BXGrImXYw5behrvCTg.roa
File: 21s8U-775BXGrImXYw5behrvCTg.roa (raw, json)
Hash identifier: dw6lhA0ynQrPKMXAZyoEl/NZ/Jca/wYUb0RkllkJszc=
Subject key identifier: DB:5B:3C:53:EE:FB:E4:15:C6:AC:89:97:63:0E:5B:7A:1A:EF:09:38
Certificate issuer: /CN=2cf1e41ce7c2424f9df88eb98464c9b0826be9c1
Certificate serial: 01941F8C7BC18E063E67641EF86ECB89D0F3
Authority key identifier: 2C:F1:E4:1C:E7:C2:42:4F:9D:F8:8E:B9:84:64:C9:B0:82:6B:E9:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LPHkHOfCQk-d-I65hGTJsIJr6cE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/eeb0c0-94f5-441a-8dd9-97b89c47d50a/1/21s8U-775BXGrImXYw5behrvCTg.roa
Signing time: Wed 01 Jan 2025 01:48:07 +0000
ROA not before: Wed 01 Jan 2025 01:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43719
IP address blocks: 91.198.126.0/24 maxlen: 24
2001:67c:1b1c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/eeb0c0-94f5-441a-8dd9-97b89c47d50a/1/LPHkHOfCQk-d-I65hGTJsIJr6cE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/eeb0c0-94f5-441a-8dd9-97b89c47d50a/1/LPHkHOfCQk-d-I65hGTJsIJr6cE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LPHkHOfCQk-d-I65hGTJsIJr6cE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:7b:c1:8e:06:3e:67:64:1e:f8:6e:cb:89:d0:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cf1e41ce7c2424f9df88eb98464c9b0826be9c1
Validity
Not Before: Jan 1 01:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=db5b3c53eefbe415c6ac8997630e5b7a1aef0938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:1b:0e:07:85:38:36:57:0d:23:92:a5:af:62:
f2:ea:c9:f6:09:12:58:d0:74:42:1b:7c:09:11:ee:
f9:aa:f0:8d:3f:32:40:81:ce:f9:e8:ee:b5:8b:cf:
34:2c:22:d1:5d:88:24:5f:f2:6a:78:28:89:4e:c9:
d1:a5:9a:1d:4b:c6:ea:b0:05:51:7c:13:5f:01:e5:
b1:4a:e1:7f:e9:f4:01:06:57:30:3b:cd:22:2f:b7:
fd:9e:a8:98:e0:8e:2b:9b:30:c3:a5:b7:19:a2:15:
4d:77:c7:a3:46:47:99:f8:4a:bf:76:58:af:fa:f5:
b5:5f:48:e7:c1:40:4d:92:a0:d3:11:0e:cf:6c:78:
2e:49:b7:97:69:88:56:6e:01:db:d0:4a:ad:40:b6:
3b:c2:f8:f2:8d:bd:de:ef:6c:8a:d1:38:18:ce:be:
b3:d3:21:e1:d7:29:e7:4a:43:42:a5:e3:88:0a:67:
c0:06:bf:fd:bd:08:c7:25:1b:c0:fe:b0:7d:16:da:
0f:08:4b:d2:c5:02:ab:88:22:97:6b:2d:69:75:b3:
68:5b:c2:ff:ad:1c:c9:6c:7e:e9:3c:a2:ab:fa:32:
34:4c:2c:b3:17:12:44:49:a7:00:d9:02:5b:e5:c3:
0d:14:00:3c:8e:6c:ce:5e:d3:28:32:43:9a:e4:e3:
47:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:5B:3C:53:EE:FB:E4:15:C6:AC:89:97:63:0E:5B:7A:1A:EF:09:38
X509v3 Authority Key Identifier:
keyid:2C:F1:E4:1C:E7:C2:42:4F:9D:F8:8E:B9:84:64:C9:B0:82:6B:E9:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LPHkHOfCQk-d-I65hGTJsIJr6cE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/eeb0c0-94f5-441a-8dd9-97b89c47d50a/1/21s8U-775BXGrImXYw5behrvCTg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/eeb0c0-94f5-441a-8dd9-97b89c47d50a/1/LPHkHOfCQk-d-I65hGTJsIJr6cE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.126.0/24
IPv6:
2001:67c:1b1c::/48
Signature Algorithm: sha256WithRSAEncryption
53:7a:7e:17:10:e6:79:54:14:e3:bb:4e:42:26:f1:92:4e:78:
a2:c3:87:c0:23:d1:90:44:d2:28:bb:03:58:59:9b:19:6e:ee:
ce:f5:3e:e8:7a:15:b5:c8:3e:7a:02:17:50:a8:13:61:19:7f:
3a:d6:72:63:8a:54:1c:92:4b:a2:5e:b2:ad:6f:1a:44:21:54:
b1:6e:b1:81:ba:8b:50:30:b7:2e:f1:ef:37:20:41:15:6e:56:
61:b6:5e:dd:d8:00:09:74:46:b6:33:9d:7d:91:e6:45:d5:1c:
5d:ef:16:a7:50:09:29:4c:b1:dd:61:d7:af:91:3f:19:8a:58:
99:19:e8:57:0c:b1:ba:59:14:57:62:7c:1e:94:01:f4:98:64:
b8:71:f9:ef:39:31:d7:bb:2a:56:19:2f:40:df:9d:03:1c:45:
7e:cf:91:a0:7f:04:87:2e:0d:78:1a:0a:ce:df:f0:1b:96:40:
6a:9e:8a:74:55:2b:0b:38:08:96:c2:f8:9d:a3:bc:14:c0:7b:
7b:99:3e:78:c7:10:0e:b6:b8:fd:1a:b1:1b:12:bb:8f:b2:8e:
cb:a2:d2:27:ad:5b:27:74:57:b8:7a:a6:0d:be:79:dc:00:5a:
21:c8:fc:b5:47:a3:bc:0b:4a:12:51:10:a0:39:66:37:53:ef:
9b:8c:db:e4
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZQfjHvBjgY+Z2Qe+G7LidDzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjZjFlNDFjZTdjMjQyNGY5ZGY4OGViOTg0NjRjOWIwODI2
YmU5YzEwHhcNMjUwMTAxMDE0ODA3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYjViM2M1M2VlZmJlNDE1YzZhYzg5OTc2MzBlNWI3YTFhZWYwOTM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRsOB4U4NlcNI5Klr2Ly6sn2CRJY
0HRCG3wJEe75qvCNPzJAgc756O61i880LCLRXYgkX/JqeCiJTsnRpZodS8bqsAVR
fBNfAeWxSuF/6fQBBlcwO80iL7f9nqiY4I4rmzDDpbcZohVNd8ejRkeZ+Eq/dliv
+vW1X0jnwUBNkqDTEQ7PbHguSbeXaYhWbgHb0EqtQLY7wvjyjb3e72yK0TgYzr6z
0yHh1ynnSkNCpeOICmfABr/9vQjHJRvA/rB9FtoPCEvSxQKriCKXay1pdbNoW8L/
rRzJbH7pPKKr+jI0TCyzFxJESacA2QJb5cMNFAA8jmzOXtMoMkOa5ONHOQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFNtbPFPu++QVxqyJl2MOW3oa7wk4MB8GA1UdIwQY
MBaAFCzx5BznwkJPnfiOuYRkybCCa+nBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFBIa0hPZkNRay1kLUk2NWhHVEpzSUpyNmNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9lZWIwYzAtOTRmNS00NDFhLThkZDkt
OTdiODljNDdkNTBhLzEvMjFzOFUtNzc1QlhHckltWFl3NWJlaHJ2Q1RnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi9lZWIwYzAtOTRmNS00NDFhLThkZDktOTdiODljNDdkNTBh
LzEvTFBIa0hPZkNRay1kLUk2NWhHVEpzSUpyNmNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAW8Z+MA8E
AgACMAkDBwAgAQZ8GxwwDQYJKoZIhvcNAQELBQADggEBAFN6fhcQ5nlUFOO7TkIm
8ZJOeKLDh8Aj0ZBE0ii7A1hZmxlu7s71Puh6FbXIPnoCF1CoE2EZfzrWcmOKVByS
S6Jesq1vGkQhVLFusYG6i1Awty7x7zcgQRVuVmG2Xt3YAAl0RrYznX2R5kXVHF3v
FqdQCSlMsd1h16+RPxmKWJkZ6FcMsbpZFFdifB6UAfSYZLhx+e85Mde7KlYZL0Df
nQMcRX7PkaB/BIcuDXgaCs7f8BuWQGqeinRVKws4CJbC+J2jvBTAe3uZPnjHEA62
uP0asRsSu4+yjsui0ietWyd0V7h6pg2+edwAWiHI/LVHo7wLShJREKA5ZjdT75uM
2+Q=
-----END CERTIFICATE-----
Generated at Sun Feb 2 07:51:33 2025 by rpki-client