Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/VFLtaw7ddcrkuS71SLZjd28hT9Y.roa
File: VFLtaw7ddcrkuS71SLZjd28hT9Y.roa (raw, json)
Hash identifier: wkImuoriz8/Wt+wr39TPtXLgxrVgYHqbWY2XyO00qX4=
Subject key identifier: 54:52:ED:6B:0E:DD:75:CA:E4:B9:2E:F5:48:B6:63:77:6F:21:4F:D6
Certificate issuer: /CN=dfee2bf43f21a81c492c6e6a9fc6f074d2f0a217
Certificate serial: 0194274785A67DBB4673DC51666AAE3B3DD9
Authority key identifier: DF:EE:2B:F4:3F:21:A8:1C:49:2C:6E:6A:9F:C6:F0:74:D2:F0:A2:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3-4r9D8hqBxJLG5qn8bwdNLwohc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/VFLtaw7ddcrkuS71SLZjd28hT9Y.roa
Signing time: Thu 02 Jan 2025 13:49:46 +0000
ROA not before: Thu 02 Jan 2025 13:49:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41480
IP address blocks: 89.20.64.0/19 maxlen: 19
89.20.64.0/20 maxlen: 20
89.20.80.0/20 maxlen: 20
212.124.64.0/19 maxlen: 19
212.124.64.0/20 maxlen: 20
212.124.64.0/22 maxlen: 22
212.124.80.0/20 maxlen: 20
2a02:2170::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3-4r9D8hqBxJLG5qn8bwdNLwohc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 13:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:85:a6:7d:bb:46:73:dc:51:66:6a:ae:3b:3d:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfee2bf43f21a81c492c6e6a9fc6f074d2f0a217
Validity
Not Before: Jan 2 13:49:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5452ed6b0edd75cae4b92ef548b663776f214fd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4c:b5:43:4b:02:df:db:16:33:3a:a1:c4:13:
2e:43:f6:22:12:60:ad:e4:bb:be:5c:44:5c:cb:ee:
1b:62:d3:7c:cc:40:cd:2a:ae:69:52:78:98:13:59:
bf:76:87:a9:1f:73:59:15:bc:33:24:81:28:b4:c1:
c1:db:aa:8b:df:7b:e6:9c:05:8f:fc:70:54:fd:18:
1a:57:69:0e:5d:e2:53:24:18:88:b6:af:68:f2:ea:
4b:f7:f3:0a:72:30:18:eb:a2:95:ef:14:59:d7:7e:
b0:98:c1:31:e8:3a:02:8f:41:b0:50:24:8e:47:c1:
3f:39:10:23:a5:31:35:69:60:ad:d6:6a:83:0e:71:
b3:73:71:e5:d7:9a:17:23:9a:31:01:84:7e:de:76:
8d:9e:b4:1a:5a:13:62:f5:09:df:d8:5d:b7:ce:32:
58:60:61:cc:a3:1c:8e:b5:2c:02:f1:ae:5e:94:75:
c6:ce:ac:f3:0a:d9:57:2a:24:31:8f:0e:0a:57:2d:
ba:d5:01:c6:d7:e3:52:a3:69:c1:8c:df:e1:18:5c:
54:be:5d:ae:eb:ba:ae:e4:36:43:05:11:fc:5e:a7:
79:f2:cb:6d:dd:e6:fa:a8:66:4f:42:44:62:dd:6e:
e6:fe:53:4b:48:89:31:48:76:77:c4:45:74:3a:19:
d8:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:52:ED:6B:0E:DD:75:CA:E4:B9:2E:F5:48:B6:63:77:6F:21:4F:D6
X509v3 Authority Key Identifier:
keyid:DF:EE:2B:F4:3F:21:A8:1C:49:2C:6E:6A:9F:C6:F0:74:D2:F0:A2:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-4r9D8hqBxJLG5qn8bwdNLwohc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/VFLtaw7ddcrkuS71SLZjd28hT9Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.20.64.0/19
212.124.64.0/19
IPv6:
2a02:2170::/32
Signature Algorithm: sha256WithRSAEncryption
71:fc:31:09:be:5a:7e:42:c8:14:c8:15:c7:43:fd:7b:5d:25:
93:9e:1c:ed:5b:8f:c9:2e:4c:b5:60:55:38:f6:5c:0c:e1:ed:
36:9e:97:ea:7f:f7:fb:04:16:31:9f:5e:c8:39:3f:48:e6:42:
6e:08:23:3c:d3:14:61:ef:84:b9:4d:f5:69:60:fd:fb:c4:88:
5a:52:e9:39:ac:33:ca:3e:b3:7b:72:a3:27:64:fb:0c:8e:0d:
fa:62:6e:18:cb:06:bf:7d:23:d0:29:cd:37:30:e6:9a:92:fd:
85:ff:cf:b6:9c:32:e9:71:89:c3:44:84:27:f2:09:3f:36:d6:
07:9e:63:f2:b4:80:aa:06:90:3f:a5:2b:e9:a8:25:05:7e:21:
92:90:8a:76:72:00:f5:48:75:dd:4c:c1:09:e0:a6:e6:92:3f:
ec:d9:79:f9:25:d9:7a:de:d3:d7:7f:a1:e6:46:71:41:26:05:
99:29:35:75:b6:57:c3:7a:9b:4e:8d:09:69:36:a2:b3:60:4d:
c0:3f:65:dd:39:e9:d4:76:0b:6e:32:ec:73:14:6d:7f:0b:da:
d2:c4:3f:1c:4f:07:7c:82:b5:a2:0c:46:20:af:7c:c2:50:57:
cc:ed:19:07:00:e1:68:32:3d:a8:bd:bb:48:36:1f:13:45:fd:
a3:82:80:28
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZQnR4WmfbtGc9xRZmquOz3ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmZWUyYmY0M2YyMWE4MWM0OTJjNmU2YTlmYzZmMDc0ZDJm
MGEyMTcwHhcNMjUwMTAyMTM0OTQ2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NDUyZWQ2YjBlZGQ3NWNhZTRiOTJlZjU0OGI2NjM3NzZmMjE0ZmQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApky1Q0sC39sWMzqhxBMuQ/YiEmCt
5Lu+XERcy+4bYtN8zEDNKq5pUniYE1m/doepH3NZFbwzJIEotMHB26qL33vmnAWP
/HBU/RgaV2kOXeJTJBiItq9o8upL9/MKcjAY66KV7xRZ136wmMEx6DoCj0GwUCSO
R8E/ORAjpTE1aWCt1mqDDnGzc3Hl15oXI5oxAYR+3naNnrQaWhNi9Qnf2F23zjJY
YGHMoxyOtSwC8a5elHXGzqzzCtlXKiQxjw4KVy261QHG1+NSo2nBjN/hGFxUvl2u
67qu5DZDBRH8Xqd58stt3eb6qGZPQkRi3W7m/lNLSIkxSHZ3xEV0OhnYWwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFFRS7WsO3XXK5Lku9Ui2Y3dvIU/WMB8GA1UdIwQY
MBaAFN/uK/Q/IagcSSxuap/G8HTS8KIXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMy00cjlEOGhxQnhKTEc1cW44YndkTkx3b2hjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8zYjNiZTAtNTRhNy00MTBmLTlkMTIt
MjhkNzhlYjlmMmRjLzEvVkZMdGF3N2RkY3JrdVM3MVNMWmpkMjhoVDlZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC8zYjNiZTAtNTRhNy00MTBmLTlkMTItMjhkNzhlYjlmMmRj
LzEvMy00cjlEOGhxQnhKTEc1cW44YndkTkx3b2hjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQFWRRAAwQF
1HxAMA0EAgACMAcDBQAqAiFwMA0GCSqGSIb3DQEBCwUAA4IBAQBx/DEJvlp+QsgU
yBXHQ/17XSWTnhztW4/JLky1YFU49lwM4e02npfqf/f7BBYxn17IOT9I5kJuCCM8
0xRh74S5TfVpYP37xIhaUuk5rDPKPrN7cqMnZPsMjg36Ym4Yywa/fSPQKc03MOaa
kv2F/8+2nDLpcYnDRIQn8gk/NtYHnmPytICqBpA/pSvpqCUFfiGSkIp2cgD1SHXd
TMEJ4Kbmkj/s2Xn5Jdl63tPXf6HmRnFBJgWZKTV1tlfDeptOjQlpNqKzYE3AP2Xd
OenUdgtuMuxzFG1/C9rSxD8cTwd8grWiDEYgr3zCUFfM7RkHAOFoMj2ovbtINh8T
Rf2jgoAo
-----END CERTIFICATE-----
Generated at Fri Apr 18 00:00:46 2025 by rpki-client