Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/RrbTdF6fRUGHl3RbUer2JdR3V6Q.roa
File: RrbTdF6fRUGHl3RbUer2JdR3V6Q.roa (raw, json)
Hash identifier: NjhRh9Ynh+xjxteJ6n1t1coSm8Ha5SNUei3SRsgIj9Y=
Subject key identifier: 46:B6:D3:74:5E:9F:45:41:87:97:74:5B:51:EA:F6:25:D4:77:57:A4
Certificate issuer: /CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c
Certificate serial: 0194258F7FF9CE2AFC4B7A5022C0A26A8D81
Authority key identifier: 20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/RrbTdF6fRUGHl3RbUer2JdR3V6Q.roa
Signing time: Thu 02 Jan 2025 05:49:08 +0000
ROA not before: Thu 02 Jan 2025 05:49:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29028
IP address blocks: 82.150.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:7f:f9:ce:2a:fc:4b:7a:50:22:c0:a2:6a:8d:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c
Validity
Not Before: Jan 2 05:49:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=46b6d3745e9f45418797745b51eaf625d47757a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:69:4d:21:48:26:cb:62:af:c9:c7:00:47:8c:
6d:1e:d5:80:be:c9:ed:f2:cc:ed:0e:f5:d9:a1:92:
b0:3a:91:a4:03:28:65:3e:bf:01:8d:66:cb:e7:60:
a3:4b:29:7a:3e:8a:d6:12:24:ed:5b:97:16:ef:4e:
eb:1b:0d:6f:ab:ab:2f:53:81:b5:fe:41:67:b9:68:
ed:a2:f7:4c:fd:27:eb:62:8d:68:44:86:27:df:20:
3f:47:8b:1d:c7:4c:df:d8:dc:d6:52:df:dd:73:a9:
73:fd:87:b0:80:9e:13:5f:99:01:e1:e1:a5:d6:ac:
68:00:9d:f7:82:02:ad:79:43:d5:2a:2a:28:da:2e:
84:ac:7e:ea:90:3c:83:cd:4b:86:1c:17:5f:6e:69:
f6:85:b1:94:2f:4f:73:0a:9b:13:3c:d8:21:48:17:
5f:90:f7:4f:79:bc:76:64:71:95:6f:59:31:ad:9c:
55:4e:72:a8:00:bc:50:d6:8a:d0:77:b7:25:d0:54:
6f:fd:f3:75:8b:8c:92:24:46:e9:d4:c1:11:00:4a:
b7:61:40:3b:0f:fb:2e:1a:3e:79:13:6a:21:4d:8c:
52:68:f5:39:bf:7f:78:30:1c:70:a3:fb:70:59:67:
02:c3:a5:33:97:97:77:c8:83:da:e6:2a:1e:60:84:
51:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:B6:D3:74:5E:9F:45:41:87:97:74:5B:51:EA:F6:25:D4:77:57:A4
X509v3 Authority Key Identifier:
keyid:20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/RrbTdF6fRUGHl3RbUer2JdR3V6Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.150.138.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:c2:a7:13:cc:fa:80:e3:46:13:44:2d:99:98:56:88:38:23:
fc:a2:94:73:c6:64:7c:4f:7e:c6:67:ff:cd:0f:02:8f:e2:c9:
53:21:01:54:78:64:ad:10:aa:61:37:9f:ec:51:38:02:1f:bf:
4d:f9:9e:16:4b:a2:5a:ad:9a:47:01:c9:2b:3e:aa:2c:28:c7:
5c:e8:c7:ab:45:99:2d:d7:d9:9c:c4:26:c9:69:f9:5e:f9:45:
80:d2:c5:11:af:7a:46:06:25:64:80:6b:eb:2e:1c:d9:d6:e4:
d5:60:c2:04:b3:6e:0a:09:84:7f:8d:a6:9b:b8:8b:b9:76:69:
10:0f:fc:3d:82:e7:6f:13:b4:b3:3a:10:76:99:aa:32:19:8c:
37:b3:47:25:db:e6:ee:60:47:2b:00:af:c6:d6:ae:00:6c:5f:
f8:b0:8b:a5:6f:97:4b:24:f8:da:44:a3:a8:87:37:8c:d7:ec:
84:4d:39:ab:dc:75:f1:71:83:42:9a:5f:57:5c:f2:e6:eb:a6:
66:a1:93:ac:f9:82:0f:dc:65:cd:b0:97:14:48:41:fa:8d:5a:
b4:f4:4c:a5:4a:9b:0a:53:f8:13:17:bd:7b:02:25:31:c5:d1:
3d:18:0f:e5:62:93:72:6c:7d:6c:6a:cc:78:d6:31:42:5e:cd:
76:ab:93:8d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlj3/5zir8S3pQIsCiao2BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwMWZlMzBmYzZiNGIwZDBmNmRiNGUxYmZiYmQ1MDE5NWRj
YTU3NWMwHhcNMjUwMTAyMDU0OTA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NmI2ZDM3NDVlOWY0NTQxODc5Nzc0NWI1MWVhZjYyNWQ0Nzc1N2E0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2lNIUgmy2KvyccAR4xtHtWAvsnt
8sztDvXZoZKwOpGkAyhlPr8BjWbL52CjSyl6PorWEiTtW5cW707rGw1vq6svU4G1
/kFnuWjtovdM/SfrYo1oRIYn3yA/R4sdx0zf2NzWUt/dc6lz/YewgJ4TX5kB4eGl
1qxoAJ33ggKteUPVKioo2i6ErH7qkDyDzUuGHBdfbmn2hbGUL09zCpsTPNghSBdf
kPdPebx2ZHGVb1kxrZxVTnKoALxQ1orQd7cl0FRv/fN1i4ySJEbp1MERAEq3YUA7
D/suGj55E2ohTYxSaPU5v394MBxwo/twWWcCw6Uzl5d3yIPa5ioeYIRRiQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEa203Ren0VBh5d0W1Hq9iXUd1ekMB8GA1UdIwQY
MBaAFCAf4w/GtLDQ9ttOG/u9UBldyldcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUJfakQ4YTBzTkQyMjA0Yi03MVFHVjNLVjF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My84ZDgwZjktNDk0ZS00YWJiLTk5NTYt
ZmMxMjFjODAwYjMwLzEvUnJiVGRGNmZSVUdIbDNSYlVlcjJKZFIzVjZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My84ZDgwZjktNDk0ZS00YWJiLTk5NTYtZmMxMjFjODAwYjMw
LzEvSUJfakQ4YTBzTkQyMjA0Yi03MVFHVjNLVjF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUpaKMA0G
CSqGSIb3DQEBCwUAA4IBAQCKwqcTzPqA40YTRC2ZmFaIOCP8opRzxmR8T37GZ//N
DwKP4slTIQFUeGStEKphN5/sUTgCH79N+Z4WS6JarZpHAckrPqosKMdc6MerRZkt
19mcxCbJafle+UWA0sURr3pGBiVkgGvrLhzZ1uTVYMIEs24KCYR/jaabuIu5dmkQ
D/w9gudvE7SzOhB2maoyGYw3s0cl2+buYEcrAK/G1q4AbF/4sIulb5dLJPjaRKOo
hzeM1+yETTmr3HXxcYNCml9XXPLm66ZmoZOs+YIP3GXNsJcUSEH6jVq09EylSpsK
U/gTF717AiUxxdE9GA/lYpNybH1sasx41jFCXs12q5ON
-----END CERTIFICATE-----
Generated at Mon Apr 7 22:41:52 2025 by rpki-client