Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/nG7UPwWdNXA11rjoEPxSlN9hF2Y.roa
File: nG7UPwWdNXA11rjoEPxSlN9hF2Y.roa (raw, json)
Hash identifier: 6tjWe0Ebxfi7VT+Yr7pRrZaTJDirGyHuAodi17lOXl8=
Subject key identifier: 9C:6E:D4:3F:05:9D:35:70:35:D6:B8:E8:10:FC:52:94:DF:61:17:66
Certificate issuer: /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial: 019424B3CD8515301C93C6DC3BA7D7208E1A
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/nG7UPwWdNXA11rjoEPxSlN9hF2Y.roa
Signing time: Thu 02 Jan 2025 01:49:10 +0000
ROA not before: Thu 02 Jan 2025 01:49:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209778
IP address blocks: 217.113.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 02:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:cd:85:15:30:1c:93:c6:dc:3b:a7:d7:20:8e:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Validity
Not Before: Jan 2 01:49:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9c6ed43f059d357035d6b8e810fc5294df611766
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:9f:70:36:42:37:9d:d6:9f:a9:d4:6f:98:8d:
a3:0e:58:03:92:86:75:17:ed:68:81:c8:e8:6a:8a:
88:cd:08:8c:88:2f:41:cb:63:bc:23:96:aa:5d:a6:
b4:aa:23:2b:6e:16:4b:7d:3e:6c:c3:09:69:0d:8a:
bd:47:10:0e:1b:90:a7:56:4d:7c:9f:cc:d4:8d:9a:
62:a5:2f:c5:98:f3:9e:33:d7:68:29:81:14:e1:83:
29:d8:e3:f7:00:c2:2e:55:21:c0:71:fa:a0:df:44:
a0:31:5e:08:eb:1d:4d:22:75:16:ac:d4:7d:a9:f7:
96:7f:56:12:88:24:c5:fa:57:0b:af:8e:85:d9:71:
9f:c2:20:70:59:a7:de:cb:e9:23:21:11:e9:64:f6:
ef:ee:cd:15:80:0a:dc:ea:f1:60:66:50:64:c0:48:
12:13:1e:2c:94:45:20:a7:9f:3c:6c:fd:93:97:eb:
bb:45:f6:f1:16:56:83:56:63:d1:6a:4b:67:67:98:
84:72:fa:ab:77:0c:93:1f:af:32:92:00:1e:25:77:
7f:e9:75:2f:18:ed:41:4e:32:11:78:1f:76:5d:bb:
47:66:ac:b0:27:80:ef:7d:db:be:c5:e5:4f:a3:a2:
fa:a5:d5:1e:da:75:96:5b:0f:73:7f:a3:01:45:d9:
39:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:6E:D4:3F:05:9D:35:70:35:D6:B8:E8:10:FC:52:94:DF:61:17:66
X509v3 Authority Key Identifier:
keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/nG7UPwWdNXA11rjoEPxSlN9hF2Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.113.24.0/24
Signature Algorithm: sha256WithRSAEncryption
88:bc:74:a6:6e:52:92:cb:27:1e:5b:71:80:a3:51:72:fb:77:
28:d0:78:6e:47:da:e2:5a:0c:71:3c:a6:ce:ef:2a:ad:33:b1:
79:0c:91:c4:0b:a2:b7:fa:64:92:65:5f:d6:cb:23:11:9a:f2:
bd:ed:ec:e0:c7:fa:49:75:84:7b:97:70:d7:33:56:79:6f:23:
c3:9c:21:58:d2:8b:4a:ba:bf:b1:53:bb:8c:f3:d5:db:05:bf:
f0:06:db:d6:0a:61:66:ce:c7:f6:55:54:19:52:a9:e7:ca:b8:
d4:c1:88:cf:fc:63:33:09:8c:30:af:fb:af:ba:ea:b0:94:c7:
76:8b:b0:e0:4a:58:20:ad:ec:3c:70:41:d0:7c:f5:81:02:90:
01:83:96:3d:7f:5d:84:14:5e:e1:93:9b:d3:60:6e:b2:e6:1e:
59:7c:e2:43:bd:ea:6b:de:14:51:84:43:6a:91:0d:03:a9:f4:
df:c8:e2:d4:41:be:54:0b:59:65:4e:f0:8b:63:8d:af:d8:76:
5b:60:53:cc:62:1c:f8:cb:aa:d6:a1:1f:b0:37:73:55:bf:6b:
25:3b:f6:9e:eb:f2:4a:b7:6d:db:d8:47:a8:8c:11:d1:07:1f:
7e:01:ce:44:c5:3b:7b:cf:65:16:79:85:2b:d5:f5:4d:ac:30:
08:d7:64:29
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQks82FFTAck8bcO6fXII4aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzZThmNGVkNWRkMDYzMDFjNDIzOTg4ZTc4NmRhYmY1MWM1
ZjU2NzQwHhcNMjUwMTAyMDE0OTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YzZlZDQzZjA1OWQzNTcwMzVkNmI4ZTgxMGZjNTI5NGRmNjExNzY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3J9wNkI3ndafqdRvmI2jDlgDkoZ1
F+1ogcjoaoqIzQiMiC9By2O8I5aqXaa0qiMrbhZLfT5swwlpDYq9RxAOG5CnVk18
n8zUjZpipS/FmPOeM9doKYEU4YMp2OP3AMIuVSHAcfqg30SgMV4I6x1NInUWrNR9
qfeWf1YSiCTF+lcLr46F2XGfwiBwWafey+kjIRHpZPbv7s0VgArc6vFgZlBkwEgS
Ex4slEUgp588bP2Tl+u7RfbxFlaDVmPRaktnZ5iEcvqrdwyTH68ykgAeJXd/6XUv
GO1BTjIReB92XbtHZqywJ4Dvfdu+xeVPo6L6pdUe2nWWWw9zf6MBRdk5bQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJxu1D8FnTVwNda46BD8UpTfYRdmMB8GA1UdIwQY
MBaAFJPo9O1d0GMBxCOYjnhtq/UcX1Z0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvay1qMDdWM1FZd0hFSTVpT2VHMnI5UnhmVm5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9hNzg5NzktZGQyNC00YmU3LTgxOTQt
MWZjMTllYTczYTJhLzEvbkc3VVB3V2ROWEExMXJqb0VQeFNsTjloRjJZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9hNzg5NzktZGQyNC00YmU3LTgxOTQtMWZjMTllYTczYTJh
LzEvay1qMDdWM1FZd0hFSTVpT2VHMnI5UnhmVm5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2XEYMA0G
CSqGSIb3DQEBCwUAA4IBAQCIvHSmblKSyyceW3GAo1Fy+3co0HhuR9riWgxxPKbO
7yqtM7F5DJHEC6K3+mSSZV/WyyMRmvK97ezgx/pJdYR7l3DXM1Z5byPDnCFY0otK
ur+xU7uM89XbBb/wBtvWCmFmzsf2VVQZUqnnyrjUwYjP/GMzCYwwr/uvuuqwlMd2
i7DgSlggrew8cEHQfPWBApABg5Y9f12EFF7hk5vTYG6y5h5ZfOJDvepr3hRRhENq
kQ0DqfTfyOLUQb5UC1llTvCLY42v2HZbYFPMYhz4y6rWoR+wN3NVv2slO/ae6/JK
t23b2EeojBHRBx9+Ac5ExTt7z2UWeYUr1fVNrDAI12Qp
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:22:14 2025 by rpki-client