Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/333ea6-584a-4749-83c7-03d7461eb58a/1/bhZ8f0F77iFP_2rwZL2z4iLQgpA.roa
File: bhZ8f0F77iFP_2rwZL2z4iLQgpA.roa (raw, json)
Hash identifier: TT4ui96hPVB8JuhJPLD2IoWX5TtqeZQlOzkrZUeBR/0=
Subject key identifier: 6E:16:7C:7F:41:7B:EE:21:4F:FF:6A:F0:64:BD:B3:E2:22:D0:82:90
Certificate issuer: /CN=75e6e212c63741b85b957c7c97f7c58f5b5e1335
Certificate serial: 019427B68DFA769FC9AAAB91D9DFA5399D19
Authority key identifier: 75:E6:E2:12:C6:37:41:B8:5B:95:7C:7C:97:F7:C5:8F:5B:5E:13:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/debiEsY3QbhblXx8l_fFj1teEzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/333ea6-584a-4749-83c7-03d7461eb58a/1/bhZ8f0F77iFP_2rwZL2z4iLQgpA.roa
Signing time: Thu 02 Jan 2025 15:51:02 +0000
ROA not before: Thu 02 Jan 2025 15:51:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35383
IP address blocks: 84.39.120.0/21 maxlen: 21
84.39.122.0/24 maxlen: 24
84.39.127.0/24 maxlen: 24
2a01:7a20::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/333ea6-584a-4749-83c7-03d7461eb58a/1/debiEsY3QbhblXx8l_fFj1teEzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/333ea6-584a-4749-83c7-03d7461eb58a/1/debiEsY3QbhblXx8l_fFj1teEzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/debiEsY3QbhblXx8l_fFj1teEzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:8d:fa:76:9f:c9:aa:ab:91:d9:df:a5:39:9d:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75e6e212c63741b85b957c7c97f7c58f5b5e1335
Validity
Not Before: Jan 2 15:51:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6e167c7f417bee214fff6af064bdb3e222d08290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0d:f6:8e:17:57:20:36:a6:61:21:43:c4:61:
90:92:9e:5f:2a:83:8d:0f:02:bb:e2:54:6c:c9:86:
51:39:84:f4:6f:dd:37:d5:d3:18:89:44:03:a4:90:
67:fd:03:df:a6:a2:6e:35:5d:65:01:d7:9e:85:42:
11:c9:ce:ad:55:c9:78:db:5b:74:80:79:ec:ab:20:
fb:51:85:e0:02:44:88:f4:d8:d1:1d:f7:ec:97:34:
f1:02:36:6d:da:4b:43:a9:5a:03:e6:d7:64:3b:d5:
6f:d9:15:de:2c:b3:bc:86:62:a3:e5:a7:e5:f2:2d:
eb:f0:e9:37:09:69:14:4e:a0:b6:8c:22:22:9e:25:
d3:b6:79:dd:07:84:c9:c1:c2:55:de:03:34:5d:d4:
90:e4:88:ff:3d:87:d1:52:e3:f0:57:57:30:92:2c:
42:7e:58:25:da:0c:de:8f:87:72:34:46:81:87:a6:
d0:61:6d:f9:61:5c:f1:7a:6b:b7:b4:d1:3d:3a:ae:
ae:9c:b0:37:83:fd:10:e4:8c:2b:6a:42:1f:43:24:
af:65:cf:a0:18:6e:df:2c:63:4f:8b:a3:3f:61:c0:
45:e8:6b:56:49:35:f8:76:cb:5f:73:b4:33:0d:07:
ea:3d:64:91:1c:a3:ab:ee:76:01:86:7a:0c:29:f7:
25:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:16:7C:7F:41:7B:EE:21:4F:FF:6A:F0:64:BD:B3:E2:22:D0:82:90
X509v3 Authority Key Identifier:
keyid:75:E6:E2:12:C6:37:41:B8:5B:95:7C:7C:97:F7:C5:8F:5B:5E:13:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/debiEsY3QbhblXx8l_fFj1teEzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/333ea6-584a-4749-83c7-03d7461eb58a/1/bhZ8f0F77iFP_2rwZL2z4iLQgpA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/333ea6-584a-4749-83c7-03d7461eb58a/1/debiEsY3QbhblXx8l_fFj1teEzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.39.120.0/21
IPv6:
2a01:7a20::/32
Signature Algorithm: sha256WithRSAEncryption
03:f4:cb:7b:96:e9:6b:b6:20:80:d5:06:ba:50:fe:9b:32:bc:
6a:1e:0f:ae:f2:51:50:af:07:22:b5:9e:96:ec:58:2d:12:0e:
76:eb:5f:3b:91:a0:b3:07:74:39:dc:ce:7a:9a:8c:55:dc:35:
33:cd:c3:ef:fa:89:96:4e:9c:0d:34:3f:0a:8f:63:88:f8:38:
4a:4a:e4:e0:41:8b:59:7b:09:c8:46:96:09:de:49:0f:35:f3:
34:94:02:7d:b1:84:4f:0a:07:91:5a:5c:f6:3a:2c:80:f8:bd:
ca:36:81:4c:db:cd:b7:5e:22:95:91:62:34:92:c3:14:e7:fa:
f9:b1:14:6d:65:16:6a:bc:9b:b9:4f:0f:b3:80:46:7a:87:9a:
60:43:75:e5:98:84:f1:56:e7:24:b0:28:83:a0:bc:82:de:07:
f3:6b:75:0c:76:7c:b9:44:8b:d8:84:0a:52:96:42:05:67:6b:
18:28:86:9b:3e:12:4d:3d:ef:35:b8:26:1d:51:41:af:3b:95:
f9:37:ed:8a:19:8a:3b:b0:95:df:13:7b:bc:c0:38:7a:37:25:
b1:94:c5:a7:5a:2a:28:b6:45:7f:60:31:72:50:49:e6:d2:1f:
63:6a:b8:91:60:e8:1c:21:db:fb:95:36:ab:6c:3a:cb:15:87:
4a:08:04:d7
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQnto36dp/JqquR2d+lOZ0ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1ZTZlMjEyYzYzNzQxYjg1Yjk1N2M3Yzk3ZjdjNThmNWI1
ZTEzMzUwHhcNMjUwMTAyMTU1MTAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZTE2N2M3ZjQxN2JlZTIxNGZmZjZhZjA2NGJkYjNlMjIyZDA4MjkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAow32jhdXIDamYSFDxGGQkp5fKoON
DwK74lRsyYZROYT0b9031dMYiUQDpJBn/QPfpqJuNV1lAdeehUIRyc6tVcl421t0
gHnsqyD7UYXgAkSI9NjRHffslzTxAjZt2ktDqVoD5tdkO9Vv2RXeLLO8hmKj5afl
8i3r8Ok3CWkUTqC2jCIiniXTtnndB4TJwcJV3gM0XdSQ5Ij/PYfRUuPwV1cwkixC
flgl2gzej4dyNEaBh6bQYW35YVzxemu3tNE9Oq6unLA3g/0Q5IwrakIfQySvZc+g
GG7fLGNPi6M/YcBF6GtWSTX4dstfc7QzDQfqPWSRHKOr7nYBhnoMKfclWQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFG4WfH9Be+4hT/9q8GS9s+Ii0IKQMB8GA1UdIwQY
MBaAFHXm4hLGN0G4W5V8fJf3xY9bXhM1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGViaUVzWTNRYmhibFh4OGxfZkZqMXRlRXpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8zMzNlYTYtNTg0YS00NzQ5LTgzYzct
MDNkNzQ2MWViNThhLzEvYmhaOGYwRjc3aUZQXzJyd1pMMno0aUxRZ3BBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS8zMzNlYTYtNTg0YS00NzQ5LTgzYzctMDNkNzQ2MWViNThh
LzEvZGViaUVzWTNRYmhibFh4OGxfZkZqMXRlRXpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDVCd4MA0E
AgACMAcDBQAqAXogMA0GCSqGSIb3DQEBCwUAA4IBAQAD9Mt7lulrtiCA1Qa6UP6b
MrxqHg+u8lFQrwcitZ6W7FgtEg526187kaCzB3Q53M56moxV3DUzzcPv+omWTpwN
ND8Kj2OI+DhKSuTgQYtZewnIRpYJ3kkPNfM0lAJ9sYRPCgeRWlz2OiyA+L3KNoFM
2823XiKVkWI0ksMU5/r5sRRtZRZqvJu5Tw+zgEZ6h5pgQ3XlmITxVucksCiDoLyC
3gfza3UMdny5RIvYhApSlkIFZ2sYKIabPhJNPe81uCYdUUGvO5X5N+2KGYo7sJXf
E3u8wDh6NyWxlMWnWiootkV/YDFyUEnm0h9jariRYOgcIdv7lTarbDrLFYdKCATX
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:36:36 2025 by rpki-client