Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/lX0LK1nSiHuzV_SMOweQSMztoO8.roa
File: lX0LK1nSiHuzV_SMOweQSMztoO8.roa (raw, json)
Hash identifier: FSFbPLbWej0Nx3zMGDu+OsUG2lUiqW2+msdd/cNwwCI=
Subject key identifier: 95:7D:0B:2B:59:D2:88:7B:B3:57:F4:8C:3B:07:90:48:CC:ED:A0:EF
Certificate issuer: /CN=7736a5c85a08d80749041cb9cfa517fb7d589ba8
Certificate serial: 019424448762911C9A7B80451A19C24BCD99
Authority key identifier: 77:36:A5:C8:5A:08:D8:07:49:04:1C:B9:CF:A5:17:FB:7D:58:9B:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzalyFoI2AdJBBy5z6UX-31Ym6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/lX0LK1nSiHuzV_SMOweQSMztoO8.roa
Signing time: Wed 01 Jan 2025 23:47:38 +0000
ROA not before: Wed 01 Jan 2025 23:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 79.135.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/dzalyFoI2AdJBBy5z6UX-31Ym6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/dzalyFoI2AdJBBy5z6UX-31Ym6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/dzalyFoI2AdJBBy5z6UX-31Ym6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:87:62:91:1c:9a:7b:80:45:1a:19:c2:4b:cd:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7736a5c85a08d80749041cb9cfa517fb7d589ba8
Validity
Not Before: Jan 1 23:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=957d0b2b59d2887bb357f48c3b079048cceda0ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d7:0b:6a:3b:db:19:da:59:8a:f5:da:2f:81:
f1:70:9a:4c:5a:5a:a7:50:96:2b:c1:44:13:2e:d8:
9f:fe:86:d1:4c:ab:c6:35:1b:11:b9:be:3d:f5:4a:
7e:ff:49:05:91:e1:03:a3:f0:94:7d:1d:3a:07:a2:
1e:e0:a0:aa:1a:ac:76:34:e2:97:db:28:95:6d:56:
56:88:e7:6b:48:55:f7:c4:f8:84:16:e4:6e:0e:f4:
53:06:8e:6a:59:fc:05:c7:4e:2d:d2:65:3e:6f:d2:
35:90:1c:69:be:91:c1:ad:0e:88:a7:fe:af:a8:84:
ea:41:0e:a9:ec:dc:98:69:47:e5:6d:e5:86:2a:c1:
ef:80:da:14:f3:dc:20:53:4d:09:57:8c:45:63:9c:
69:71:5b:fe:3b:aa:1d:d5:14:a4:13:33:f4:96:28:
c5:50:f6:4c:79:b2:5e:bf:f0:79:e1:b5:29:a1:65:
ff:aa:1e:df:6d:a4:87:20:06:7e:13:15:8b:95:bb:
2b:b4:f2:d6:c3:e0:a8:2a:94:c1:a5:cd:a6:dd:ea:
a1:7e:ac:ba:b9:e6:4a:ce:42:b3:e2:91:8b:ef:8a:
3f:45:0e:eb:44:49:4d:7b:9c:75:bd:1d:5a:f2:f2:
e3:0c:08:c9:b0:5c:da:aa:1e:d2:15:dc:93:05:72:
95:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:7D:0B:2B:59:D2:88:7B:B3:57:F4:8C:3B:07:90:48:CC:ED:A0:EF
X509v3 Authority Key Identifier:
keyid:77:36:A5:C8:5A:08:D8:07:49:04:1C:B9:CF:A5:17:FB:7D:58:9B:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzalyFoI2AdJBBy5z6UX-31Ym6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/lX0LK1nSiHuzV_SMOweQSMztoO8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/dzalyFoI2AdJBBy5z6UX-31Ym6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.135.105.0/24
Signature Algorithm: sha256WithRSAEncryption
13:9d:c8:16:51:2f:10:bf:44:11:ae:20:1c:ce:8a:1f:34:dc:
1e:ac:c7:d7:aa:3c:9d:53:0e:08:50:0a:64:90:68:65:b6:63:
21:57:8c:b7:13:16:f0:ce:d9:ab:39:ef:77:09:6e:d1:95:2d:
9f:23:6f:1f:55:c2:cb:ad:88:87:4d:04:94:4f:89:ab:f2:78:
d6:b6:2b:00:1f:de:e8:91:fa:0b:e9:17:39:71:d1:e9:9b:0c:
71:61:63:82:41:67:3b:81:fb:b1:e5:16:79:33:ce:3c:3c:8a:
5f:14:49:1b:7b:a0:a9:19:ee:54:4c:28:26:ef:98:12:f4:62:
91:f8:ba:ba:8b:05:f4:fa:f9:17:e7:44:a1:58:18:34:00:cf:
62:0b:58:15:44:8b:a3:8a:97:cd:4d:fd:04:d3:6f:53:5a:78:
59:14:d3:42:c1:c7:ff:1d:be:81:95:41:ba:cd:10:da:bf:7b:
3a:d5:f3:9b:03:1a:68:dc:a8:9a:3e:17:2f:1f:1e:81:9a:c3:
6c:c7:6b:99:e7:23:a4:6c:da:ef:10:d1:6e:33:50:5d:cd:24:
b4:89:f6:24:07:9a:da:11:28:e8:0d:c8:05:80:92:5f:48:be:
c2:4f:08:e3:7b:85:1e:e6:4f:bc:97:9a:96:d2:48:f6:0d:9d:
af:a1:53:dc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQkRIdikRyae4BFGhnCS82ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3MzZhNWM4NWEwOGQ4MDc0OTA0MWNiOWNmYTUxN2ZiN2Q1
ODliYTgwHhcNMjUwMTAxMjM0NzM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NTdkMGIyYjU5ZDI4ODdiYjM1N2Y0OGMzYjA3OTA0OGNjZWRhMGVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttcLajvbGdpZivXaL4HxcJpMWlqn
UJYrwUQTLtif/obRTKvGNRsRub499Up+/0kFkeEDo/CUfR06B6Ie4KCqGqx2NOKX
2yiVbVZWiOdrSFX3xPiEFuRuDvRTBo5qWfwFx04t0mU+b9I1kBxpvpHBrQ6Ip/6v
qITqQQ6p7NyYaUflbeWGKsHvgNoU89wgU00JV4xFY5xpcVv+O6od1RSkEzP0lijF
UPZMebJev/B54bUpoWX/qh7fbaSHIAZ+ExWLlbsrtPLWw+CoKpTBpc2m3eqhfqy6
ueZKzkKz4pGL74o/RQ7rRElNe5x1vR1a8vLjDAjJsFzaqh7SFdyTBXKVEQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJV9CytZ0oh7s1f0jDsHkEjM7aDvMB8GA1UdIwQY
MBaAFHc2pchaCNgHSQQcuc+lF/t9WJuoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHphbHlGb0kyQWRKQkJ5NXo2VVgtMzFZbTZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC82ZGEyODktYWJlYy00OWY1LWE3NTkt
Y2YxZjRjN2M5MjIyLzEvbFgwTEsxblNpSHV6Vl9TTU93ZVFTTXp0b084LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC82ZGEyODktYWJlYy00OWY1LWE3NTktY2YxZjRjN2M5MjIy
LzEvZHphbHlGb0kyQWRKQkJ5NXo2VVgtMzFZbTZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAT4dpMA0G
CSqGSIb3DQEBCwUAA4IBAQATncgWUS8Qv0QRriAczoofNNwerMfXqjydUw4IUApk
kGhltmMhV4y3ExbwztmrOe93CW7RlS2fI28fVcLLrYiHTQSUT4mr8njWtisAH97o
kfoL6Rc5cdHpmwxxYWOCQWc7gfux5RZ5M848PIpfFEkbe6CpGe5UTCgm75gS9GKR
+Lq6iwX0+vkX50ShWBg0AM9iC1gVRIujipfNTf0E029TWnhZFNNCwcf/Hb6BlUG6
zRDav3s61fObAxpo3KiaPhcvHx6BmsNsx2uZ5yOkbNrvENFuM1BdzSS0ifYkB5ra
ESjoDcgFgJJfSL7CTwjje4Ue5k+8l5qW0kj2DZ2voVPc
-----END CERTIFICATE-----
Generated at Sat Apr 12 08:07:51 2025 by rpki-client