Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/DtF9x864qfz0h6T6-RLkkMbHSko.roa
File: DtF9x864qfz0h6T6-RLkkMbHSko.roa (raw, json)
Hash identifier: LTzdHB1bHl9gmWN6/zoB9cUBE8Lbwn21hSVQRSevA1U=
Subject key identifier: 0E:D1:7D:C7:CE:B8:A9:FC:F4:87:A4:FA:F9:12:E4:90:C6:C7:4A:4A
Certificate issuer: /CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
Certificate serial: 019427B61928D600968BB8413048AB3BAD20
Authority key identifier: 21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/DtF9x864qfz0h6T6-RLkkMbHSko.roa
Signing time: Thu 02 Jan 2025 15:50:32 +0000
ROA not before: Thu 02 Jan 2025 15:50:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201415
IP address blocks: 147.234.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 09:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:19:28:d6:00:96:8b:b8:41:30:48:ab:3b:ad:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
Validity
Not Before: Jan 2 15:50:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0ed17dc7ceb8a9fcf487a4faf912e490c6c74a4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:83:76:4e:0f:49:e2:9c:16:cd:50:e0:c9:ba:
bf:b5:bb:2f:af:50:c5:33:13:6c:70:c6:74:da:59:
82:54:ff:12:58:00:0d:55:42:d2:f3:ff:ea:d1:ed:
1f:95:be:a9:58:41:a1:2a:27:72:86:4f:c2:5a:85:
46:75:8c:42:a6:16:a5:ac:aa:5c:e6:35:dc:5f:76:
65:f2:9a:bb:de:4f:8b:1c:b7:cf:56:2e:d9:d0:16:
ec:7f:6d:8b:76:45:7c:37:25:e4:02:b8:72:6b:05:
ee:d9:f2:64:fa:18:e2:1d:11:56:03:b6:44:44:7e:
6d:a0:3d:a6:65:11:5e:72:5a:f3:e5:be:1e:74:28:
09:9d:2a:53:29:8b:70:83:87:84:99:7e:a9:91:cc:
4b:01:0d:55:38:e8:9f:3a:6b:5a:66:7c:68:69:c7:
53:9c:66:98:2c:87:71:c4:0d:87:e6:f1:41:b5:79:
5f:e4:4d:23:84:41:ef:bf:22:51:d7:bc:35:2d:b8:
fa:9e:b2:d2:b7:3e:25:d6:12:94:cc:63:4e:01:29:
dc:a9:7d:03:27:ad:52:57:cc:86:70:c2:0c:89:c5:
3e:b7:c8:54:d9:b5:ea:e2:a4:ab:bc:89:5f:30:15:
cb:d5:9a:ea:88:0f:90:c5:33:40:22:83:d3:cd:49:
ee:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:D1:7D:C7:CE:B8:A9:FC:F4:87:A4:FA:F9:12:E4:90:C6:C7:4A:4A
X509v3 Authority Key Identifier:
keyid:21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/DtF9x864qfz0h6T6-RLkkMbHSko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.234.76.0/24
Signature Algorithm: sha256WithRSAEncryption
00:78:06:51:d1:fa:20:e8:a4:46:c6:1a:b9:2c:66:7a:9e:af:
41:0c:5c:25:d3:0e:bf:fe:32:f5:3c:0d:3b:c6:3f:6e:8d:10:
72:f0:fa:ad:86:3f:e5:34:b6:33:d4:d6:35:c4:58:c2:f4:54:
ed:fb:d5:2a:1b:cd:c7:8e:f5:b4:47:77:b5:cc:19:04:f9:93:
32:dd:2d:4b:13:d7:b7:32:5d:f2:09:cc:cb:80:b0:8c:50:b1:
d3:41:06:6f:30:47:76:f0:b5:30:4e:51:86:c5:17:01:83:0f:
ea:2c:7b:21:1a:22:84:10:97:14:78:39:70:3b:3c:00:24:7a:
c8:97:a7:ee:81:d7:6d:c0:85:66:5e:53:4e:7f:66:1c:da:44:
57:8b:f2:3a:80:f0:ea:8c:f3:03:75:f1:59:04:e5:4c:bd:ea:
55:e4:3d:00:7d:0b:48:5b:a8:02:cf:aa:20:82:c2:0c:6b:eb:
fa:4e:1e:6b:da:cc:d6:11:f7:0a:ec:b3:29:ed:08:fd:53:ab:
1a:10:fd:b5:30:f3:fb:35:94:06:d3:34:1d:72:22:32:72:f5:
4e:03:70:6d:2d:ae:5e:b6:ec:ea:43:80:21:59:55:74:27:cf:
21:03:6d:65:63:b7:e3:4f:f0:86:44:29:1f:a4:44:11:fa:60:
f9:bb:09:b1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnthko1gCWi7hBMEirO60gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxYmFkNzRlN2Y2YzA5NDlhMjczNmE1NzQ3ODQ5NmQ3ZDhi
NDUwZTYwHhcNMjUwMTAyMTU1MDMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZWQxN2RjN2NlYjhhOWZjZjQ4N2E0ZmFmOTEyZTQ5MGM2Yzc0YTRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIN2Tg9J4pwWzVDgybq/tbsvr1DF
MxNscMZ02lmCVP8SWAANVULS8//q0e0flb6pWEGhKidyhk/CWoVGdYxCphalrKpc
5jXcX3Zl8pq73k+LHLfPVi7Z0Bbsf22LdkV8NyXkArhyawXu2fJk+hjiHRFWA7ZE
RH5toD2mZRFeclrz5b4edCgJnSpTKYtwg4eEmX6pkcxLAQ1VOOifOmtaZnxoacdT
nGaYLIdxxA2H5vFBtXlf5E0jhEHvvyJR17w1Lbj6nrLStz4l1hKUzGNOASncqX0D
J61SV8yGcMIMicU+t8hU2bXq4qSrvIlfMBXL1ZrqiA+QxTNAIoPTzUnuKQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA7RfcfOuKn89Iek+vkS5JDGx0pKMB8GA1UdIwQY
MBaAFCG6105/bAlJonNqV0eEltfYtFDmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWJyWFRuOXNDVW1pYzJwWFI0U1cxOWkwVU9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC84ZGRjMzgtN2ExYS00OTA2LWE4ZWQt
NDQzMzIyOWE4NDczLzEvRHRGOXg4NjRxZnowaDZUNi1STGtrTWJIU2tvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC84ZGRjMzgtN2ExYS00OTA2LWE4ZWQtNDQzMzIyOWE4NDcz
LzEvSWJyWFRuOXNDVW1pYzJwWFI0U1cxOWkwVU9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk+pMMA0G
CSqGSIb3DQEBCwUAA4IBAQAAeAZR0fog6KRGxhq5LGZ6nq9BDFwl0w6//jL1PA07
xj9ujRBy8Pqthj/lNLYz1NY1xFjC9FTt+9UqG83HjvW0R3e1zBkE+ZMy3S1LE9e3
Ml3yCczLgLCMULHTQQZvMEd28LUwTlGGxRcBgw/qLHshGiKEEJcUeDlwOzwAJHrI
l6fugddtwIVmXlNOf2Yc2kRXi/I6gPDqjPMDdfFZBOVMvepV5D0AfQtIW6gCz6og
gsIMa+v6Th5r2szWEfcK7LMp7Qj9U6saEP21MPP7NZQG0zQdciIycvVOA3BtLa5e
tuzqQ4AhWVV0J88hA21lY7fjT/CGRCkfpEQR+mD5uwmx
-----END CERTIFICATE-----
Generated at Fri Feb 21 12:43:55 2025 by rpki-client