Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/iS6COwGyythSYEhnktJI6anFjEA.roa
File: iS6COwGyythSYEhnktJI6anFjEA.roa (raw, json)
Hash identifier: GWVuOHI/ZOLPjaA2BN1wMh+IXCz7gVuOKvl8Sig6s08=
Subject key identifier: 89:2E:82:3B:01:B2:CA:D8:52:60:48:67:92:D2:48:E9:A9:C5:8C:40
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 019421B1A497444BF3099FCD05E79F908FE7
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/iS6COwGyythSYEhnktJI6anFjEA.roa
Signing time: Wed 01 Jan 2025 11:47:57 +0000
ROA not before: Wed 01 Jan 2025 11:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5065
IP address blocks: 81.21.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:a4:97:44:4b:f3:09:9f:cd:05:e7:9f:90:8f:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jan 1 11:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=892e823b01b2cad85260486792d248e9a9c58c40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:65:be:44:92:f3:8e:52:ed:2a:04:52:48:53:
dc:44:0a:4d:41:a6:f9:bb:c4:fe:43:4d:71:8b:48:
14:e9:ce:df:bf:a3:87:cc:c7:89:2e:d0:ac:62:9c:
91:06:77:bd:da:e6:30:39:7b:c1:80:4b:59:b4:0b:
86:1b:48:6e:b6:68:a3:63:dd:c3:70:a6:e5:15:50:
39:31:7a:4d:16:48:e0:b7:d7:e4:93:89:7f:fc:2d:
99:76:dd:91:81:4d:89:1b:66:72:63:17:36:ef:6b:
24:5d:d5:bc:9a:1a:36:7e:6b:3d:bb:01:78:8c:8f:
dd:14:3c:3b:6f:28:54:91:ed:d1:56:21:c5:50:cc:
d8:45:fb:5f:51:27:2d:23:6a:b5:98:de:0d:d8:56:
11:62:1f:be:88:33:8b:38:6d:c3:22:63:48:2f:45:
47:28:56:47:b5:3a:75:49:29:e0:3a:6b:4b:db:5b:
4b:55:62:7a:ce:ed:d4:97:d7:5f:16:d2:0e:dd:1c:
fa:42:7c:aa:f9:e6:15:fe:60:82:0a:3c:b9:d6:8f:
05:15:86:ce:3e:6f:eb:b5:3b:8b:fc:b3:b9:56:bb:
f8:40:43:87:66:76:05:8e:a1:c2:8b:a4:a1:61:eb:
e4:d8:4c:e0:35:0e:05:7b:ea:c9:aa:61:2a:d1:c4:
f1:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:2E:82:3B:01:B2:CA:D8:52:60:48:67:92:D2:48:E9:A9:C5:8C:40
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/iS6COwGyythSYEhnktJI6anFjEA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.21.2.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:a0:16:27:25:8f:e6:98:83:d4:96:37:52:36:aa:cc:23:6e:
1e:61:f5:78:f9:15:e5:37:19:e2:78:40:93:87:9a:5f:85:e2:
9e:70:9c:9e:b2:60:be:ef:17:d2:cd:1e:bb:8c:f7:f6:55:30:
4f:d9:d3:c7:5c:08:ed:13:cf:38:7c:f3:db:d0:39:66:24:c0:
ba:7f:13:46:a0:06:d3:02:b8:3a:38:cc:6f:b8:96:7a:65:ab:
5c:ff:ac:46:c0:f2:99:60:2b:b7:bf:e0:4d:90:25:14:25:13:
c3:c9:e5:c2:60:21:28:df:7e:ee:65:3f:86:41:7b:e6:74:75:
50:74:f4:de:e9:8f:32:17:16:ef:12:e9:4a:a5:7c:72:bc:f0:
f5:8c:1e:17:c5:a3:58:7d:c2:32:b9:f5:4e:a7:9a:7a:62:32:
fe:ac:69:75:ff:7c:b9:0e:55:26:d0:4e:e3:b4:f9:1a:94:02:
6c:fd:1e:e0:00:15:61:b0:d4:f0:95:f6:70:bc:7a:0e:5d:ec:
31:92:90:55:64:e7:a3:3c:97:19:eb:47:0e:07:de:a6:9f:29:
9b:e2:30:f4:3c:a4:a1:42:de:24:8a:95:1e:2d:12:b5:77:f8:
73:c2:48:a9:76:28:b1:88:e7:a5:18:44:41:de:36:5d:48:12:
0b:97:f4:70
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhsaSXREvzCZ/NBeefkI/nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl
ZTQ2ZDcwHhcNMjUwMTAxMTE0NzU3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OTJlODIzYjAxYjJjYWQ4NTI2MDQ4Njc5MmQyNDhlOWE5YzU4YzQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0mW+RJLzjlLtKgRSSFPcRApNQab5
u8T+Q01xi0gU6c7fv6OHzMeJLtCsYpyRBne92uYwOXvBgEtZtAuGG0hutmijY93D
cKblFVA5MXpNFkjgt9fkk4l//C2Zdt2RgU2JG2ZyYxc272skXdW8mho2fms9uwF4
jI/dFDw7byhUke3RViHFUMzYRftfUSctI2q1mN4N2FYRYh++iDOLOG3DImNIL0VH
KFZHtTp1SSngOmtL21tLVWJ6zu3Ul9dfFtIO3Rz6Qnyq+eYV/mCCCjy51o8FFYbO
Pm/rtTuL/LO5Vrv4QEOHZnYFjqHCi6ShYevk2EzgNQ4Fe+rJqmEq0cTxuQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIkugjsBssrYUmBIZ5LSSOmpxYxAMB8GA1UdIwQY
MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt
NTYyNDRmNDMwZGNjLzEvaVM2Q093R3l5dGhTWUVobmt0Skk2YW5GakVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj
LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAURUCMA0G
CSqGSIb3DQEBCwUAA4IBAQCcoBYnJY/mmIPUljdSNqrMI24eYfV4+RXlNxnieECT
h5pfheKecJyesmC+7xfSzR67jPf2VTBP2dPHXAjtE884fPPb0DlmJMC6fxNGoAbT
Arg6OMxvuJZ6Zatc/6xGwPKZYCu3v+BNkCUUJRPDyeXCYCEo337uZT+GQXvmdHVQ
dPTe6Y8yFxbvEulKpXxyvPD1jB4XxaNYfcIyufVOp5p6YjL+rGl1/3y5DlUm0E7j
tPkalAJs/R7gABVhsNTwlfZwvHoOXewxkpBVZOejPJcZ60cOB96mnymb4jD0PKSh
Qt4kipUeLRK1d/hzwkipdiixiOelGERB3jZdSBILl/Rw
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:59:34 2025 by rpki-client