Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Cg92uNUgZXPMLakPtg2XtYF9Tn4.roa
File: Cg92uNUgZXPMLakPtg2XtYF9Tn4.roa (raw, json)
Hash identifier: vDfUkMLP+tLqBsM4a0+3mO0Mbv8NIzyCve5Qn3i4UW0=
Subject key identifier: 0A:0F:76:B8:D5:20:65:73:CC:2D:A9:0F:B6:0D:97:B5:81:7D:4E:7E
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019428276C8C83471583535463856A423A44
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Cg92uNUgZXPMLakPtg2XtYF9Tn4.roa
Signing time: Thu 02 Jan 2025 17:54:19 +0000
ROA not before: Thu 02 Jan 2025 17:54:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212667
IP address blocks: 89.36.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:6c:8c:83:47:15:83:53:54:63:85:6a:42:3a:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 2 17:54:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0a0f76b8d5206573cc2da90fb60d97b5817d4e7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ad:84:91:44:f8:a4:83:4d:16:fc:5c:21:1b:
ee:53:6f:81:c0:0c:51:6e:10:71:26:82:1a:f3:94:
e8:c8:3e:04:14:55:4b:5a:66:aa:49:f3:6a:e6:96:
47:81:57:84:12:c5:d3:8e:c3:dc:dc:f6:1b:ee:b8:
12:59:f3:97:6c:0d:e7:87:e4:7a:e1:6b:59:76:91:
4a:97:1f:8c:9d:51:a5:a9:8e:0b:6b:8f:4e:d8:85:
42:45:bd:18:05:c0:c5:0c:46:45:7e:fb:33:f2:60:
b3:4f:96:09:69:bc:6a:32:8c:fd:95:16:de:9c:bf:
41:d4:3f:32:e6:94:03:26:ec:af:f8:c4:9d:f8:0a:
57:b0:16:ae:48:23:e7:ff:59:13:88:12:37:e0:8d:
74:27:25:db:9c:9b:e0:11:4e:1a:84:6e:ae:f9:76:
fa:b6:67:95:40:be:d9:f6:06:27:08:02:a5:92:b6:
38:cf:b3:39:da:6e:dd:6e:4d:8b:db:8c:65:4b:94:
0a:51:2e:38:7d:b6:58:48:c2:97:25:fa:bc:f7:72:
6f:e0:fa:0c:7d:40:87:17:5d:a2:45:42:75:53:11:
c8:3d:51:6a:bb:e3:1d:35:13:f3:20:78:7e:20:09:
9b:21:2e:a8:8e:22:c5:ea:8e:5a:8c:23:3d:de:aa:
2d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:0F:76:B8:D5:20:65:73:CC:2D:A9:0F:B6:0D:97:B5:81:7D:4E:7E
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Cg92uNUgZXPMLakPtg2XtYF9Tn4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.36.140.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:96:3c:44:5d:07:cb:da:8d:c9:5e:b2:41:d3:8f:bb:a8:74:
0f:08:ec:89:67:4d:56:98:18:43:bb:f4:52:04:e0:4e:f8:43:
92:b0:0f:68:9d:2e:41:17:e8:22:c5:08:b9:8f:34:46:68:71:
35:71:36:ce:5f:1f:e8:18:11:f4:fd:83:97:e3:f6:1e:62:98:
93:a8:7e:9a:88:d6:fd:cb:52:de:69:4f:1b:b0:cf:40:75:93:
b5:5a:dc:13:fb:0f:dd:db:66:1d:7d:e9:60:90:2a:8c:f4:fe:
c1:96:91:b3:e6:55:a4:a5:d3:58:51:91:34:a9:4c:ff:68:1b:
86:0f:b6:f1:85:2b:aa:c8:ff:88:ee:36:17:6f:85:66:98:59:
17:87:27:64:8a:08:f9:3e:29:8f:13:29:3c:87:a5:14:56:57:
d9:a0:d3:24:d3:10:fc:de:f2:4d:69:df:5a:6c:3c:f5:7a:52:
27:a8:dc:b4:fd:08:f0:9c:25:10:48:b2:36:75:37:0f:51:2f:
14:9c:9d:8d:05:9b:55:ab:74:71:1e:ac:a9:9c:01:83:46:52:
aa:e0:5d:11:25:01:15:0f:a9:ed:47:93:0c:8c:c1:01:f8:f4:
ae:bf:54:da:eb:37:84:61:00:98:13:6f:90:78:43:a8:20:e1:
44:2f:42:06
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQoJ2yMg0cVg1NUY4VqQjpEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjUwMTAyMTc1NDE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYTBmNzZiOGQ1MjA2NTczY2MyZGE5MGZiNjBkOTdiNTgxN2Q0ZTdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2a2EkUT4pINNFvxcIRvuU2+BwAxR
bhBxJoIa85ToyD4EFFVLWmaqSfNq5pZHgVeEEsXTjsPc3PYb7rgSWfOXbA3nh+R6
4WtZdpFKlx+MnVGlqY4La49O2IVCRb0YBcDFDEZFfvsz8mCzT5YJabxqMoz9lRbe
nL9B1D8y5pQDJuyv+MSd+ApXsBauSCPn/1kTiBI34I10JyXbnJvgEU4ahG6u+Xb6
tmeVQL7Z9gYnCAKlkrY4z7M52m7dbk2L24xlS5QKUS44fbZYSMKXJfq893Jv4PoM
fUCHF12iRUJ1UxHIPVFqu+MdNRPzIHh+IAmbIS6ojiLF6o5ajCM93qotgQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAoPdrjVIGVzzC2pD7YNl7WBfU5+MB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvQ2c5MnVOVWdaWFBNTGFrUHRnMlh0WUY5VG40LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWSSMMA0G
CSqGSIb3DQEBCwUAA4IBAQBMljxEXQfL2o3JXrJB04+7qHQPCOyJZ01WmBhDu/RS
BOBO+EOSsA9onS5BF+gixQi5jzRGaHE1cTbOXx/oGBH0/YOX4/YeYpiTqH6aiNb9
y1LeaU8bsM9AdZO1WtwT+w/d22YdfelgkCqM9P7BlpGz5lWkpdNYUZE0qUz/aBuG
D7bxhSuqyP+I7jYXb4VmmFkXhydkigj5PimPEyk8h6UUVlfZoNMk0xD83vJNad9a
bDz1elInqNy0/QjwnCUQSLI2dTcPUS8UnJ2NBZtVq3RxHqypnAGDRlKq4F0RJQEV
D6ntR5MMjMEB+PSuv1Ta6zeEYQCYE2+QeEOoIOFEL0IG
-----END CERTIFICATE-----
Generated at Wed Feb 5 12:46:41 2025 by rpki-client