Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/xu8AVZlYRkARGQOdM9wgzlgLlPk.roa
File: xu8AVZlYRkARGQOdM9wgzlgLlPk.roa (raw, json)
Hash identifier: z2f5UKfOO2uXvhmwbBAmMbbk0ctXWHQsq/ILki97gKY=
Subject key identifier: C6:EF:00:55:99:58:46:40:11:19:03:9D:33:DC:20:CE:58:0B:94:F9
Certificate issuer: /CN=4bce083400caf616f35020329c8d76f3c4b839a5
Certificate serial: 019421B1E820358BCADF66775366CBB1871A
Authority key identifier: 4B:CE:08:34:00:CA:F6:16:F3:50:20:32:9C:8D:76:F3:C4:B8:39:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S84INADK9hbzUCAynI1288S4OaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/xu8AVZlYRkARGQOdM9wgzlgLlPk.roa
Signing time: Wed 01 Jan 2025 11:48:14 +0000
ROA not before: Wed 01 Jan 2025 11:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12779
IP address blocks: 89.31.200.0/21 maxlen: 24
185.59.80.0/22 maxlen: 24
212.110.32.0/19 maxlen: 24
213.212.128.0/18 maxlen: 24
213.254.0.0/19 maxlen: 24
2001:1418::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/S84INADK9hbzUCAynI1288S4OaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 23:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:e8:20:35:8b:ca:df:66:77:53:66:cb:b1:87:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bce083400caf616f35020329c8d76f3c4b839a5
Validity
Not Before: Jan 1 11:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c6ef0055995846401119039d33dc20ce580b94f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6d:20:bf:f7:d9:cf:78:62:4b:89:c3:c4:5b:
52:33:53:33:b1:f3:4d:ea:da:97:48:a4:6a:7a:81:
e6:3e:e0:8a:6e:60:a1:95:00:c7:fd:9f:dc:db:58:
ef:15:ec:78:8c:ca:2a:3c:e9:5c:f6:7e:b0:c3:d4:
dc:8b:cb:60:c1:e6:31:c2:04:87:cc:36:9b:15:26:
1a:30:23:19:e8:cc:33:53:90:f3:0e:7d:87:5c:2a:
0b:71:73:26:2c:64:ac:ef:31:0a:e0:cc:ec:52:16:
65:98:e1:91:b1:5b:a0:b7:f7:92:04:96:3b:e7:f0:
02:07:cc:4d:c8:a2:a1:73:21:e6:d0:5a:d5:8f:1d:
1c:18:8d:28:1b:6a:c0:cd:39:80:63:ab:86:7c:9c:
c8:fa:7c:ef:be:85:47:08:23:25:ab:6a:36:e5:25:
e5:00:06:cf:7d:7d:7f:e6:70:c1:56:40:eb:80:fb:
d1:98:a7:1d:65:84:3b:7e:4f:ef:4c:ad:59:a6:10:
ea:88:25:ff:39:d7:35:60:a6:02:fe:39:e1:fa:5f:
51:af:6c:4a:45:30:cb:07:6c:3c:2c:63:b6:06:d4:
cd:30:3c:17:a2:d2:30:8b:61:9c:53:3b:ed:c2:9d:
60:d1:93:3a:26:ad:c4:58:1c:26:b0:ae:f8:83:50:
a4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:EF:00:55:99:58:46:40:11:19:03:9D:33:DC:20:CE:58:0B:94:F9
X509v3 Authority Key Identifier:
keyid:4B:CE:08:34:00:CA:F6:16:F3:50:20:32:9C:8D:76:F3:C4:B8:39:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S84INADK9hbzUCAynI1288S4OaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/xu8AVZlYRkARGQOdM9wgzlgLlPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.31.200.0/21
185.59.80.0/22
212.110.32.0/19
213.212.128.0/18
213.254.0.0/19
IPv6:
2001:1418::/29
Signature Algorithm: sha256WithRSAEncryption
2b:74:7c:d3:dc:40:9a:56:e4:e7:04:78:44:8d:15:49:f8:37:
a3:b5:37:4a:4d:8b:ee:9b:ec:af:11:1d:d2:1d:fb:c7:fa:16:
82:43:43:80:5d:a0:92:84:f4:e5:c4:27:db:67:19:2f:f1:02:
c6:48:6d:74:50:0f:51:ec:23:ce:b3:5c:05:c3:45:ef:a4:09:
28:5a:87:c9:e0:2d:2b:68:6a:bc:42:dc:68:3d:41:c7:6b:f9:
98:94:5e:5f:4d:00:91:f6:1d:0b:fc:6f:79:08:3a:d7:b8:b5:
0d:bf:a6:c5:03:6c:a7:62:b5:51:6a:50:e4:17:61:98:dd:af:
49:30:2c:d4:3e:36:28:9d:6e:0d:14:89:2d:78:09:23:5b:db:
66:b9:ab:f7:10:19:10:77:76:66:03:f7:ea:6c:c2:7b:0d:20:
bb:32:31:00:ce:53:bb:05:cd:bf:90:50:c0:c0:4d:c5:a2:a4:
6c:72:5b:5c:ce:56:a6:7f:0e:cc:b1:e5:c4:36:d3:67:1c:dc:
d9:e4:e4:6a:b7:f5:0a:03:38:63:fa:c5:a4:54:9e:59:94:03:
7e:98:8e:7d:83:42:47:e0:55:0d:0d:2a:f6:8d:2b:e9:62:9c:
7c:76:ee:cb:13:11:1e:eb:37:96:0b:3f:fd:cc:a1:e8:68:99:
76:87:97:c5
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgISAZQhseggNYvK32Z3U2bLsYcaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiY2UwODM0MDBjYWY2MTZmMzUwMjAzMjljOGQ3NmYzYzRi
ODM5YTUwHhcNMjUwMTAxMTE0ODE0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNmVmMDA1NTk5NTg0NjQwMTExOTAzOWQzM2RjMjBjZTU4MGI5NGY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu20gv/fZz3hiS4nDxFtSM1MzsfNN
6tqXSKRqeoHmPuCKbmChlQDH/Z/c21jvFex4jMoqPOlc9n6ww9Tci8tgweYxwgSH
zDabFSYaMCMZ6MwzU5DzDn2HXCoLcXMmLGSs7zEK4MzsUhZlmOGRsVugt/eSBJY7
5/ACB8xNyKKhcyHm0FrVjx0cGI0oG2rAzTmAY6uGfJzI+nzvvoVHCCMlq2o25SXl
AAbPfX1/5nDBVkDrgPvRmKcdZYQ7fk/vTK1ZphDqiCX/Odc1YKYC/jnh+l9Rr2xK
RTDLB2w8LGO2BtTNMDwXotIwi2GcUzvtwp1g0ZM6Jq3EWBwmsK74g1Ck2QIDAQAB
o4ICMDCCAiwwHQYDVR0OBBYEFMbvAFWZWEZAERkDnTPcIM5YC5T5MB8GA1UdIwQY
MBaAFEvOCDQAyvYW81AgMpyNdvPEuDmlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzg0SU5BREs5aGJ6VUNBeW5JMTI4OFM0T2FVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC83N2ZmMmEtZGQ2Yi00MGNhLTk5N2Mt
ODBhN2ViYTZmOGU5LzEveHU4QVZabFlSa0FSR1FPZE05d2d6bGdMbFBrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC83N2ZmMmEtZGQ2Yi00MGNhLTk5N2MtODBhN2ViYTZmOGU5
LzEvUzg0SU5BREs5aGJ6VUNBeW5JMTI4OFM0T2FVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQDWR/IAwQC
uTtQAwQF1G4gAwQG1dSAAwQF1f4AMA0EAgACMAcDBQMgARQYMA0GCSqGSIb3DQEB
CwUAA4IBAQArdHzT3ECaVuTnBHhEjRVJ+DejtTdKTYvum+yvER3SHfvH+haCQ0OA
XaCShPTlxCfbZxkv8QLGSG10UA9R7CPOs1wFw0XvpAkoWofJ4C0raGq8QtxoPUHH
a/mYlF5fTQCR9h0L/G95CDrXuLUNv6bFA2ynYrVRalDkF2GY3a9JMCzUPjYonW4N
FIkteAkjW9tmuav3EBkQd3ZmA/fqbMJ7DSC7MjEAzlO7Bc2/kFDAwE3FoqRscltc
zlamfw7MseXENtNnHNzZ5ORqt/UKAzhj+sWkVJ5ZlAN+mI59g0JH4FUNDSr2jSvp
Ypx8du7LExEe6zeWCz/9zKHoaJl2h5fF
-----END CERTIFICATE-----
Generated at Thu Mar 13 07:11:13 2025 by rpki-client