Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/9pCmbwuWDKFww6JalPNjMXiQ2uc.roa
File: 9pCmbwuWDKFww6JalPNjMXiQ2uc.roa (raw, json)
Hash identifier: crRW/IaBwcSVgY89PTYbAz61UCGYjtm5jlog0eAP9F0=
Subject key identifier: F6:90:A6:6F:0B:96:0C:A1:70:C3:A2:5A:94:F3:63:31:78:90:DA:E7
Certificate issuer: /CN=380099a81b346f9abcaf26056f5b77094d1cf113
Certificate serial: 019426D99EEBF98453778E5E9C77775836D8
Authority key identifier: 38:00:99:A8:1B:34:6F:9A:BC:AF:26:05:6F:5B:77:09:4D:1C:F1:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OACZqBs0b5q8ryYFb1t3CU0c8RM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/9pCmbwuWDKFww6JalPNjMXiQ2uc.roa
Signing time: Thu 02 Jan 2025 11:49:43 +0000
ROA not before: Thu 02 Jan 2025 11:49:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44270
IP address blocks: 79.173.112.0/20 maxlen: 21
94.243.240.0/20 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/OACZqBs0b5q8ryYFb1t3CU0c8RM.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/OACZqBs0b5q8ryYFb1t3CU0c8RM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OACZqBs0b5q8ryYFb1t3CU0c8RM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:9e:eb:f9:84:53:77:8e:5e:9c:77:77:58:36:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=380099a81b346f9abcaf26056f5b77094d1cf113
Validity
Not Before: Jan 2 11:49:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f690a66f0b960ca170c3a25a94f363317890dae7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:eb:1a:aa:c6:8f:65:42:97:12:00:c8:21:84:
13:05:e2:87:23:ab:74:cd:f4:25:da:54:94:f1:47:
1a:8c:6c:06:96:b1:be:36:8b:20:e5:f3:ff:ab:08:
f7:29:b6:fe:e1:0f:86:f1:c9:6d:49:08:09:5d:36:
eb:26:af:15:d5:22:71:f1:0a:c8:6c:45:48:8d:4f:
c5:5e:a7:34:a8:ec:c7:36:65:fd:06:88:d6:04:36:
1e:14:ed:f7:41:43:94:56:9a:57:ee:2e:d6:ca:60:
09:ea:21:ee:f8:89:3b:be:0b:4a:72:f4:e9:87:86:
f6:71:27:5e:6f:e4:b5:83:3c:4f:65:b5:37:18:61:
82:6c:ad:44:d4:41:23:11:67:ad:ee:20:20:41:12:
12:51:6b:64:94:90:41:de:a8:5a:8f:7c:53:1d:a6:
74:92:b9:f4:7d:6e:96:78:d6:1d:52:64:60:a4:39:
19:ae:6a:51:2f:b7:2f:f8:b4:78:03:77:b4:52:64:
b7:ca:c0:03:b9:b5:f1:a1:64:02:0c:ec:3e:9c:00:
29:d4:7e:d1:9d:4b:a5:d9:4d:41:d1:06:ab:f6:5e:
e2:7e:73:5e:bb:99:c3:68:a5:91:7c:26:6f:c0:28:
bb:76:16:c8:cb:cd:8c:3c:5a:14:9f:cb:d2:bd:72:
f3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:90:A6:6F:0B:96:0C:A1:70:C3:A2:5A:94:F3:63:31:78:90:DA:E7
X509v3 Authority Key Identifier:
keyid:38:00:99:A8:1B:34:6F:9A:BC:AF:26:05:6F:5B:77:09:4D:1C:F1:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OACZqBs0b5q8ryYFb1t3CU0c8RM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/9pCmbwuWDKFww6JalPNjMXiQ2uc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/OACZqBs0b5q8ryYFb1t3CU0c8RM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.173.112.0/20
94.243.240.0/20
Signature Algorithm: sha256WithRSAEncryption
5e:d7:1b:b4:7b:07:bd:e7:e4:43:79:8a:0b:5c:85:b6:f4:eb:
c0:d4:e2:36:67:4f:fb:24:79:ba:db:ef:0f:9e:05:ca:7a:38:
f7:68:2e:dd:e1:1c:27:c8:85:9d:13:9d:94:81:f5:a7:a0:56:
ae:32:fd:38:e8:3e:51:59:c4:e1:2f:c6:7b:0f:0b:97:17:ce:
b5:d5:79:23:2d:2a:2c:7a:aa:5c:58:cc:08:e2:03:01:0a:91:
18:11:35:bd:a5:8b:f2:71:d7:ee:99:cf:a2:da:ef:0b:b1:d6:
44:da:75:6b:35:87:5d:97:6d:46:bb:61:1a:1c:5c:01:69:9c:
ac:8d:44:3e:95:d4:b1:c1:a3:04:0d:db:1d:55:83:ab:21:07:
cb:43:93:10:03:ea:84:fa:60:52:94:c8:9f:0a:0e:92:6b:c5:
b3:ee:9a:9f:9e:40:23:c7:e7:70:3c:32:ef:41:3e:36:3a:5e:
9e:46:aa:e3:8b:2b:9f:72:79:fa:e8:df:a9:d7:24:25:f6:f2:
f7:50:1d:b9:61:92:c3:f6:b0:dd:7b:42:79:51:19:5d:26:f8:
1b:2a:d7:3e:44:6d:90:6d:df:b6:09:36:f0:f3:d4:92:47:11:
72:02:0a:7e:62:47:92:d1:19:cb:96:33:df:c7:ee:64:6d:27:
c8:87:aa:e1
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQm2Z7r+YRTd45enHd3WDbYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4MDA5OWE4MWIzNDZmOWFiY2FmMjYwNTZmNWI3NzA5NGQx
Y2YxMTMwHhcNMjUwMTAyMTE0OTQzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNjkwYTY2ZjBiOTYwY2ExNzBjM2EyNWE5NGYzNjMzMTc4OTBkYWU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOsaqsaPZUKXEgDIIYQTBeKHI6t0
zfQl2lSU8UcajGwGlrG+Nosg5fP/qwj3Kbb+4Q+G8cltSQgJXTbrJq8V1SJx8QrI
bEVIjU/FXqc0qOzHNmX9BojWBDYeFO33QUOUVppX7i7WymAJ6iHu+Ik7vgtKcvTp
h4b2cSdeb+S1gzxPZbU3GGGCbK1E1EEjEWet7iAgQRISUWtklJBB3qhaj3xTHaZ0
krn0fW6WeNYdUmRgpDkZrmpRL7cv+LR4A3e0UmS3ysADubXxoWQCDOw+nAAp1H7R
nUul2U1B0Qar9l7ifnNeu5nDaKWRfCZvwCi7dhbIy82MPFoUn8vSvXLzSQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFPaQpm8LlgyhcMOiWpTzYzF4kNrnMB8GA1UdIwQY
MBaAFDgAmagbNG+avK8mBW9bdwlNHPETMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0FDWnFCczBiNXE4cnlZRmIxdDNDVTBjOFJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My84ZTUwMWQtYzA4OC00ODk1LWFlZTMt
NDUwZmUzMzU5NWQxLzEvOXBDbWJ3dVdES0Z3dzZKYWxQTmpNWGlRMnVjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My84ZTUwMWQtYzA4OC00ODk1LWFlZTMtNDUwZmUzMzU5NWQx
LzEvT0FDWnFCczBiNXE4cnlZRmIxdDNDVTBjOFJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQET61wAwQE
XvPwMA0GCSqGSIb3DQEBCwUAA4IBAQBe1xu0ewe95+RDeYoLXIW29OvA1OI2Z0/7
JHm62+8PngXKejj3aC7d4RwnyIWdE52UgfWnoFauMv046D5RWcThL8Z7DwuXF861
1XkjLSoseqpcWMwI4gMBCpEYETW9pYvycdfumc+i2u8LsdZE2nVrNYddl21Gu2Ea
HFwBaZysjUQ+ldSxwaMEDdsdVYOrIQfLQ5MQA+qE+mBSlMifCg6Sa8Wz7pqfnkAj
x+dwPDLvQT42Ol6eRqrjiyufcnn66N+p1yQl9vL3UB25YZLD9rDde0J5URldJvgb
Ktc+RG2Qbd+2CTbw89SSRxFyAgp+YkeS0RnLljPfx+5kbSfIh6rh
-----END CERTIFICATE-----
Generated at Thu Apr 17 14:10:26 2025 by rpki-client