Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/pmDvMLO2RE0O4Ex_JrEkUC8Orjc.roa
File: pmDvMLO2RE0O4Ex_JrEkUC8Orjc.roa (raw, json)
Hash identifier: EobRSKgdMhfP9qw1zU6ZKGGyelmEJlJ7Zo4kdI4/8FI=
Subject key identifier: A6:60:EF:30:B3:B6:44:4D:0E:E0:4C:7F:26:B1:24:50:2F:0E:AE:37
Certificate issuer: /CN=4da84d247ce37cdccf06e1571d226a2b85677bcd
Certificate serial: 01942220384A791A4F11477344F4083D3AB3
Authority key identifier: 4D:A8:4D:24:7C:E3:7C:DC:CF:06:E1:57:1D:22:6A:2B:85:67:7B:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/pmDvMLO2RE0O4Ex_JrEkUC8Orjc.roa
Signing time: Wed 01 Jan 2025 13:48:44 +0000
ROA not before: Wed 01 Jan 2025 13:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62456
IP address blocks: 93.180.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.mft
rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 05:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:38:4a:79:1a:4f:11:47:73:44:f4:08:3d:3a:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4da84d247ce37cdccf06e1571d226a2b85677bcd
Validity
Not Before: Jan 1 13:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a660ef30b3b6444d0ee04c7f26b124502f0eae37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e4:a5:00:7c:35:2b:fc:02:8d:bc:3a:95:4d:
7b:63:db:ca:09:ea:80:85:be:01:dd:cf:41:57:3a:
03:d4:da:27:b0:b4:bb:9d:b9:13:57:90:08:88:1f:
36:cf:b9:5f:08:36:0a:ef:e0:3e:db:0b:47:6b:59:
18:a9:a9:1f:a4:0e:33:ab:22:a2:f4:f2:ea:40:da:
de:4c:d1:eb:8d:e0:ee:93:e9:d6:22:2e:fc:2e:6a:
05:3b:2a:11:fa:5d:ba:b2:7a:db:dd:65:4f:ca:d8:
4a:27:ce:c8:8e:eb:90:1c:97:0a:21:ee:d2:10:83:
95:b3:61:d5:17:a9:b4:05:a9:08:7f:72:31:10:42:
db:7d:1d:69:e1:d2:7b:a0:7a:3c:68:4b:fb:d1:76:
a0:90:80:82:9a:fb:30:97:b4:a0:17:f6:8e:1e:af:
16:90:d3:e7:41:76:ab:1a:62:c1:79:a7:fb:5c:e6:
13:64:4c:99:56:17:37:02:60:0e:9f:83:91:b3:a5:
fa:2c:60:39:ec:89:29:21:d5:37:79:ef:37:0e:f1:
2e:0c:81:76:f2:8a:80:d6:08:e9:2d:f1:de:8d:4b:
6e:44:91:ce:cb:ce:fb:bd:cb:9e:6d:f2:c4:80:3c:
0b:fe:a2:7d:5b:c1:1f:00:3e:23:5b:bc:f3:8c:05:
63:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:60:EF:30:B3:B6:44:4D:0E:E0:4C:7F:26:B1:24:50:2F:0E:AE:37
X509v3 Authority Key Identifier:
keyid:4D:A8:4D:24:7C:E3:7C:DC:CF:06:E1:57:1D:22:6A:2B:85:67:7B:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/pmDvMLO2RE0O4Ex_JrEkUC8Orjc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.180.135.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:63:a3:e2:9f:67:e9:fe:af:70:75:51:51:13:85:e0:99:2b:
4d:c4:d0:7b:5f:e5:98:69:5e:3b:c8:ba:47:79:76:06:d5:32:
98:d8:f8:66:e7:d6:3c:88:fd:fb:57:c8:c8:4c:8d:63:5a:03:
f5:79:4a:80:5d:21:06:29:b4:8d:2b:b7:42:d0:fe:17:eb:98:
4a:2e:6a:7e:9b:4e:8b:a3:6a:ad:5e:4a:e1:44:1b:99:b1:97:
38:59:3a:f6:a8:a7:8c:65:32:97:b6:a3:c6:ca:f6:27:8c:23:
75:64:7e:0a:8e:39:a8:c7:fa:3d:96:c4:8c:a9:28:1d:81:a1:
cb:54:0c:50:74:24:27:f4:7f:f8:d9:d4:3b:c4:e1:c4:35:5e:
9a:ce:74:d4:51:a5:be:ba:05:c5:77:39:e6:0f:44:09:bd:33:
b2:2e:01:5e:4a:3a:e4:cd:37:dd:bd:7b:c3:76:16:14:80:25:
f8:da:57:87:2b:e0:6c:af:11:ff:d8:73:a8:78:58:7f:e3:d4:
48:51:a6:fa:0f:c1:da:39:38:91:6f:aa:6c:b5:44:42:ea:ea:
a1:ef:aa:53:f4:6b:f2:dc:3e:0e:30:3d:52:83:bb:78:26:ae:
d8:32:fa:52:3b:3e:3d:2b:f8:2f:a2:20:7e:e5:7e:93:3a:8e:
fc:46:1a:97
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQiIDhKeRpPEUdzRPQIPTqzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkYTg0ZDI0N2NlMzdjZGNjZjA2ZTE1NzFkMjI2YTJiODU2
NzdiY2QwHhcNMjUwMTAxMTM0ODQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNjYwZWYzMGIzYjY0NDRkMGVlMDRjN2YyNmIxMjQ1MDJmMGVhZTM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAleSlAHw1K/wCjbw6lU17Y9vKCeqA
hb4B3c9BVzoD1NonsLS7nbkTV5AIiB82z7lfCDYK7+A+2wtHa1kYqakfpA4zqyKi
9PLqQNreTNHrjeDuk+nWIi78LmoFOyoR+l26snrb3WVPythKJ87IjuuQHJcKIe7S
EIOVs2HVF6m0BakIf3IxEELbfR1p4dJ7oHo8aEv70XagkICCmvswl7SgF/aOHq8W
kNPnQXarGmLBeaf7XOYTZEyZVhc3AmAOn4ORs6X6LGA57IkpIdU3ee83DvEuDIF2
8oqA1gjpLfHejUtuRJHOy877vcuebfLEgDwL/qJ9W8EfAD4jW7zzjAVjpwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKZg7zCztkRNDuBMfyaxJFAvDq43MB8GA1UdIwQY
MBaAFE2oTSR843zczwbhVx0iaiuFZ3vNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGFoTkpIempmTnpQQnVGWEhTSnFLNFZuZTgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8yMTBmYmItYWE2ZS00OWM5LTkxOGIt
NTU1OGE4YjUzZTNkLzEvcG1Edk1MTzJSRTBPNEV4X0pyRWtVQzhPcmpjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC8yMTBmYmItYWE2ZS00OWM5LTkxOGItNTU1OGE4YjUzZTNk
LzEvVGFoTkpIempmTnpQQnVGWEhTSnFLNFZuZTgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXbSHMA0G
CSqGSIb3DQEBCwUAA4IBAQAaY6Pin2fp/q9wdVFRE4XgmStNxNB7X+WYaV47yLpH
eXYG1TKY2Phm59Y8iP37V8jITI1jWgP1eUqAXSEGKbSNK7dC0P4X65hKLmp+m06L
o2qtXkrhRBuZsZc4WTr2qKeMZTKXtqPGyvYnjCN1ZH4Kjjmox/o9lsSMqSgdgaHL
VAxQdCQn9H/42dQ7xOHENV6aznTUUaW+ugXFdznmD0QJvTOyLgFeSjrkzTfdvXvD
dhYUgCX42leHK+BsrxH/2HOoeFh/49RIUab6D8HaOTiRb6pstURC6uqh76pT9Gvy
3D4OMD1Sg7t4Jq7YMvpSOz49K/gvoiB+5X6TOo78RhqX
-----END CERTIFICATE-----
Generated at Tue Apr 8 14:42:40 2025 by rpki-client