Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/904a2a-6dd1-4974-bb29-4c92cec08ba8/1/A2lRtYsynJJAILeNP4ol_NB53as.roa
File: A2lRtYsynJJAILeNP4ol_NB53as.roa (raw, json)
Hash identifier: zgRdZJry0e4HRbPx+TfhqLtDE1uOOj3QlmHxDJhN/Mg=
Subject key identifier: 03:69:51:B5:8B:32:9C:92:40:20:B7:8D:3F:8A:25:FC:D0:79:DD:AB
Certificate issuer: /CN=58f7d27ebc269bf14b8d6895791affd429f70222
Certificate serial: 019420686D352D84934D607ECCCF92EC1B35
Authority key identifier: 58:F7:D2:7E:BC:26:9B:F1:4B:8D:68:95:79:1A:FF:D4:29:F7:02:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WPfSfrwmm_FLjWiVeRr_1Cn3AiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/904a2a-6dd1-4974-bb29-4c92cec08ba8/1/A2lRtYsynJJAILeNP4ol_NB53as.roa
Signing time: Wed 01 Jan 2025 05:48:22 +0000
ROA not before: Wed 01 Jan 2025 05:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209835
IP address blocks: 83.143.108.0/22 maxlen: 22
83.143.108.0/24 maxlen: 24
83.143.109.0/24 maxlen: 24
83.143.110.0/24 maxlen: 24
83.143.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/904a2a-6dd1-4974-bb29-4c92cec08ba8/1/WPfSfrwmm_FLjWiVeRr_1Cn3AiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/904a2a-6dd1-4974-bb29-4c92cec08ba8/1/WPfSfrwmm_FLjWiVeRr_1Cn3AiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WPfSfrwmm_FLjWiVeRr_1Cn3AiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:6d:35:2d:84:93:4d:60:7e:cc:cf:92:ec:1b:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58f7d27ebc269bf14b8d6895791affd429f70222
Validity
Not Before: Jan 1 05:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=036951b58b329c924020b78d3f8a25fcd079ddab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1d:1b:b4:b0:dd:7c:4b:73:c6:08:28:c8:19:
57:a7:de:79:a1:b2:56:f0:49:ec:d6:cc:87:eb:ca:
0a:6a:2e:29:86:e5:f3:b4:e0:ca:cf:c6:65:aa:7d:
44:9a:94:45:21:81:64:2d:3a:07:85:5d:8a:b5:c9:
eb:fa:33:a8:e4:58:e1:b6:cc:ae:23:df:3e:d0:f0:
19:e5:ef:13:34:5e:79:aa:a1:1c:f2:55:31:12:ca:
50:3c:5f:85:3b:e8:aa:dd:e6:0c:61:2d:46:49:b5:
e6:21:cd:d9:d9:50:62:30:36:12:11:cc:f0:4e:9f:
89:6a:27:94:69:11:ac:99:f5:68:3f:cf:81:9a:fc:
db:58:4a:8f:c7:7c:04:c5:53:98:a9:db:0d:1f:ae:
cf:1b:9c:f1:e4:20:84:34:82:e7:05:48:a0:92:2e:
9d:b3:65:5a:ec:de:a5:a0:0e:c8:94:b4:ac:55:68:
55:1e:a4:db:0a:63:82:b8:34:01:39:e0:04:15:0a:
ee:1f:0d:47:db:1c:93:86:8f:ab:4b:a9:b2:ed:20:
2e:ea:b2:e3:13:1f:77:f7:24:fe:29:5e:ec:b4:8f:
b6:f9:93:94:73:4a:1d:a7:31:a5:f2:47:dd:c3:1e:
7b:1b:4d:6a:ec:9d:c0:6a:d2:b0:91:f7:d8:2e:aa:
93:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:69:51:B5:8B:32:9C:92:40:20:B7:8D:3F:8A:25:FC:D0:79:DD:AB
X509v3 Authority Key Identifier:
keyid:58:F7:D2:7E:BC:26:9B:F1:4B:8D:68:95:79:1A:FF:D4:29:F7:02:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WPfSfrwmm_FLjWiVeRr_1Cn3AiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/904a2a-6dd1-4974-bb29-4c92cec08ba8/1/A2lRtYsynJJAILeNP4ol_NB53as.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/904a2a-6dd1-4974-bb29-4c92cec08ba8/1/WPfSfrwmm_FLjWiVeRr_1Cn3AiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.143.108.0/22
Signature Algorithm: sha256WithRSAEncryption
47:62:85:97:93:59:35:ed:ac:64:a0:7d:65:2c:d6:ca:1f:5c:
4f:67:80:02:cd:ee:bf:69:03:a2:d9:e9:76:14:5d:4c:c8:e5:
63:34:5d:b3:49:2a:01:bf:d8:28:67:de:dc:fa:84:1a:ad:2f:
dd:36:d6:c8:ef:e5:34:0a:c9:c1:7c:e8:16:9e:36:59:5e:90:
1c:d3:95:7c:84:4a:dc:8d:ca:10:6b:f4:e0:ec:33:24:af:31:
85:2c:8c:3a:42:c8:0b:c6:e0:64:94:62:58:38:be:7a:4f:49:
ca:ac:d4:9a:9b:77:6a:75:21:80:61:02:de:ae:52:33:c8:9b:
9b:95:cd:17:0b:17:c4:54:3e:8e:86:f9:ce:a4:ac:d7:ee:0c:
6e:1b:fa:12:49:a8:08:44:1e:d6:c0:36:bc:d6:84:bb:96:4b:
6b:9e:51:ff:a9:bf:97:12:6c:bb:03:17:77:68:8a:1d:88:0b:
2a:31:81:eb:6b:0d:b9:5c:b3:ed:ab:50:59:4b:e5:13:2e:b9:
ce:76:b5:52:77:70:1a:67:6b:b2:10:43:2d:b1:58:9a:ba:a6:
3c:2c:19:a9:83:24:10:47:35:90:1f:42:5b:af:c9:06:a5:e8:
df:98:c5:41:d1:68:ee:b6:9e:c6:8d:b3:c0:63:08:72:8e:cb:
2a:a3:8f:d0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQgaG01LYSTTWB+zM+S7Bs1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4ZjdkMjdlYmMyNjliZjE0YjhkNjg5NTc5MWFmZmQ0Mjlm
NzAyMjIwHhcNMjUwMTAxMDU0ODIyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMzY5NTFiNThiMzI5YzkyNDAyMGI3OGQzZjhhMjVmY2QwNzlkZGFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwR0btLDdfEtzxggoyBlXp955obJW
8Ens1syH68oKai4phuXztODKz8Zlqn1EmpRFIYFkLToHhV2Ktcnr+jOo5Fjhtsyu
I98+0PAZ5e8TNF55qqEc8lUxEspQPF+FO+iq3eYMYS1GSbXmIc3Z2VBiMDYSEczw
Tp+JaieUaRGsmfVoP8+BmvzbWEqPx3wExVOYqdsNH67PG5zx5CCENILnBUigki6d
s2Va7N6loA7IlLSsVWhVHqTbCmOCuDQBOeAEFQruHw1H2xyTho+rS6my7SAu6rLj
Ex939yT+KV7stI+2+ZOUc0odpzGl8kfdwx57G01q7J3AatKwkffYLqqTnwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFANpUbWLMpySQCC3jT+KJfzQed2rMB8GA1UdIwQY
MBaAFFj30n68JpvxS41olXka/9Qp9wIiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1BmU2Zyd21tX0ZMaldpVmVScl8xQ24zQWlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC85MDRhMmEtNmRkMS00OTc0LWJiMjkt
NGM5MmNlYzA4YmE4LzEvQTJsUnRZc3luSkpBSUxlTlA0b2xfTkI1M2FzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC85MDRhMmEtNmRkMS00OTc0LWJiMjktNGM5MmNlYzA4YmE4
LzEvV1BmU2Zyd21tX0ZMaldpVmVScl8xQ24zQWlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCU49sMA0G
CSqGSIb3DQEBCwUAA4IBAQBHYoWXk1k17axkoH1lLNbKH1xPZ4ACze6/aQOi2el2
FF1MyOVjNF2zSSoBv9goZ97c+oQarS/dNtbI7+U0CsnBfOgWnjZZXpAc05V8hErc
jcoQa/Tg7DMkrzGFLIw6QsgLxuBklGJYOL56T0nKrNSam3dqdSGAYQLerlIzyJub
lc0XCxfEVD6OhvnOpKzX7gxuG/oSSagIRB7WwDa81oS7lktrnlH/qb+XEmy7Axd3
aIodiAsqMYHraw25XLPtq1BZS+UTLrnOdrVSd3AaZ2uyEEMtsViauqY8LBmpgyQQ
RzWQH0Jbr8kGpejfmMVB0Wjutp7GjbPAYwhyjssqo4/Q
-----END CERTIFICATE-----
Generated at Thu Apr 17 09:01:07 2025 by rpki-client