Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/10346e-1504-43dd-ab28-66858bc8eb77/1/cNLYAjPMpLbcGOrpCslyUiLMP34.roa
File: cNLYAjPMpLbcGOrpCslyUiLMP34.roa (raw, json)
Hash identifier: JmHm3+B47TlFvMWFE2W9uNvIfC/wvizwOPaVYVDTxDo=
Subject key identifier: 70:D2:D8:02:33:CC:A4:B6:DC:18:EA:E9:0A:C9:72:52:22:CC:3F:7E
Certificate issuer: /CN=2aa24e5812fcc3106b9eb0aeb00e627ba235d056
Certificate serial: 019422FC304214D552B0A539492CC0E7F1A6
Authority key identifier: 2A:A2:4E:58:12:FC:C3:10:6B:9E:B0:AE:B0:0E:62:7B:A2:35:D0:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqJOWBL8wxBrnrCusA5ie6I10FY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/10346e-1504-43dd-ab28-66858bc8eb77/1/cNLYAjPMpLbcGOrpCslyUiLMP34.roa
Signing time: Wed 01 Jan 2025 17:49:00 +0000
ROA not before: Wed 01 Jan 2025 17:49:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50538
IP address blocks: 37.110.240.0/21 maxlen: 21
109.235.216.0/21 maxlen: 21
2a03:dcc0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/10346e-1504-43dd-ab28-66858bc8eb77/1/KqJOWBL8wxBrnrCusA5ie6I10FY.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/10346e-1504-43dd-ab28-66858bc8eb77/1/KqJOWBL8wxBrnrCusA5ie6I10FY.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqJOWBL8wxBrnrCusA5ie6I10FY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 02:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:30:42:14:d5:52:b0:a5:39:49:2c:c0:e7:f1:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa24e5812fcc3106b9eb0aeb00e627ba235d056
Validity
Not Before: Jan 1 17:49:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=70d2d80233cca4b6dc18eae90ac9725222cc3f7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ba:f5:31:cb:27:10:5c:8b:7a:48:09:f3:1b:
85:a0:f7:f5:58:ed:2e:49:2e:12:76:d7:62:54:bc:
48:2c:67:a2:ab:54:17:b1:65:2b:f4:05:18:1c:be:
76:0a:82:33:32:bd:6d:1d:38:ca:6f:0f:b2:02:04:
7e:27:5a:b0:27:94:c0:43:e3:1f:b8:f2:09:4b:29:
1d:62:6d:55:05:fb:1d:35:cd:88:ec:b4:f6:b5:a1:
fc:8d:f9:f1:5c:1f:be:91:5d:47:5b:67:6c:2a:3e:
dc:9a:f8:74:b0:7b:19:f1:44:22:7a:2d:31:49:b9:
a0:b7:aa:c2:61:6c:be:1a:65:b8:80:44:77:06:96:
b9:9b:63:9f:a7:3f:97:ab:53:3a:b7:c5:1c:53:1c:
02:47:a3:6a:e7:54:87:db:8d:ae:f6:ac:69:ed:d8:
2b:3a:67:4b:0e:18:aa:59:8f:da:0e:53:c2:b4:d2:
15:bf:16:e8:2d:7f:b2:70:f6:a5:17:df:6c:1c:79:
63:b4:ce:76:16:e0:06:ea:db:07:f5:86:5f:da:7b:
de:f5:92:f7:fc:2b:1a:c4:ae:48:24:75:ce:f9:7e:
bb:c5:47:03:e6:b5:8c:6b:8c:d9:d7:4f:70:08:82:
8e:a8:7b:79:d2:bd:82:08:6f:d8:49:77:14:31:37:
38:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:D2:D8:02:33:CC:A4:B6:DC:18:EA:E9:0A:C9:72:52:22:CC:3F:7E
X509v3 Authority Key Identifier:
keyid:2A:A2:4E:58:12:FC:C3:10:6B:9E:B0:AE:B0:0E:62:7B:A2:35:D0:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqJOWBL8wxBrnrCusA5ie6I10FY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/10346e-1504-43dd-ab28-66858bc8eb77/1/cNLYAjPMpLbcGOrpCslyUiLMP34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/10346e-1504-43dd-ab28-66858bc8eb77/1/KqJOWBL8wxBrnrCusA5ie6I10FY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.110.240.0/21
109.235.216.0/21
IPv6:
2a03:dcc0::/32
Signature Algorithm: sha256WithRSAEncryption
7c:31:b7:84:36:1a:40:dd:df:8f:15:24:6c:91:d3:cc:9e:d0:
c0:1b:ea:ce:3c:06:22:34:b3:10:db:f7:5e:f9:85:25:47:0c:
7a:ee:7c:a8:18:63:f5:a0:2d:64:c5:79:c4:ee:aa:3e:53:5c:
25:6d:10:3e:51:65:91:43:b9:13:d0:f6:b7:82:de:c6:fe:7f:
34:04:ec:f3:dd:a0:dd:88:7c:d2:ef:a5:9d:d0:3e:d4:f4:f9:
7a:90:13:c8:b9:4c:5d:96:36:56:8c:93:26:ed:d3:c0:81:c3:
97:0d:35:72:94:25:bb:32:b7:77:68:38:4c:ae:08:70:e2:b5:
c8:49:56:95:07:0f:af:d7:e3:94:f0:12:43:9e:34:e8:be:b3:
0b:15:44:36:30:59:29:79:97:bf:72:12:6a:70:44:71:5a:d7:
d3:2b:3f:f5:0f:bf:75:1a:39:b0:a3:80:e4:d8:70:9d:f3:4d:
bb:95:02:2a:d8:99:b8:b5:96:2a:21:b2:db:61:a9:bb:2e:f4:
e0:a2:63:8a:cf:05:ff:fa:97:1a:cf:db:a0:99:b8:5c:47:f1:
b7:7b:ec:d0:ad:91:af:dd:df:46:ec:d7:95:5e:04:99:54:22:
bb:d1:63:ac:da:13:74:c7:a5:11:26:8e:ea:36:87:41:49:ae:
22:8e:6d:7f
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZQi/DBCFNVSsKU5SSzA5/GmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYTI0ZTU4MTJmY2MzMTA2YjllYjBhZWIwMGU2MjdiYTIz
NWQwNTYwHhcNMjUwMTAxMTc0OTAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MGQyZDgwMjMzY2NhNGI2ZGMxOGVhZTkwYWM5NzI1MjIyY2MzZjdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbr1McsnEFyLekgJ8xuFoPf1WO0u
SS4SdtdiVLxILGeiq1QXsWUr9AUYHL52CoIzMr1tHTjKbw+yAgR+J1qwJ5TAQ+Mf
uPIJSykdYm1VBfsdNc2I7LT2taH8jfnxXB++kV1HW2dsKj7cmvh0sHsZ8UQiei0x
Sbmgt6rCYWy+GmW4gER3Bpa5m2Ofpz+Xq1M6t8UcUxwCR6Nq51SH242u9qxp7dgr
OmdLDhiqWY/aDlPCtNIVvxboLX+ycPalF99sHHljtM52FuAG6tsH9YZf2nve9ZL3
/CsaxK5IJHXO+X67xUcD5rWMa4zZ109wCIKOqHt50r2CCG/YSXcUMTc4LwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFHDS2AIzzKS23Bjq6QrJclIizD9+MB8GA1UdIwQY
MBaAFCqiTlgS/MMQa56wrrAOYnuiNdBWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3FKT1dCTDh3eEJybnJDdXNBNWllNkkxMEZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8xMDM0NmUtMTUwNC00M2RkLWFiMjgt
NjY4NThiYzhlYjc3LzEvY05MWUFqUE1wTGJjR09ycENzbHlVaUxNUDM0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni8xMDM0NmUtMTUwNC00M2RkLWFiMjgtNjY4NThiYzhlYjc3
LzEvS3FKT1dCTDh3eEJybnJDdXNBNWllNkkxMEZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDJW7wAwQD
bevYMA0EAgACMAcDBQAqA9zAMA0GCSqGSIb3DQEBCwUAA4IBAQB8MbeENhpA3d+P
FSRskdPMntDAG+rOPAYiNLMQ2/de+YUlRwx67nyoGGP1oC1kxXnE7qo+U1wlbRA+
UWWRQ7kT0Pa3gt7G/n80BOzz3aDdiHzS76Wd0D7U9Pl6kBPIuUxdljZWjJMm7dPA
gcOXDTVylCW7Mrd3aDhMrghw4rXISVaVBw+v1+OU8BJDnjTovrMLFUQ2MFkpeZe/
chJqcERxWtfTKz/1D791Gjmwo4Dk2HCd8027lQIq2Jm4tZYqIbLbYam7LvTgomOK
zwX/+pcaz9ugmbhcR/G3e+zQrZGv3d9G7NeVXgSZVCK70WOs2hN0x6URJo7qNodB
Sa4ijm1/
-----END CERTIFICATE-----
Generated at Tue Apr 8 10:56:09 2025 by rpki-client