Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/ncQqnXp43lHM-_e5L0Z57d-n3bU.roa
File: ncQqnXp43lHM-_e5L0Z57d-n3bU.roa (raw, json)
Hash identifier: JoIVnG9vKxPwRGcagpI9miw46X0QNprln802SO4MLf4=
Subject key identifier: 9D:C4:2A:9D:7A:78:DE:51:CC:FB:F7:B9:2F:46:79:ED:DF:A7:DD:B5
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 019423D6D43F6DC9C83EBDDED2B85BACFB3E
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/ncQqnXp43lHM-_e5L0Z57d-n3bU.roa
Signing time: Wed 01 Jan 2025 21:47:48 +0000
ROA not before: Wed 01 Jan 2025 21:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41327
IP address blocks: 80.71.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:d4:3f:6d:c9:c8:3e:bd:de:d2:b8:5b:ac:fb:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Jan 1 21:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9dc42a9d7a78de51ccfbf7b92f4679eddfa7ddb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:90:9d:af:f8:26:af:1d:31:4f:52:b2:7f:58:
90:b6:e8:e5:0e:5a:06:4b:2b:d8:ef:3e:7a:e3:25:
5a:90:f0:41:c1:9d:36:1b:91:6c:67:52:72:0a:20:
dd:a2:d2:57:77:f4:5a:a7:75:bb:a7:b1:c2:11:66:
c2:58:74:bb:13:bb:15:e9:3d:d8:d7:80:df:bb:64:
26:5e:2b:d6:8c:d1:03:97:89:f5:67:1e:6a:ed:8e:
b9:e0:4d:04:b2:0e:36:7e:50:11:b6:3f:c7:d1:87:
4b:74:cf:56:d3:a7:08:ec:a0:e8:d9:ef:67:b8:d0:
1e:d3:b6:d8:69:cd:f0:28:fb:a9:24:33:6f:08:b7:
d6:b4:78:7e:83:2f:48:15:43:bc:cf:05:ad:2d:9b:
ac:38:21:b1:08:bc:8b:e4:37:07:13:a5:b3:e0:e1:
9c:ee:50:1b:48:eb:98:b0:34:9c:51:55:f8:71:1d:
4a:32:a6:63:62:39:0d:8d:10:53:14:0c:d9:86:21:
18:38:e3:0d:4c:5e:9f:5d:16:30:f6:2a:0a:20:27:
f5:35:36:81:77:49:31:03:07:52:9b:03:08:2c:51:
fc:4f:db:b0:98:82:36:bf:52:e0:5a:91:7b:5e:39:
98:07:15:4e:b9:99:5b:36:05:24:31:9a:f7:98:ff:
fa:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:C4:2A:9D:7A:78:DE:51:CC:FB:F7:B9:2F:46:79:ED:DF:A7:DD:B5
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/ncQqnXp43lHM-_e5L0Z57d-n3bU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.234.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:62:0b:e4:f7:21:1b:52:8c:84:6c:b2:24:82:f0:73:59:e9:
25:89:85:e3:47:b6:be:06:8b:99:3d:5c:af:d3:93:04:66:28:
90:06:c5:d0:8a:b3:cd:e8:3f:5e:fb:b0:d2:c2:15:30:90:70:
7e:b4:59:76:ba:91:5b:80:a9:4e:75:9f:8f:85:ca:4c:85:79:
ad:c4:f8:58:c4:b1:a8:7f:db:8c:9c:1c:6a:b5:d0:6c:fc:16:
c0:64:2c:ec:b4:39:68:41:a9:19:62:4e:1b:14:ab:9b:89:2b:
56:f3:a6:97:a2:a6:17:62:c8:a3:3b:36:42:8d:8f:3a:97:59:
55:bb:45:64:07:9a:db:9f:dc:65:c3:d9:0e:4a:21:1b:e9:72:
c6:bf:d0:0e:df:69:80:9d:ac:ee:d8:e4:11:52:b4:71:79:2f:
35:8f:85:46:ac:62:95:bb:bd:f0:d3:fd:2c:d6:7d:bf:57:a4:
6a:70:2b:4e:61:14:8d:67:1d:38:81:fa:75:ac:dd:f8:ff:b9:
7b:2d:d2:ed:c1:52:f7:08:41:ac:2d:57:4c:98:ea:aa:7a:bd:
e4:93:d3:76:d8:fe:4d:81:0b:a3:46:11:3c:bd:16:da:ef:32:
8f:27:06:48:23:f9:84:47:19:5a:09:b1:07:70:65:75:24:31:
39:29:4b:a2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQj1tQ/bcnIPr3e0rhbrPs+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ZTUxNjk0YzRkNDZiNGZjYzAyZmFlNzFlNWRiOTQyYTcx
MDhlNDcwHhcNMjUwMTAxMjE0NzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZGM0MmE5ZDdhNzhkZTUxY2NmYmY3YjkyZjQ2NzllZGRmYTdkZGI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpCdr/gmrx0xT1Kyf1iQtujlDloG
SyvY7z564yVakPBBwZ02G5FsZ1JyCiDdotJXd/Rap3W7p7HCEWbCWHS7E7sV6T3Y
14Dfu2QmXivWjNEDl4n1Zx5q7Y654E0Esg42flARtj/H0YdLdM9W06cI7KDo2e9n
uNAe07bYac3wKPupJDNvCLfWtHh+gy9IFUO8zwWtLZusOCGxCLyL5DcHE6Wz4OGc
7lAbSOuYsDScUVX4cR1KMqZjYjkNjRBTFAzZhiEYOOMNTF6fXRYw9ioKICf1NTaB
d0kxAwdSmwMILFH8T9uwmII2v1LgWpF7XjmYBxVOuZlbNgUkMZr3mP/6SwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ3EKp16eN5RzPv3uS9Gee3fp921MB8GA1UdIwQY
MBaAFEnlFpTE1GtPzAL65x5duUKnEI5HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQt
MTkxODliM2M5YzdkLzEvbmNRcW5YcDQzbEhNLV9lNUwwWjU3ZC1uM2JVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQtMTkxODliM2M5Yzdk
LzEvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUEfqMA0G
CSqGSIb3DQEBCwUAA4IBAQALYgvk9yEbUoyEbLIkgvBzWekliYXjR7a+BouZPVyv
05MEZiiQBsXQirPN6D9e+7DSwhUwkHB+tFl2upFbgKlOdZ+PhcpMhXmtxPhYxLGo
f9uMnBxqtdBs/BbAZCzstDloQakZYk4bFKubiStW86aXoqYXYsijOzZCjY86l1lV
u0VkB5rbn9xlw9kOSiEb6XLGv9AO32mAnazu2OQRUrRxeS81j4VGrGKVu73w0/0s
1n2/V6RqcCtOYRSNZx04gfp1rN34/7l7LdLtwVL3CEGsLVdMmOqqer3kk9N22P5N
gQujRhE8vRba7zKPJwZII/mERxlaCbEHcGV1JDE5KUui
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:23:03 2025 by rpki-client