Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/2GSZf5zsckSPkVrjOA8ExqdfIcA.roa
File: 2GSZf5zsckSPkVrjOA8ExqdfIcA.roa (raw, json)
Hash identifier: jc6ltbbmHATHg0Rk/+f+l+nm4xrwDo8+d+JnZRxTSrk=
Subject key identifier: D8:64:99:7F:9C:EC:72:44:8F:91:5A:E3:38:0F:04:C6:A7:5F:21:C0
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019421441C23D0EB8C353ED2124E09109963
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/2GSZf5zsckSPkVrjOA8ExqdfIcA.roa
Signing time: Wed 01 Jan 2025 09:48:19 +0000
ROA not before: Wed 01 Jan 2025 09:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213200
IP address blocks: 89.213.131.0/24 maxlen: 24
109.176.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:1c:23:d0:eb:8c:35:3e:d2:12:4e:09:10:99:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 1 09:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d864997f9cec72448f915ae3380f04c6a75f21c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c9:46:ac:13:65:91:1c:95:ee:0c:b2:ef:7a:
3c:bb:2c:0f:10:30:47:36:d0:a0:09:aa:14:2a:af:
02:bd:e4:c0:18:60:38:54:2d:71:a5:a3:31:ed:dc:
bc:f5:bb:c4:83:44:86:c9:97:ad:20:9b:54:3f:2d:
97:84:3b:09:bf:e8:cc:73:09:ed:b7:6e:be:af:6f:
bf:ee:82:e3:fc:9a:b8:4d:1f:2e:6b:7c:25:3b:e4:
a0:2c:5c:73:ff:25:8c:40:d7:cb:07:d4:b4:b5:6d:
5a:0a:5c:1d:f6:db:89:8e:24:24:63:22:fd:01:49:
0f:a1:6e:45:6f:e4:7a:58:fd:28:4e:15:46:6d:c5:
e9:45:c3:d7:e9:26:21:59:82:7b:ce:16:aa:e8:c0:
1c:b4:c7:54:8a:14:37:ff:d3:86:3c:34:e7:c0:0e:
61:8b:d9:2a:5d:32:37:1a:07:80:c2:ee:9a:13:fd:
74:6b:a4:9b:d7:3e:23:fa:91:50:e6:58:88:84:27:
dd:8c:fb:ca:f1:60:4a:0a:34:0d:f0:4f:26:8d:7f:
70:b2:04:2e:2a:5d:1b:50:0d:f1:61:26:b3:69:c1:
8e:2f:e9:f2:21:3d:03:06:3d:1b:c8:91:dc:ab:08:
8b:4d:f4:94:c1:b2:c4:f8:9d:c0:9b:a1:20:af:00:
d8:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:64:99:7F:9C:EC:72:44:8F:91:5A:E3:38:0F:04:C6:A7:5F:21:C0
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/2GSZf5zsckSPkVrjOA8ExqdfIcA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.131.0/24
109.176.202.0/24
Signature Algorithm: sha256WithRSAEncryption
24:11:ff:db:27:c2:b5:b3:91:62:77:aa:b0:07:4a:6b:84:e9:
c1:cd:46:57:20:87:77:1a:7a:e7:fc:90:5e:f0:00:08:3e:0b:
2f:0a:34:64:ef:48:68:03:0f:36:9f:ef:bd:b3:80:c9:55:61:
8d:f3:3d:8d:48:01:92:5b:3c:10:e5:8a:9c:cf:ff:c9:25:59:
05:74:01:65:3f:3f:7b:02:1c:45:28:8d:a5:6d:65:c8:49:14:
96:ac:a2:7e:13:06:79:d3:20:07:30:94:44:ba:e5:a0:1b:90:
ec:49:16:87:6b:aa:17:5f:29:8b:d1:1d:03:61:f0:4f:56:2d:
8e:a2:f4:f3:7d:29:3d:91:6e:88:23:65:36:a0:12:29:71:4d:
20:f6:93:ce:a5:bc:ba:a3:77:a5:e1:f1:9e:51:0c:c8:e8:88:
85:a9:ee:38:13:1d:8a:c2:67:63:23:e1:7a:50:bf:35:81:7a:
ba:f5:ba:36:0f:7f:6c:09:0b:7d:0d:58:00:39:eb:a1:25:b2:
25:69:4a:a1:cd:d4:06:26:59:fb:fd:58:a9:27:66:46:b3:0f:
1f:98:66:c2:d5:a3:ad:a3:1d:03:9b:0d:e5:bc:c9:17:5e:35:
cd:46:22:5c:5f:88:c8:48:c7:ef:32:03:c6:b8:55:2b:cb:fb:
91:58:9a:50
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQhRBwj0OuMNT7SEk4JEJljMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjUwMTAxMDk0ODE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkODY0OTk3ZjljZWM3MjQ0OGY5MTVhZTMzODBmMDRjNmE3NWYyMWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtclGrBNlkRyV7gyy73o8uywPEDBH
NtCgCaoUKq8CveTAGGA4VC1xpaMx7dy89bvEg0SGyZetIJtUPy2XhDsJv+jMcwnt
t26+r2+/7oLj/Jq4TR8ua3wlO+SgLFxz/yWMQNfLB9S0tW1aClwd9tuJjiQkYyL9
AUkPoW5Fb+R6WP0oThVGbcXpRcPX6SYhWYJ7zhaq6MActMdUihQ3/9OGPDTnwA5h
i9kqXTI3GgeAwu6aE/10a6Sb1z4j+pFQ5liIhCfdjPvK8WBKCjQN8E8mjX9wsgQu
Kl0bUA3xYSazacGOL+nyIT0DBj0byJHcqwiLTfSUwbLE+J3Am6EgrwDY+wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNhkmX+c7HJEj5Fa4zgPBManXyHAMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvMkdTWmY1enNja1NQa1Zyak9BOEV4cWRmSWNBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWdWDAwQA
bbDKMA0GCSqGSIb3DQEBCwUAA4IBAQAkEf/bJ8K1s5Fid6qwB0prhOnBzUZXIId3
Gnrn/JBe8AAIPgsvCjRk70hoAw82n++9s4DJVWGN8z2NSAGSWzwQ5Yqcz//JJVkF
dAFlPz97AhxFKI2lbWXISRSWrKJ+EwZ50yAHMJREuuWgG5DsSRaHa6oXXymL0R0D
YfBPVi2OovTzfSk9kW6II2U2oBIpcU0g9pPOpby6o3el4fGeUQzI6IiFqe44Ex2K
wmdjI+F6UL81gXq69bo2D39sCQt9DVgAOeuhJbIlaUqhzdQGJln7/VipJ2ZGsw8f
mGbC1aOtox0Dmw3lvMkXXjXNRiJcX4jISMfvMgPGuFUry/uRWJpQ
-----END CERTIFICATE-----
Generated at Wed Feb 5 07:47:25 2025 by rpki-client