Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/8Su11ZhJzo8isY1yCzuxJuToZe0.roa
File: 8Su11ZhJzo8isY1yCzuxJuToZe0.roa (raw, json)
Hash identifier: K2lEMWEg3LqT2vABj+FkqrlJVolKSPladWKTyyNZYgs=
Subject key identifier: F1:2B:B5:D5:98:49:CE:8F:22:B1:8D:72:0B:3B:B1:26:E4:E8:65:ED
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0194214413174C0F1E22B3639476E8B3C617
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/8Su11ZhJzo8isY1yCzuxJuToZe0.roa
Signing time: Wed 01 Jan 2025 09:48:16 +0000
ROA not before: Wed 01 Jan 2025 09:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211439
IP address blocks: 37.252.28.0/24 maxlen: 24
79.99.149.0/24 maxlen: 24
89.213.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Feb 2025 09:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:13:17:4c:0f:1e:22:b3:63:94:76:e8:b3:c6:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 1 09:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f12bb5d59849ce8f22b18d720b3bb126e4e865ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d2:fc:b6:59:44:a6:18:04:d9:09:fd:24:9a:
1c:46:8e:3c:2b:fe:05:95:94:83:51:0f:e9:55:64:
56:7a:db:e5:66:c9:c7:bf:8c:98:70:78:f7:52:13:
36:7d:2b:8a:8c:ad:ca:67:20:a0:ba:18:7e:0b:c0:
4b:c2:03:3a:53:a9:3c:f5:c2:c8:52:93:95:46:77:
e6:ca:54:eb:a4:19:45:5c:14:55:c2:af:7a:55:77:
f9:c7:99:2a:ca:d1:22:f0:60:75:87:8f:6d:18:4b:
48:1e:71:2a:b4:90:9a:64:cc:e1:77:e1:f7:8f:22:
1b:9c:2a:57:5a:93:db:be:51:47:e7:e8:cf:eb:c3:
1e:14:28:d3:64:78:0b:9b:41:e2:96:29:33:7e:3a:
20:e5:40:b8:cc:e5:d7:ad:e9:fd:17:93:7d:12:c8:
1a:d9:b9:af:74:45:94:b5:55:60:f8:05:21:d6:18:
8b:a0:5e:12:e7:4a:fe:6c:a8:b7:ba:7c:0e:2d:d0:
43:ff:23:7c:e0:80:09:1c:1c:fe:94:56:3a:3d:a8:
8c:d8:99:0b:1c:b1:7e:ed:60:e8:8e:fe:de:dc:30:
be:36:5a:e8:da:c4:06:35:6f:89:a6:4b:8a:f1:4c:
f3:6a:04:2d:e5:db:48:20:5e:2c:9b:40:16:fe:1e:
cd:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:2B:B5:D5:98:49:CE:8F:22:B1:8D:72:0B:3B:B1:26:E4:E8:65:ED
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/8Su11ZhJzo8isY1yCzuxJuToZe0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.252.28.0/24
79.99.149.0/24
89.213.117.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:29:ad:60:27:c0:4a:c5:6b:d0:85:b9:6b:41:f8:a5:28:90:
55:c6:00:a4:a5:15:1b:e5:f7:01:f0:48:d9:10:38:2c:b8:58:
ea:e5:b9:31:da:4e:27:2f:8b:ff:bc:01:f8:96:a8:a5:05:b0:
be:a8:13:39:19:b6:36:ba:42:fa:1d:9b:6a:26:72:63:63:0a:
31:19:e8:9e:e0:0d:95:bd:15:e4:2d:d7:90:1a:e0:0e:ba:ef:
62:2c:fb:06:f2:7d:ee:a5:32:7a:7b:4b:86:c3:e5:1c:2a:89:
22:25:0e:e2:2f:58:9f:d9:ba:02:4f:4c:86:1b:b3:e3:fc:58:
a8:d7:7f:8f:f3:57:14:ef:70:4d:78:7c:52:bb:87:4f:de:5c:
03:0a:06:f9:0f:4f:21:9c:bb:6a:18:aa:75:a6:bd:38:c5:b3:
a4:9a:79:5b:72:ef:00:df:44:1d:16:65:4a:75:1a:e0:5e:ad:
5c:c8:39:2a:c7:c3:7b:f8:f2:16:ba:20:ba:da:9a:fb:05:12:
f4:85:e4:9c:35:7d:73:17:be:e2:67:4d:04:f4:cd:f4:1d:17:
7d:a3:03:b6:63:54:69:37:d7:62:78:3b:42:58:eb:f2:7c:4f:
54:2b:57:e2:80:bf:2a:de:ae:1a:0e:cb:0e:6d:48:35:48:6c:
17:43:cf:92
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQhRBMXTA8eIrNjlHbos8YXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjUwMTAxMDk0ODE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMTJiYjVkNTk4NDljZThmMjJiMThkNzIwYjNiYjEyNmU0ZTg2NWVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9L8tllEphgE2Qn9JJocRo48K/4F
lZSDUQ/pVWRWetvlZsnHv4yYcHj3UhM2fSuKjK3KZyCguhh+C8BLwgM6U6k89cLI
UpOVRnfmylTrpBlFXBRVwq96VXf5x5kqytEi8GB1h49tGEtIHnEqtJCaZMzhd+H3
jyIbnCpXWpPbvlFH5+jP68MeFCjTZHgLm0Hilikzfjog5UC4zOXXren9F5N9Esga
2bmvdEWUtVVg+AUh1hiLoF4S50r+bKi3unwOLdBD/yN84IAJHBz+lFY6PaiM2JkL
HLF+7WDojv7e3DC+Nlro2sQGNW+JpkuK8UzzagQt5dtIIF4sm0AW/h7N5QIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFPErtdWYSc6PIrGNcgs7sSbk6GXtMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvOFN1MTFaaEp6bzhpc1kxeUN6dXhKdVRvWmUwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAJfwcAwQA
T2OVAwQAWdV1MA0GCSqGSIb3DQEBCwUAA4IBAQCOKa1gJ8BKxWvQhblrQfilKJBV
xgCkpRUb5fcB8EjZEDgsuFjq5bkx2k4nL4v/vAH4lqilBbC+qBM5GbY2ukL6HZtq
JnJjYwoxGeie4A2VvRXkLdeQGuAOuu9iLPsG8n3upTJ6e0uGw+UcKokiJQ7iL1if
2boCT0yGG7Pj/Fio13+P81cU73BNeHxSu4dP3lwDCgb5D08hnLtqGKp1pr04xbOk
mnlbcu8A30QdFmVKdRrgXq1cyDkqx8N7+PIWuiC62pr7BRL0heScNX1zF77iZ00E
9M30HRd9owO2Y1RpN9dieDtCWOvyfE9UK1figL8q3q4aDssObUg1SGwXQ8+S
-----END CERTIFICATE-----
Generated at Thu Feb 13 15:06:11 2025 by rpki-client