Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/IQ70lcEJJTV-sdr4Cf-Ld89OG4k.roa
File: IQ70lcEJJTV-sdr4Cf-Ld89OG4k.roa (raw, json)
Hash identifier: 97ij4/pQYcOgbLIvXPnBNUzOqeGMcpCxp88Cn6Bqqjc=
Subject key identifier: 21:0E:F4:95:C1:09:25:35:7E:B1:DA:F8:09:FF:8B:77:CF:4E:1B:89
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01942CAD8ED56721D068CC5EF3E49F9EFAE4
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/IQ70lcEJJTV-sdr4Cf-Ld89OG4k.roa
Signing time: Fri 03 Jan 2025 14:59:19 +0000
ROA not before: Fri 03 Jan 2025 14:59:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 132978
IP address blocks: 213.218.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:2c:ad:8e:d5:67:21:d0:68:cc:5e:f3:e4:9f:9e:fa:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 3 14:59:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=210ef495c10925357eb1daf809ff8b77cf4e1b89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fd:84:2c:b3:98:de:e7:98:f3:36:67:bd:ff:
21:e2:22:d6:16:98:c6:92:a3:82:ec:00:f1:2e:23:
cd:1b:69:b4:26:65:71:ff:7c:5c:38:96:8f:98:95:
86:43:4b:a9:26:f1:f2:b6:08:97:19:fe:87:ef:14:
8b:64:1c:79:a4:a2:1e:1d:00:73:a0:71:eb:ab:bb:
a7:f6:3f:f5:68:0e:80:88:6b:b0:d9:0f:f3:73:ff:
dc:fc:ee:ba:04:ed:5c:67:32:b6:c7:10:23:83:76:
9f:05:b9:31:66:df:03:ea:95:7e:a7:33:b0:ae:c4:
2b:9b:ad:57:ce:6c:b4:6a:72:53:fc:a4:04:45:15:
b6:6a:e2:ff:2d:10:d9:25:2e:d5:31:b3:9c:70:66:
67:76:71:02:2a:82:08:62:61:66:68:0c:6d:6f:74:
de:c1:62:1b:0f:3a:48:5c:e4:c5:98:09:46:ed:37:
91:b4:e3:f1:b4:e0:25:f5:b0:ac:cc:f2:7e:5d:04:
2c:09:0c:1b:af:4e:4b:61:34:a0:b0:ae:37:f6:0b:
b5:24:f5:32:de:3f:ab:6a:9b:4e:98:a7:4b:fb:db:
b3:37:bf:6b:cb:84:9c:7d:fe:45:80:a4:ff:87:99:
b5:f2:d5:cd:e3:36:a0:55:4b:71:39:55:ad:5a:0f:
9b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:0E:F4:95:C1:09:25:35:7E:B1:DA:F8:09:FF:8B:77:CF:4E:1B:89
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/IQ70lcEJJTV-sdr4Cf-Ld89OG4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.218.226.0/24
Signature Algorithm: sha256WithRSAEncryption
24:3b:44:16:89:20:43:24:a9:a3:26:1e:0c:bf:1b:39:47:f3:
75:d1:a4:01:54:9d:9e:91:b3:d7:82:f6:8b:a6:73:a7:e1:b5:
45:b7:19:f7:46:e4:82:8d:57:97:a5:06:90:1b:8a:a5:56:eb:
c6:b8:9c:37:e7:17:8d:9f:68:8d:c1:63:4f:b0:c1:72:24:ff:
09:6c:2b:b4:81:d4:1c:42:b8:46:50:7b:1d:ba:45:1d:70:46:
46:81:3a:0c:c7:c1:2f:ef:bb:79:0a:ff:e4:81:92:31:69:b4:
31:7c:e1:53:dd:6d:70:4e:39:49:2e:39:8e:f2:cb:44:62:86:
78:a9:3a:aa:a4:72:91:f2:25:ef:23:95:a3:99:2e:2c:c3:38:
0b:73:85:7b:1a:f8:5e:49:8f:39:93:ed:81:e7:83:27:d7:91:
b2:c0:c9:54:93:35:c3:7e:e4:c4:3f:f0:8e:c1:a2:56:b2:fb:
a9:9e:9b:bd:29:e6:9a:69:58:a2:9a:37:6c:b5:79:9c:3b:f1:
85:9c:b9:69:f8:55:bf:47:ac:75:51:62:95:d1:62:1a:5b:fe:
99:73:33:4d:36:0f:2d:91:b0:07:41:84:60:82:85:15:ff:cb:
04:b0:95:37:a1:9a:a4:71:22:ba:e3:6e:8b:86:b0:40:8a:00:
fd:6c:48:01
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQsrY7VZyHQaMxe8+SfnvrkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjUwMTAzMTQ1OTE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMTBlZjQ5NWMxMDkyNTM1N2ViMWRhZjgwOWZmOGI3N2NmNGUxYjg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAof2ELLOY3ueY8zZnvf8h4iLWFpjG
kqOC7ADxLiPNG2m0JmVx/3xcOJaPmJWGQ0upJvHytgiXGf6H7xSLZBx5pKIeHQBz
oHHrq7un9j/1aA6AiGuw2Q/zc//c/O66BO1cZzK2xxAjg3afBbkxZt8D6pV+pzOw
rsQrm61Xzmy0anJT/KQERRW2auL/LRDZJS7VMbOccGZndnECKoIIYmFmaAxtb3Te
wWIbDzpIXOTFmAlG7TeRtOPxtOAl9bCszPJ+XQQsCQwbr05LYTSgsK439gu1JPUy
3j+raptOmKdL+9uzN79ry4Scff5FgKT/h5m18tXN4zagVUtxOVWtWg+buQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCEO9JXBCSU1frHa+An/i3fPThuJMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvSVE3MGxjRUpKVFYtc2RyNENmLUxkODlPRzRrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1driMA0G
CSqGSIb3DQEBCwUAA4IBAQAkO0QWiSBDJKmjJh4Mvxs5R/N10aQBVJ2ekbPXgvaL
pnOn4bVFtxn3RuSCjVeXpQaQG4qlVuvGuJw35xeNn2iNwWNPsMFyJP8JbCu0gdQc
QrhGUHsdukUdcEZGgToMx8Ev77t5Cv/kgZIxabQxfOFT3W1wTjlJLjmO8stEYoZ4
qTqqpHKR8iXvI5WjmS4swzgLc4V7GvheSY85k+2B54Mn15GywMlUkzXDfuTEP/CO
waJWsvupnpu9KeaaaViimjdstXmcO/GFnLlp+FW/R6x1UWKV0WIaW/6ZczNNNg8t
kbAHQYRggoUV/8sEsJU3oZqkcSK6426LhrBAigD9bEgB
-----END CERTIFICATE-----
Generated at Wed Feb 5 07:46:50 2025 by rpki-client