Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/PaAKa3KVMmvreQXkTv3mpp4EXtU.roa
File: PaAKa3KVMmvreQXkTv3mpp4EXtU.roa (raw, json)
Hash identifier: Yk0xJ4dj2fg2O2sjM5Z1mGa8myeooSM71ImFSimaG3s=
Subject key identifier: 3D:A0:0A:6B:72:95:32:6B:EB:79:05:E4:4E:FD:E6:A6:9E:04:5E:D5
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019421443A010767C37998613114635626EB
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/PaAKa3KVMmvreQXkTv3mpp4EXtU.roa
Signing time: Wed 01 Jan 2025 09:48:26 +0000
ROA not before: Wed 01 Jan 2025 09:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 270158
IP address blocks: 82.152.133.0/24 maxlen: 24
82.152.138.0/24 maxlen: 24
82.152.139.0/24 maxlen: 24
82.153.2.0/24 maxlen: 24
82.153.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:3a:01:07:67:c3:79:98:61:31:14:63:56:26:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 1 09:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3da00a6b7295326beb7905e44efde6a69e045ed5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:bd:7e:ce:7c:28:36:79:d2:04:b1:1b:f0:e8:
f3:78:58:5f:72:3c:4f:c9:42:1e:84:05:d3:4b:0d:
a4:e4:b6:04:95:b0:bf:45:98:4a:1c:8b:25:30:dd:
f3:29:05:fa:07:25:e2:b1:a7:cb:53:b4:c1:80:83:
c9:08:54:78:96:9e:3b:42:90:1f:ad:f4:75:a4:63:
f2:da:99:c0:7d:4d:06:a0:c4:e4:70:aa:bf:5a:81:
df:9b:08:24:7d:d3:a0:6b:dd:df:a8:7b:e3:e7:25:
e4:27:32:9a:74:a6:90:25:02:f1:43:ea:c5:5d:3b:
85:58:43:15:1a:e2:04:c9:b8:26:5f:ae:98:50:88:
ad:aa:2f:63:d9:90:65:f3:4e:e7:13:7f:ee:04:40:
47:61:0d:a7:37:a3:15:09:89:f7:8b:68:d7:09:3a:
58:25:26:3f:68:12:6a:26:66:cc:b2:bf:e2:df:50:
16:2e:ec:62:95:ac:78:24:4c:90:e2:96:59:fe:44:
d1:56:60:f8:43:97:54:8f:98:3f:82:6c:8e:56:7f:
48:8d:b9:88:c3:42:38:bb:c1:a1:69:75:0d:6f:36:
e1:38:99:2d:3d:da:6a:21:01:02:5e:56:1c:5e:50:
88:0b:cc:22:ce:c0:51:c5:26:ae:51:48:b7:dd:f7:
f8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:A0:0A:6B:72:95:32:6B:EB:79:05:E4:4E:FD:E6:A6:9E:04:5E:D5
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/PaAKa3KVMmvreQXkTv3mpp4EXtU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.133.0/24
82.152.138.0/23
82.153.2.0/23
Signature Algorithm: sha256WithRSAEncryption
31:45:9a:48:96:43:80:d2:13:91:4f:91:29:78:dd:4a:00:3b:
db:1e:00:0f:6c:09:06:a3:96:3c:4a:db:1c:36:28:50:13:03:
2f:2a:a7:02:a5:15:5a:9d:d7:73:eb:e2:66:39:e6:a2:dd:b3:
70:24:22:48:f7:a3:54:b9:8b:3a:1c:90:f6:bd:d8:99:fe:16:
eb:d1:11:03:96:95:0f:aa:89:7e:bf:64:a8:8f:3c:7a:99:29:
b7:4d:f1:cf:11:57:f0:80:e4:51:ba:fc:80:8a:b5:6f:14:91:
f9:48:0c:25:b1:74:c9:9b:61:44:72:07:c1:23:25:41:65:e4:
b5:31:74:6a:9f:0f:c5:05:c7:7b:ef:85:88:93:e9:8f:03:1e:
d9:00:08:50:54:00:1f:cf:4c:cc:c0:c3:98:20:31:61:12:14:
b4:5e:14:8e:70:d2:49:40:66:f6:b9:d9:2a:7a:3d:53:fc:e9:
5a:d8:27:de:7b:e1:43:25:8b:ad:0d:81:5b:3a:c6:d1:d3:8b:
ea:ab:31:61:7e:92:c6:15:83:b6:02:f7:90:0c:05:9e:70:b0:
49:79:1d:88:7f:78:83:a1:e4:e0:43:9e:16:b7:cd:97:fd:8a:
e0:5f:83:bb:e5:3a:e6:a8:ad:f3:c0:4f:25:c8:fb:c4:f0:eb:
bd:b4:52:e8
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQhRDoBB2fDeZhhMRRjVibrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjUwMTAxMDk0ODI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZGEwMGE2YjcyOTUzMjZiZWI3OTA1ZTQ0ZWZkZTZhNjllMDQ1ZWQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoL1+znwoNnnSBLEb8OjzeFhfcjxP
yUIehAXTSw2k5LYElbC/RZhKHIslMN3zKQX6ByXisafLU7TBgIPJCFR4lp47QpAf
rfR1pGPy2pnAfU0GoMTkcKq/WoHfmwgkfdOga93fqHvj5yXkJzKadKaQJQLxQ+rF
XTuFWEMVGuIEybgmX66YUIitqi9j2ZBl807nE3/uBEBHYQ2nN6MVCYn3i2jXCTpY
JSY/aBJqJmbMsr/i31AWLuxilax4JEyQ4pZZ/kTRVmD4Q5dUj5g/gmyOVn9IjbmI
w0I4u8GhaXUNbzbhOJktPdpqIQECXlYcXlCIC8wizsBRxSauUUi33ff4EwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFD2gCmtylTJr63kF5E795qaeBF7VMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvUGFBS2EzS1ZNbXZyZVFYa1R2M21wcDRFWHRVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAUpiFAwQB
UpiKAwQBUpkCMA0GCSqGSIb3DQEBCwUAA4IBAQAxRZpIlkOA0hORT5EpeN1KADvb
HgAPbAkGo5Y8StscNihQEwMvKqcCpRVanddz6+JmOeai3bNwJCJI96NUuYs6HJD2
vdiZ/hbr0REDlpUPqol+v2Sojzx6mSm3TfHPEVfwgORRuvyAirVvFJH5SAwlsXTJ
m2FEcgfBIyVBZeS1MXRqnw/FBcd774WIk+mPAx7ZAAhQVAAfz0zMwMOYIDFhEhS0
XhSOcNJJQGb2udkqej1T/Ola2Cfee+FDJYutDYFbOsbR04vqqzFhfpLGFYO2AveQ
DAWecLBJeR2If3iDoeTgQ54Wt82X/YrgX4O75TrmqK3zwE8lyPvE8Ou9tFLo
-----END CERTIFICATE-----
Generated at Wed Feb 5 07:42:52 2025 by rpki-client