Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/bp6atfzAvkQb-PrMYxGrPoqB8q0.roa
File: bp6atfzAvkQb-PrMYxGrPoqB8q0.roa (raw, json)
Hash identifier: 8nzUfAfKiSAENB7VGYZnaBCED4j35kwpbOU47GsXlcQ=
Subject key identifier: 6E:9E:9A:B5:FC:C0:BE:44:1B:F8:FA:CC:63:11:AB:3E:8A:81:F2:AD
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01942143E1B6E62859BBE07662558C18D4C0
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/bp6atfzAvkQb-PrMYxGrPoqB8q0.roa
Signing time: Wed 01 Jan 2025 09:48:04 +0000
ROA not before: Wed 01 Jan 2025 09:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43391
IP address blocks: 89.213.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:e1:b6:e6:28:59:bb:e0:76:62:55:8c:18:d4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 1 09:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6e9e9ab5fcc0be441bf8facc6311ab3e8a81f2ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:dc:65:03:d0:50:5c:ec:e8:94:c5:62:15:a5:
0c:d8:bf:0a:0c:e0:ba:80:26:26:1a:fd:49:0e:62:
cb:1e:63:5f:13:e5:07:10:25:fb:e7:e4:57:3e:04:
67:e1:fc:ac:5e:96:07:ca:b7:49:e2:c9:15:d0:9e:
c7:e9:3e:32:9f:1b:2e:07:8e:f1:e7:c6:74:74:8c:
0b:85:96:5e:d2:e5:53:53:cd:97:97:9e:51:f3:41:
0a:0a:69:65:28:7b:04:bf:84:bf:b0:4f:49:82:56:
7f:9d:f8:65:74:d9:23:22:aa:86:5b:b4:8f:ae:8c:
6f:6b:8c:cf:04:1a:d4:c9:a3:36:ab:00:d5:d8:d2:
a9:61:82:35:d7:30:48:3c:3e:24:55:fc:48:1b:21:
db:85:a9:a8:ce:73:ce:65:c1:b5:eb:41:c5:74:d0:
30:1e:4a:87:a9:a1:9b:8d:cd:ef:70:41:4f:a0:ae:
17:d1:c7:54:9f:f2:24:19:b2:25:06:39:7e:61:7f:
fc:d3:3a:0f:ce:76:94:e2:60:6b:4c:36:50:69:3c:
70:f7:a8:5d:8a:05:3e:77:74:73:eb:c7:1d:42:ce:
eb:03:f5:63:f9:34:27:ec:98:0d:e8:2b:56:40:c8:
90:7f:a4:91:2c:66:52:73:63:30:9d:2a:d9:f9:ce:
6c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:9E:9A:B5:FC:C0:BE:44:1B:F8:FA:CC:63:11:AB:3E:8A:81:F2:AD
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/bp6atfzAvkQb-PrMYxGrPoqB8q0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.59.0/24
Signature Algorithm: sha256WithRSAEncryption
90:7e:e1:78:da:30:cc:a9:ab:0c:39:7e:f3:9b:64:4f:0d:fa:
1a:0d:26:b3:5b:4a:53:ad:7c:fe:32:f8:76:17:a2:6e:aa:f5:
42:b7:08:9b:23:08:72:9f:cc:ca:e3:2b:f8:e7:08:80:77:b5:
b3:7c:bc:85:51:c6:24:cb:0d:a6:ca:95:86:04:a8:0b:19:ec:
fa:a5:94:7a:04:4c:c1:c7:3a:20:1d:ac:da:03:96:ee:99:bb:
c7:fe:db:51:87:50:01:fa:5e:3f:c1:ba:55:18:4a:26:1c:b4:
65:da:9a:51:b1:6c:ff:fd:c1:26:41:67:d3:ef:a4:95:d9:14:
b9:30:d2:93:b3:54:b4:c9:ec:7e:94:d0:29:06:5d:cf:d2:ea:
b1:ec:c4:6e:11:1e:0b:3f:2e:94:cd:3f:e1:b5:30:04:4b:f1:
e5:68:4b:71:c5:ea:91:df:c1:6a:7a:ee:5d:4a:64:6b:39:9e:
36:a1:f8:04:0d:af:9a:2d:7e:bd:e6:3b:3c:5c:9d:a6:0b:dd:
d0:30:49:e0:d4:e1:ee:5e:41:6b:65:7d:ab:09:94:1f:b6:eb:
98:2e:4a:31:60:39:4a:33:09:ff:93:82:d4:08:77:4a:ac:7b:
0e:e7:9a:27:76:09:8e:08:e6:ae:c1:d9:34:a2:2d:27:5c:2d:
4d:60:7a:9a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhQ+G25ihZu+B2YlWMGNTAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjUwMTAxMDk0ODA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZTllOWFiNWZjYzBiZTQ0MWJmOGZhY2M2MzExYWIzZThhODFmMmFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6NxlA9BQXOzolMViFaUM2L8KDOC6
gCYmGv1JDmLLHmNfE+UHECX75+RXPgRn4fysXpYHyrdJ4skV0J7H6T4ynxsuB47x
58Z0dIwLhZZe0uVTU82Xl55R80EKCmllKHsEv4S/sE9JglZ/nfhldNkjIqqGW7SP
roxva4zPBBrUyaM2qwDV2NKpYYI11zBIPD4kVfxIGyHbhamoznPOZcG160HFdNAw
HkqHqaGbjc3vcEFPoK4X0cdUn/IkGbIlBjl+YX/80zoPznaU4mBrTDZQaTxw96hd
igU+d3Rz68cdQs7rA/Vj+TQn7JgN6CtWQMiQf6SRLGZSc2MwnSrZ+c5sEQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG6emrX8wL5EG/j6zGMRqz6KgfKtMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvYnA2YXRmekF2a1FiLVByTVl4R3JQb3FCOHEwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWdU7MA0G
CSqGSIb3DQEBCwUAA4IBAQCQfuF42jDMqasMOX7zm2RPDfoaDSazW0pTrXz+Mvh2
F6JuqvVCtwibIwhyn8zK4yv45wiAd7WzfLyFUcYkyw2mypWGBKgLGez6pZR6BEzB
xzogHazaA5bumbvH/ttRh1AB+l4/wbpVGEomHLRl2ppRsWz//cEmQWfT76SV2RS5
MNKTs1S0yex+lNApBl3P0uqx7MRuER4LPy6UzT/htTAES/HlaEtxxeqR38Fqeu5d
SmRrOZ42ofgEDa+aLX695js8XJ2mC93QMEng1OHuXkFrZX2rCZQftuuYLkoxYDlK
Mwn/k4LUCHdKrHsO55ondgmOCOauwdk0oi0nXC1NYHqa
-----END CERTIFICATE-----
Generated at Wed Feb 5 07:40:27 2025 by rpki-client