Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/tDL3TfYMG--_DJ4O6onkSNLhFqM.roa
File: tDL3TfYMG--_DJ4O6onkSNLhFqM.roa (raw, json)
Hash identifier: ahPHavd9vW5sWNj/2wjY0IyTg0T9L7YLWNOCuag7pLI=
Subject key identifier: B4:32:F7:4D:F6:0C:1B:EF:BF:0C:9E:0E:EA:89:E4:48:D2:E1:16:A3
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019421443380B92B6E66A243C5770BBD9EC6
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/tDL3TfYMG--_DJ4O6onkSNLhFqM.roa
Signing time: Wed 01 Jan 2025 09:48:25 +0000
ROA not before: Wed 01 Jan 2025 09:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215931
IP address blocks: 82.153.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:33:80:b9:2b:6e:66:a2:43:c5:77:0b:bd:9e:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 1 09:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b432f74df60c1befbf0c9e0eea89e448d2e116a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:73:85:ca:ed:dd:26:84:6a:30:44:a9:a9:36:
c9:62:d4:4d:9a:7b:d1:b3:39:3a:7a:79:14:41:a3:
cd:21:da:8e:1b:c1:88:d0:58:ec:48:cc:9e:dc:75:
7c:ac:1b:db:1b:51:6e:e5:30:05:c0:e8:5e:3e:82:
f4:66:be:0b:76:97:be:c1:26:53:e9:e6:7c:7f:c1:
33:e4:48:09:7e:67:3c:1b:e0:95:0c:2b:eb:fb:87:
ca:8c:1b:67:55:85:57:2a:4e:9a:23:a0:bf:9e:95:
96:40:80:93:c6:02:9c:c6:57:39:10:1b:9a:97:82:
69:5b:ce:71:3d:c1:7a:5c:84:53:d3:4b:00:22:f7:
c0:58:71:29:9c:53:1f:11:02:85:60:30:6c:fe:9e:
e2:ce:21:26:0a:af:89:c6:28:24:a4:c2:d3:9c:e8:
b1:31:6b:e2:e0:25:32:3b:ec:93:cb:34:a1:04:00:
e4:40:a9:8f:06:42:0a:a9:df:70:32:c4:9b:26:b6:
09:81:60:d1:80:e1:dc:66:87:a7:aa:1f:9c:ec:74:
27:c2:ac:94:26:fa:40:6c:67:bb:77:e6:f1:88:96:
fa:99:d0:e3:e3:48:68:70:12:39:80:0f:21:02:19:
7b:9e:a1:eb:ce:2f:72:2a:a9:83:c5:93:32:80:0a:
60:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:32:F7:4D:F6:0C:1B:EF:BF:0C:9E:0E:EA:89:E4:48:D2:E1:16:A3
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/tDL3TfYMG--_DJ4O6onkSNLhFqM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.4.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:05:11:b2:f3:80:59:d3:ce:2d:71:4b:2b:e5:77:3e:ed:b0:
ea:3f:ab:fb:75:a3:82:0c:fb:34:2d:50:90:88:5b:ac:d8:8a:
ac:5d:a0:7d:ed:20:47:91:13:91:9d:8f:8d:b3:7c:60:23:b3:
aa:f4:70:12:77:5b:42:3e:4a:11:b9:49:20:6e:c2:1a:81:c9:
31:06:21:68:f5:1e:a3:72:e8:7d:89:26:2d:f3:34:df:b5:82:
73:69:3c:f9:19:83:7d:b0:4d:a1:8b:14:51:61:18:b4:bb:85:
e7:b3:c2:99:f0:f1:e4:ed:08:c9:16:9b:f4:90:ce:9a:e8:90:
00:61:d8:f6:34:42:4a:93:61:0d:43:f6:35:41:1f:07:20:b2:
6e:4b:45:63:61:b4:25:59:ef:ec:2a:d2:78:56:f4:2b:94:6d:
c0:f1:ae:4c:01:21:ab:be:8c:12:ae:99:62:ce:22:0f:45:f1:
f8:c2:45:da:64:00:7f:56:3b:ad:ef:8c:22:3d:3f:df:f2:d6:
f3:46:dc:b2:7f:18:b8:0a:3f:cd:df:eb:cb:a2:c2:36:27:d5:
d1:78:82:8f:37:b1:d5:37:63:c1:c8:8c:7b:ff:45:5f:71:c6:
f3:d7:fe:d4:9e:a1:fd:8f:33:47:50:56:7d:89:5f:2c:9d:c2:
67:b3:a7:bb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhRDOAuStuZqJDxXcLvZ7GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjUwMTAxMDk0ODI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNDMyZjc0ZGY2MGMxYmVmYmYwYzllMGVlYTg5ZTQ0OGQyZTExNmEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHOFyu3dJoRqMESpqTbJYtRNmnvR
szk6enkUQaPNIdqOG8GI0FjsSMye3HV8rBvbG1Fu5TAFwOhePoL0Zr4Ldpe+wSZT
6eZ8f8Ez5EgJfmc8G+CVDCvr+4fKjBtnVYVXKk6aI6C/npWWQICTxgKcxlc5EBua
l4JpW85xPcF6XIRT00sAIvfAWHEpnFMfEQKFYDBs/p7iziEmCq+JxigkpMLTnOix
MWvi4CUyO+yTyzShBADkQKmPBkIKqd9wMsSbJrYJgWDRgOHcZoenqh+c7HQnwqyU
JvpAbGe7d+bxiJb6mdDj40hocBI5gA8hAhl7nqHrzi9yKqmDxZMygApgewIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLQy9032DBvvvwyeDuqJ5EjS4RajMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvdERMM1RmWU1HLS1fREo0TzZvbmtTTkxoRnFNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUpkEMA0G
CSqGSIb3DQEBCwUAA4IBAQCjBRGy84BZ084tcUsr5Xc+7bDqP6v7daOCDPs0LVCQ
iFus2IqsXaB97SBHkRORnY+Ns3xgI7Oq9HASd1tCPkoRuUkgbsIagckxBiFo9R6j
cuh9iSYt8zTftYJzaTz5GYN9sE2hixRRYRi0u4Xns8KZ8PHk7QjJFpv0kM6a6JAA
Ydj2NEJKk2ENQ/Y1QR8HILJuS0VjYbQlWe/sKtJ4VvQrlG3A8a5MASGrvowSrpli
ziIPRfH4wkXaZAB/Vjut74wiPT/f8tbzRtyyfxi4Cj/N3+vLosI2J9XReIKPN7HV
N2PByIx7/0Vfccbz1/7UnqH9jzNHUFZ9iV8sncJns6e7
-----END CERTIFICATE-----
Generated at Wed Feb 5 07:36:36 2025 by rpki-client