Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vvOjeTEW7c1EgQGWlgCxoiM4Y1U.roa
File: vvOjeTEW7c1EgQGWlgCxoiM4Y1U.roa (raw, json)
Hash identifier: ESUgns97iNLUEvICJ4oj8VEFfR26dova/9UjqhAZ/TA=
Subject key identifier: BE:F3:A3:79:31:16:ED:CD:44:81:01:96:96:00:B1:A2:23:38:63:55
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0194214420F3B4124EA1AD8310C2C78EE7B6
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vvOjeTEW7c1EgQGWlgCxoiM4Y1U.roa
Signing time: Wed 01 Jan 2025 09:48:20 +0000
ROA not before: Wed 01 Jan 2025 09:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214364
IP address blocks: 89.213.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:20:f3:b4:12:4e:a1:ad:83:10:c2:c7:8e:e7:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 1 09:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bef3a3793116edcd448101969600b1a223386355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:40:30:43:35:62:76:a8:25:d7:57:aa:46:02:
7e:42:f7:87:2c:0d:12:c3:2c:dc:76:9e:67:bf:2c:
f5:d3:dd:7a:df:36:00:b9:8b:dc:88:da:e3:79:7a:
71:3d:2e:d9:0a:71:4c:93:d0:f3:12:b1:58:b3:28:
ee:bf:6c:61:a3:6b:2b:d4:32:4f:7c:fa:a5:15:75:
49:37:37:ff:5b:c8:4e:e2:fe:0e:e4:ba:f5:9b:6d:
76:e8:d1:c2:8a:de:ef:56:01:8e:ee:e6:b3:23:46:
d4:cb:69:31:de:ca:a4:17:63:44:bb:1d:ef:3e:4d:
8a:32:58:a9:0c:4a:fb:9d:f7:ae:ce:ed:fb:f7:20:
46:01:47:88:30:cf:7e:91:f5:ec:bc:91:e8:aa:44:
bd:4b:20:d4:d7:60:c9:97:4b:ea:f6:4a:48:4e:81:
0e:e2:ff:bb:0d:56:c6:d3:5c:65:ec:30:c8:30:8f:
4b:be:6a:00:5b:88:d0:0a:b7:5b:44:68:e0:31:e9:
75:bf:a3:cd:3f:cb:57:c0:3f:1d:3f:e5:0f:77:91:
94:de:29:7c:91:f0:6f:5a:82:b0:e4:c5:b9:e4:74:
c9:fb:b3:35:6a:e9:0c:83:1c:ce:e6:d3:5f:fd:c0:
e7:c3:44:b0:d5:2c:3a:82:c0:a5:a2:5a:1d:38:57:
0d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:F3:A3:79:31:16:ED:CD:44:81:01:96:96:00:B1:A2:23:38:63:55
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vvOjeTEW7c1EgQGWlgCxoiM4Y1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.44.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:95:6d:cb:a7:e9:6f:bd:bf:81:21:c5:1b:1f:2b:f8:e7:f7:
69:ed:a0:c7:fc:fe:b1:6b:f6:8b:77:39:61:1f:1f:ee:bc:df:
bf:6f:24:fb:0d:06:cc:f8:84:8c:e4:bb:f4:ea:a2:81:a2:b2:
13:c3:6e:d1:6a:27:13:7a:a8:b0:3b:47:35:e3:4b:44:83:4d:
a3:99:c9:69:0b:49:c1:c0:45:a3:75:01:c7:15:19:51:1d:14:
9b:1c:25:8d:24:7b:57:5f:96:9e:f0:e5:e6:44:f8:05:df:98:
51:73:05:9d:0e:34:66:ca:c4:80:db:37:b5:ff:db:95:75:d9:
5f:6a:6c:7c:05:61:8d:20:3e:d4:b0:f1:e1:83:54:37:46:2f:
49:fd:ae:1f:c7:88:5d:76:f1:53:7f:8f:f0:71:7f:47:54:c2:
2e:74:a6:83:bb:0d:66:9a:67:bd:f3:d4:1d:74:f4:83:17:29:
1f:c5:86:c3:f2:9e:da:aa:9b:e8:1f:d3:8b:31:f8:e3:4e:ee:
53:07:fb:51:4d:44:95:21:8d:b7:d1:e6:69:8c:d9:1c:d8:88:
f0:f8:1f:74:8d:45:82:f2:ae:6d:21:c1:1c:1e:e5:74:f4:e9:
15:63:2c:07:39:7b:ee:82:4f:cd:d2:39:a0:35:d7:23:ff:54:
7f:c6:d8:d5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhRCDztBJOoa2DEMLHjue2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjUwMTAxMDk0ODIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZWYzYTM3OTMxMTZlZGNkNDQ4MTAxOTY5NjAwYjFhMjIzMzg2MzU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUAwQzVidqgl11eqRgJ+QveHLA0S
wyzcdp5nvyz109163zYAuYvciNrjeXpxPS7ZCnFMk9DzErFYsyjuv2xho2sr1DJP
fPqlFXVJNzf/W8hO4v4O5Lr1m2126NHCit7vVgGO7uazI0bUy2kx3sqkF2NEux3v
Pk2KMlipDEr7nfeuzu379yBGAUeIMM9+kfXsvJHoqkS9SyDU12DJl0vq9kpIToEO
4v+7DVbG01xl7DDIMI9LvmoAW4jQCrdbRGjgMel1v6PNP8tXwD8dP+UPd5GU3il8
kfBvWoKw5MW55HTJ+7M1aukMgxzO5tNf/cDnw0Sw1Sw6gsClolodOFcNfQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFL7zo3kxFu3NRIEBlpYAsaIjOGNVMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvdnZPamVURVc3YzFFZ1FHV2xnQ3hvaU00WTFVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWdUsMA0G
CSqGSIb3DQEBCwUAA4IBAQAdlW3Lp+lvvb+BIcUbHyv45/dp7aDH/P6xa/aLdzlh
Hx/uvN+/byT7DQbM+ISM5Lv06qKBorITw27RaicTeqiwO0c140tEg02jmclpC0nB
wEWjdQHHFRlRHRSbHCWNJHtXX5ae8OXmRPgF35hRcwWdDjRmysSA2ze1/9uVddlf
amx8BWGNID7UsPHhg1Q3Ri9J/a4fx4hddvFTf4/wcX9HVMIudKaDuw1mmme989Qd
dPSDFykfxYbD8p7aqpvoH9OLMfjjTu5TB/tRTUSVIY230eZpjNkc2Ijw+B90jUWC
8q5tIcEcHuV09OkVYywHOXvugk/N0jmgNdcj/1R/xtjV
-----END CERTIFICATE-----
Generated at Wed Feb 5 07:43:53 2025 by rpki-client