Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/_GnprUL9RiOSINIgt8MCDfPJSj8.roa
File: _GnprUL9RiOSINIgt8MCDfPJSj8.roa (raw, json)
Hash identifier: Yrrm+IlBuBC0Z/pDmaIlkiimbDJKKuFiMeYQ+bxwX6M=
Subject key identifier: FC:69:E9:AD:42:FD:46:23:92:20:D2:20:B7:C3:02:0D:F3:C9:4A:3F
Certificate issuer: /CN=9e459aa4602bffa2d2650ba66818458c89fc4582
Certificate serial: 0194456C1605BD8E769EA8F566F03BFA8AAD
Authority key identifier: 9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/_GnprUL9RiOSINIgt8MCDfPJSj8.roa
Signing time: Wed 08 Jan 2025 10:18:18 +0000
ROA not before: Wed 08 Jan 2025 10:18:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 84.247.113.0/24 maxlen: 24
89.149.17.0/24 maxlen: 24
89.149.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 16:04:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:45:6c:16:05:bd:8e:76:9e:a8:f5:66:f0:3b:fa:8a:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e459aa4602bffa2d2650ba66818458c89fc4582
Validity
Not Before: Jan 8 10:18:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fc69e9ad42fd46239220d220b7c3020df3c94a3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2a:50:59:ab:84:0b:40:73:a8:9f:f3:c8:33:
5f:ee:7b:95:aa:25:c7:de:f5:8c:9a:05:56:e3:9e:
d0:3b:60:e4:3b:5d:d1:b4:5d:41:b0:9e:1d:15:9e:
a1:d1:99:ef:3f:3b:80:da:b3:b1:7a:8d:57:39:1b:
19:88:a5:db:6b:aa:77:04:f5:70:6e:53:64:df:28:
a6:99:0d:46:a3:cb:8e:5a:04:34:ee:ef:0e:45:6e:
3f:5d:7d:40:97:0a:d1:bf:7e:6b:1e:b2:8b:c3:2f:
ff:7c:49:f2:00:a4:8e:74:b9:4b:83:21:a2:d0:0f:
bf:4f:0b:a4:b4:1b:c7:8d:18:0d:64:8e:50:bd:18:
88:7e:eb:2e:b7:cd:c9:d0:99:cf:a9:a3:01:0c:37:
88:54:e6:6b:2c:e1:3b:8a:58:83:e8:5f:06:28:86:
c9:6a:ed:c9:ff:f2:73:0f:33:ca:c9:07:59:2e:a4:
b7:16:f9:65:ba:a6:25:91:b0:2b:f0:a4:1b:22:73:
64:47:70:3c:e7:95:18:67:48:4d:76:b6:97:dc:ef:
d8:e5:2b:56:13:96:75:96:df:6f:35:37:b6:65:a6:
6d:25:f1:bf:49:d8:aa:35:93:f5:f4:3d:c5:b4:33:
c2:1c:11:90:c0:33:d2:52:a9:f0:64:90:c6:4c:2f:
37:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:69:E9:AD:42:FD:46:23:92:20:D2:20:B7:C3:02:0D:F3:C9:4A:3F
X509v3 Authority Key Identifier:
keyid:9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/_GnprUL9RiOSINIgt8MCDfPJSj8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.247.113.0/24
89.149.17.0-89.149.18.255
Signature Algorithm: sha256WithRSAEncryption
72:ca:df:84:b1:da:0f:a1:d2:6d:8a:f4:40:83:76:cd:a0:1a:
8e:49:3b:71:b6:9d:5b:62:37:54:5e:6f:79:ae:96:12:44:1c:
66:e7:f0:e9:e6:fa:49:a5:8d:b0:12:e5:be:65:35:08:b9:ed:
8d:21:99:2a:ff:94:0c:95:75:0a:c1:eb:97:59:5d:45:b2:9d:
4d:b4:03:6c:e2:69:24:f7:51:d1:6e:88:9f:b4:3d:7e:7a:8a:
ae:74:5b:77:15:83:49:32:10:b2:c2:78:f3:1d:57:95:25:40:
34:44:a2:8b:e7:42:27:4e:a9:d8:79:b8:00:a3:d1:aa:62:ed:
8e:c3:1c:12:2a:40:fd:12:bf:92:c4:77:93:59:ba:a9:12:e7:
fc:d3:18:c6:7f:ad:d9:6f:a3:9b:a5:8b:ad:9a:71:b1:63:f0:
b6:01:f5:ce:8e:d4:7a:3f:e1:0d:87:a9:59:85:48:b8:6e:22:
1c:59:b1:4d:2d:85:f5:2a:aa:be:80:ae:4f:2a:b9:1b:ce:b8:
d4:55:8d:a6:ca:80:6b:ff:e8:94:9d:d5:13:63:d0:79:c9:d0:
64:62:c9:69:29:8b:30:35:dc:9c:d6:a6:b1:b7:78:df:c6:c2:
5b:77:b3:38:83:b1:7c:6b:08:43:0f:d9:c2:30:8d:de:e2:c6:
46:12:f9:ed
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZRFbBYFvY52nqj1ZvA7+oqtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNDU5YWE0NjAyYmZmYTJkMjY1MGJhNjY4MTg0NThjODlm
YzQ1ODIwHhcNMjUwMTA4MTAxODE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYzY5ZTlhZDQyZmQ0NjIzOTIyMGQyMjBiN2MzMDIwZGYzYzk0YTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSpQWauEC0BzqJ/zyDNf7nuVqiXH
3vWMmgVW457QO2DkO13RtF1BsJ4dFZ6h0ZnvPzuA2rOxeo1XORsZiKXba6p3BPVw
blNk3yimmQ1Go8uOWgQ07u8ORW4/XX1AlwrRv35rHrKLwy//fEnyAKSOdLlLgyGi
0A+/TwuktBvHjRgNZI5QvRiIfusut83J0JnPqaMBDDeIVOZrLOE7iliD6F8GKIbJ
au3J//JzDzPKyQdZLqS3FvlluqYlkbAr8KQbInNkR3A855UYZ0hNdraX3O/Y5StW
E5Z1lt9vNTe2ZaZtJfG/SdiqNZP19D3FtDPCHBGQwDPSUqnwZJDGTC83NQIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFPxp6a1C/UYjkiDSILfDAg3zyUo/MB8GA1UdIwQY
MBaAFJ5FmqRgK/+i0mULpmgYRYyJ/EWCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmtXYXBHQXJfNkxTWlF1bWFCaEZqSW44UllJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi85Y2MzMzMtNjhkNS00NjkyLTljNWIt
MjhhODQxZGEwYmZkLzEvX0ducHJVTDlSaU9TSU5JZ3Q4TUNEZlBKU2o4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi85Y2MzMzMtNjhkNS00NjkyLTljNWItMjhhODQxZGEwYmZk
LzEvbmtXYXBHQXJfNkxTWlF1bWFCaEZqSW44UllJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAVPdxMAwD
BABZlREDBABZlRIwDQYJKoZIhvcNAQELBQADggEBAHLK34Sx2g+h0m2K9ECDds2g
Go5JO3G2nVtiN1Reb3mulhJEHGbn8Onm+kmljbAS5b5lNQi57Y0hmSr/lAyVdQrB
65dZXUWynU20A2ziaST3UdFuiJ+0PX56iq50W3cVg0kyELLCePMdV5UlQDREoovn
QidOqdh5uACj0api7Y7DHBIqQP0Sv5LEd5NZuqkS5/zTGMZ/rdlvo5uli62acbFj
8LYB9c6O1Ho/4Q2HqVmFSLhuIhxZsU0thfUqqr6Ark8quRvOuNRVjabKgGv/6JSd
1RNj0HnJ0GRiyWkpizA13JzWprG3eN/Gwlt3sziDsXxrCEMP2cIwjd7ixkYS+e0=
-----END CERTIFICATE-----
Generated at Fri Apr 4 21:40:15 2025 by rpki-client