Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/6c075e-6263-4ff3-a26d-8d32220715ee/1/2AYUWvm8F1To8URav6-hliMLNGM.roa
File: 2AYUWvm8F1To8URav6-hliMLNGM.roa (raw, json)
Hash identifier: xtydpTSnQLnPEEmzIm3eQJgTUjiDutczP4OZlZO4Bow=
Subject key identifier: D8:06:14:5A:F9:BC:17:54:E8:F1:44:5A:BF:AF:A1:96:23:0B:34:63
Certificate issuer: /CN=3d70f1f6563de43a11d3644975667c1c28e7959e
Certificate serial: 019427B65FFA3A1993BCCA098D8957047A0D
Authority key identifier: 3D:70:F1:F6:56:3D:E4:3A:11:D3:64:49:75:66:7C:1C:28:E7:95:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PXDx9lY95DoR02RJdWZ8HCjnlZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/6c075e-6263-4ff3-a26d-8d32220715ee/1/2AYUWvm8F1To8URav6-hliMLNGM.roa
Signing time: Thu 02 Jan 2025 15:50:51 +0000
ROA not before: Thu 02 Jan 2025 15:50:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35492
IP address blocks: 78.41.112.0/21 maxlen: 21
185.194.20.0/22 maxlen: 22
193.238.156.0/22 maxlen: 22
2a02:60::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/6c075e-6263-4ff3-a26d-8d32220715ee/1/PXDx9lY95DoR02RJdWZ8HCjnlZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/6c075e-6263-4ff3-a26d-8d32220715ee/1/PXDx9lY95DoR02RJdWZ8HCjnlZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PXDx9lY95DoR02RJdWZ8HCjnlZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:5f:fa:3a:19:93:bc:ca:09:8d:89:57:04:7a:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d70f1f6563de43a11d3644975667c1c28e7959e
Validity
Not Before: Jan 2 15:50:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d806145af9bc1754e8f1445abfafa196230b3463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e8:b9:e2:52:84:2d:ec:ca:22:d5:7f:e3:9b:
fa:f6:f8:a0:45:1f:4a:97:45:44:ca:f8:70:a8:fb:
65:93:35:97:d8:e0:9e:76:2c:2a:ec:6f:36:d3:4c:
63:3a:85:8e:fb:a8:c3:4e:c2:48:6f:bc:44:b6:a8:
fb:94:40:b7:9d:fb:b9:8d:12:75:81:1d:d8:a0:31:
ea:38:d9:a9:8b:e2:95:58:ee:eb:a3:06:f2:9b:4a:
96:02:89:7d:eb:29:81:d4:6c:4e:b0:69:8b:4e:cd:
de:14:02:e5:bb:82:bd:a0:75:a3:b1:bf:8b:59:ce:
0f:34:54:81:3b:15:b0:67:ef:f8:b9:0e:7e:88:33:
ed:eb:01:25:5b:8c:53:ee:2d:e8:34:af:d1:34:99:
10:89:7d:2a:79:32:88:50:e5:72:cb:d4:0c:b4:90:
4d:52:14:0e:f6:30:aa:3b:0e:62:1c:0f:56:6f:4d:
cd:04:51:e4:44:31:78:00:c7:a3:03:c0:bc:bb:55:
25:34:6d:52:22:6f:eb:cf:80:5c:07:99:f0:fb:32:
4e:71:c6:7d:1d:fa:43:56:67:ee:97:0c:50:c3:40:
15:c6:c2:a4:8e:d7:2b:ed:1c:99:71:33:45:a3:f1:
33:b8:d4:d2:73:3a:90:87:9b:45:5e:27:eb:48:36:
d9:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:06:14:5A:F9:BC:17:54:E8:F1:44:5A:BF:AF:A1:96:23:0B:34:63
X509v3 Authority Key Identifier:
keyid:3D:70:F1:F6:56:3D:E4:3A:11:D3:64:49:75:66:7C:1C:28:E7:95:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PXDx9lY95DoR02RJdWZ8HCjnlZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/6c075e-6263-4ff3-a26d-8d32220715ee/1/2AYUWvm8F1To8URav6-hliMLNGM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/6c075e-6263-4ff3-a26d-8d32220715ee/1/PXDx9lY95DoR02RJdWZ8HCjnlZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.41.112.0/21
185.194.20.0/22
193.238.156.0/22
IPv6:
2a02:60::/29
Signature Algorithm: sha256WithRSAEncryption
3f:6f:2f:b1:52:a3:31:11:82:07:60:13:80:21:dd:ee:84:57:
e6:18:6b:7c:9f:fd:76:11:06:eb:24:3e:01:1e:4b:85:89:38:
de:0b:15:97:f4:f9:95:4d:eb:cd:ef:8f:0f:3f:83:ea:b8:5e:
09:5b:3a:00:c4:c9:86:72:7e:de:dc:e0:53:d5:b4:5a:0e:40:
f3:dc:fe:01:72:43:9c:a6:3d:79:42:2e:b0:5e:f5:4a:28:6c:
56:4a:ce:e0:f5:df:ec:9a:fa:08:2b:6c:f5:d0:92:2c:7a:56:
e8:69:51:dc:de:57:b9:71:06:ba:b6:30:c3:0e:42:62:73:58:
98:03:8d:a9:16:75:a2:7e:13:8d:7c:e8:81:f8:99:7b:9c:94:
35:10:4c:38:81:5a:07:e9:9a:bd:f6:d6:b6:38:4a:12:54:c2:
6e:b1:1a:32:95:b2:b7:ab:3b:4f:69:41:c7:a0:b5:ce:43:ee:
16:5a:a4:83:b9:59:31:fc:72:c9:0f:08:da:ed:65:1f:07:a4:
de:78:5c:e4:e7:7a:27:2d:11:53:bc:69:af:9f:38:79:8f:eb:
8f:56:bd:69:58:6a:b6:5b:6b:45:1e:34:86:e8:5d:31:50:15:
e7:f3:82:e1:3d:83:28:3b:c3:ca:75:09:51:04:38:c5:54:b1:
15:79:a9:43
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAZQntl/6OhmTvMoJjYlXBHoNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkNzBmMWY2NTYzZGU0M2ExMWQzNjQ0OTc1NjY3YzFjMjhl
Nzk1OWUwHhcNMjUwMTAyMTU1MDUxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkODA2MTQ1YWY5YmMxNzU0ZThmMTQ0NWFiZmFmYTE5NjIzMGIzNDYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuui54lKELezKItV/45v69vigRR9K
l0VEyvhwqPtlkzWX2OCediwq7G8200xjOoWO+6jDTsJIb7xEtqj7lEC3nfu5jRJ1
gR3YoDHqONmpi+KVWO7rowbym0qWAol96ymB1GxOsGmLTs3eFALlu4K9oHWjsb+L
Wc4PNFSBOxWwZ+/4uQ5+iDPt6wElW4xT7i3oNK/RNJkQiX0qeTKIUOVyy9QMtJBN
UhQO9jCqOw5iHA9Wb03NBFHkRDF4AMejA8C8u1UlNG1SIm/rz4BcB5nw+zJOccZ9
HfpDVmfulwxQw0AVxsKkjtcr7RyZcTNFo/EzuNTSczqQh5tFXifrSDbZiwIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFNgGFFr5vBdU6PFEWr+voZYjCzRjMB8GA1UdIwQY
MBaAFD1w8fZWPeQ6EdNkSXVmfBwo55WeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFhEeDlsWTk1RG9SMDJSSmRXWjhIQ2pubFo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC82YzA3NWUtNjI2My00ZmYzLWEyNmQt
OGQzMjIyMDcxNWVlLzEvMkFZVVd2bThGMVRvOFVSYXY2LWhsaU1MTkdNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC82YzA3NWUtNjI2My00ZmYzLWEyNmQtOGQzMjIyMDcxNWVl
LzEvUFhEeDlsWTk1RG9SMDJSSmRXWjhIQ2pubFo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDTilwAwQC
ucIUAwQCwe6cMA0EAgACMAcDBQMqAgBgMA0GCSqGSIb3DQEBCwUAA4IBAQA/by+x
UqMxEYIHYBOAId3uhFfmGGt8n/12EQbrJD4BHkuFiTjeCxWX9PmVTevN748PP4Pq
uF4JWzoAxMmGcn7e3OBT1bRaDkDz3P4BckOcpj15Qi6wXvVKKGxWSs7g9d/smvoI
K2z10JIselboaVHc3le5cQa6tjDDDkJic1iYA42pFnWifhONfOiB+Jl7nJQ1EEw4
gVoH6Zq99ta2OEoSVMJusRoylbK3qztPaUHHoLXOQ+4WWqSDuVkx/HLJDwja7WUf
B6TeeFzk53onLRFTvGmvnzh5j+uPVr1pWGq2W2tFHjSG6F0xUBXn84LhPYMoO8PK
dQlRBDjFVLEVealD
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:34:51 2025 by rpki-client