Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/d612a3-4631-47de-940d-8be0d97682ab/1/cK4llrkBdLlV4HeILjRyQ98esEM.roa
File: cK4llrkBdLlV4HeILjRyQ98esEM.roa (raw, json)
Hash identifier: MuU2BWlfRFj75k9zGngWfQu7w/ZtaYOQ1aHN3Tj8NDI=
Subject key identifier: 70:AE:25:96:B9:01:74:B9:55:E0:77:88:2E:34:72:43:DF:1E:B0:43
Certificate issuer: /CN=e0e3976d9ecb8309a8181fbd025ca52fef161999
Certificate serial: 019421B22BB39B7174F28B9579F2060FFF71
Authority key identifier: E0:E3:97:6D:9E:CB:83:09:A8:18:1F:BD:02:5C:A5:2F:EF:16:19:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4OOXbZ7LgwmoGB-9AlylL-8WGZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/d612a3-4631-47de-940d-8be0d97682ab/1/cK4llrkBdLlV4HeILjRyQ98esEM.roa
Signing time: Wed 01 Jan 2025 11:48:32 +0000
ROA not before: Wed 01 Jan 2025 11:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200348
IP address blocks: 185.179.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/d612a3-4631-47de-940d-8be0d97682ab/1/4OOXbZ7LgwmoGB-9AlylL-8WGZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/d612a3-4631-47de-940d-8be0d97682ab/1/4OOXbZ7LgwmoGB-9AlylL-8WGZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4OOXbZ7LgwmoGB-9AlylL-8WGZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:2b:b3:9b:71:74:f2:8b:95:79:f2:06:0f:ff:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0e3976d9ecb8309a8181fbd025ca52fef161999
Validity
Not Before: Jan 1 11:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=70ae2596b90174b955e077882e347243df1eb043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e3:d7:5c:a8:8e:9f:64:bb:f0:ff:da:d2:9c:
03:37:ff:dd:ab:de:f7:21:17:9a:3a:84:ea:0f:73:
62:18:05:90:5a:dc:59:60:92:ed:a7:24:6f:74:54:
64:44:42:86:26:4a:cf:bf:74:83:45:1a:f1:1d:1f:
67:be:99:38:d7:b4:e0:cf:74:81:77:d5:6f:d8:6f:
90:32:af:d3:5c:08:4d:b7:3e:ed:e6:b4:4d:4a:29:
2e:52:d4:54:2e:7f:8a:b4:35:66:da:c6:e7:ae:cf:
df:11:e9:a3:ca:48:15:57:5f:6f:12:d1:39:0c:8c:
c3:50:fe:89:ae:7c:df:6b:a5:2e:8c:95:9a:81:60:
f6:fb:4d:1e:93:9c:89:99:fd:d3:a4:f9:7b:67:91:
30:b6:a4:09:11:43:2b:c5:87:cf:a8:97:36:a0:32:
86:f3:01:14:3a:1d:94:de:68:4d:bb:8d:51:94:c1:
14:3b:25:a1:d4:66:07:25:2a:93:85:9a:40:9e:c9:
99:46:4c:db:e0:aa:24:de:4f:7b:d3:94:b6:70:f6:
1a:5e:68:37:bf:9c:f7:2f:1f:04:aa:e2:e9:f3:27:
23:2a:71:f2:f8:64:3c:18:bd:17:98:9c:99:90:fe:
98:50:ca:f2:33:3e:08:61:0a:44:f3:24:f2:0e:60:
a0:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:AE:25:96:B9:01:74:B9:55:E0:77:88:2E:34:72:43:DF:1E:B0:43
X509v3 Authority Key Identifier:
keyid:E0:E3:97:6D:9E:CB:83:09:A8:18:1F:BD:02:5C:A5:2F:EF:16:19:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4OOXbZ7LgwmoGB-9AlylL-8WGZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d612a3-4631-47de-940d-8be0d97682ab/1/cK4llrkBdLlV4HeILjRyQ98esEM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d612a3-4631-47de-940d-8be0d97682ab/1/4OOXbZ7LgwmoGB-9AlylL-8WGZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.179.89.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:8b:92:80:70:13:c6:98:87:bc:a6:21:35:c0:de:be:c0:d1:
7b:6c:74:40:8b:39:df:de:98:1f:36:57:8f:32:e7:23:86:f8:
06:7c:db:34:6a:5f:ce:9c:03:41:a2:8e:81:19:4f:14:cf:4a:
88:83:fa:cd:bf:55:ea:21:d6:40:96:0f:34:b3:16:d3:12:f3:
51:61:ce:7a:28:60:11:2c:ea:51:df:ea:eb:37:8c:d2:91:dd:
67:45:4a:d9:ce:39:5f:5d:76:a3:bd:c3:2a:55:fb:db:d2:44:
45:a5:61:6a:de:15:d8:0b:ad:72:06:1d:f5:67:17:7d:50:ee:
79:a6:52:61:5c:dc:4e:bc:db:2f:33:16:12:78:c3:c8:bc:22:
dc:4d:e1:de:33:a5:bb:74:f7:0e:e5:16:4d:5f:8f:80:b0:77:
b5:5c:08:94:9e:71:83:82:66:70:15:f2:9d:d3:12:88:37:f0:
c3:1d:08:dc:e8:74:4a:0e:b3:24:0a:3d:21:35:2a:68:92:c2:
51:ba:49:7f:fc:0f:3b:8d:a1:32:a1:8b:a4:17:05:5a:98:3b:
7a:5b:0f:e9:6d:36:b1:9d:a3:01:68:f2:da:ee:64:29:9f:79:
54:a3:08:6a:ea:fa:92:bd:72:2c:54:03:01:5e:1e:2c:82:b0:
13:ef:e2:b2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhsiuzm3F08ouVefIGD/9xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwZTM5NzZkOWVjYjgzMDlhODE4MWZiZDAyNWNhNTJmZWYx
NjE5OTkwHhcNMjUwMTAxMTE0ODMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MGFlMjU5NmI5MDE3NGI5NTVlMDc3ODgyZTM0NzI0M2RmMWViMDQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+PXXKiOn2S78P/a0pwDN//dq973
IReaOoTqD3NiGAWQWtxZYJLtpyRvdFRkREKGJkrPv3SDRRrxHR9nvpk417Tgz3SB
d9Vv2G+QMq/TXAhNtz7t5rRNSikuUtRULn+KtDVm2sbnrs/fEemjykgVV19vEtE5
DIzDUP6Jrnzfa6UujJWagWD2+00ek5yJmf3TpPl7Z5EwtqQJEUMrxYfPqJc2oDKG
8wEUOh2U3mhNu41RlMEUOyWh1GYHJSqThZpAnsmZRkzb4Kok3k9705S2cPYaXmg3
v5z3Lx8EquLp8ycjKnHy+GQ8GL0XmJyZkP6YUMryMz4IYQpE8yTyDmCgRQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHCuJZa5AXS5VeB3iC40ckPfHrBDMB8GA1UdIwQY
MBaAFODjl22ey4MJqBgfvQJcpS/vFhmZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNE9PWGJaN0xnd21vR0ItOUFseWxMLThXR1prLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC9kNjEyYTMtNDYzMS00N2RlLTk0MGQt
OGJlMGQ5NzY4MmFiLzEvY0s0bGxya0JkTGxWNEhlSUxqUnlROThlc0VNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC9kNjEyYTMtNDYzMS00N2RlLTk0MGQtOGJlMGQ5NzY4MmFi
LzEvNE9PWGJaN0xnd21vR0ItOUFseWxMLThXR1prLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAubNZMA0G
CSqGSIb3DQEBCwUAA4IBAQAui5KAcBPGmIe8piE1wN6+wNF7bHRAiznf3pgfNleP
MucjhvgGfNs0al/OnANBoo6BGU8Uz0qIg/rNv1XqIdZAlg80sxbTEvNRYc56KGAR
LOpR3+rrN4zSkd1nRUrZzjlfXXajvcMqVfvb0kRFpWFq3hXYC61yBh31Zxd9UO55
plJhXNxOvNsvMxYSeMPIvCLcTeHeM6W7dPcO5RZNX4+AsHe1XAiUnnGDgmZwFfKd
0xKIN/DDHQjc6HRKDrMkCj0hNSpoksJRukl//A87jaEyoYukFwVamDt6Ww/pbTax
naMBaPLa7mQpn3lUowhq6vqSvXIsVAMBXh4sgrAT7+Ky
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:44:29 2025 by rpki-client