Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/ifGxlDc1irW7Eg9g-9ztDuocTCk.roa
File: ifGxlDc1irW7Eg9g-9ztDuocTCk.roa (raw, json)
Hash identifier: ZhfDpWXnZEi0EZr5I/ly231LZJr36arOyCqZMKGb1rE=
Subject key identifier: 89:F1:B1:94:37:35:8A:B5:BB:12:0F:60:FB:DC:ED:0E:EA:1C:4C:29
Certificate issuer: /CN=54a31ab033cfd2dee6852fa9d8bf5a4a0e352414
Certificate serial: 019422FC3EDE6548BB6B5AB8E752984EACF1
Authority key identifier: 54:A3:1A:B0:33:CF:D2:DE:E6:85:2F:A9:D8:BF:5A:4A:0E:35:24:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKMasDPP0t7mhS-p2L9aSg41JBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/ifGxlDc1irW7Eg9g-9ztDuocTCk.roa
Signing time: Wed 01 Jan 2025 17:49:04 +0000
ROA not before: Wed 01 Jan 2025 17:49:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209726
IP address blocks: 87.121.168.0/24 maxlen: 24
87.121.169.0/24 maxlen: 24
87.121.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VKMasDPP0t7mhS-p2L9aSg41JBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:3e:de:65:48:bb:6b:5a:b8:e7:52:98:4e:ac:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54a31ab033cfd2dee6852fa9d8bf5a4a0e352414
Validity
Not Before: Jan 1 17:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=89f1b19437358ab5bb120f60fbdced0eea1c4c29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f6:aa:eb:be:48:50:94:27:58:f8:64:95:23:
16:3b:c2:4c:0c:fe:ed:e5:a8:ad:61:3c:94:e6:db:
ad:df:e0:00:4e:4b:d9:6a:a9:eb:5f:5b:05:fe:1a:
9e:37:25:cd:f3:1e:cf:96:f7:a4:a0:4a:73:2b:6f:
50:36:35:a2:b2:9d:65:d4:ac:36:3a:58:cb:d5:71:
fd:c3:dc:20:80:97:2a:b4:84:7c:41:3a:d6:9a:f6:
ec:92:4e:82:b9:ec:83:58:ce:e9:c5:4c:1b:3d:de:
64:de:e5:2e:14:8b:b1:fc:cd:10:9d:ee:41:b4:fc:
da:ba:96:23:15:4c:64:67:9f:07:62:32:37:83:7d:
4d:6c:75:fc:40:4a:8c:82:ed:2a:21:ce:1d:67:11:
75:a2:c4:d1:45:80:08:f7:89:ac:96:d3:c2:e0:0f:
33:57:97:68:cc:b6:c5:98:01:ed:6b:14:11:dd:3f:
db:f4:6b:2e:a4:6a:38:55:26:0c:65:6e:04:08:53:
a4:08:6e:d5:31:24:d8:14:f5:c4:b4:0e:0a:16:b4:
e9:33:f2:7b:e4:73:18:40:fc:3e:32:89:36:0c:6d:
f7:ff:e4:c5:6e:7b:7a:78:50:63:0e:ea:00:ec:e6:
4e:c6:98:51:8b:f5:7a:3c:fa:6d:2a:fe:69:eb:e7:
0a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:F1:B1:94:37:35:8A:B5:BB:12:0F:60:FB:DC:ED:0E:EA:1C:4C:29
X509v3 Authority Key Identifier:
keyid:54:A3:1A:B0:33:CF:D2:DE:E6:85:2F:A9:D8:BF:5A:4A:0E:35:24:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKMasDPP0t7mhS-p2L9aSg41JBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/ifGxlDc1irW7Eg9g-9ztDuocTCk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.168.0-87.121.170.255
Signature Algorithm: sha256WithRSAEncryption
8d:f7:fa:88:7f:71:b3:ba:9d:28:1d:31:3c:81:5c:67:42:19:
e3:bf:19:16:14:5b:7b:50:80:6d:5d:10:6d:ac:ed:bf:73:d8:
93:57:59:50:55:dc:c7:96:d8:dd:56:21:85:df:9e:25:cc:fa:
83:a2:63:5f:21:62:5d:77:eb:c1:61:d6:d4:a8:8e:ab:7e:0b:
b0:5e:4f:16:86:5c:a9:95:83:35:b2:2b:9b:8c:87:66:db:ce:
2d:70:f9:ef:ca:c1:c6:8a:46:be:19:ab:27:da:dc:1b:0c:fa:
b7:2a:16:cf:c6:e1:a6:fa:37:97:30:b4:be:ab:7c:2a:5c:65:
b1:09:f1:ab:76:db:6b:9d:0d:f0:ef:58:03:eb:06:50:1f:b2:
cd:bf:e8:6d:00:fe:46:02:b1:3b:c3:61:e5:e3:af:f5:8e:11:
da:4d:d7:e5:7f:94:61:f2:c5:ee:88:f4:e5:60:28:56:c4:3f:
79:9a:88:2a:e8:9f:b2:b2:12:1b:3d:ce:d4:06:d7:02:06:8c:
08:d6:b2:91:d5:07:a6:9d:59:c0:16:c7:d2:18:3b:a3:b5:40:
87:89:01:3f:32:f7:0e:37:eb:05:d3:92:29:a2:1d:d9:04:ba:
aa:48:9e:07:e9:c5:a4:ec:ca:98:24:ae:a2:33:03:4e:8f:6f:
5b:b0:bb:97
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZQi/D7eZUi7a1q451KYTqzxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0YTMxYWIwMzNjZmQyZGVlNjg1MmZhOWQ4YmY1YTRhMGUz
NTI0MTQwHhcNMjUwMTAxMTc0OTA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OWYxYjE5NDM3MzU4YWI1YmIxMjBmNjBmYmRjZWQwZWVhMWM0YzI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfaq675IUJQnWPhklSMWO8JMDP7t
5aitYTyU5tut3+AATkvZaqnrX1sF/hqeNyXN8x7PlvekoEpzK29QNjWisp1l1Kw2
OljL1XH9w9wggJcqtIR8QTrWmvbskk6CueyDWM7pxUwbPd5k3uUuFIux/M0Qne5B
tPzaupYjFUxkZ58HYjI3g31NbHX8QEqMgu0qIc4dZxF1osTRRYAI94msltPC4A8z
V5dozLbFmAHtaxQR3T/b9GsupGo4VSYMZW4ECFOkCG7VMSTYFPXEtA4KFrTpM/J7
5HMYQPw+Mok2DG33/+TFbnt6eFBjDuoA7OZOxphRi/V6PPptKv5p6+cKmQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFInxsZQ3NYq1uxIPYPvc7Q7qHEwpMB8GA1UdIwQY
MBaAFFSjGrAzz9Le5oUvqdi/WkoONSQUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVktNYXNEUFAwdDdtaFMtcDJMOWFTZzQxSkJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8wODAzNjEtMWJiZS00NzYzLTgwMGIt
NjE5YzI2MTk0MTY4LzEvaWZHeGxEYzFpclc3RWc5Zy05enREdW9jVENrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi8wODAzNjEtMWJiZS00NzYzLTgwMGItNjE5YzI2MTk0MTY4
LzEvVktNYXNEUFAwdDdtaFMtcDJMOWFTZzQxSkJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBANXeagD
BABXeaowDQYJKoZIhvcNAQELBQADggEBAI33+oh/cbO6nSgdMTyBXGdCGeO/GRYU
W3tQgG1dEG2s7b9z2JNXWVBV3MeW2N1WIYXfniXM+oOiY18hYl1368Fh1tSojqt+
C7BeTxaGXKmVgzWyK5uMh2bbzi1w+e/KwcaKRr4Zqyfa3BsM+rcqFs/G4ab6N5cw
tL6rfCpcZbEJ8at222udDfDvWAPrBlAfss2/6G0A/kYCsTvDYeXjr/WOEdpN1+V/
lGHyxe6I9OVgKFbEP3maiCron7KyEhs9ztQG1wIGjAjWspHVB6adWcAWx9IYO6O1
QIeJAT8y9w436wXTkimiHdkEuqpIngfpxaTsypgkrqIzA06Pb1uwu5c=
-----END CERTIFICATE-----
Generated at Sun Feb 2 09:51:38 2025 by rpki-client