Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/4PgtcW6j7xPoaJPy67vk2tMAXu4.roa
File: 4PgtcW6j7xPoaJPy67vk2tMAXu4.roa (raw, json)
Hash identifier: fufIwyPbWqbMyORM68+h1FhSNKXbFzjdgG7WcXkavWU=
Subject key identifier: E0:F8:2D:71:6E:A3:EF:13:E8:68:93:F2:EB:BB:E4:DA:D3:00:5E:EE
Certificate issuer: /CN=df0198a7b3afdcdd7003562a0871878e238760ad
Certificate serial: 01942144331BC66E94D97B1C3D360492D9C6
Authority key identifier: DF:01:98:A7:B3:AF:DC:DD:70:03:56:2A:08:71:87:8E:23:87:60:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/4PgtcW6j7xPoaJPy67vk2tMAXu4.roa
Signing time: Wed 01 Jan 2025 09:48:25 +0000
ROA not before: Wed 01 Jan 2025 09:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206814
IP address blocks: 89.135.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 09:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:33:1b:c6:6e:94:d9:7b:1c:3d:36:04:92:d9:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df0198a7b3afdcdd7003562a0871878e238760ad
Validity
Not Before: Jan 1 09:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e0f82d716ea3ef13e86893f2ebbbe4dad3005eee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d5:1a:1f:5f:30:e7:85:9c:86:10:2e:12:15:
3d:e1:bc:6c:69:fb:1c:10:78:a0:b8:4e:dc:51:2f:
46:a7:0e:3e:a8:ca:eb:c6:c9:40:8c:d4:86:e9:81:
34:ee:77:32:29:0d:ac:c9:07:24:ba:99:d4:c4:3e:
8f:fe:cb:45:8b:4c:b0:ed:e3:32:f5:cd:3f:43:0e:
d4:57:55:67:3d:64:f9:a2:e5:01:41:87:08:b7:de:
12:c1:d6:dc:01:83:ea:42:28:c8:e5:58:92:2e:64:
d2:d0:c4:82:d9:e2:8f:f9:e8:49:66:20:38:2d:8c:
71:aa:6a:0f:5d:3c:c9:18:86:45:df:54:f2:13:08:
92:e5:e6:d0:ac:2e:9a:71:bc:12:fa:f6:f0:0f:bf:
30:49:e7:0e:36:ef:92:ef:95:00:a2:53:58:6a:3f:
1b:f9:f7:05:fc:30:83:ff:ee:52:cd:ee:56:7f:d9:
ea:4f:4f:3e:00:d3:22:22:3e:9a:0e:cf:0c:75:9b:
58:b8:8a:0e:db:51:89:69:03:cf:71:5e:51:be:d2:
67:d3:b4:20:9e:9a:0b:58:43:74:2b:41:c8:f8:7c:
2a:22:4e:ee:76:72:f9:1e:7b:5d:71:44:0c:84:f5:
1f:50:bc:3c:2f:b9:88:e7:83:d0:6e:35:aa:41:a0:
42:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:F8:2D:71:6E:A3:EF:13:E8:68:93:F2:EB:BB:E4:DA:D3:00:5E:EE
X509v3 Authority Key Identifier:
keyid:DF:01:98:A7:B3:AF:DC:DD:70:03:56:2A:08:71:87:8E:23:87:60:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/4PgtcW6j7xPoaJPy67vk2tMAXu4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.135.60.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:4e:f8:48:4d:7d:d7:bb:82:98:5b:8b:6e:0a:91:eb:cf:0b:
c5:88:1e:81:32:a1:3d:fd:e9:67:0d:b0:ea:94:18:28:d8:60:
3b:39:61:eb:8d:15:03:68:cd:e1:67:90:4c:5a:85:44:79:78:
a2:60:f5:6e:02:54:09:0b:90:fc:d8:4e:e3:c9:a8:1a:42:a0:
03:00:53:ac:82:cd:23:05:76:e1:fd:5b:51:5d:f3:54:28:82:
95:0a:a3:da:d0:cc:eb:52:df:2f:0b:6d:ec:4d:f0:03:e8:cd:
79:7e:37:da:3e:ff:df:70:f4:21:90:cb:06:39:45:46:29:b5:
2e:8d:47:d9:5f:91:dc:ad:cf:f4:0e:9a:e2:bb:67:ee:59:3f:
e9:70:4d:35:25:10:78:6e:e1:66:6e:e0:75:f2:5f:e1:9a:01:
7f:a0:cd:6b:89:7f:35:70:09:b6:ed:3a:7d:e0:df:68:d6:0c:
7e:de:f9:32:ea:d5:ab:d8:55:8c:90:95:58:69:d7:40:ca:55:
ea:4a:8f:78:f6:61:d3:39:48:21:47:f1:20:2d:51:65:5d:d5:
ab:ce:1b:a9:a4:7d:14:0c:bb:81:02:0a:1f:df:28:f8:e0:e3:
97:09:87:f5:a2:ce:15:3b:76:cd:10:ca:2d:73:1f:c1:ab:53:
cf:4e:88:e8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhRDMbxm6U2XscPTYEktnGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmMDE5OGE3YjNhZmRjZGQ3MDAzNTYyYTA4NzE4NzhlMjM4
NzYwYWQwHhcNMjUwMTAxMDk0ODI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMGY4MmQ3MTZlYTNlZjEzZTg2ODkzZjJlYmJiZTRkYWQzMDA1ZWVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9UaH18w54WchhAuEhU94bxsafsc
EHiguE7cUS9Gpw4+qMrrxslAjNSG6YE07ncyKQ2syQckupnUxD6P/stFi0yw7eMy
9c0/Qw7UV1VnPWT5ouUBQYcIt94SwdbcAYPqQijI5ViSLmTS0MSC2eKP+ehJZiA4
LYxxqmoPXTzJGIZF31TyEwiS5ebQrC6acbwS+vbwD78wSecONu+S75UAolNYaj8b
+fcF/DCD/+5Sze5Wf9nqT08+ANMiIj6aDs8MdZtYuIoO21GJaQPPcV5RvtJn07Qg
npoLWEN0K0HI+HwqIk7udnL5HntdcUQMhPUfULw8L7mI54PQbjWqQaBC6wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOD4LXFuo+8T6GiT8uu75NrTAF7uMB8GA1UdIwQY
MBaAFN8BmKezr9zdcANWKghxh44jh2CtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3dHWXA3T3YzTjF3QTFZcUNIR0hqaU9IWUswLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9kM2ZjYTYtZWNiNS00M2FhLThjOWQt
MGZjYzZjMzAxMWZjLzEvNFBndGNXNmo3eFBvYUpQeTY3dmsydE1BWHU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9kM2ZjYTYtZWNiNS00M2FhLThjOWQtMGZjYzZjMzAxMWZj
LzEvM3dHWXA3T3YzTjF3QTFZcUNIR0hqaU9IWUswLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWYc8MA0G
CSqGSIb3DQEBCwUAA4IBAQCeTvhITX3Xu4KYW4tuCpHrzwvFiB6BMqE9/elnDbDq
lBgo2GA7OWHrjRUDaM3hZ5BMWoVEeXiiYPVuAlQJC5D82E7jyagaQqADAFOsgs0j
BXbh/VtRXfNUKIKVCqPa0MzrUt8vC23sTfAD6M15fjfaPv/fcPQhkMsGOUVGKbUu
jUfZX5Hcrc/0Dpriu2fuWT/pcE01JRB4buFmbuB18l/hmgF/oM1riX81cAm27Tp9
4N9o1gx+3vky6tWr2FWMkJVYaddAylXqSo949mHTOUghR/EgLVFlXdWrzhuppH0U
DLuBAgof3yj44OOXCYf1os4VO3bNEMotcx/Bq1PPTojo
-----END CERTIFICATE-----
Generated at Mon Apr 7 17:16:14 2025 by rpki-client