Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/mJwoVz5y5LEp-eLbS2vdGg31eZ4.roa
File: mJwoVz5y5LEp-eLbS2vdGg31eZ4.roa (raw, json)
Hash identifier: yOflHcXeI09Ory6IZTrEd6gICdizKg4qJeKcaaMNwLA=
Subject key identifier: 98:9C:28:57:3E:72:E4:B1:29:F9:E2:DB:4B:6B:DD:1A:0D:F5:79:9E
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 01942747E8470BCECD8A06D028CBD2087A81
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/mJwoVz5y5LEp-eLbS2vdGg31eZ4.roa
Signing time: Thu 02 Jan 2025 13:50:11 +0000
ROA not before: Thu 02 Jan 2025 13:50:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34653
IP address blocks: 37.157.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:e8:47:0b:ce:cd:8a:06:d0:28:cb:d2:08:7a:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 2 13:50:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=989c28573e72e4b129f9e2db4b6bdd1a0df5799e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3b:88:6e:1d:38:aa:a4:b9:25:56:e1:b3:59:
54:af:26:39:89:ad:1f:2b:16:16:9f:01:9f:e5:0b:
b4:6e:e3:17:41:fd:e9:a2:07:85:1d:6a:d4:43:4f:
fe:1b:9b:a2:5d:54:30:23:d7:2d:9d:8d:3a:39:25:
dd:cc:af:35:3a:4d:62:63:08:8e:3e:31:43:d1:93:
ad:61:23:06:3f:dd:19:e2:e6:3b:a0:ee:aa:ef:29:
d9:08:12:a6:52:c9:15:04:db:0e:94:33:a8:44:4f:
15:5e:1d:f1:11:20:f9:c3:43:5e:87:f2:94:03:93:
18:27:09:84:12:77:56:09:f1:dc:df:34:40:ba:34:
4b:74:d8:be:18:95:52:26:ed:e0:4a:ed:2c:82:37:
48:46:c1:36:0c:f3:94:5e:a1:10:28:57:0a:a9:e8:
bf:94:a5:c4:ae:c7:0d:2f:e4:ab:80:05:c7:a5:26:
82:b3:d2:e8:b7:eb:cc:ac:ca:df:17:43:30:77:f2:
26:b2:5b:74:0e:b1:c3:e2:d5:6a:e4:29:4b:e6:88:
77:4a:7a:1a:90:b6:37:a2:39:fc:88:90:b1:cc:cd:
d5:8c:75:5f:0f:3b:c5:b4:f8:37:41:94:62:b8:e7:
cd:dc:63:fc:79:34:f5:99:ec:6a:9e:96:11:17:6d:
2b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:9C:28:57:3E:72:E4:B1:29:F9:E2:DB:4B:6B:DD:1A:0D:F5:79:9E
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/mJwoVz5y5LEp-eLbS2vdGg31eZ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.157.160.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:49:13:18:96:7e:ac:92:e2:56:fa:71:29:62:44:97:e5:29:
63:89:60:25:e4:ab:1b:4e:16:53:67:62:5f:7b:10:1d:38:ac:
e3:18:b8:a7:da:9f:f1:81:f6:b2:7d:a7:85:9b:c9:f3:66:6f:
27:a7:33:b2:91:52:61:da:d9:1a:09:65:13:d3:2e:04:8b:de:
26:78:93:14:d5:16:dc:86:ec:ad:85:e2:89:6b:76:2e:30:97:
72:83:93:22:4e:9b:15:ac:ed:64:e7:1e:87:d9:79:58:be:37:
4c:f5:16:15:07:42:ab:4e:8f:38:52:1b:84:a7:fc:ee:6b:c1:
3f:b7:0c:b1:73:b2:48:4c:11:74:e6:f1:f2:ac:40:25:98:e7:
4e:a3:81:37:e8:02:ec:e4:40:fb:35:83:7b:50:eb:69:12:25:
ea:83:cd:4d:e7:4f:8d:4a:de:bb:83:7c:ae:8d:9d:bb:ce:63:
ab:49:e4:80:81:c9:5f:4b:c3:91:c1:7a:59:61:eb:a2:15:57:
c8:90:aa:5b:10:f6:45:39:8e:af:5d:19:39:99:69:79:65:5e:
19:71:b7:1e:38:d9:6b:4b:c5:42:cc:31:86:39:05:37:e8:6e:
5a:38:44:07:2a:8f:cf:90:32:f1:7d:76:14:80:f5:0b:36:51:
75:b0:f5:aa
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnR+hHC87NigbQKMvSCHqBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0YjJmNGZhNTE2M2FmOTYxNjhlODhmYmY5Y2I0ZWQxZWQ4
ZmI0YzQwHhcNMjUwMTAyMTM1MDExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ODljMjg1NzNlNzJlNGIxMjlmOWUyZGI0YjZiZGQxYTBkZjU3OTllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDuIbh04qqS5JVbhs1lUryY5ia0f
KxYWnwGf5Qu0buMXQf3pogeFHWrUQ0/+G5uiXVQwI9ctnY06OSXdzK81Ok1iYwiO
PjFD0ZOtYSMGP90Z4uY7oO6q7ynZCBKmUskVBNsOlDOoRE8VXh3xESD5w0Neh/KU
A5MYJwmEEndWCfHc3zRAujRLdNi+GJVSJu3gSu0sgjdIRsE2DPOUXqEQKFcKqei/
lKXErscNL+SrgAXHpSaCs9Lot+vMrMrfF0Mwd/Imslt0DrHD4tVq5ClL5oh3Snoa
kLY3ojn8iJCxzM3VjHVfDzvFtPg3QZRiuOfN3GP8eTT1mexqnpYRF20r2wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJicKFc+cuSxKfni20tr3RoN9XmeMB8GA1UdIwQY
MBaAFISy9PpRY6+WFo6I+/nLTtHtj7TEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDct
ODcyYmEyZDlmNDRjLzEvbUp3b1Z6NXk1TEVwLWVMYlMydmRHZzMxZVo0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDctODcyYmEyZDlmNDRj
LzEvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJZ2gMA0G
CSqGSIb3DQEBCwUAA4IBAQCtSRMYln6skuJW+nEpYkSX5SljiWAl5KsbThZTZ2Jf
exAdOKzjGLin2p/xgfayfaeFm8nzZm8npzOykVJh2tkaCWUT0y4Ei94meJMU1Rbc
huytheKJa3YuMJdyg5MiTpsVrO1k5x6H2XlYvjdM9RYVB0KrTo84UhuEp/zua8E/
twyxc7JITBF05vHyrEAlmOdOo4E36ALs5ED7NYN7UOtpEiXqg81N50+NSt67g3yu
jZ27zmOrSeSAgclfS8ORwXpZYeuiFVfIkKpbEPZFOY6vXRk5mWl5ZV4ZcbceONlr
S8VCzDGGOQU36G5aOEQHKo/PkDLxfXYUgPULNlF1sPWq
-----END CERTIFICATE-----
Generated at Wed Apr 16 21:49:53 2025 by rpki-client