Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/d1KI_IYtQBEihTerGv25C-SII-k.roa
File: d1KI_IYtQBEihTerGv25C-SII-k.roa (raw, json)
Hash identifier: 3IrM5Sm8ocedH9pVrdvP0E/PB4G7aNY459pxHchQOAE=
Subject key identifier: 77:52:88:FC:86:2D:40:11:22:85:37:AB:1A:FD:B9:0B:E4:88:23:E9
Certificate issuer: /CN=e916dc9db4e49de71b2fd0819dae853aeb053b06
Certificate serial: 019425FDB672BDEDE16144C1D6C078B8B9E7
Authority key identifier: E9:16:DC:9D:B4:E4:9D:E7:1B:2F:D0:81:9D:AE:85:3A:EB:05:3B:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6RbcnbTknecbL9CBna6FOusFOwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/d1KI_IYtQBEihTerGv25C-SII-k.roa
Signing time: Thu 02 Jan 2025 07:49:31 +0000
ROA not before: Thu 02 Jan 2025 07:49:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216129
IP address blocks: 107.161.154.0/24 maxlen: 24
199.83.103.0/24 maxlen: 24
202.181.188.0/24 maxlen: 24
2a13:d200::/32 maxlen: 32
2a13:d200:6::/48 maxlen: 48
2a13:d200:7::/48 maxlen: 48
2a13:d200:8::/48 maxlen: 48
2a13:d200:9::/48 maxlen: 48
2a13:d200:10::/48 maxlen: 48
2a13:d200:11::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/6RbcnbTknecbL9CBna6FOusFOwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/6RbcnbTknecbL9CBna6FOusFOwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6RbcnbTknecbL9CBna6FOusFOwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:b6:72:bd:ed:e1:61:44:c1:d6:c0:78:b8:b9:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e916dc9db4e49de71b2fd0819dae853aeb053b06
Validity
Not Before: Jan 2 07:49:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=775288fc862d4011228537ab1afdb90be48823e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b0:4f:9f:e0:35:f1:e8:03:7f:71:d5:ec:bc:
c6:7c:7d:b5:86:8c:70:36:ef:ec:b3:51:1d:5d:a1:
1c:92:2b:54:c7:3b:51:3e:94:24:95:57:25:9b:1d:
5a:06:9c:d1:0f:d4:58:0c:84:1d:a5:ed:ec:1d:ac:
b2:07:63:cb:e2:f2:a9:4d:58:90:e8:6e:e3:41:9f:
da:e1:4e:33:c5:0c:f9:80:8d:fe:8b:93:52:b5:ab:
2b:cc:b7:90:16:ea:cd:47:34:d8:fa:d4:78:4c:06:
48:bf:8c:a8:10:a4:d9:ce:8a:3b:fb:ac:34:76:54:
52:e7:5b:be:78:8d:60:8e:53:7b:c6:fd:e8:89:23:
07:bd:b6:22:68:25:13:35:cb:d5:ab:f8:b5:d9:ea:
7d:94:c7:1a:7a:90:ac:cf:f7:8d:2c:2c:41:36:fa:
2b:d2:ec:20:30:6f:6a:0e:e7:5d:71:d6:f2:36:c8:
c9:9d:29:17:d5:fb:4d:75:63:5a:2c:cc:f9:d1:eb:
5b:2b:9a:cf:04:36:90:13:eb:e9:3a:f9:79:cb:d7:
55:9d:ff:b6:e6:06:ee:fc:e8:66:bb:76:b7:a7:5c:
14:90:3b:4a:74:b9:1c:62:4f:a5:76:6b:0b:6d:00:
e0:d3:ab:75:03:9c:0a:ed:0a:7e:7b:b8:d8:ec:ba:
09:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:52:88:FC:86:2D:40:11:22:85:37:AB:1A:FD:B9:0B:E4:88:23:E9
X509v3 Authority Key Identifier:
keyid:E9:16:DC:9D:B4:E4:9D:E7:1B:2F:D0:81:9D:AE:85:3A:EB:05:3B:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6RbcnbTknecbL9CBna6FOusFOwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/d1KI_IYtQBEihTerGv25C-SII-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/6RbcnbTknecbL9CBna6FOusFOwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
107.161.154.0/24
199.83.103.0/24
202.181.188.0/24
IPv6:
2a13:d200::/32
Signature Algorithm: sha256WithRSAEncryption
35:d2:0d:2f:87:3c:f8:19:f4:12:d0:a0:88:61:18:d8:de:54:
4a:b1:b6:fe:97:0f:84:62:c1:f5:1b:34:92:5d:35:8d:dc:9e:
5d:5e:95:aa:c9:81:1a:ab:d8:41:55:44:8f:22:49:65:a9:bb:
32:02:d8:ab:24:e0:7f:83:0d:4a:79:79:ff:2f:66:cd:01:fb:
04:4b:cc:11:9b:81:6e:dc:81:2d:ef:d2:15:49:fd:e6:64:df:
4d:06:a3:34:66:fe:bf:88:d4:2e:03:58:c3:d0:80:af:94:9f:
4c:8b:ac:b6:4b:83:1d:ac:97:25:c0:67:8b:e5:ce:72:b2:ba:
9e:34:5d:c6:35:9c:ca:af:5c:92:12:dc:ee:57:55:68:7f:76:
19:2c:76:92:f7:11:ed:e9:d0:a6:db:70:a4:00:4e:be:03:fd:
7f:9d:7d:33:ce:1a:14:32:36:1f:85:2e:de:bc:2d:f8:f1:48:
95:14:a4:af:dd:c1:c6:20:af:a3:ed:c2:04:f3:63:3e:74:ed:
c2:6e:48:af:e4:af:30:26:2c:3e:1a:8f:46:ef:1c:84:0d:0e:
f5:6b:49:23:14:da:81:91:10:20:9b:eb:ac:e3:02:85:8e:9b:
d9:f3:ad:a5:5f:5b:85:bd:88:6b:fe:a4:4e:e4:ce:a3:ff:42:
43:6d:75:03
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAZQl/bZyve3hYUTB1sB4uLnnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5MTZkYzlkYjRlNDlkZTcxYjJmZDA4MTlkYWU4NTNhZWIw
NTNiMDYwHhcNMjUwMTAyMDc0OTMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NzUyODhmYzg2MmQ0MDExMjI4NTM3YWIxYWZkYjkwYmU0ODgyM2U5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7BPn+A18egDf3HV7LzGfH21hoxw
Nu/ss1EdXaEckitUxztRPpQklVclmx1aBpzRD9RYDIQdpe3sHayyB2PL4vKpTViQ
6G7jQZ/a4U4zxQz5gI3+i5NStasrzLeQFurNRzTY+tR4TAZIv4yoEKTZzoo7+6w0
dlRS51u+eI1gjlN7xv3oiSMHvbYiaCUTNcvVq/i12ep9lMcaepCsz/eNLCxBNvor
0uwgMG9qDuddcdbyNsjJnSkX1ftNdWNaLMz50etbK5rPBDaQE+vpOvl5y9dVnf+2
5gbu/Ohmu3a3p1wUkDtKdLkcYk+ldmsLbQDg06t1A5wK7Qp+e7jY7LoJSwIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFHdSiPyGLUARIoU3qxr9uQvkiCPpMB8GA1UdIwQY
MBaAFOkW3J205J3nGy/QgZ2uhTrrBTsGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlJiY25iVGtuZWNiTDlDQm5hNkZPdXNGT3dZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS8xYWY0YTUtMGQ2Yy00Nzc2LWJlNWMt
YmU4NTJmNjQ0MjAxLzEvZDFLSV9JWXRRQkVpaFRlckd2MjVDLVNJSS1rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS8xYWY0YTUtMGQ2Yy00Nzc2LWJlNWMtYmU4NTJmNjQ0MjAx
LzEvNlJiY25iVGtuZWNiTDlDQm5hNkZPdXNGT3dZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQAa6GaAwQA
x1NnAwQAyrW8MA0EAgACMAcDBQAqE9IAMA0GCSqGSIb3DQEBCwUAA4IBAQA10g0v
hzz4GfQS0KCIYRjY3lRKsbb+lw+EYsH1GzSSXTWN3J5dXpWqyYEaq9hBVUSPIkll
qbsyAtirJOB/gw1KeXn/L2bNAfsES8wRm4Fu3IEt79IVSf3mZN9NBqM0Zv6/iNQu
A1jD0ICvlJ9Mi6y2S4MdrJclwGeL5c5ysrqeNF3GNZzKr1ySEtzuV1Vof3YZLHaS
9xHt6dCm23CkAE6+A/1/nX0zzhoUMjYfhS7evC348UiVFKSv3cHGIK+j7cIE82M+
dO3Cbkiv5K8wJiw+Go9G7xyEDQ71a0kjFNqBkRAgm+us4wKFjpvZ862lX1uFvYhr
/qRO5M6j/0JDbXUD
-----END CERTIFICATE-----
Generated at Sun Apr 6 21:23:23 2025 by rpki-client