Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/G3mV2aMuM8y2VDbVKoO1CvIX8jE.roa
File: G3mV2aMuM8y2VDbVKoO1CvIX8jE.roa (raw, json)
Hash identifier: hw5cMOBfO5nlB/szU8+JwoMA13fSqw9OG26l4otUomg=
Subject key identifier: 1B:79:95:D9:A3:2E:33:CC:B6:54:36:D5:2A:83:B5:0A:F2:17:F2:31
Certificate issuer: /CN=0a1d72ac0826e09bc0d17ddee8ba87d9731dd413
Certificate serial: 019425FC7B36FAD7B8FCFC05DFA5F78F5EE7
Authority key identifier: 0A:1D:72:AC:08:26:E0:9B:C0:D1:7D:DE:E8:BA:87:D9:73:1D:D4:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/G3mV2aMuM8y2VDbVKoO1CvIX8jE.roa
Signing time: Thu 02 Jan 2025 07:48:11 +0000
ROA not before: Thu 02 Jan 2025 07:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212179
IP address blocks: 212.172.0.0/16 maxlen: 24
212.172.20.0/24 maxlen: 32
212.172.165.128/27 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:7b:36:fa:d7:b8:fc:fc:05:df:a5:f7:8f:5e:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a1d72ac0826e09bc0d17ddee8ba87d9731dd413
Validity
Not Before: Jan 2 07:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1b7995d9a32e33ccb65436d52a83b50af217f231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:42:9b:3f:39:c6:86:02:ce:86:1f:1b:21:6b:
4a:aa:a3:96:54:ba:74:5b:df:5e:65:ef:d7:ea:08:
db:a9:ef:bf:1f:3b:cc:94:c2:07:68:c9:63:34:f0:
1c:59:62:17:cc:2c:95:7f:80:4d:3e:a8:0f:b1:f3:
ca:f9:fb:cc:c0:ac:49:95:9e:87:d7:34:cb:e6:64:
5e:9c:4c:9c:50:cc:42:fc:2d:da:5f:ff:18:e0:a3:
36:09:14:41:12:6e:46:69:77:a7:44:1d:26:1a:7b:
30:65:c5:be:c2:40:c8:e6:de:25:3a:cc:33:1c:54:
62:ae:82:49:f8:99:5c:69:39:1f:51:db:ff:01:06:
60:f0:0c:c6:ab:26:de:95:df:82:3c:49:dd:f4:b0:
53:98:2d:5d:d3:d6:14:9d:f7:62:18:6e:76:5c:95:
91:9c:32:bf:1b:ef:f4:a9:ff:88:22:30:2f:af:75:
02:94:36:68:91:cf:8a:7e:24:6a:b7:36:a0:e2:37:
05:1b:a6:12:9b:cf:1b:33:f5:1d:2e:f8:36:17:93:
8d:f4:72:41:ec:3f:b9:92:5f:e9:04:cc:56:29:f9:
d2:ce:c2:50:18:5e:12:71:9d:48:30:39:ee:1d:0f:
68:67:64:46:ee:96:37:f7:56:65:68:1a:6a:38:6b:
61:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:79:95:D9:A3:2E:33:CC:B6:54:36:D5:2A:83:B5:0A:F2:17:F2:31
X509v3 Authority Key Identifier:
keyid:0A:1D:72:AC:08:26:E0:9B:C0:D1:7D:DE:E8:BA:87:D9:73:1D:D4:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/G3mV2aMuM8y2VDbVKoO1CvIX8jE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.172.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6b:4e:1a:ae:ac:fb:7e:2c:d7:e5:9b:8a:7d:9b:b9:51:ab:99:
6f:79:60:14:3b:39:13:14:c0:43:aa:c3:59:a5:db:fb:7d:70:
4a:24:58:c3:c3:1a:ec:cd:8f:a8:6e:6d:3a:f2:29:5d:54:52:
55:86:4c:2b:d9:e0:ac:3a:60:d4:c8:b5:e5:e6:31:19:2c:04:
2a:c0:b4:f8:13:94:04:89:ad:d8:4d:1d:a5:d4:ad:3b:7b:f3:
77:40:44:06:ca:6e:76:af:bf:f3:a3:25:60:80:5a:8e:dd:61:
ee:c7:ee:d1:82:57:d5:23:2c:73:68:f5:b3:fb:df:f2:f6:a8:
bb:62:49:ff:b2:54:5a:b0:2d:8d:a4:0f:b3:c9:57:25:35:65:
37:b5:dc:c6:4b:db:b5:9e:0a:67:27:4f:fd:67:ff:a1:ce:6e:
aa:ad:47:3c:aa:4e:28:66:b8:de:f9:9a:71:af:df:59:a0:33:
26:60:ee:b4:96:9e:48:06:af:b6:1c:7b:d3:9b:40:68:b7:1c:
f7:17:c2:5b:44:73:a4:34:10:d6:dc:20:aa:05:e1:48:bf:4e:
9d:c1:7f:a9:dc:c9:9a:08:12:ad:f4:15:56:c1:3b:49:d9:86:
46:55:aa:4a:b1:72:2b:dc:0f:45:04:41:4e:72:a7:f6:a5:73:
18:b7:df:69
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgISAZQl/Hs2+te4/PwF36X3j17nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhMWQ3MmFjMDgyNmUwOWJjMGQxN2RkZWU4YmE4N2Q5NzMx
ZGQ0MTMwHhcNMjUwMTAyMDc0ODExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYjc5OTVkOWEzMmUzM2NjYjY1NDM2ZDUyYTgzYjUwYWYyMTdmMjMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0KbPznGhgLOhh8bIWtKqqOWVLp0
W99eZe/X6gjbqe+/HzvMlMIHaMljNPAcWWIXzCyVf4BNPqgPsfPK+fvMwKxJlZ6H
1zTL5mRenEycUMxC/C3aX/8Y4KM2CRRBEm5GaXenRB0mGnswZcW+wkDI5t4lOswz
HFRiroJJ+JlcaTkfUdv/AQZg8AzGqybeld+CPEnd9LBTmC1d09YUnfdiGG52XJWR
nDK/G+/0qf+IIjAvr3UClDZokc+KfiRqtzag4jcFG6YSm88bM/UdLvg2F5ON9HJB
7D+5kl/pBMxWKfnSzsJQGF4ScZ1IMDnuHQ9oZ2RG7pY391ZlaBpqOGthowIDAQAB
o4ICCDCCAgQwHQYDVR0OBBYEFBt5ldmjLjPMtlQ21SqDtQryF/IxMB8GA1UdIwQY
MBaAFAodcqwIJuCbwNF93ui6h9lzHdQTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2gxeXJBZ200SnZBMFgzZTZMcUgyWE1kMUJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC82MzQxZGEtMmIzNC00ZDQ1LTljMTct
OTU4MTEyYTQ4OWE0LzEvRzNtVjJhTXVNOHkyVkRiVktvTzFDdklYOGpFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC82MzQxZGEtMmIzNC00ZDQ1LTljMTctOTU4MTEyYTQ4OWE0
LzEvQ2gxeXJBZ200SnZBMFgzZTZMcUgyWE1kMUJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA1KwwDQYJ
KoZIhvcNAQELBQADggEBAGtOGq6s+34s1+Wbin2buVGrmW95YBQ7ORMUwEOqw1ml
2/t9cEokWMPDGuzNj6hubTryKV1UUlWGTCvZ4Kw6YNTIteXmMRksBCrAtPgTlASJ
rdhNHaXUrTt783dARAbKbnavv/OjJWCAWo7dYe7H7tGCV9UjLHNo9bP73/L2qLti
Sf+yVFqwLY2kD7PJVyU1ZTe13MZL27WeCmcnT/1n/6HObqqtRzyqTihmuN75mnGv
31mgMyZg7rSWnkgGr7Yce9ObQGi3HPcXwltEc6Q0ENbcIKoF4Ui/Tp3Bf6ncyZoI
Eq30FVbBO0nZhkZVqkqxcivcD0UEQU5yp/alcxi332k=
-----END CERTIFICATE-----
Generated at Sat Apr 19 14:39:08 2025 by rpki-client