Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/Fu1w_hrRZ6yvjLCKsfpv5n0xIk8.roa
File: Fu1w_hrRZ6yvjLCKsfpv5n0xIk8.roa (raw, json)
Hash identifier: xuz0ZazQYPtF7LGAYIk414qfYlSUwXjrvvWKQZrz71k=
Subject key identifier: 16:ED:70:FE:1A:D1:67:AC:AF:8C:B0:8A:B1:FA:6F:E6:7D:31:22:4F
Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Certificate serial: 019420D65486677F9F98FCB0359D652C6B4D
Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/Fu1w_hrRZ6yvjLCKsfpv5n0xIk8.roa
Signing time: Wed 01 Jan 2025 07:48:24 +0000
ROA not before: Wed 01 Jan 2025 07:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5089
IP address blocks: 79.139.52.0/22 maxlen: 24
93.119.184.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 02:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:54:86:67:7f:9f:98:fc:b0:35:9d:65:2c:6b:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Validity
Not Before: Jan 1 07:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=16ed70fe1ad167acaf8cb08ab1fa6fe67d31224f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:62:4a:93:25:2e:a9:9b:de:77:d4:a1:cc:65:
0a:ba:98:66:bd:79:84:f0:58:78:94:ac:fe:65:e8:
4a:3f:86:97:36:06:70:bb:a5:eb:50:48:70:e2:c9:
12:0f:7c:05:9a:9e:33:52:a6:47:51:79:b8:e4:16:
2d:fa:c1:a2:b7:b9:5f:71:9c:9f:41:ec:36:f4:dd:
6b:26:d5:f0:f2:80:8f:d2:57:ad:ca:76:ff:88:ff:
f8:1a:6a:d6:b3:cc:c6:b4:69:9b:01:62:de:a6:90:
8f:cc:82:a0:67:2e:25:93:c3:31:f1:6f:22:e7:51:
ac:c9:7b:58:a0:fe:bf:75:2b:54:34:2b:f4:70:b5:
6e:e8:d4:ab:c9:45:8b:26:d6:12:37:9b:10:a2:e9:
cd:91:de:87:52:3c:66:34:b0:4a:6b:30:de:39:dd:
85:0b:47:1e:78:db:25:18:60:ad:92:95:e6:be:5b:
ca:2e:dd:64:42:4c:c3:0d:5f:8b:04:76:11:68:b3:
ba:16:4b:19:05:7b:6f:1f:28:25:d8:e1:5a:45:55:
fc:d5:9e:6c:a9:c1:c9:aa:9e:c7:f8:7b:03:82:0d:
db:0e:0a:82:f5:b4:b3:a0:16:a3:d7:0e:ce:cb:c2:
cd:7a:46:6f:64:2d:c9:de:6c:9f:32:cd:86:8c:ba:
18:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:ED:70:FE:1A:D1:67:AC:AF:8C:B0:8A:B1:FA:6F:E6:7D:31:22:4F
X509v3 Authority Key Identifier:
keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/Fu1w_hrRZ6yvjLCKsfpv5n0xIk8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.139.52.0/22
93.119.184.0/21
Signature Algorithm: sha256WithRSAEncryption
16:a0:d5:55:c1:6e:1d:31:ff:bb:05:52:0d:d1:68:5d:b8:7c:
a1:3f:64:9a:63:33:7a:48:5a:55:85:af:f2:e8:52:c0:b8:1d:
e5:e1:58:5e:9d:17:4b:0b:fa:af:15:c2:3c:00:73:1b:a9:4c:
46:ee:7e:0e:86:9a:e5:4e:ea:3b:8d:bf:13:43:b4:80:44:a4:
d2:6e:b8:c0:57:fa:69:68:68:88:78:39:71:fe:10:48:32:0b:
9b:0a:59:8b:d3:9c:65:42:8d:40:ea:1c:16:e9:c9:10:a9:52:
3c:00:83:94:fd:db:db:7e:ab:1d:7f:38:bd:82:3a:70:56:72:
97:a3:16:63:1b:e2:fe:a4:ae:97:b8:9d:c6:9a:42:04:89:31:
f8:fc:b3:9c:25:b2:71:f7:a5:b6:2f:ea:23:2a:c3:88:4b:76:
5f:18:90:41:79:70:b6:f6:44:ea:89:ed:9f:2d:7a:6e:d8:0a:
1e:97:7b:2d:2d:9a:e8:56:af:09:17:b3:3b:1e:e3:0c:e8:5e:
53:8b:57:74:45:d1:22:8b:06:58:31:0d:67:c4:f9:54:1a:86:
e2:a5:6f:20:ca:98:84:70:cc:f0:b0:0e:eb:53:8c:6f:da:61:
65:73:04:b4:33:38:ee:dc:af:47:51:d9:29:81:3d:7f:bc:24:
3b:88:d3:5d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQg1lSGZ3+fmPywNZ1lLGtNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0OGEyN2Y0NGIxMDQwNGM1MmY2ZmZjNGUwOGRjODJiZjhi
NWRlZTQwHhcNMjUwMTAxMDc0ODI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNmVkNzBmZTFhZDE2N2FjYWY4Y2IwOGFiMWZhNmZlNjdkMzEyMjRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2JKkyUuqZved9ShzGUKuphmvXmE
8Fh4lKz+ZehKP4aXNgZwu6XrUEhw4skSD3wFmp4zUqZHUXm45BYt+sGit7lfcZyf
Qew29N1rJtXw8oCP0letynb/iP/4GmrWs8zGtGmbAWLeppCPzIKgZy4lk8Mx8W8i
51GsyXtYoP6/dStUNCv0cLVu6NSryUWLJtYSN5sQounNkd6HUjxmNLBKazDeOd2F
C0ceeNslGGCtkpXmvlvKLt1kQkzDDV+LBHYRaLO6FksZBXtvHygl2OFaRVX81Z5s
qcHJqp7H+HsDgg3bDgqC9bSzoBaj1w7Oy8LNekZvZC3J3myfMs2GjLoYIwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBbtcP4a0Wesr4ywirH6b+Z9MSJPMB8GA1UdIwQY
MBaAFNSKJ/RLEEBMUvb/xOCNyCv4td7kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUlvbjlFc1FRRXhTOXZfRTRJM0lLX2kxM3VRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS80YmI1YTctMzQ2Yy00MTk1LTlkMGYt
NTlmNTk4NGI2NGVhLzEvRnUxd19oclJaNnl2akxDS3NmcHY1bjB4SWs4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS80YmI1YTctMzQ2Yy00MTk1LTlkMGYtNTlmNTk4NGI2NGVh
LzEvMUlvbjlFc1FRRXhTOXZfRTRJM0lLX2kxM3VRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCT4s0AwQD
XXe4MA0GCSqGSIb3DQEBCwUAA4IBAQAWoNVVwW4dMf+7BVIN0WhduHyhP2SaYzN6
SFpVha/y6FLAuB3l4VhenRdLC/qvFcI8AHMbqUxG7n4OhprlTuo7jb8TQ7SARKTS
brjAV/ppaGiIeDlx/hBIMgubClmL05xlQo1A6hwW6ckQqVI8AIOU/dvbfqsdfzi9
gjpwVnKXoxZjG+L+pK6XuJ3GmkIEiTH4/LOcJbJx96W2L+ojKsOIS3ZfGJBBeXC2
9kTqie2fLXpu2Aoel3stLZroVq8JF7M7HuMM6F5Ti1d0RdEiiwZYMQ1nxPlUGobi
pW8gypiEcMzwsA7rU4xv2mFlcwS0Mzju3K9HUdkpgT1/vCQ7iNNd
-----END CERTIFICATE-----
Generated at Wed Feb 5 11:55:35 2025 by rpki-client