Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/63c9db-8ab9-4c1e-af27-ed28851ecb76/1/mN2qB1BO4S5r9HWkXJU36eJQAJo.roa
File: mN2qB1BO4S5r9HWkXJU36eJQAJo.roa (raw, json)
Hash identifier: CEQM9W3lMs7LPoWAqhYjN1IkeHCfM/C5tJypbGgHYt4=
Subject key identifier: 98:DD:AA:07:50:4E:E1:2E:6B:F4:75:A4:5C:95:37:E9:E2:50:00:9A
Certificate issuer: /CN=4a1d20be77e12232323c1422fb5198fea0086034
Certificate serial: 0194258F6B5A326AADB7AF0DEBABEA22F8D9
Authority key identifier: 4A:1D:20:BE:77:E1:22:32:32:3C:14:22:FB:51:98:FE:A0:08:60:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sh0gvnfhIjIyPBQi-1GY_qAIYDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/63c9db-8ab9-4c1e-af27-ed28851ecb76/1/mN2qB1BO4S5r9HWkXJU36eJQAJo.roa
Signing time: Thu 02 Jan 2025 05:49:03 +0000
ROA not before: Thu 02 Jan 2025 05:49:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212311
IP address blocks: 89.34.170.0/24 maxlen: 24
2a0f:ecc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/63c9db-8ab9-4c1e-af27-ed28851ecb76/1/Sh0gvnfhIjIyPBQi-1GY_qAIYDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/63c9db-8ab9-4c1e-af27-ed28851ecb76/1/Sh0gvnfhIjIyPBQi-1GY_qAIYDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sh0gvnfhIjIyPBQi-1GY_qAIYDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Mar 2025 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:6b:5a:32:6a:ad:b7:af:0d:eb:ab:ea:22:f8:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a1d20be77e12232323c1422fb5198fea0086034
Validity
Not Before: Jan 2 05:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=98ddaa07504ee12e6bf475a45c9537e9e250009a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ce:ee:a2:61:73:52:e8:9b:2a:5b:44:eb:6e:
00:76:0d:71:11:78:af:6b:87:87:4e:18:d4:e2:bb:
6b:17:ad:49:cc:ab:62:a1:9d:02:d5:c0:1d:72:73:
4b:84:36:7f:8f:d7:37:e5:0e:f6:44:fd:56:d8:21:
13:be:7b:66:07:36:3b:6b:73:03:66:0a:c7:f5:21:
bf:1f:bf:a5:48:9d:b5:86:d3:39:d8:aa:2a:e1:87:
fe:93:ae:27:be:e7:a1:b5:3a:1d:a8:55:d2:1c:fc:
86:c2:b1:e5:eb:ea:ba:e4:37:14:2c:44:75:a0:1c:
cd:70:a3:49:5f:13:3d:e3:6c:f2:5f:78:60:9c:2f:
2a:dc:60:4f:53:1c:74:ba:8e:46:cf:a8:b9:fc:f5:
18:b1:4f:99:68:ca:cd:29:77:59:ef:0a:d2:ab:8d:
87:02:e4:5f:c0:f8:dc:aa:e0:97:5e:09:13:9d:3d:
47:41:13:c0:ab:d1:46:e2:88:63:d1:b5:9e:ba:53:
57:08:ca:b5:e8:87:fd:db:dc:08:30:2a:26:82:ab:
44:74:ba:0c:32:47:e1:2f:01:56:0c:37:dc:14:6a:
3a:6e:41:7b:f2:f1:41:6a:11:21:0f:20:21:a2:91:
66:73:92:03:ad:ef:35:d6:2c:f2:8d:48:67:3b:5d:
e5:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:DD:AA:07:50:4E:E1:2E:6B:F4:75:A4:5C:95:37:E9:E2:50:00:9A
X509v3 Authority Key Identifier:
keyid:4A:1D:20:BE:77:E1:22:32:32:3C:14:22:FB:51:98:FE:A0:08:60:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sh0gvnfhIjIyPBQi-1GY_qAIYDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/63c9db-8ab9-4c1e-af27-ed28851ecb76/1/mN2qB1BO4S5r9HWkXJU36eJQAJo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/63c9db-8ab9-4c1e-af27-ed28851ecb76/1/Sh0gvnfhIjIyPBQi-1GY_qAIYDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.34.170.0/24
IPv6:
2a0f:ecc0::/29
Signature Algorithm: sha256WithRSAEncryption
94:ee:d9:50:a4:a9:b4:8d:74:3a:92:4e:4e:61:ac:b5:46:ba:
40:fa:e9:c8:b5:5b:ca:31:ff:3d:40:15:45:83:93:9a:56:dd:
e3:f3:66:cd:20:19:ac:e1:a0:62:44:3f:ee:f0:62:17:47:3a:
45:b3:cd:bc:43:a0:3b:cc:29:e9:90:d8:60:d9:88:f1:7b:6a:
cb:37:6a:77:83:e2:9e:3b:c8:ff:d4:1a:66:57:ee:67:bb:e0:
25:15:2f:72:8c:2e:be:4e:4a:7b:dc:5e:49:62:5e:52:b6:5e:
da:13:da:dc:07:ff:a0:03:a1:f1:a3:6d:cd:9d:af:52:6f:b9:
67:29:a9:76:32:49:69:04:64:ec:9e:e8:d3:02:f6:2b:67:f2:
3c:1c:56:7a:1b:da:ed:5a:e0:b0:10:76:a8:66:73:7a:57:16:
ea:33:20:5f:91:05:64:3d:25:ae:d4:0d:38:f3:f5:3f:5c:3c:
f1:29:e6:fd:d4:85:c1:b7:8c:82:8f:19:60:23:b6:b7:e2:8f:
f7:5c:38:00:5b:7d:db:3c:f5:23:f3:83:8b:5b:5c:c1:79:e3:
58:d8:5b:89:cd:e1:20:03:d1:cf:c8:64:0b:c7:8c:9f:1f:9e:
94:03:10:a5:e1:df:ec:3e:0a:5f:50:a8:90:36:19:4e:90:07:
12:22:21:62
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQlj2taMmqtt68N66vqIvjZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhMWQyMGJlNzdlMTIyMzIzMjNjMTQyMmZiNTE5OGZlYTAw
ODYwMzQwHhcNMjUwMTAyMDU0OTAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OGRkYWEwNzUwNGVlMTJlNmJmNDc1YTQ1Yzk1MzdlOWUyNTAwMDlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAos7uomFzUuibKltE624Adg1xEXiv
a4eHThjU4rtrF61JzKtioZ0C1cAdcnNLhDZ/j9c35Q72RP1W2CETvntmBzY7a3MD
ZgrH9SG/H7+lSJ21htM52Koq4Yf+k64nvuehtTodqFXSHPyGwrHl6+q65DcULER1
oBzNcKNJXxM942zyX3hgnC8q3GBPUxx0uo5Gz6i5/PUYsU+ZaMrNKXdZ7wrSq42H
AuRfwPjcquCXXgkTnT1HQRPAq9FG4ohj0bWeulNXCMq16If929wIMComgqtEdLoM
MkfhLwFWDDfcFGo6bkF78vFBahEhDyAhopFmc5IDre811izyjUhnO13lrQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFJjdqgdQTuEua/R1pFyVN+niUACaMB8GA1UdIwQY
MBaAFEodIL534SIyMjwUIvtRmP6gCGA0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2gwZ3ZuZmhJakl5UEJRaS0xR1lfcUFJWURRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi82M2M5ZGItOGFiOS00YzFlLWFmMjct
ZWQyODg1MWVjYjc2LzEvbU4ycUIxQk80UzVyOUhXa1hKVTM2ZUpRQUpvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi82M2M5ZGItOGFiOS00YzFlLWFmMjctZWQyODg1MWVjYjc2
LzEvU2gwZ3ZuZmhJakl5UEJRaS0xR1lfcUFJWURRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAWSKqMA0E
AgACMAcDBQMqD+zAMA0GCSqGSIb3DQEBCwUAA4IBAQCU7tlQpKm0jXQ6kk5OYay1
RrpA+unItVvKMf89QBVFg5OaVt3j82bNIBms4aBiRD/u8GIXRzpFs828Q6A7zCnp
kNhg2Yjxe2rLN2p3g+KeO8j/1BpmV+5nu+AlFS9yjC6+Tkp73F5JYl5Stl7aE9rc
B/+gA6Hxo23Nna9Sb7lnKal2MklpBGTsnujTAvYrZ/I8HFZ6G9rtWuCwEHaoZnN6
VxbqMyBfkQVkPSWu1A048/U/XDzxKeb91IXBt4yCjxlgI7a34o/3XDgAW33bPPUj
84OLW1zBeeNY2FuJzeEgA9HPyGQLx4yfH56UAxCl4d/sPgpfUKiQNhlOkAcSIiFi
-----END CERTIFICATE-----
Generated at Fri Mar 14 14:02:15 2025 by rpki-client