Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/TrJLrIcRf-aTIZ5qksZDr9efIC8.roa
File: TrJLrIcRf-aTIZ5qksZDr9efIC8.roa (raw, json)
Hash identifier: 3uqn5OfCXLt7SWZK7jwK8MNuQRy9gNway+hboiwqAww=
Subject key identifier: 4E:B2:4B:AC:87:11:7F:E6:93:21:9E:6A:92:C6:43:AF:D7:9F:20:2F
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 01942369C70FE822531A5EC967DE8FAEF148
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/TrJLrIcRf-aTIZ5qksZDr9efIC8.roa
Signing time: Wed 01 Jan 2025 19:48:42 +0000
ROA not before: Wed 01 Jan 2025 19:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41957
IP address blocks: 45.86.169.0/24 maxlen: 24
77.83.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 12:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:c7:0f:e8:22:53:1a:5e:c9:67:de:8f:ae:f1:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Jan 1 19:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4eb24bac87117fe693219e6a92c643afd79f202f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:55:f9:b8:79:f9:a5:4b:54:a7:21:8f:d0:68:
62:59:48:40:b5:89:83:c7:83:c7:ff:f2:6d:8b:63:
df:4c:a5:b5:36:93:9c:94:ea:38:2c:37:70:45:e0:
80:32:41:92:c7:11:9b:37:22:15:72:c3:5a:27:35:
ae:22:2e:dd:f5:5e:4b:bc:58:20:57:fb:da:60:2c:
c5:4d:c3:0b:76:6c:41:10:ae:4e:f8:9b:ca:53:f3:
a5:db:b8:2a:12:8f:97:70:3e:16:a3:62:b9:72:31:
5f:ad:11:52:70:d3:53:94:cb:e0:45:82:46:17:7f:
4f:d7:90:eb:d9:50:be:2c:31:3a:08:8e:7f:14:a5:
b1:b1:6c:11:92:46:e1:94:f4:c9:e3:d6:9c:4f:58:
b9:93:0b:c4:83:3b:a1:63:16:c4:45:1f:82:bf:7c:
4f:db:01:e8:67:02:d3:29:1b:3b:e8:12:08:36:7d:
20:0f:69:8a:9d:a5:a9:a4:10:1f:07:08:a6:72:2f:
1c:35:e4:5f:29:be:1b:58:db:1b:e9:1d:63:f1:d3:
37:cf:78:e6:88:36:a1:c6:61:50:8b:16:5f:48:ab:
c4:7e:ce:b8:7b:c7:39:e1:4b:b3:f3:92:c2:f1:24:
09:03:e5:cc:68:76:bf:17:eb:3c:a5:14:61:df:6b:
0d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:B2:4B:AC:87:11:7F:E6:93:21:9E:6A:92:C6:43:AF:D7:9F:20:2F
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/TrJLrIcRf-aTIZ5qksZDr9efIC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.169.0/24
77.83.94.0/24
Signature Algorithm: sha256WithRSAEncryption
08:ed:95:f1:61:04:33:ab:a1:5a:7f:7e:a2:01:03:ac:43:46:
d5:57:31:65:2b:ba:65:01:bf:68:0d:e2:58:98:fc:94:77:80:
1d:6f:b4:f2:22:31:7c:9b:86:82:42:3f:ba:4c:9c:8e:80:ac:
76:80:9e:74:cb:4e:86:62:d6:d4:40:34:d3:1b:81:0d:24:ff:
a4:95:35:77:46:0d:1e:55:fb:9b:5e:11:33:10:da:f9:18:c9:
26:ce:d7:ba:75:7b:ab:a7:fa:75:40:e9:c7:c7:a6:e6:a9:fe:
60:36:ca:cc:5e:dc:f1:83:d0:65:55:d4:81:aa:1a:23:7b:a0:
1c:29:81:6b:4b:f6:85:a3:71:aa:f0:c0:69:ec:3f:0b:5c:a8:
7a:3c:79:a8:b6:d9:9a:79:37:fd:f2:ef:80:97:0e:79:d5:ba:
be:f3:d6:91:66:42:4e:79:88:e5:07:fb:d6:8b:e4:b4:81:c2:
3b:f0:d6:e6:1c:c2:2a:66:52:aa:6a:54:eb:dd:4b:4d:7a:71:
5d:7e:de:c9:d2:eb:10:7f:97:33:97:aa:6b:2d:c0:f6:84:dd:
44:27:b1:f8:58:a4:92:77:7a:18:10:52:f1:0e:3e:f5:9a:c9:
22:8d:1b:54:c4:f6:6e:7d:2f:e3:9a:a5:06:13:80:21:4c:94:
71:53:e5:c1
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQjaccP6CJTGl7JZ96PrvFIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlYmJmMzE3ZTVmYWY1ZWYwMmM5Y2NlNzk1MjdkNWU3NGI4
YWJjYzUwHhcNMjUwMTAxMTk0ODQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZWIyNGJhYzg3MTE3ZmU2OTMyMTllNmE5MmM2NDNhZmQ3OWYyMDJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFX5uHn5pUtUpyGP0GhiWUhAtYmD
x4PH//Jti2PfTKW1NpOclOo4LDdwReCAMkGSxxGbNyIVcsNaJzWuIi7d9V5LvFgg
V/vaYCzFTcMLdmxBEK5O+JvKU/Ol27gqEo+XcD4Wo2K5cjFfrRFScNNTlMvgRYJG
F39P15Dr2VC+LDE6CI5/FKWxsWwRkkbhlPTJ49acT1i5kwvEgzuhYxbERR+Cv3xP
2wHoZwLTKRs76BIINn0gD2mKnaWppBAfBwimci8cNeRfKb4bWNsb6R1j8dM3z3jm
iDahxmFQixZfSKvEfs64e8c54Uuz85LC8SQJA+XMaHa/F+s8pRRh32sNcwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFE6yS6yHEX/mkyGeapLGQ6/XnyAvMB8GA1UdIwQY
MBaAFO678xfl+vXvAsnM55Un1edLirzFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMt
NmZlOWJmNjA1NjFjLzEvVHJKTHJJY1JmLWFUSVo1cWtzWkRyOWVmSUM4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMtNmZlOWJmNjA1NjFj
LzEvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALVapAwQA
TVNeMA0GCSqGSIb3DQEBCwUAA4IBAQAI7ZXxYQQzq6Faf36iAQOsQ0bVVzFlK7pl
Ab9oDeJYmPyUd4Adb7TyIjF8m4aCQj+6TJyOgKx2gJ50y06GYtbUQDTTG4ENJP+k
lTV3Rg0eVfubXhEzENr5GMkmzte6dXurp/p1QOnHx6bmqf5gNsrMXtzxg9BlVdSB
qhoje6AcKYFrS/aFo3Gq8MBp7D8LXKh6PHmottmaeTf98u+Alw551bq+89aRZkJO
eYjlB/vWi+S0gcI78NbmHMIqZlKqalTr3UtNenFdft7J0usQf5czl6prLcD2hN1E
J7H4WKSSd3oYEFLxDj71mskijRtUxPZufS/jmqUGE4AhTJRxU+XB
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:25:56 2025 by rpki-client