Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/2Il6q-ZqOuI80bOhmO2ATk_4gjA.roa
File: 2Il6q-ZqOuI80bOhmO2ATk_4gjA.roa (raw, json)
Hash identifier: qZ2AvjwfuN5RofSpAulT+zvOokvk9hdo9R5gBG6wVV8=
Subject key identifier: D8:89:7A:AB:E6:6A:3A:E2:3C:D1:B3:A1:98:ED:80:4E:4F:F8:82:30
Certificate issuer: /CN=85d0e763f935c171694f172056eb44209db2e2cd
Certificate serial: 019425FC42F9958F65B8D847E45E785AE4C9
Authority key identifier: 85:D0:E7:63:F9:35:C1:71:69:4F:17:20:56:EB:44:20:9D:B2:E2:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/2Il6q-ZqOuI80bOhmO2ATk_4gjA.roa
Signing time: Thu 02 Jan 2025 07:47:56 +0000
ROA not before: Thu 02 Jan 2025 07:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212866
IP address blocks: 89.39.54.0/24 maxlen: 24
212.231.133.0/24 maxlen: 24
212.231.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:42:f9:95:8f:65:b8:d8:47:e4:5e:78:5a:e4:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85d0e763f935c171694f172056eb44209db2e2cd
Validity
Not Before: Jan 2 07:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d8897aabe66a3ae23cd1b3a198ed804e4ff88230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e5:a8:c0:f0:1e:58:82:3a:e9:e8:39:83:a1:
42:74:6d:60:8f:ba:5f:8f:28:32:17:f3:d8:bc:ea:
0d:21:fb:e9:71:69:ca:b5:21:da:9b:43:bd:bf:44:
dc:15:67:e6:50:9e:3f:e5:08:55:d1:ea:41:2f:7f:
ff:fe:05:f3:58:b6:77:bb:c7:b0:a4:e9:1a:2f:06:
ca:b8:6c:92:8b:cb:ec:e1:d9:16:97:bb:c9:2e:9e:
06:ff:02:55:b9:8b:e2:7e:2f:98:99:41:c6:df:02:
4c:a7:7b:bc:8c:b2:a7:83:30:d6:65:b4:00:9c:62:
e9:99:d5:1b:e0:24:de:52:7b:d4:e6:96:cc:8d:47:
91:25:49:6e:e6:38:cf:ce:6d:07:23:77:be:24:97:
71:df:f8:1f:c9:c5:17:1e:11:72:f8:eb:e9:73:d4:
81:87:52:2b:3f:9e:6b:49:31:68:25:34:25:e1:3b:
de:c5:94:85:2a:97:00:38:b5:8f:82:9b:b2:c9:93:
b3:2b:b1:2d:0d:fb:01:8d:ab:c5:ad:1a:53:f6:e0:
44:6e:0e:c9:2d:7e:49:5c:a6:3b:ba:a8:9e:c7:ae:
26:40:0a:20:26:d2:d3:cc:c6:13:0e:de:a1:17:9f:
e5:31:6a:ef:0c:b2:56:be:0a:8c:21:fd:5a:0e:96:
d9:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:89:7A:AB:E6:6A:3A:E2:3C:D1:B3:A1:98:ED:80:4E:4F:F8:82:30
X509v3 Authority Key Identifier:
keyid:85:D0:E7:63:F9:35:C1:71:69:4F:17:20:56:EB:44:20:9D:B2:E2:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/2Il6q-ZqOuI80bOhmO2ATk_4gjA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.39.54.0/24
212.231.133.0/24
212.231.143.0/24
Signature Algorithm: sha256WithRSAEncryption
04:0d:c2:1d:0b:27:4c:fc:ee:87:03:c3:a6:90:d7:34:3f:2e:
d8:9b:1d:12:2e:cc:85:d8:b2:0f:59:f1:73:8b:45:09:62:56:
57:72:d4:96:0b:91:24:66:78:fb:fd:d9:6c:21:db:d3:f2:3e:
72:54:1f:77:f8:a7:f4:5d:d2:90:0d:eb:24:4f:90:b7:11:1f:
f5:55:77:dc:42:ff:fd:37:8f:44:3f:90:e7:1a:06:b6:d5:57:
42:b1:87:9f:6f:ab:3c:9b:71:97:e0:13:bf:71:fc:bd:a8:34:
27:59:38:7a:0b:14:a9:16:4e:bc:be:03:39:73:86:79:3f:0c:
f9:b4:d6:66:b3:1b:68:23:a3:9e:9c:02:9e:2c:c9:4c:a9:68:
95:a0:64:01:70:f5:7b:9c:62:f3:84:6c:fe:b0:e6:cb:81:09:
84:03:90:49:40:71:77:75:39:97:90:65:0c:6c:f7:cd:9c:ce:
b5:84:fe:92:4f:77:2e:c1:39:14:96:cf:4f:42:b5:43:87:1f:
66:1d:1f:41:f0:f0:a1:fc:ca:80:91:c7:c6:e9:f7:13:38:d8:
72:4f:b9:db:da:1f:ac:d6:62:71:b0:b0:e9:17:ff:12:ac:78:
c5:d8:9a:70:e3:41:a5:a3:34:9c:78:7e:ef:10:03:ad:8b:84:
82:43:a1:04
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQl/EL5lY9luNhH5F54WuTJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1ZDBlNzYzZjkzNWMxNzE2OTRmMTcyMDU2ZWI0NDIwOWRi
MmUyY2QwHhcNMjUwMTAyMDc0NzU2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkODg5N2FhYmU2NmEzYWUyM2NkMWIzYTE5OGVkODA0ZTRmZjg4MjMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+WowPAeWII66eg5g6FCdG1gj7pf
jygyF/PYvOoNIfvpcWnKtSHam0O9v0TcFWfmUJ4/5QhV0epBL3///gXzWLZ3u8ew
pOkaLwbKuGySi8vs4dkWl7vJLp4G/wJVuYvifi+YmUHG3wJMp3u8jLKngzDWZbQA
nGLpmdUb4CTeUnvU5pbMjUeRJUlu5jjPzm0HI3e+JJdx3/gfycUXHhFy+Ovpc9SB
h1IrP55rSTFoJTQl4TvexZSFKpcAOLWPgpuyyZOzK7EtDfsBjavFrRpT9uBEbg7J
LX5JXKY7uqiex64mQAogJtLTzMYTDt6hF5/lMWrvDLJWvgqMIf1aDpbZpwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFNiJeqvmajriPNGzoZjtgE5P+IIwMB8GA1UdIwQY
MBaAFIXQ52P5NcFxaU8XIFbrRCCdsuLNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGREbllfazF3WEZwVHhjZ1Z1dEVJSjJ5NHMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi83NDY0MTAtMDI2Yi00NWM5LTgxY2Qt
ZjEyODM1ZjAyNDdiLzEvMklsNnEtWnFPdUk4MGJPaG1PMkFUa180Z2pBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi83NDY0MTAtMDI2Yi00NWM5LTgxY2QtZjEyODM1ZjAyNDdi
LzEvaGREbllfazF3WEZwVHhjZ1Z1dEVJSjJ5NHMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAWSc2AwQA
1OeFAwQA1OePMA0GCSqGSIb3DQEBCwUAA4IBAQAEDcIdCydM/O6HA8OmkNc0Py7Y
mx0SLsyF2LIPWfFzi0UJYlZXctSWC5EkZnj7/dlsIdvT8j5yVB93+Kf0XdKQDesk
T5C3ER/1VXfcQv/9N49EP5DnGga21VdCsYefb6s8m3GX4BO/cfy9qDQnWTh6CxSp
Fk68vgM5c4Z5Pwz5tNZmsxtoI6OenAKeLMlMqWiVoGQBcPV7nGLzhGz+sObLgQmE
A5BJQHF3dTmXkGUMbPfNnM61hP6ST3cuwTkUls9PQrVDhx9mHR9B8PCh/MqAkcfG
6fcTONhyT7nb2h+s1mJxsLDpF/8SrHjF2Jpw40GlozSceH7vEAOti4SCQ6EE
-----END CERTIFICATE-----
Generated at Tue Apr 15 06:10:54 2025 by rpki-client