Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/IRGnT1eQmUBmgR6_xtusELr-83s.roa
File: IRGnT1eQmUBmgR6_xtusELr-83s.roa (raw, json)
Hash identifier: dJ3+bDwzY4UO43kbNXGDeFrUEwRtOB0R3J1TQjuxqCQ=
Subject key identifier: 21:11:A7:4F:57:90:99:40:66:81:1E:BF:C6:DB:AC:10:BA:FE:F3:7B
Certificate issuer: /CN=ddb71471373bb0603c356eeded4b918292b5beee
Certificate serial: 0194236A480C0B85C11F83499D0C4622E980
Authority key identifier: DD:B7:14:71:37:3B:B0:60:3C:35:6E:ED:ED:4B:91:82:92:B5:BE:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3bcUcTc7sGA8NW7t7UuRgpK1vu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/IRGnT1eQmUBmgR6_xtusELr-83s.roa
Signing time: Wed 01 Jan 2025 19:49:15 +0000
ROA not before: Wed 01 Jan 2025 19:49:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3257
IP address blocks: 145.8.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3bcUcTc7sGA8NW7t7UuRgpK1vu4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:48:0c:0b:85:c1:1f:83:49:9d:0c:46:22:e9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddb71471373bb0603c356eeded4b918292b5beee
Validity
Not Before: Jan 1 19:49:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2111a74f5790994066811ebfc6dbac10bafef37b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:de:d3:ca:c4:26:7f:3e:d4:85:e0:b3:dc:12:
7c:cd:f5:44:72:9b:4c:1b:77:15:8e:6a:71:0b:81:
fb:51:92:3c:37:18:ac:8a:e7:98:76:b3:0b:fe:d1:
75:25:19:03:7e:ea:09:16:11:fc:74:5b:3c:6b:b1:
79:60:30:df:95:57:46:af:6c:7d:21:05:b2:8c:9b:
ce:21:0e:b8:c3:a7:ea:07:55:4c:a8:ed:71:7f:e2:
0d:40:cc:cd:4a:dd:1b:9c:40:e7:ee:2a:28:5c:6a:
84:85:36:4f:ce:ad:3d:f2:2d:64:b4:39:5c:79:da:
45:26:2c:d1:c6:ae:98:6a:aa:a5:c3:38:20:b0:d0:
27:12:de:58:c7:0c:03:48:6c:ca:05:7b:a0:83:f1:
ed:af:2b:1e:78:7d:72:38:00:2f:fc:b2:e7:ee:db:
35:6d:b4:80:84:30:04:2e:8f:a6:78:d0:40:ed:6a:
70:be:e7:70:1b:46:dd:80:12:77:8e:c1:bd:79:15:
38:ac:f5:20:63:0a:1a:8f:06:9b:83:b3:20:d8:23:
6e:9b:46:de:1b:0a:42:28:18:9e:1a:b3:73:d6:5a:
98:c3:b3:0a:16:2a:7b:7b:8d:37:15:45:85:ab:66:
3c:c6:7a:3d:e3:47:2f:b6:89:eb:9e:0c:44:f1:90:
38:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:11:A7:4F:57:90:99:40:66:81:1E:BF:C6:DB:AC:10:BA:FE:F3:7B
X509v3 Authority Key Identifier:
keyid:DD:B7:14:71:37:3B:B0:60:3C:35:6E:ED:ED:4B:91:82:92:B5:BE:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3bcUcTc7sGA8NW7t7UuRgpK1vu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/IRGnT1eQmUBmgR6_xtusELr-83s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.8.0.0/16
Signature Algorithm: sha256WithRSAEncryption
76:77:86:29:bf:3d:32:d9:10:7c:31:44:56:c4:e9:ec:fd:f5:
73:7b:b2:a9:82:bd:bb:52:c0:41:4c:1d:a6:0f:32:31:13:df:
d2:7a:12:54:81:25:aa:95:4b:fd:63:1e:81:bc:fa:7e:48:52:
2f:f3:0d:f2:d9:a5:6f:36:ba:69:a7:bd:63:ef:93:ef:61:bd:
7d:dd:84:cf:99:f7:9a:42:8a:df:f9:87:d7:20:c7:b9:53:5d:
bd:fc:c1:47:52:6c:4f:ea:a0:22:e1:a1:8e:81:42:d3:be:f2:
7f:f7:f2:8a:bc:c8:9d:bd:f0:26:70:e8:14:af:35:d4:05:94:
39:25:e8:21:13:f5:2d:38:e3:c2:84:45:46:af:71:b5:82:5b:
98:46:b9:3a:f1:f4:d1:9b:03:52:73:dc:d6:9c:08:c7:fc:74:
fb:3d:e4:e4:38:4f:ec:b5:21:76:6d:ee:20:cf:90:cf:7b:10:
e8:dd:da:f1:25:80:6d:a7:89:60:26:b2:ae:0a:e1:48:5d:0a:
3a:95:2f:a6:e0:21:69:66:65:64:dd:cf:1f:17:0b:32:a3:51:
a0:96:3f:4f:8e:d1:24:0b:0f:b7:1a:96:f8:a3:48:af:91:49:
2e:06:4e:06:98:da:9b:be:2c:51:40:78:da:a6:03:57:42:48:
3b:c1:94:d0
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgISAZQjakgMC4XBH4NJnQxGIumAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkYjcxNDcxMzczYmIwNjAzYzM1NmVlZGVkNGI5MTgyOTJi
NWJlZWUwHhcNMjUwMTAxMTk0OTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMTExYTc0ZjU3OTA5OTQwNjY4MTFlYmZjNmRiYWMxMGJhZmVmMzdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqN7TysQmfz7UheCz3BJ8zfVEcptM
G3cVjmpxC4H7UZI8NxisiueYdrML/tF1JRkDfuoJFhH8dFs8a7F5YDDflVdGr2x9
IQWyjJvOIQ64w6fqB1VMqO1xf+INQMzNSt0bnEDn7iooXGqEhTZPzq098i1ktDlc
edpFJizRxq6YaqqlwzggsNAnEt5YxwwDSGzKBXugg/HtryseeH1yOAAv/LLn7ts1
bbSAhDAELo+meNBA7WpwvudwG0bdgBJ3jsG9eRU4rPUgYwoajwabg7Mg2CNum0be
GwpCKBieGrNz1lqYw7MKFip7e403FUWFq2Y8xno940cvtonrngxE8ZA41wIDAQAB
o4ICCDCCAgQwHQYDVR0OBBYEFCERp09XkJlAZoEev8bbrBC6/vN7MB8GA1UdIwQY
MBaAFN23FHE3O7BgPDVu7e1LkYKStb7uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2JjVWNUYzdzR0E4Tlc3dDdVdVJncEsxdnU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy80YmNiMWItZmY0MS00OGUwLThkYjgt
NjIxMmFjNDljYTNiLzEvSVJHblQxZVFtVUJtZ1I2X3h0dXNFTHItODNzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy80YmNiMWItZmY0MS00OGUwLThkYjgtNjIxMmFjNDljYTNi
LzEvM2JjVWNUYzdzR0E4Tlc3dDdVdVJncEsxdnU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAkQgwDQYJ
KoZIhvcNAQELBQADggEBAHZ3him/PTLZEHwxRFbE6ez99XN7sqmCvbtSwEFMHaYP
MjET39J6ElSBJaqVS/1jHoG8+n5IUi/zDfLZpW82ummnvWPvk+9hvX3dhM+Z95pC
it/5h9cgx7lTXb38wUdSbE/qoCLhoY6BQtO+8n/38oq8yJ298CZw6BSvNdQFlDkl
6CET9S0448KERUavcbWCW5hGuTrx9NGbA1Jz3NacCMf8dPs95OQ4T+y1IXZt7iDP
kM97EOjd2vElgG2niWAmsq4K4UhdCjqVL6bgIWlmZWTdzx8XCzKjUaCWP0+O0SQL
D7calvijSK+RSS4GTgaY2pu+LFFAeNqmA1dCSDvBlNA=
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:12:03 2025 by rpki-client