Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/89ZdTmp7S2NunnuoGSf_2vtgPY8.roa
File: 89ZdTmp7S2NunnuoGSf_2vtgPY8.roa (raw, json)
Hash identifier: bPa9rSCPFw03d28VXPa3N71Ifao0FpVDusG0bNmLxwE=
Subject key identifier: F3:D6:5D:4E:6A:7B:4B:63:6E:9E:7B:A8:19:27:FF:DA:FB:60:3D:8F
Certificate issuer: /CN=1e36de27974727aa0046b3e9c8d0624674541255
Certificate serial: 01941FFAA04CA1474501EA5059F66727DF9E
Authority key identifier: 1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/89ZdTmp7S2NunnuoGSf_2vtgPY8.roa
Signing time: Wed 01 Jan 2025 03:48:26 +0000
ROA not before: Wed 01 Jan 2025 03:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215540
IP address blocks: 46.29.234.0/24 maxlen: 24
46.29.235.0/24 maxlen: 24
46.29.238.0/24 maxlen: 24
85.159.228.0/24 maxlen: 24
85.159.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft
rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:a0:4c:a1:47:45:01:ea:50:59:f6:67:27:df:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e36de27974727aa0046b3e9c8d0624674541255
Validity
Not Before: Jan 1 03:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f3d65d4e6a7b4b636e9e7ba81927ffdafb603d8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:22:05:1a:b9:7b:51:88:3e:e0:97:27:8c:9f:
6e:ed:86:8c:fa:7d:bf:37:2a:72:91:59:7c:d9:42:
37:3d:fe:7c:4f:e9:85:e9:0d:d0:43:ec:f3:72:ca:
8f:b9:34:f4:2a:c2:4c:2a:18:68:b5:1f:0c:93:05:
0f:e4:94:b4:ef:99:44:92:3f:91:cb:6a:0e:12:4d:
93:32:7b:4d:61:f8:14:26:fa:15:ad:c8:9b:84:cc:
a5:4e:37:1c:56:27:88:c9:d9:1c:8c:4a:5e:56:eb:
df:cd:dc:52:83:15:42:89:82:da:ac:f5:ba:16:41:
cc:48:15:cc:a6:98:31:a1:57:56:67:92:d6:17:8f:
8c:ee:2f:c3:09:1b:77:58:e0:61:06:27:57:65:50:
2d:00:35:5f:ea:6f:67:0d:7a:f1:d5:de:03:aa:20:
1c:b5:32:36:31:16:bd:49:54:72:9f:b6:67:3b:94:
c8:b4:09:e7:9c:45:9b:65:2d:d0:87:2b:52:86:29:
d3:bc:1c:44:90:64:a6:a9:37:c6:aa:b8:e5:76:20:
9c:9a:82:ed:85:b5:4b:a2:41:6b:12:20:c5:d9:ac:
dd:aa:67:d3:71:b6:fe:20:f6:f1:5a:61:ed:85:3e:
4e:e5:47:f8:8c:7e:a9:ec:84:cc:22:22:60:73:08:
48:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:D6:5D:4E:6A:7B:4B:63:6E:9E:7B:A8:19:27:FF:DA:FB:60:3D:8F
X509v3 Authority Key Identifier:
keyid:1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/89ZdTmp7S2NunnuoGSf_2vtgPY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.29.234.0/23
46.29.238.0/24
85.159.228.0/23
Signature Algorithm: sha256WithRSAEncryption
2c:a6:a3:cf:11:3a:04:8f:76:c8:14:2a:56:de:84:64:5f:a9:
86:4b:4a:ad:8f:15:88:0e:d1:50:5f:d9:0e:89:4c:1b:02:d2:
ba:e0:ce:6a:7f:92:83:de:b2:36:c4:0f:fc:db:42:03:6b:8b:
1d:4d:2c:a2:4f:d7:c8:24:e5:a3:fe:ca:6a:f2:9e:82:e8:db:
4a:a5:02:bb:1d:a9:fe:3a:8f:57:46:6a:47:43:4c:82:60:8a:
b8:d0:e1:7a:80:27:27:4b:ba:9c:71:2c:78:b3:ea:e8:19:b8:
b8:4a:cb:95:aa:9f:ce:04:5f:8f:0f:b8:c8:c0:e9:43:82:a5:
04:02:ec:db:ac:48:cc:51:bf:5d:8e:bf:3c:bb:bc:b5:fc:cb:
55:d0:a6:f5:53:a4:fe:63:2c:8c:ac:4f:2d:37:ed:b6:93:54:
27:fd:f4:88:94:33:bb:19:c9:f9:fc:f8:2c:10:f8:22:1e:5d:
4f:0d:eb:75:ad:e2:8a:e8:d8:f4:74:04:4a:3c:ee:ae:d8:24:
f5:c9:ef:4d:02:e4:9f:15:de:77:da:06:1c:36:03:c6:de:88:
c5:a8:6d:da:1f:0e:37:ed:73:a3:4f:40:90:f2:57:d1:73:ac:
ec:61:04:1e:9f:2a:de:48:e8:da:61:20:a5:b7:00:8b:f9:44:
0a:8f:bd:e9
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQf+qBMoUdFAepQWfZnJ9+eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlMzZkZTI3OTc0NzI3YWEwMDQ2YjNlOWM4ZDA2MjQ2NzQ1
NDEyNTUwHhcNMjUwMTAxMDM0ODI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmM2Q2NWQ0ZTZhN2I0YjYzNmU5ZTdiYTgxOTI3ZmZkYWZiNjAzZDhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSIFGrl7UYg+4JcnjJ9u7YaM+n2/
NypykVl82UI3Pf58T+mF6Q3QQ+zzcsqPuTT0KsJMKhhotR8MkwUP5JS075lEkj+R
y2oOEk2TMntNYfgUJvoVrcibhMylTjccVieIydkcjEpeVuvfzdxSgxVCiYLarPW6
FkHMSBXMppgxoVdWZ5LWF4+M7i/DCRt3WOBhBidXZVAtADVf6m9nDXrx1d4DqiAc
tTI2MRa9SVRyn7ZnO5TItAnnnEWbZS3QhytShinTvBxEkGSmqTfGqrjldiCcmoLt
hbVLokFrEiDF2azdqmfTcbb+IPbxWmHthT5O5Uf4jH6p7ITMIiJgcwhIZwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFPPWXU5qe0tjbp57qBkn/9r7YD2PMB8GA1UdIwQY
MBaAFB423ieXRyeqAEaz6cjQYkZ0VBJVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGpiZUo1ZEhKNm9BUnJQcHlOQmlSblJVRWxVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy81OWU4YzMtNjI2Yi00ZWNlLThlMzkt
ZGY3OTNhOTQwYmFiLzEvODlaZFRtcDdTMk51bm51b0dTZl8ydnRnUFk4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy81OWU4YzMtNjI2Yi00ZWNlLThlMzktZGY3OTNhOTQwYmFi
LzEvSGpiZUo1ZEhKNm9BUnJQcHlOQmlSblJVRWxVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBLh3qAwQA
Lh3uAwQBVZ/kMA0GCSqGSIb3DQEBCwUAA4IBAQAspqPPEToEj3bIFCpW3oRkX6mG
S0qtjxWIDtFQX9kOiUwbAtK64M5qf5KD3rI2xA/820IDa4sdTSyiT9fIJOWj/spq
8p6C6NtKpQK7Han+Oo9XRmpHQ0yCYIq40OF6gCcnS7qccSx4s+roGbi4SsuVqp/O
BF+PD7jIwOlDgqUEAuzbrEjMUb9djr88u7y1/MtV0Kb1U6T+YyyMrE8tN+22k1Qn
/fSIlDO7Gcn5/PgsEPgiHl1PDet1reKK6Nj0dARKPO6u2CT1ye9NAuSfFd532gYc
NgPG3ojFqG3aHw437XOjT0CQ8lfRc6zsYQQenyreSOjaYSCltwCL+UQKj73p
-----END CERTIFICATE-----
Generated at Sun Apr 6 10:50:51 2025 by rpki-client