Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/1KLC3gBk4V8UlL1q34VPnUxHzZY.roa
File: 1KLC3gBk4V8UlL1q34VPnUxHzZY.roa (raw, json)
Hash identifier: PpTqyE9jhdplaM4jeC6bew/Mkzc7lRGupafDYfql5k0=
Subject key identifier: D4:A2:C2:DE:00:64:E1:5F:14:94:BD:6A:DF:85:4F:9D:4C:47:CD:96
Certificate issuer: /CN=21a00080cd2cb1bb073903b32b25ad660a366486
Certificate serial: 0194258F3B539ECDE7083DE27ABFEF98ED27
Authority key identifier: 21:A0:00:80:CD:2C:B1:BB:07:39:03:B3:2B:25:AD:66:0A:36:64:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/1KLC3gBk4V8UlL1q34VPnUxHzZY.roa
Signing time: Thu 02 Jan 2025 05:48:51 +0000
ROA not before: Thu 02 Jan 2025 05:48:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 91.239.43.0/24 maxlen: 24
195.191.65.0/24 maxlen: 24
213.109.76.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:3b:53:9e:cd:e7:08:3d:e2:7a:bf:ef:98:ed:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21a00080cd2cb1bb073903b32b25ad660a366486
Validity
Not Before: Jan 2 05:48:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d4a2c2de0064e15f1494bd6adf854f9d4c47cd96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f2:e7:e9:1d:9f:19:11:a4:04:2b:a6:c1:10:
ba:44:cf:5f:b3:46:71:16:88:3e:86:47:cc:51:78:
61:07:99:ee:b3:39:ac:95:4e:36:40:7d:b8:fb:9a:
dc:92:6f:02:1d:8f:70:41:83:e5:4b:d7:78:f1:5b:
1c:7a:0c:20:64:b3:43:7d:05:5e:5a:f8:61:50:21:
7d:05:f2:ed:42:18:b1:cd:f0:30:69:29:52:21:96:
e6:5d:cc:be:65:80:f2:ea:89:5b:11:d7:5e:2a:fb:
de:26:be:69:65:cd:91:09:12:1d:64:39:89:69:97:
d0:aa:ae:a5:97:8f:21:d4:67:40:fe:6a:68:19:1a:
61:eb:c9:e1:6c:f0:4f:de:c6:d7:46:89:81:47:d4:
1c:e7:6a:47:51:4d:77:9c:84:c3:86:e1:d8:4e:40:
f0:80:74:26:28:71:6a:09:41:e2:1d:7e:31:2c:bb:
32:b2:29:02:63:27:06:74:ad:ed:1e:88:f2:4b:93:
bb:83:ae:92:c8:d1:d4:2a:d6:c3:e7:d5:57:06:7d:
fa:d2:42:df:5a:9b:37:ce:86:72:f2:7a:2f:91:5f:
ec:6b:f4:7f:bf:16:83:1d:d1:64:f8:73:35:0f:dc:
6e:1a:52:6a:de:78:fc:fa:b8:f7:7e:23:39:1e:57:
25:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:A2:C2:DE:00:64:E1:5F:14:94:BD:6A:DF:85:4F:9D:4C:47:CD:96
X509v3 Authority Key Identifier:
keyid:21:A0:00:80:CD:2C:B1:BB:07:39:03:B3:2B:25:AD:66:0A:36:64:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/1KLC3gBk4V8UlL1q34VPnUxHzZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.43.0/24
195.191.65.0/24
213.109.76.0/23
Signature Algorithm: sha256WithRSAEncryption
53:e5:d4:07:5d:dc:07:54:14:18:05:2d:a7:b0:06:1b:ca:d0:
6f:92:c9:0c:d0:37:c6:84:52:5d:39:a8:6e:57:08:5f:98:97:
d4:b5:af:5d:92:1d:b3:8c:8b:97:c4:9e:ac:55:7f:8a:5f:72:
c3:7d:d7:e1:f7:69:03:14:14:76:83:6a:da:ba:de:2c:c9:30:
dd:14:82:83:44:f6:05:45:22:f7:ed:25:6f:f5:5a:c6:77:ec:
b2:70:e9:51:bc:f9:35:84:9e:84:a9:58:f9:57:c6:3d:76:a1:
af:a6:ca:09:73:19:2f:6a:6b:f4:08:f0:4c:07:ba:92:a0:e7:
df:4b:1b:f7:21:15:96:fd:42:f6:59:7b:35:c9:3e:da:6d:b9:
9c:07:f4:e0:f5:c0:14:1d:85:cd:05:c3:4f:ab:df:d9:70:86:
bb:b5:67:d3:ce:f3:19:6b:c8:39:17:5b:f0:c0:31:f2:37:8e:
fd:f6:7a:0d:45:f1:bc:1c:af:04:bf:0b:63:bb:e7:22:ed:56:
f3:dd:f0:b9:1f:69:57:a1:99:56:9e:ce:1b:3c:4a:5c:81:95:
c5:ee:84:14:80:81:a3:10:b4:6d:6e:84:9d:0a:ea:c9:55:93:
57:9c:43:d5:58:ff:2e:3a:f1:37:f7:4b:ae:a8:2e:b1:a4:dd:
21:20:e2:23
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQljztTns3nCD3ier/vmO0nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxYTAwMDgwY2QyY2IxYmIwNzM5MDNiMzJiMjVhZDY2MGEz
NjY0ODYwHhcNMjUwMTAyMDU0ODUxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNGEyYzJkZTAwNjRlMTVmMTQ5NGJkNmFkZjg1NGY5ZDRjNDdjZDk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2PLn6R2fGRGkBCumwRC6RM9fs0Zx
Fog+hkfMUXhhB5nuszmslU42QH24+5rckm8CHY9wQYPlS9d48VscegwgZLNDfQVe
WvhhUCF9BfLtQhixzfAwaSlSIZbmXcy+ZYDy6olbEddeKvveJr5pZc2RCRIdZDmJ
aZfQqq6ll48h1GdA/mpoGRph68nhbPBP3sbXRomBR9Qc52pHUU13nITDhuHYTkDw
gHQmKHFqCUHiHX4xLLsysikCYycGdK3tHojyS5O7g66SyNHUKtbD59VXBn360kLf
Wps3zoZy8novkV/sa/R/vxaDHdFk+HM1D9xuGlJq3nj8+rj3fiM5HlclGwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFNSiwt4AZOFfFJS9at+FT51MR82WMB8GA1UdIwQY
MBaAFCGgAIDNLLG7BzkDsyslrWYKNmSGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWFBQWdNMHNzYnNIT1FPekt5V3RaZ28yWklZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy82YzNkOWYtOGE0Zi00YTZjLTg1Nzkt
ZTkyZWNlNGQzY2IzLzEvMUtMQzNnQms0VjhVbEwxcTM0VlBuVXhIelpZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy82YzNkOWYtOGE0Zi00YTZjLTg1NzktZTkyZWNlNGQzY2Iz
LzEvSWFBQWdNMHNzYnNIT1FPekt5V3RaZ28yWklZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAW+8rAwQA
w79BAwQB1W1MMA0GCSqGSIb3DQEBCwUAA4IBAQBT5dQHXdwHVBQYBS2nsAYbytBv
kskM0DfGhFJdOahuVwhfmJfUta9dkh2zjIuXxJ6sVX+KX3LDfdfh92kDFBR2g2ra
ut4syTDdFIKDRPYFRSL37SVv9VrGd+yycOlRvPk1hJ6EqVj5V8Y9dqGvpsoJcxkv
amv0CPBMB7qSoOffSxv3IRWW/UL2WXs1yT7abbmcB/Tg9cAUHYXNBcNPq9/ZcIa7
tWfTzvMZa8g5F1vwwDHyN4799noNRfG8HK8Evwtju+ci7Vbz3fC5H2lXoZlWns4b
PEpcgZXF7oQUgIGjELRtboSdCurJVZNXnEPVWP8uOvE390uuqC6xpN0hIOIj
-----END CERTIFICATE-----
Generated at Sat Apr 5 02:53:47 2025 by rpki-client