Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/cCgDo2j_rR0KoDzIDjg9vwwac6w.roa
File: cCgDo2j_rR0KoDzIDjg9vwwac6w.roa (raw, json)
Hash identifier: 8aUHRkkuubS/+P8SwIeoY6mY8z0l8tBlBlzopVHWUyA=
Subject key identifier: 70:28:03:A3:68:FF:AD:1D:0A:A0:3C:C8:0E:38:3D:BF:0C:1A:73:AC
Certificate issuer: /CN=05a97ff404808ad34f9aa8251767d1aec890601f
Certificate serial: 019425FDBB1C8A1A935B77F54C111DF33207
Authority key identifier: 05:A9:7F:F4:04:80:8A:D3:4F:9A:A8:25:17:67:D1:AE:C8:90:60:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bal_9ASAitNPmqglF2fRrsiQYB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/cCgDo2j_rR0KoDzIDjg9vwwac6w.roa
Signing time: Thu 02 Jan 2025 07:49:32 +0000
ROA not before: Thu 02 Jan 2025 07:49:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208416
IP address blocks: 45.138.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bal_9ASAitNPmqglF2fRrsiQYB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:bb:1c:8a:1a:93:5b:77:f5:4c:11:1d:f3:32:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05a97ff404808ad34f9aa8251767d1aec890601f
Validity
Not Before: Jan 2 07:49:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=702803a368ffad1d0aa03cc80e383dbf0c1a73ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0c:23:2b:29:53:f2:40:9a:e2:98:f7:28:3b:
96:07:de:00:a5:19:66:d5:51:93:a2:70:37:65:b6:
1a:f0:6f:0d:40:08:b6:3a:0f:90:b9:17:c1:53:e4:
3b:1c:b2:b1:1e:d1:dc:a3:4c:a5:b1:47:b6:de:28:
4a:c5:7c:4c:94:93:d8:cd:81:cd:dc:04:3b:fe:e2:
16:73:6d:62:5b:6a:a0:2c:2b:1c:57:f2:da:32:f1:
66:ea:cb:87:57:70:0f:62:78:14:5f:af:94:04:98:
82:dc:2a:9d:3b:3a:90:e7:46:6b:11:72:38:ba:08:
34:9d:16:2f:bd:3e:87:8e:7d:46:e3:16:53:60:48:
03:86:bb:e1:47:7d:73:47:62:0e:86:29:94:1b:3b:
f9:37:ff:69:8f:ec:c0:2a:1e:3e:93:b3:ae:a0:a3:
b0:93:e6:38:e3:10:45:84:a1:8c:4d:27:c0:ee:be:
9c:30:b8:84:71:8e:d8:96:d2:3d:43:28:4a:12:99:
03:d9:88:a1:f7:c5:e0:ff:ea:ac:89:03:38:68:e4:
9c:fb:f5:95:5d:c4:87:19:83:dc:ca:36:13:33:41:
7e:16:39:e6:2f:02:9d:ed:32:37:65:0d:d1:27:b4:
d7:9b:b6:c7:04:bc:80:b2:da:f5:a4:de:60:ef:97:
84:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:28:03:A3:68:FF:AD:1D:0A:A0:3C:C8:0E:38:3D:BF:0C:1A:73:AC
X509v3 Authority Key Identifier:
keyid:05:A9:7F:F4:04:80:8A:D3:4F:9A:A8:25:17:67:D1:AE:C8:90:60:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bal_9ASAitNPmqglF2fRrsiQYB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/cCgDo2j_rR0KoDzIDjg9vwwac6w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.121.0/24
Signature Algorithm: sha256WithRSAEncryption
71:d5:8f:5b:d7:14:63:8c:07:b5:86:93:97:cc:8a:01:3c:05:
bb:ee:ea:d9:22:a9:a3:da:ba:86:ef:12:40:ea:53:0f:26:22:
1e:a0:cc:ad:5e:e2:db:61:21:ac:85:b5:18:3c:0a:a9:7b:e6:
4d:24:51:8b:a1:76:ae:91:f0:cf:bf:c9:6f:ed:75:31:77:a6:
fc:d2:cc:93:c9:93:57:53:2e:64:83:4b:e7:e9:83:dd:a9:52:
ba:30:34:aa:7c:9a:36:fc:bd:a9:a8:51:73:1b:32:1c:2c:92:
3e:83:72:42:19:ac:d5:4f:f7:f1:a5:f9:5c:46:d5:fd:a8:70:
c0:1a:10:16:45:5a:bf:32:67:13:f5:71:d3:04:48:e8:4b:02:
0c:f9:96:32:1e:ca:66:d6:e6:64:12:95:88:57:b8:ed:71:60:
72:99:92:ac:1f:0b:71:d5:65:d1:73:fc:dc:3d:e4:7c:e5:d4:
17:1f:5b:4d:b7:72:bb:38:d8:7b:ae:2c:cf:8c:67:27:0d:26:
e0:1e:31:ff:99:7a:8a:00:05:b1:8e:53:7f:61:8d:55:6c:d8:
56:f4:4c:fd:fc:75:4d:d8:59:8b:8d:05:31:9f:be:28:e7:8f:
f8:7a:c9:c1:12:24:6a:2d:6a:28:14:ca:91:1f:28:55:57:4b:
4a:c8:05:8c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQl/bscihqTW3f1TBEd8zIHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1YTk3ZmY0MDQ4MDhhZDM0ZjlhYTgyNTE3NjdkMWFlYzg5
MDYwMWYwHhcNMjUwMTAyMDc0OTMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MDI4MDNhMzY4ZmZhZDFkMGFhMDNjYzgwZTM4M2RiZjBjMWE3M2FjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwwjKylT8kCa4pj3KDuWB94ApRlm
1VGTonA3ZbYa8G8NQAi2Og+QuRfBU+Q7HLKxHtHco0ylsUe23ihKxXxMlJPYzYHN
3AQ7/uIWc21iW2qgLCscV/LaMvFm6suHV3APYngUX6+UBJiC3CqdOzqQ50ZrEXI4
ugg0nRYvvT6Hjn1G4xZTYEgDhrvhR31zR2IOhimUGzv5N/9pj+zAKh4+k7OuoKOw
k+Y44xBFhKGMTSfA7r6cMLiEcY7YltI9QyhKEpkD2Yih98Xg/+qsiQM4aOSc+/WV
XcSHGYPcyjYTM0F+FjnmLwKd7TI3ZQ3RJ7TXm7bHBLyAstr1pN5g75eEMQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHAoA6No/60dCqA8yA44Pb8MGnOsMB8GA1UdIwQY
MBaAFAWpf/QEgIrTT5qoJRdn0a7IkGAfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmFsXzlBU0FpdE5QbXFnbEYyZlJyc2lRWUI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy82Yzk1M2ItMDc2My00YjZkLWJmMWEt
NmNlNDQ0ZWJlYWYwLzEvY0NnRG8yal9yUjBLb0R6SURqZzl2d3dhYzZ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy82Yzk1M2ItMDc2My00YjZkLWJmMWEtNmNlNDQ0ZWJlYWYw
LzEvQmFsXzlBU0FpdE5QbXFnbEYyZlJyc2lRWUI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYp5MA0G
CSqGSIb3DQEBCwUAA4IBAQBx1Y9b1xRjjAe1hpOXzIoBPAW77urZIqmj2rqG7xJA
6lMPJiIeoMytXuLbYSGshbUYPAqpe+ZNJFGLoXaukfDPv8lv7XUxd6b80syTyZNX
Uy5kg0vn6YPdqVK6MDSqfJo2/L2pqFFzGzIcLJI+g3JCGazVT/fxpflcRtX9qHDA
GhAWRVq/MmcT9XHTBEjoSwIM+ZYyHspm1uZkEpWIV7jtcWBymZKsHwtx1WXRc/zc
PeR85dQXH1tNt3K7ONh7rizPjGcnDSbgHjH/mXqKAAWxjlN/YY1VbNhW9Ez9/HVN
2FmLjQUxn74o54/4esnBEiRqLWooFMqRHyhVV0tKyAWM
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:37:18 2025 by rpki-client