Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/78e5eb-c2af-4462-b859-898996c861df/1/8Ka9rxc0YKocFkWcaDXR1ONcgME.roa
File: 8Ka9rxc0YKocFkWcaDXR1ONcgME.roa (raw, json)
Hash identifier: usLLszkWwMw6Nc8UOkM6uTFB1CmI/iSWcsPGfnYTo08=
Subject key identifier: F0:A6:BD:AF:17:34:60:AA:1C:16:45:9C:68:35:D1:D4:E3:5C:80:C1
Certificate issuer: /CN=5673fa6842973edf62d579b4efec2fa64fdbf8c8
Certificate serial: 01942143C4F1FB56CC0634DC330E9156C008
Authority key identifier: 56:73:FA:68:42:97:3E:DF:62:D5:79:B4:EF:EC:2F:A6:4F:DB:F8:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/78e5eb-c2af-4462-b859-898996c861df/1/8Ka9rxc0YKocFkWcaDXR1ONcgME.roa
Signing time: Wed 01 Jan 2025 09:47:56 +0000
ROA not before: Wed 01 Jan 2025 09:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20940
IP address blocks: 78.135.122.0/24 maxlen: 24
78.135.124.0/23 maxlen: 23
78.135.126.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/78e5eb-c2af-4462-b859-898996c861df/1/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/78e5eb-c2af-4462-b859-898996c861df/1/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.mft
rsync://rpki.ripe.net/repository/DEFAULT/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 12:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:c4:f1:fb:56:cc:06:34:dc:33:0e:91:56:c0:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5673fa6842973edf62d579b4efec2fa64fdbf8c8
Validity
Not Before: Jan 1 09:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f0a6bdaf173460aa1c16459c6835d1d4e35c80c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:09:cd:a6:8a:8e:ba:ae:4c:2a:04:19:e0:0d:
16:d1:93:96:20:ce:82:5a:91:cc:d6:ff:97:ea:da:
20:12:d3:41:ed:ce:ef:44:14:13:04:50:c6:69:87:
68:f7:59:e5:e7:11:a7:bf:43:a3:3a:01:2c:27:e2:
b2:30:f9:09:23:75:93:30:5d:e0:57:49:0d:a0:6f:
1d:2c:eb:65:5d:10:34:a5:c0:8e:38:25:4a:d6:ee:
20:62:64:d7:aa:bc:2b:ef:be:aa:d9:c1:9f:5e:1b:
32:ce:4e:88:1d:25:e2:6b:da:e1:d9:94:3e:2a:60:
04:19:3b:48:db:59:9b:82:c0:15:12:c3:f7:af:6d:
93:29:30:a4:dd:24:5e:cb:04:8f:83:13:04:32:59:
a4:a2:36:2c:74:3c:e7:41:dd:23:c6:35:1b:2c:d4:
6a:bf:75:17:42:83:ea:97:8c:19:b0:7b:14:61:0b:
a2:15:13:3d:f8:52:55:16:60:15:71:32:c5:75:b2:
51:bb:8a:2a:30:cc:96:24:13:86:06:48:1d:c1:ac:
9e:99:64:ff:df:d8:bb:32:99:ec:c8:28:7b:c5:5d:
7e:95:65:3f:66:bb:2e:f0:a1:f8:ed:7b:ba:b0:25:
be:5a:91:43:8f:b1:09:ff:a9:10:53:02:2c:73:26:
f9:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:A6:BD:AF:17:34:60:AA:1C:16:45:9C:68:35:D1:D4:E3:5C:80:C1
X509v3 Authority Key Identifier:
keyid:56:73:FA:68:42:97:3E:DF:62:D5:79:B4:EF:EC:2F:A6:4F:DB:F8:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/78e5eb-c2af-4462-b859-898996c861df/1/8Ka9rxc0YKocFkWcaDXR1ONcgME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/78e5eb-c2af-4462-b859-898996c861df/1/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.135.122.0/24
78.135.124.0/22
Signature Algorithm: sha256WithRSAEncryption
35:43:9e:87:08:55:9e:f1:e6:70:15:79:1a:f9:d1:54:1b:d1:
78:68:bf:e4:69:a9:c1:79:c5:3a:d4:76:99:b6:1c:23:be:97:
bd:64:a9:a9:15:fe:71:d0:de:b2:d3:cd:e1:4f:fa:58:ef:91:
34:54:e7:a5:b2:c7:6d:05:07:4a:b9:eb:bc:7f:66:16:2c:b8:
57:5c:d2:2a:56:ab:ce:20:f4:f9:95:16:d9:c5:01:00:2d:bf:
ac:ef:e5:f9:01:31:99:fc:99:e4:9a:e0:c0:ec:fe:92:57:f2:
3f:31:12:8b:27:ed:65:ca:a5:f5:30:37:27:b8:fd:55:ac:eb:
9a:4a:55:9c:2c:69:5c:89:ad:05:1a:a6:cb:49:5a:fd:b9:2d:
05:c8:90:82:58:ac:1e:5d:ab:af:eb:a9:e9:a9:f8:28:79:13:
00:7a:f7:da:64:0d:6c:ed:4a:fe:16:f6:61:05:d5:04:8d:bd:
5d:65:b3:0e:bc:46:c4:47:21:3e:1f:32:2b:d2:d4:62:87:f7:
10:05:aa:68:19:16:e8:14:df:a8:4c:5d:d8:3b:f6:bd:85:60:
c7:e1:a4:0b:97:d4:75:9d:78:6d:f3:91:0b:0b:ac:26:a7:83:
72:1c:21:bd:79:01:ff:ac:42:14:08:a8:bb:83:f7:f4:2f:5d:
9e:84:2c:1c
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQhQ8Tx+1bMBjTcMw6RVsAIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2NzNmYTY4NDI5NzNlZGY2MmQ1NzliNGVmZWMyZmE2NGZk
YmY4YzgwHhcNMjUwMTAxMDk0NzU2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMGE2YmRhZjE3MzQ2MGFhMWMxNjQ1OWM2ODM1ZDFkNGUzNWM4MGMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwnNpoqOuq5MKgQZ4A0W0ZOWIM6C
WpHM1v+X6togEtNB7c7vRBQTBFDGaYdo91nl5xGnv0OjOgEsJ+KyMPkJI3WTMF3g
V0kNoG8dLOtlXRA0pcCOOCVK1u4gYmTXqrwr776q2cGfXhsyzk6IHSXia9rh2ZQ+
KmAEGTtI21mbgsAVEsP3r22TKTCk3SReywSPgxMEMlmkojYsdDznQd0jxjUbLNRq
v3UXQoPql4wZsHsUYQuiFRM9+FJVFmAVcTLFdbJRu4oqMMyWJBOGBkgdwayemWT/
39i7MpnsyCh7xV1+lWU/Zrsu8KH47Xu6sCW+WpFDj7EJ/6kQUwIscyb5dwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFPCmva8XNGCqHBZFnGg10dTjXIDBMB8GA1UdIwQY
MBaAFFZz+mhClz7fYtV5tO/sL6ZP2/jIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVm5QNmFFS1hQdDlpMVhtMDctd3Zwa19iLU1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy83OGU1ZWItYzJhZi00NDYyLWI4NTkt
ODk4OTk2Yzg2MWRmLzEvOEthOXJ4YzBZS29jRmtXY2FEWFIxT05jZ01FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy83OGU1ZWItYzJhZi00NDYyLWI4NTktODk4OTk2Yzg2MWRm
LzEvVm5QNmFFS1hQdDlpMVhtMDctd3Zwa19iLU1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATod6AwQC
Tod8MA0GCSqGSIb3DQEBCwUAA4IBAQA1Q56HCFWe8eZwFXka+dFUG9F4aL/kaanB
ecU61HaZthwjvpe9ZKmpFf5x0N6y083hT/pY75E0VOelssdtBQdKueu8f2YWLLhX
XNIqVqvOIPT5lRbZxQEALb+s7+X5ATGZ/JnkmuDA7P6SV/I/MRKLJ+1lyqX1MDcn
uP1VrOuaSlWcLGlcia0FGqbLSVr9uS0FyJCCWKweXauv66npqfgoeRMAevfaZA1s
7Ur+FvZhBdUEjb1dZbMOvEbERyE+HzIr0tRih/cQBapoGRboFN+oTF3YO/a9hWDH
4aQLl9R1nXht85ELC6wmp4NyHCG9eQH/rEIUCKi7g/f0L12ehCwc
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:17:51 2025 by rpki-client