Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/FAhtWfmDEr62tA8-MdL4s1_WH2Q.roa
File: FAhtWfmDEr62tA8-MdL4s1_WH2Q.roa (raw, json)
Hash identifier: GtQmguJ7Q5PK416zswB+RN8W/nrjymWunr8cc+Q6G9I=
Subject key identifier: 14:08:6D:59:F9:83:12:BE:B6:B4:0F:3E:31:D2:F8:B3:5F:D6:1F:64
Certificate issuer: /CN=ab4f00f5c3ab3df4c674a410d8a0f0182fb5e918
Certificate serial: 019420D59E73B30BE5E930DA6E43783BCBCB
Authority key identifier: AB:4F:00:F5:C3:AB:3D:F4:C6:74:A4:10:D8:A0:F0:18:2F:B5:E9:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q08A9cOrPfTGdKQQ2KDwGC-16Rg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/FAhtWfmDEr62tA8-MdL4s1_WH2Q.roa
Signing time: Wed 01 Jan 2025 07:47:38 +0000
ROA not before: Wed 01 Jan 2025 07:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43554
IP address blocks: 178.209.80.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.mft
rsync://rpki.ripe.net/repository/DEFAULT/q08A9cOrPfTGdKQQ2KDwGC-16Rg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:9e:73:b3:0b:e5:e9:30:da:6e:43:78:3b:cb:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab4f00f5c3ab3df4c674a410d8a0f0182fb5e918
Validity
Not Before: Jan 1 07:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=14086d59f98312beb6b40f3e31d2f8b35fd61f64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:69:a9:70:9a:77:15:fd:5c:07:7e:03:61:da:
41:74:f4:20:47:27:eb:15:c8:ea:0b:ae:23:db:93:
9a:59:1c:68:20:73:c4:77:4a:a4:1c:08:a6:16:fc:
79:39:34:8c:23:86:25:2f:52:50:cb:14:0e:31:89:
79:fb:aa:f1:08:25:3b:71:93:f7:c9:21:45:b3:7e:
d3:f8:5a:5e:d9:ab:36:46:66:c4:ea:b7:6f:dd:61:
99:34:36:98:0e:1c:70:20:bd:e3:ca:92:80:b4:5b:
72:0c:8b:07:d3:5f:6c:c2:47:1f:aa:cd:b6:b0:12:
4a:2b:2a:77:96:6f:33:6b:88:a0:9a:34:48:d7:a2:
3a:79:b2:e3:4c:82:32:d3:ce:3e:bf:f8:c9:c6:85:
51:6c:16:10:fa:41:73:5d:44:9e:e3:14:26:cb:f4:
dd:f6:0d:3f:84:89:7b:26:fa:57:b8:94:40:77:56:
3e:79:54:88:94:32:48:74:7e:c9:76:42:a2:77:9a:
db:7c:28:2a:90:cf:7d:b1:e8:04:f7:90:80:a8:1d:
6b:0b:a6:8f:9c:07:62:ba:fb:d9:c8:fe:b2:c8:96:
20:f3:64:01:60:eb:5f:11:0f:9a:20:e6:43:f8:9f:
0f:ce:7a:02:d1:22:ca:10:a4:03:7b:82:cd:84:87:
22:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:08:6D:59:F9:83:12:BE:B6:B4:0F:3E:31:D2:F8:B3:5F:D6:1F:64
X509v3 Authority Key Identifier:
keyid:AB:4F:00:F5:C3:AB:3D:F4:C6:74:A4:10:D8:A0:F0:18:2F:B5:E9:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q08A9cOrPfTGdKQQ2KDwGC-16Rg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/FAhtWfmDEr62tA8-MdL4s1_WH2Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.209.80.0/21
Signature Algorithm: sha256WithRSAEncryption
3b:59:85:b8:5c:c6:61:8b:dc:5a:a9:87:14:9f:3b:04:e1:dd:
ff:32:bc:70:3d:09:24:97:07:2b:e8:0e:17:59:1e:48:29:fc:
cc:b3:4c:6f:3f:2b:4c:a6:77:03:a5:c7:ad:63:51:7f:ac:97:
6d:22:84:f9:ea:7d:a7:1b:0a:4d:67:56:57:f4:07:dd:0a:ae:
f9:c8:e3:82:72:3e:c3:d5:3c:98:d8:69:29:45:95:95:ab:31:
7d:cc:b4:81:84:08:7a:89:f0:1c:93:5b:bc:1a:cc:d4:0c:c4:
c6:e4:63:98:22:e8:31:23:58:4d:52:05:bd:a8:1e:66:20:43:
c8:89:77:12:a5:cb:10:ef:10:d4:51:94:2c:73:08:b9:59:fd:
14:e1:93:bd:3b:42:29:25:fd:e9:50:e1:e3:b4:1a:05:4c:5d:
d6:1c:65:84:b0:89:62:6c:9a:f8:d0:f1:3f:cb:3e:da:c6:35:
f2:54:ae:3e:d7:d1:0b:c7:89:ed:36:5f:31:fe:b8:12:eb:e2:
1d:20:e5:03:f0:d6:f4:c3:a1:ad:4e:35:5b:0c:58:06:80:b6:
4f:b0:3d:96:0a:40:16:37:64:d4:61:de:50:14:3b:71:69:ad:
43:30:62:03:4d:d3:f6:7b:9c:a5:af:ef:54:f3:be:a8:16:0a:
29:10:c3:ff
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQg1Z5zswvl6TDabkN4O8vLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiNGYwMGY1YzNhYjNkZjRjNjc0YTQxMGQ4YTBmMDE4MmZi
NWU5MTgwHhcNMjUwMTAxMDc0NzM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNDA4NmQ1OWY5ODMxMmJlYjZiNDBmM2UzMWQyZjhiMzVmZDYxZjY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5WmpcJp3Ff1cB34DYdpBdPQgRyfr
FcjqC64j25OaWRxoIHPEd0qkHAimFvx5OTSMI4YlL1JQyxQOMYl5+6rxCCU7cZP3
ySFFs37T+Fpe2as2RmbE6rdv3WGZNDaYDhxwIL3jypKAtFtyDIsH019swkcfqs22
sBJKKyp3lm8za4igmjRI16I6ebLjTIIy084+v/jJxoVRbBYQ+kFzXUSe4xQmy/Td
9g0/hIl7JvpXuJRAd1Y+eVSIlDJIdH7JdkKid5rbfCgqkM99segE95CAqB1rC6aP
nAdiuvvZyP6yyJYg82QBYOtfEQ+aIOZD+J8PznoC0SLKEKQDe4LNhIci5QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBQIbVn5gxK+trQPPjHS+LNf1h9kMB8GA1UdIwQY
MBaAFKtPAPXDqz30xnSkENig8BgvtekYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTA4QTljT3JQZlRHZEtRUTJLRHdHQy0xNlJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9hMWYyMTItYmEzNS00NjZiLWI1MmUt
Mzg1M2QzNDBjOWE2LzEvRkFodFdmbURFcjYydEE4LU1kTDRzMV9XSDJRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9hMWYyMTItYmEzNS00NjZiLWI1MmUtMzg1M2QzNDBjOWE2
LzEvcTA4QTljT3JQZlRHZEtRUTJLRHdHQy0xNlJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDstFQMA0G
CSqGSIb3DQEBCwUAA4IBAQA7WYW4XMZhi9xaqYcUnzsE4d3/MrxwPQkklwcr6A4X
WR5IKfzMs0xvPytMpncDpcetY1F/rJdtIoT56n2nGwpNZ1ZX9AfdCq75yOOCcj7D
1TyY2GkpRZWVqzF9zLSBhAh6ifAck1u8GszUDMTG5GOYIugxI1hNUgW9qB5mIEPI
iXcSpcsQ7xDUUZQscwi5Wf0U4ZO9O0IpJf3pUOHjtBoFTF3WHGWEsIlibJr40PE/
yz7axjXyVK4+19ELx4ntNl8x/rgS6+IdIOUD8Nb0w6GtTjVbDFgGgLZPsD2WCkAW
N2TUYd5QFDtxaa1DMGIDTdP2e5ylr+9U876oFgopEMP/
-----END CERTIFICATE-----
Generated at Mon Apr 7 02:59:49 2025 by rpki-client