Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/w35GeF1NRVWkdgYrM-D2oVh4XKk.roa
File: w35GeF1NRVWkdgYrM-D2oVh4XKk.roa (raw, json)
Hash identifier: 0xzHuhqUOoAiP/Y6/IovF7/iSmc6xQ7Xmuv7ej0uOJ0=
Subject key identifier: C3:7E:46:78:5D:4D:45:55:A4:76:06:2B:33:E0:F6:A1:58:78:5C:A9
Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Certificate serial: 0194228DF8F25EB3C975B587899791469BCE
Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/w35GeF1NRVWkdgYrM-D2oVh4XKk.roa
Signing time: Wed 01 Jan 2025 15:48:37 +0000
ROA not before: Wed 01 Jan 2025 15:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8100
IP address blocks: 213.21.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 19:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:f8:f2:5e:b3:c9:75:b5:87:89:97:91:46:9b:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Validity
Not Before: Jan 1 15:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c37e46785d4d4555a476062b33e0f6a158785ca9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:6f:85:5c:14:00:d2:ca:80:3a:79:53:30:80:
5c:77:3e:49:25:ba:67:8a:8d:85:25:71:ce:cd:75:
06:d9:1b:a4:3b:eb:1b:57:22:86:9b:43:34:38:67:
b7:85:86:7d:03:e2:d8:70:5f:85:47:e0:89:56:e3:
70:5d:28:20:f2:2a:05:9e:a8:48:22:ed:d6:27:fd:
df:d0:5b:9e:eb:f6:93:a7:97:9e:63:43:c2:9f:6e:
b7:fa:3e:06:17:6b:c5:d1:f5:00:8f:17:60:fc:63:
7a:ab:f0:f0:84:ec:2e:16:06:2c:da:31:3b:14:b4:
7f:50:3e:cb:e4:17:f5:0d:dd:e4:7d:18:7f:86:3d:
cb:b1:90:40:f7:4b:85:a1:59:c5:a5:43:38:4a:d4:
c3:e6:59:46:73:b6:1f:46:9c:2b:22:d9:f1:87:b9:
81:67:8a:82:4e:ef:19:ab:bd:9b:92:fe:cd:a5:ef:
52:a5:8e:15:da:eb:0f:27:7c:f3:a5:e6:54:98:7f:
cb:3e:4f:0c:a1:68:9a:0b:c3:b6:6b:ea:92:39:90:
3d:c0:e5:83:11:3f:ac:33:1f:f0:98:bf:60:b1:40:
bc:48:4e:a0:f7:47:31:6b:94:dd:2d:55:82:d8:18:
cb:c6:12:22:ab:24:8a:81:d7:c1:30:33:05:37:f2:
4d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:7E:46:78:5D:4D:45:55:A4:76:06:2B:33:E0:F6:A1:58:78:5C:A9
X509v3 Authority Key Identifier:
keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/w35GeF1NRVWkdgYrM-D2oVh4XKk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.21.252.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:b9:b3:30:fc:4f:c4:5d:00:dd:ac:ad:6a:e1:71:1e:b5:28:
99:22:7a:3a:fc:0e:c0:26:8f:27:f4:11:fe:c8:67:ec:95:7f:
a4:28:06:b9:82:97:c0:a0:89:54:e3:c7:26:4b:3d:cd:1c:c2:
35:10:53:51:b3:2d:4b:73:8a:40:60:b7:2b:6c:d1:7b:de:e3:
df:0f:23:5b:21:7e:7d:5d:0c:ed:ca:5b:04:9a:6e:e9:c3:68:
ee:3f:a2:c4:f5:90:7a:55:b9:51:41:7a:9e:2a:74:96:67:8b:
0b:0f:a9:b6:1c:6d:8e:5a:9e:1c:e4:4a:ff:e1:70:13:c4:0e:
9b:39:0f:50:52:e6:5c:03:36:62:49:f3:01:67:c4:20:03:8e:
4f:0b:a4:a1:35:44:f2:0f:67:33:87:12:e0:dc:25:0b:02:99:
56:68:4d:ff:ba:50:f0:96:85:83:c4:49:75:c6:83:b1:c1:82:
53:0d:9b:5b:05:23:a1:5d:e7:86:5c:ac:3c:c5:fd:6f:fd:1a:
1f:af:3c:a0:b8:f0:31:e8:12:64:fb:e4:3d:ff:e6:40:e1:10:
05:89:29:e2:8c:89:7b:b8:f0:a9:52:4a:7a:0e:1e:a1:62:72:
4f:d9:ef:81:6b:b0:c6:5d:37:32:c6:f2:03:c3:cc:3a:a9:37:
29:c4:a9:83
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQijfjyXrPJdbWHiZeRRpvOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjZmRmZTZkY2E4YWM3YmZhMWE5NDUwZWY5OWZkMzE1ZWQw
MmFjZDkwHhcNMjUwMTAxMTU0ODM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMzdlNDY3ODVkNGQ0NTU1YTQ3NjA2MmIzM2UwZjZhMTU4Nzg1Y2E5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzm+FXBQA0sqAOnlTMIBcdz5JJbpn
io2FJXHOzXUG2RukO+sbVyKGm0M0OGe3hYZ9A+LYcF+FR+CJVuNwXSgg8ioFnqhI
Iu3WJ/3f0Fue6/aTp5eeY0PCn263+j4GF2vF0fUAjxdg/GN6q/DwhOwuFgYs2jE7
FLR/UD7L5Bf1Dd3kfRh/hj3LsZBA90uFoVnFpUM4StTD5llGc7YfRpwrItnxh7mB
Z4qCTu8Zq72bkv7Npe9SpY4V2usPJ3zzpeZUmH/LPk8MoWiaC8O2a+qSOZA9wOWD
ET+sMx/wmL9gsUC8SE6g90cxa5TdLVWC2BjLxhIiqySKgdfBMDMFN/JN5wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMN+RnhdTUVVpHYGKzPg9qFYeFypMB8GA1UdIwQY
MBaAFLz9/m3Kise/oalFDvmf0xXtAqzZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9jOWRlMTMtNWI3NC00MTNkLWIyZmIt
MWFmMjQ2NWE4ZWVjLzEvdzM1R2VGMU5SVldrZGdZck0tRDJvVmg0WEtrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9jOWRlMTMtNWI3NC00MTNkLWIyZmItMWFmMjQ2NWE4ZWVj
LzEvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1RX8MA0G
CSqGSIb3DQEBCwUAA4IBAQBNubMw/E/EXQDdrK1q4XEetSiZIno6/A7AJo8n9BH+
yGfslX+kKAa5gpfAoIlU48cmSz3NHMI1EFNRsy1Lc4pAYLcrbNF73uPfDyNbIX59
XQztylsEmm7pw2juP6LE9ZB6VblRQXqeKnSWZ4sLD6m2HG2OWp4c5Er/4XATxA6b
OQ9QUuZcAzZiSfMBZ8QgA45PC6ShNUTyD2czhxLg3CULAplWaE3/ulDwloWDxEl1
xoOxwYJTDZtbBSOhXeeGXKw8xf1v/RofrzyguPAx6BJk++Q9/+ZA4RAFiSnijIl7
uPCpUkp6Dh6hYnJP2e+Ba7DGXTcyxvIDw8w6qTcpxKmD
-----END CERTIFICATE-----
Generated at Sat Apr 12 02:32:19 2025 by rpki-client