Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/ntJH0KRoZucW8VNuwTIHrnSnlKg.roa
File: ntJH0KRoZucW8VNuwTIHrnSnlKg.roa (raw, json)
Hash identifier: 09HbUbUgEiRqWzx65FOtxruuV31mRSjgz3dJWoNx5nA=
Subject key identifier: 9E:D2:47:D0:A4:68:66:E7:16:F1:53:6E:C1:32:07:AE:74:A7:94:A8
Certificate issuer: /CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Certificate serial: 0194F1878FBCF26B4299A7A639C1C5F79FC3
Authority key identifier: 92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/ntJH0KRoZucW8VNuwTIHrnSnlKg.roa
Signing time: Mon 10 Feb 2025 20:23:00 +0000
ROA not before: Mon 10 Feb 2025 20:23:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204544
IP address blocks: 5.56.132.0/24 maxlen: 24
79.143.84.0/24 maxlen: 24
87.236.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 20:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f1:87:8f:bc:f2:6b:42:99:a7:a6:39:c1:c5:f7:9f:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Validity
Not Before: Feb 10 20:23:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9ed247d0a46866e716f1536ec13207ae74a794a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b0:5f:ad:8e:d8:94:29:7a:70:37:c7:58:be:
5a:5c:9e:a1:09:be:f0:86:d2:00:11:d7:65:21:d2:
9f:07:cd:4c:b7:03:73:f0:a4:37:54:65:45:98:97:
45:a2:fb:3f:11:e2:e6:dc:fc:bb:2e:82:9b:2e:f0:
4f:fa:fa:cb:20:c7:de:b7:bf:99:f1:21:af:ef:00:
8c:20:5b:68:c4:a5:bd:ca:ba:bd:af:95:f3:f8:9e:
1d:11:36:90:f2:aa:39:ff:5e:8d:64:68:cc:6f:0b:
a9:f1:16:58:7f:2d:c8:48:98:69:f2:d2:0e:b2:51:
3b:f2:0f:8e:12:3e:f7:58:71:b9:37:90:1f:cc:7a:
19:cc:f1:80:7a:a2:e8:e2:e1:32:cf:61:37:1e:79:
d1:2b:eb:35:07:ca:38:ec:19:a2:5f:d7:06:93:61:
a7:cc:fe:c1:af:72:93:09:fe:e5:6e:32:7b:60:14:
63:f1:35:0e:25:38:73:48:68:bd:1c:bb:e3:72:10:
74:57:f6:d1:cf:e0:3a:48:a2:eb:2c:07:4a:e6:c8:
e3:e8:d5:c0:d6:a3:a2:14:64:c6:72:51:f9:ba:c8:
c7:a1:19:a6:31:2c:12:58:51:88:66:27:71:8c:25:
4f:a1:76:a2:63:9f:98:d6:b9:0c:a0:37:15:fe:88:
44:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:D2:47:D0:A4:68:66:E7:16:F1:53:6E:C1:32:07:AE:74:A7:94:A8
X509v3 Authority Key Identifier:
keyid:92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/ntJH0KRoZucW8VNuwTIHrnSnlKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.132.0/24
79.143.84.0/24
87.236.209.0/24
Signature Algorithm: sha256WithRSAEncryption
13:bb:60:66:25:eb:8e:8a:b6:29:23:81:44:22:d5:3b:8d:0b:
b2:11:08:20:75:60:3c:75:1f:a0:85:b3:21:4a:87:92:fa:12:
23:52:b2:06:fe:e8:b8:1a:ed:fb:36:5d:d7:dc:44:d6:6c:8f:
03:9b:b9:99:67:2b:37:54:20:bb:48:c0:dd:c4:cd:61:9c:15:
31:4a:12:b7:68:e6:fc:4b:c6:26:84:38:29:9f:6e:0e:3e:82:
65:7d:1b:37:11:cf:bc:ec:cd:b8:9b:45:f1:b2:73:f4:d3:33:
6f:3c:c0:5b:02:7e:22:33:47:4d:26:07:d6:b5:b8:0d:ae:a2:
12:77:37:77:4c:f0:28:c6:9a:4e:3c:89:f2:9a:a8:84:14:47:
56:44:5c:32:91:b7:8b:82:f2:2f:86:bc:4d:fa:8f:5c:06:c5:
46:8e:f4:04:bd:f2:b4:b2:d2:4d:8d:e0:51:63:49:0b:42:11:
e0:b6:be:51:ce:d9:53:b8:aa:39:9e:04:b4:ce:97:7a:9c:e9:
64:95:7b:15:89:44:c6:3f:10:70:73:62:2b:41:72:ee:00:f2:
dc:80:13:d7:0b:b3:87:6a:33:52:40:16:b9:8b:f6:d4:62:e9:
ed:7e:59:5e:16:c9:6e:55:d0:97:1b:a2:ec:0f:4d:10:7f:6a:
37:0e:72:bd
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZTxh4+88mtCmaemOcHF95/DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyYmY2NDY0Y2U2ZTE5YTRkY2Y4YTMyYjI3YTJmMWNiZTE1
NTEwNTUwHhcNMjUwMjEwMjAyMzAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZWQyNDdkMGE0Njg2NmU3MTZmMTUzNmVjMTMyMDdhZTc0YTc5NGE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLBfrY7YlCl6cDfHWL5aXJ6hCb7w
htIAEddlIdKfB81MtwNz8KQ3VGVFmJdFovs/EeLm3Py7LoKbLvBP+vrLIMfet7+Z
8SGv7wCMIFtoxKW9yrq9r5Xz+J4dETaQ8qo5/16NZGjMbwup8RZYfy3ISJhp8tIO
slE78g+OEj73WHG5N5AfzHoZzPGAeqLo4uEyz2E3HnnRK+s1B8o47BmiX9cGk2Gn
zP7Br3KTCf7lbjJ7YBRj8TUOJThzSGi9HLvjchB0V/bRz+A6SKLrLAdK5sjj6NXA
1qOiFGTGclH5usjHoRmmMSwSWFGIZidxjCVPoXaiY5+Y1rkMoDcV/ohETwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFJ7SR9CkaGbnFvFTbsEyB650p5SoMB8GA1UdIwQY
MBaAFJK/ZGTObhmk3PijKyei8cvhVRBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3I5a1pNNXVHYVRjLUtNcko2THh5LUZWRUZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9mMWQ2OTctYmM4ZS00ZjE0LThiMzct
YjUzZTMwZTE0MTJhLzEvbnRKSDBLUm9adWNXOFZOdXdUSUhyblNubEtnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy9mMWQ2OTctYmM4ZS00ZjE0LThiMzctYjUzZTMwZTE0MTJh
LzEva3I5a1pNNXVHYVRjLUtNcko2THh5LUZWRUZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQABTiEAwQA
T49UAwQAV+zRMA0GCSqGSIb3DQEBCwUAA4IBAQATu2BmJeuOirYpI4FEItU7jQuy
EQggdWA8dR+ghbMhSoeS+hIjUrIG/ui4Gu37Nl3X3ETWbI8Dm7mZZys3VCC7SMDd
xM1hnBUxShK3aOb8S8YmhDgpn24OPoJlfRs3Ec+87M24m0XxsnP00zNvPMBbAn4i
M0dNJgfWtbgNrqISdzd3TPAoxppOPInymqiEFEdWRFwykbeLgvIvhrxN+o9cBsVG
jvQEvfK0stJNjeBRY0kLQhHgtr5RztlTuKo5ngS0zpd6nOlklXsViUTGPxBwc2Ir
QXLuAPLcgBPXC7OHajNSQBa5i/bUYuntflleFsluVdCXG6LsD00Qf2o3DnK9
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:17:33 2025 by rpki-client