Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/86BJ0tf44AvFSPojuuBVHQjlnBU.roa
File: 86BJ0tf44AvFSPojuuBVHQjlnBU.roa (raw, json)
Hash identifier: a0d0fyTctB2pb4UQURZCBOpZA1JPgrlTVV7wSAI3T8Q=
Subject key identifier: F3:A0:49:D2:D7:F8:E0:0B:C5:48:FA:23:BA:E0:55:1D:08:E5:9C:15
Certificate issuer: /CN=29db7ca4eee1e453d26fab99c8201adf894612be
Certificate serial: 019428265A183E271D90797EF2E714217156
Authority key identifier: 29:DB:7C:A4:EE:E1:E4:53:D2:6F:AB:99:C8:20:1A:DF:89:46:12:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kdt8pO7h5FPSb6uZyCAa34lGEr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/86BJ0tf44AvFSPojuuBVHQjlnBU.roa
Signing time: Thu 02 Jan 2025 17:53:09 +0000
ROA not before: Thu 02 Jan 2025 17:53:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3356
IP address blocks: 37.123.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kdt8pO7h5FPSb6uZyCAa34lGEr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 11:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:5a:18:3e:27:1d:90:79:7e:f2:e7:14:21:71:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29db7ca4eee1e453d26fab99c8201adf894612be
Validity
Not Before: Jan 2 17:53:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f3a049d2d7f8e00bc548fa23bae0551d08e59c15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:08:73:08:a1:20:e0:b3:5c:96:8c:67:23:63:
dd:36:5a:92:5a:be:29:7a:bd:47:81:8f:6e:ad:a4:
0c:09:6e:10:e6:fa:f6:cf:ce:7c:fa:eb:ff:6b:47:
2a:1b:9f:6f:0e:71:d0:b8:43:f9:10:80:c6:48:0f:
1b:5d:03:4f:6a:14:08:34:01:06:46:eb:0f:06:06:
5f:e9:e7:cb:37:e2:af:4e:db:f6:ba:ff:a3:31:ab:
e9:4f:e7:c9:dc:ba:66:4b:b1:71:db:75:34:d2:cf:
5f:5c:28:b2:65:e8:fc:00:0e:fa:b8:e7:ad:e9:07:
9d:4f:ad:a8:c5:bb:3e:f7:27:25:40:5c:fe:45:dd:
ca:57:0e:d0:ac:eb:7c:f8:ae:13:e8:0e:4b:97:a1:
c0:c9:f2:69:71:df:b9:d5:69:e0:87:70:70:42:d6:
a0:fb:af:b6:33:c7:7b:40:36:5c:7c:27:47:b7:90:
11:1a:1a:cb:25:a2:9b:ba:c5:e3:1c:9c:08:bd:d5:
a3:1e:86:fa:ff:b5:2c:43:6d:c4:9b:af:0d:57:00:
20:03:48:2f:ff:e8:48:70:a3:a5:b0:81:8e:a1:38:
9c:a6:54:64:6d:05:30:b7:6a:c1:f2:fc:b6:1d:76:
bc:c2:08:a4:b2:ba:9a:a5:c0:d4:8f:63:59:f5:5f:
b0:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:A0:49:D2:D7:F8:E0:0B:C5:48:FA:23:BA:E0:55:1D:08:E5:9C:15
X509v3 Authority Key Identifier:
keyid:29:DB:7C:A4:EE:E1:E4:53:D2:6F:AB:99:C8:20:1A:DF:89:46:12:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kdt8pO7h5FPSb6uZyCAa34lGEr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/86BJ0tf44AvFSPojuuBVHQjlnBU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.123.254.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:f2:c0:f0:75:00:6e:19:07:84:a0:9a:de:56:75:e6:dc:07:
5b:42:f3:1a:b5:36:24:4b:5f:1a:7f:49:ac:40:89:b4:83:5e:
d4:06:e3:9b:3b:a3:22:c7:3c:7f:2f:52:e2:6d:b0:da:b3:d2:
9c:f0:aa:46:dc:1f:42:3a:e5:ab:48:fc:0d:31:b8:34:14:86:
c7:28:9d:00:88:1c:9e:d3:03:b5:9d:e3:61:b5:08:36:c5:f4:
a6:b6:53:89:c6:2c:87:56:87:27:8a:dc:e8:33:6d:48:6b:c8:
df:0f:ea:a1:e0:a0:c6:d0:af:36:51:08:7e:61:e2:21:c4:37:
b7:f9:a4:32:be:bc:f7:88:1f:72:5a:16:eb:59:53:f6:e7:f1:
42:68:be:2e:c7:c6:98:6b:ea:ef:67:d5:4b:35:32:e0:42:24:
5a:6d:60:3e:3b:0b:ff:04:3a:8b:4c:9d:f6:c6:05:f5:1c:b8:
f7:26:5b:6d:47:b4:7c:f4:46:9e:f9:08:d1:d8:ba:99:43:53:
27:5f:27:20:2a:39:2f:2f:80:71:a3:5d:e2:8f:c6:ed:b4:2e:
e3:ff:03:17:30:d1:c3:ed:99:62:ff:da:5b:7e:50:ec:bc:83:
37:15:dc:81:b1:b3:2d:18:17:09:53:4f:6f:78:90:dd:44:50:
c8:2d:23:6e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQoJloYPicdkHl+8ucUIXFWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5ZGI3Y2E0ZWVlMWU0NTNkMjZmYWI5OWM4MjAxYWRmODk0
NjEyYmUwHhcNMjUwMTAyMTc1MzA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmM2EwNDlkMmQ3ZjhlMDBiYzU0OGZhMjNiYWUwNTUxZDA4ZTU5YzE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQhzCKEg4LNcloxnI2PdNlqSWr4p
er1HgY9uraQMCW4Q5vr2z858+uv/a0cqG59vDnHQuEP5EIDGSA8bXQNPahQINAEG
RusPBgZf6efLN+KvTtv2uv+jMavpT+fJ3LpmS7Fx23U00s9fXCiyZej8AA76uOet
6QedT62oxbs+9yclQFz+Rd3KVw7QrOt8+K4T6A5Ll6HAyfJpcd+51Wngh3BwQtag
+6+2M8d7QDZcfCdHt5ARGhrLJaKbusXjHJwIvdWjHob6/7UsQ23Em68NVwAgA0gv
/+hIcKOlsIGOoTicplRkbQUwt2rB8vy2HXa8wgiksrqapcDUj2NZ9V+wRQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPOgSdLX+OALxUj6I7rgVR0I5ZwVMB8GA1UdIwQY
MBaAFCnbfKTu4eRT0m+rmcggGt+JRhK+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2R0OHBPN2g1RlBTYjZ1WnlDQWEzNGxHRXI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy83ZjI5MGItODFjNy00MmI3LTk0N2Yt
ZDMzZmExNjA1YWUxLzEvODZCSjB0ZjQ0QXZGU1BvanV1QlZIUWpsbkJVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy83ZjI5MGItODFjNy00MmI3LTk0N2YtZDMzZmExNjA1YWUx
LzEvS2R0OHBPN2g1RlBTYjZ1WnlDQWEzNGxHRXI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJXv+MA0G
CSqGSIb3DQEBCwUAA4IBAQCK8sDwdQBuGQeEoJreVnXm3AdbQvMatTYkS18af0ms
QIm0g17UBuObO6Mixzx/L1LibbDas9Kc8KpG3B9COuWrSPwNMbg0FIbHKJ0AiBye
0wO1neNhtQg2xfSmtlOJxiyHVocnitzoM21Ia8jfD+qh4KDG0K82UQh+YeIhxDe3
+aQyvrz3iB9yWhbrWVP25/FCaL4ux8aYa+rvZ9VLNTLgQiRabWA+Owv/BDqLTJ32
xgX1HLj3JlttR7R89Eae+QjR2LqZQ1MnXycgKjkvL4Bxo13ij8bttC7j/wMXMNHD
7Zli/9pbflDsvIM3FdyBsbMtGBcJU09veJDdRFDILSNu
-----END CERTIFICATE-----
Generated at Wed Feb 5 19:06:59 2025 by rpki-client