Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c4817e-8281-42f7-9f4d-8cf805511002/1/bOONrlZHdROoIahZ7NmIjgIdExM.roa
File: bOONrlZHdROoIahZ7NmIjgIdExM.roa (raw, json)
Hash identifier: 1aT2l6/v3aO2MOldiF+P6gsdMx47ItIcMI7fEC/C0L0=
Subject key identifier: 6C:E3:8D:AE:56:47:75:13:A8:21:A8:59:EC:D9:88:8E:02:1D:13:13
Certificate issuer: /CN=0321ea39508e0e17a651fe92ac29ea38832d0bff
Certificate serial: 01941FFAB167AAF9885509F6CE7B9F63DF7B
Authority key identifier: 03:21:EA:39:50:8E:0E:17:A6:51:FE:92:AC:29:EA:38:83:2D:0B:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyHqOVCODhemUf6SrCnqOIMtC_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c4817e-8281-42f7-9f4d-8cf805511002/1/bOONrlZHdROoIahZ7NmIjgIdExM.roa
Signing time: Wed 01 Jan 2025 03:48:30 +0000
ROA not before: Wed 01 Jan 2025 03:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31027
IP address blocks: 78.31.32.0/21 maxlen: 21
85.202.64.0/20 maxlen: 20
91.198.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c4817e-8281-42f7-9f4d-8cf805511002/1/AyHqOVCODhemUf6SrCnqOIMtC_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/c4817e-8281-42f7-9f4d-8cf805511002/1/AyHqOVCODhemUf6SrCnqOIMtC_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/AyHqOVCODhemUf6SrCnqOIMtC_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 13:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:b1:67:aa:f9:88:55:09:f6:ce:7b:9f:63:df:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0321ea39508e0e17a651fe92ac29ea38832d0bff
Validity
Not Before: Jan 1 03:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6ce38dae56477513a821a859ecd9888e021d1313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d8:3a:30:ab:50:5b:7c:5d:6c:4d:ed:79:28:
ba:7c:d0:84:c7:a9:ea:5b:24:2e:65:ce:11:4a:8e:
18:1a:88:9c:eb:82:f2:43:8f:2a:fc:e5:77:b4:44:
07:55:df:d6:e6:70:4c:7e:ea:b9:98:ea:b2:c6:91:
03:23:de:30:0b:a6:fe:82:18:bf:d8:fa:24:32:08:
b5:35:37:23:60:ef:09:f1:1c:a7:05:2e:fd:c0:f5:
c0:e4:d5:24:3d:bd:8f:d2:19:e1:d6:93:f8:7a:70:
77:a4:3a:9f:85:a9:17:17:1b:f4:c4:8b:1f:f3:0f:
6b:44:7e:b5:47:c2:38:49:e6:36:37:98:37:bd:5a:
6f:9f:6b:8e:9f:88:ac:2e:d4:96:e8:bd:51:65:5c:
d4:9d:cd:c0:e1:3f:64:bf:72:3a:3d:ed:14:74:50:
1f:17:28:7d:33:a5:f2:60:b5:1f:b4:74:42:ec:5d:
1f:6c:4b:3f:cc:4d:2c:4c:99:1e:12:5d:1b:31:60:
82:d1:fb:16:61:a0:fa:ce:af:2f:89:fd:6b:8c:af:
7b:be:d1:5d:25:31:62:6f:4d:fd:57:2d:6b:f4:a6:
3b:44:08:62:68:e9:74:21:c2:64:32:19:9b:15:d6:
24:39:87:3e:9e:ef:db:e9:f8:1f:04:5f:5e:6c:10:
5b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:E3:8D:AE:56:47:75:13:A8:21:A8:59:EC:D9:88:8E:02:1D:13:13
X509v3 Authority Key Identifier:
keyid:03:21:EA:39:50:8E:0E:17:A6:51:FE:92:AC:29:EA:38:83:2D:0B:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyHqOVCODhemUf6SrCnqOIMtC_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c4817e-8281-42f7-9f4d-8cf805511002/1/bOONrlZHdROoIahZ7NmIjgIdExM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c4817e-8281-42f7-9f4d-8cf805511002/1/AyHqOVCODhemUf6SrCnqOIMtC_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.31.32.0/21
85.202.64.0/20
91.198.144.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:7f:4a:8a:de:13:d2:bf:0f:ba:33:81:17:92:66:23:52:63:
27:e1:53:08:8d:f7:e1:5e:49:c7:ee:86:3f:bc:da:f0:91:89:
a8:4a:da:c0:d9:09:cf:5c:76:c2:fb:a9:b9:16:7a:99:22:b0:
2a:ff:f7:a9:90:5d:cd:58:ee:ac:a6:b5:2c:e0:64:66:db:07:
14:37:93:a7:eb:5f:c5:f9:b1:ba:c7:80:5f:71:0a:c8:64:63:
9a:b2:22:d0:02:bb:32:f6:f4:ff:50:0c:4d:81:bf:c1:81:54:
95:1e:ab:2b:8e:60:bf:9b:f7:54:61:dd:9a:5f:c6:d6:13:14:
52:ec:1c:6b:e4:ad:57:ed:47:d3:e9:99:8e:51:24:9b:2c:42:
a4:d0:f7:5e:6d:63:3a:d2:57:7d:61:02:5a:87:12:71:4f:4c:
8c:e7:0c:31:95:3c:fc:b2:a7:90:09:5b:f5:7a:da:81:c0:05:
d4:a6:4a:16:ea:42:76:c9:74:0e:eb:58:05:fa:3e:0b:b4:aa:
13:18:71:75:3a:06:4f:30:d7:76:3d:4f:7b:c8:92:04:3d:b4:
cb:2a:b9:75:68:db:b3:c7:ef:8b:04:95:fe:8c:48:fe:83:f9:
3a:8a:4e:fa:f9:9d:78:74:0b:13:e5:ff:cf:9e:02:90:fd:38:
83:a8:eb:1b
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQf+rFnqvmIVQn2znufY997MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzMjFlYTM5NTA4ZTBlMTdhNjUxZmU5MmFjMjllYTM4ODMy
ZDBiZmYwHhcNMjUwMTAxMDM0ODMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2Y2UzOGRhZTU2NDc3NTEzYTgyMWE4NTllY2Q5ODg4ZTAyMWQxMzEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9g6MKtQW3xdbE3teSi6fNCEx6nq
WyQuZc4RSo4YGoic64LyQ48q/OV3tEQHVd/W5nBMfuq5mOqyxpEDI94wC6b+ghi/
2PokMgi1NTcjYO8J8RynBS79wPXA5NUkPb2P0hnh1pP4enB3pDqfhakXFxv0xIsf
8w9rRH61R8I4SeY2N5g3vVpvn2uOn4isLtSW6L1RZVzUnc3A4T9kv3I6Pe0UdFAf
Fyh9M6XyYLUftHRC7F0fbEs/zE0sTJkeEl0bMWCC0fsWYaD6zq8vif1rjK97vtFd
JTFib039Vy1r9KY7RAhiaOl0IcJkMhmbFdYkOYc+nu/b6fgfBF9ebBBbhQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFGzjja5WR3UTqCGoWezZiI4CHRMTMB8GA1UdIwQY
MBaAFAMh6jlQjg4XplH+kqwp6jiDLQv/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXlIcU9WQ09EaGVtVWY2U3JDbnFPSU10Q184LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9jNDgxN2UtODI4MS00MmY3LTlmNGQt
OGNmODA1NTExMDAyLzEvYk9PTnJsWkhkUk9vSWFoWjdObUlqZ0lkRXhNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9jNDgxN2UtODI4MS00MmY3LTlmNGQtOGNmODA1NTExMDAy
LzEvQXlIcU9WQ09EaGVtVWY2U3JDbnFPSU10Q184LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDTh8gAwQE
VcpAAwQAW8aQMA0GCSqGSIb3DQEBCwUAA4IBAQB7f0qK3hPSvw+6M4EXkmYjUmMn
4VMIjffhXknH7oY/vNrwkYmoStrA2QnPXHbC+6m5FnqZIrAq//epkF3NWO6sprUs
4GRm2wcUN5On61/F+bG6x4BfcQrIZGOasiLQArsy9vT/UAxNgb/BgVSVHqsrjmC/
m/dUYd2aX8bWExRS7Bxr5K1X7UfT6ZmOUSSbLEKk0PdebWM60ld9YQJahxJxT0yM
5wwxlTz8sqeQCVv1etqBwAXUpkoW6kJ2yXQO61gF+j4LtKoTGHF1OgZPMNd2PU97
yJIEPbTLKrl1aNuzx++LBJX+jEj+g/k6ik76+Z14dAsT5f/PngKQ/TiDqOsb
-----END CERTIFICATE-----
Generated at Tue Apr 8 21:03:39 2025 by rpki-client