Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/82a09L9D-GHlixpv15qMJsus9Ko.roa
File: 82a09L9D-GHlixpv15qMJsus9Ko.roa (raw, json)
Hash identifier: 0JZFGi/+dAf5HJYO25NhCh8MWQYr8KOw+UTZmm8CQiY=
Subject key identifier: F3:66:B4:F4:BF:43:F8:61:E5:8B:1A:6F:D7:9A:8C:26:CB:AC:F4:AA
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 01953CABBD9DDC943549FBAFC313196D4AC8
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/82a09L9D-GHlixpv15qMJsus9Ko.roa
Signing time: Tue 25 Feb 2025 10:34:02 +0000
ROA not before: Tue 25 Feb 2025 10:34:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 46261
IP address blocks: 46.37.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 00:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:3c:ab:bd:9d:dc:94:35:49:fb:af:c3:13:19:6d:4a:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Feb 25 10:34:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f366b4f4bf43f861e58b1a6fd79a8c26cbacf4aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f3:4b:7f:39:1b:71:b5:61:bd:55:3a:39:98:
27:1b:b9:6a:51:52:9e:f2:89:4b:06:26:4d:40:66:
94:dd:9d:ce:e8:9b:f0:4a:74:40:f1:cc:e8:26:ca:
9f:86:ee:26:c3:9b:11:05:6c:db:df:93:aa:8f:cb:
ee:a9:76:b4:16:9c:4a:97:95:50:79:4c:63:d0:2b:
5b:ef:7c:b1:43:64:40:f3:0e:a1:a1:fd:66:67:b4:
bc:25:89:ed:1d:bb:52:05:65:ad:81:46:40:ab:57:
3c:3d:4a:fe:f8:29:84:34:11:f6:68:e7:b5:f6:b8:
05:51:59:11:11:a4:b2:66:b1:ee:b0:6f:04:c7:20:
a0:89:b9:a5:6d:15:b6:9b:b2:8f:1a:2a:0a:2d:37:
c1:1c:7a:6c:62:ea:4d:1e:ae:6a:ae:8e:b6:f1:50:
48:7c:df:64:7a:00:70:56:78:f7:39:23:dd:9f:61:
e4:10:6d:4b:c4:5c:4d:9c:ae:9f:c9:03:fa:e6:13:
a7:1a:5e:54:a2:af:53:6f:3e:23:26:e5:54:be:73:
8c:53:13:71:7b:70:e7:8e:84:dd:1c:9a:ac:c2:b9:
94:2e:23:97:2c:f7:52:41:8b:b1:44:d8:36:0c:e1:
de:b5:6f:59:c0:c9:d2:8b:a9:82:9a:76:39:59:24:
8d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:66:B4:F4:BF:43:F8:61:E5:8B:1A:6F:D7:9A:8C:26:CB:AC:F4:AA
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/82a09L9D-GHlixpv15qMJsus9Ko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.96.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:5b:c0:5e:33:42:8e:d1:f8:e7:40:c6:4d:8e:35:48:2d:ee:
24:3a:43:39:a2:66:fe:63:89:f4:0b:69:44:a7:ad:aa:90:d2:
6b:7e:f9:a9:2d:c4:ec:78:ca:6b:cc:4d:85:b3:fa:fd:3f:f0:
31:d0:98:94:a6:33:65:e3:91:ef:ce:13:1e:0d:da:74:01:50:
68:54:0d:b8:a6:98:91:cd:24:36:e4:02:11:a1:6e:fe:a1:62:
f4:cc:56:03:77:81:c4:3f:68:c6:6e:5f:6d:04:a5:76:7f:ca:
4d:c5:98:6b:00:b9:7e:fe:bd:e1:df:d4:e8:28:0a:82:2b:ac:
fc:db:ef:ae:db:9a:2b:4a:79:a4:eb:d5:18:bf:bc:7f:2e:8f:
d0:a9:30:b0:79:45:e5:4c:56:ea:9d:cc:84:ed:b8:73:1c:ab:
47:2c:64:a2:5c:8a:2c:2d:48:3a:3e:bb:6b:f0:59:99:1c:49:
64:a8:a3:7f:68:65:91:f7:06:33:9d:7d:c4:bd:94:9f:18:84:
f7:2d:20:ae:42:20:c2:32:e7:1f:54:94:30:1d:b2:dd:a8:11:
00:b0:63:1a:07:b3:14:1b:9d:c8:a0:67:ea:c2:85:62:1f:7a:
a3:5b:72:d1:a9:45:86:a8:f4:05:09:78:52:d8:07:56:37:f1:
47:28:e5:99
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZU8q72d3JQ1SfuvwxMZbUrIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzY2YwODg0OTE4YTUwMjM5ZWY3MDUxOGVlOWZjMDRmMWFh
ZTE5MjkwHhcNMjUwMjI1MTAzNDAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMzY2YjRmNGJmNDNmODYxZTU4YjFhNmZkNzlhOGMyNmNiYWNmNGFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfNLfzkbcbVhvVU6OZgnG7lqUVKe
8olLBiZNQGaU3Z3O6JvwSnRA8czoJsqfhu4mw5sRBWzb35Oqj8vuqXa0FpxKl5VQ
eUxj0Ctb73yxQ2RA8w6hof1mZ7S8JYntHbtSBWWtgUZAq1c8PUr++CmENBH2aOe1
9rgFUVkREaSyZrHusG8ExyCgibmlbRW2m7KPGioKLTfBHHpsYupNHq5qro628VBI
fN9kegBwVnj3OSPdn2HkEG1LxFxNnK6fyQP65hOnGl5Uoq9Tbz4jJuVUvnOMUxNx
e3DnjoTdHJqswrmULiOXLPdSQYuxRNg2DOHetW9ZwMnSi6mCmnY5WSSN0wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPNmtPS/Q/hh5Ysab9eajCbLrPSqMB8GA1UdIwQY
MBaAFNPPCISRilAjnvcFGO6fwE8arhkpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEt
MjMxNTQ5NDA5NzIwLzEvODJhMDlMOUQtR0hsaXhwdjE1cU1Kc3VzOUtvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEtMjMxNTQ5NDA5NzIw
LzEvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALiVgMA0G
CSqGSIb3DQEBCwUAA4IBAQB/W8BeM0KO0fjnQMZNjjVILe4kOkM5omb+Y4n0C2lE
p62qkNJrfvmpLcTseMprzE2Fs/r9P/Ax0JiUpjNl45HvzhMeDdp0AVBoVA24ppiR
zSQ25AIRoW7+oWL0zFYDd4HEP2jGbl9tBKV2f8pNxZhrALl+/r3h39ToKAqCK6z8
2++u25orSnmk69UYv7x/Lo/QqTCweUXlTFbqncyE7bhzHKtHLGSiXIosLUg6Prtr
8FmZHElkqKN/aGWR9wYznX3EvZSfGIT3LSCuQiDCMucfVJQwHbLdqBEAsGMaB7MU
G53IoGfqwoViH3qjW3LRqUWGqPQFCXhS2AdWN/FHKOWZ
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:30:28 2025 by rpki-client