Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/rY4Fp-Dk7WkrCbqk7rdEiiNEmj4.roa
File: rY4Fp-Dk7WkrCbqk7rdEiiNEmj4.roa (raw, json)
Hash identifier: rnMK9FKk4H5lXqqOHDb/rM0tbc6UoAnWXexKMf+rh/I=
Subject key identifier: AD:8E:05:A7:E0:E4:ED:69:2B:09:BA:A4:EE:B7:44:8A:23:44:9A:3E
Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Certificate serial: 019427476F7E5192CBD6CF95F2F3D326EB69
Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/rY4Fp-Dk7WkrCbqk7rdEiiNEmj4.roa
Signing time: Thu 02 Jan 2025 13:49:40 +0000
ROA not before: Thu 02 Jan 2025 13:49:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207645
IP address blocks: 87.254.0.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 11:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:6f:7e:51:92:cb:d6:cf:95:f2:f3:d3:26:eb:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Validity
Not Before: Jan 2 13:49:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ad8e05a7e0e4ed692b09baa4eeb7448a23449a3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:30:e9:29:89:9e:64:21:f9:ee:ce:49:53:f1:
dc:88:5f:fb:4e:b3:37:36:85:47:52:2a:f0:68:e3:
2a:ef:f4:7d:10:24:99:14:bb:f8:9c:28:1c:ee:2a:
81:c6:5b:c6:8f:e6:44:ce:41:ed:46:78:76:bf:ef:
31:bd:c5:1a:01:96:07:af:66:6d:e7:4b:1e:f3:1e:
8e:81:97:95:1c:55:8b:be:36:64:24:19:4e:d5:15:
16:84:20:76:e7:18:aa:cd:b2:e2:38:06:6b:d6:79:
f8:d0:a7:85:72:21:99:46:68:b6:0f:5c:9e:34:54:
91:64:38:30:cd:58:fb:1d:65:a5:72:d2:5d:63:d5:
1d:fc:94:d9:98:3d:22:2d:de:72:c1:5a:29:40:6c:
4f:66:c3:46:16:e3:51:5c:b4:be:ea:36:54:a7:37:
a7:11:05:55:4b:c8:97:96:6d:c8:0a:6e:a9:c9:72:
21:65:62:c9:c5:ae:de:c2:ee:19:80:78:f0:e1:fa:
36:24:a6:0b:fb:cc:52:88:c8:41:1f:4e:d0:75:68:
c8:3a:d4:d5:e0:77:c0:77:05:b2:67:a2:69:41:e7:
d5:0d:ea:c6:83:e8:da:8d:eb:46:a2:23:e4:9f:1d:
11:b9:50:68:13:2a:c1:6a:e7:a1:22:7b:10:40:82:
29:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:8E:05:A7:E0:E4:ED:69:2B:09:BA:A4:EE:B7:44:8A:23:44:9A:3E
X509v3 Authority Key Identifier:
keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/rY4Fp-Dk7WkrCbqk7rdEiiNEmj4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.0.0/23
Signature Algorithm: sha256WithRSAEncryption
83:c8:fe:b1:84:fb:35:d2:2d:01:10:95:1d:bd:6c:b4:bf:47:
98:ab:2e:16:ad:9a:ae:77:77:8c:a1:05:1a:ef:98:d2:d9:7b:
dd:16:e2:8a:60:82:27:1b:77:05:10:df:99:af:39:b3:13:c8:
3e:df:66:97:d8:6d:f4:7f:31:8f:4c:36:89:a0:6c:18:f9:52:
0c:d9:21:d3:f9:ca:cc:7c:5b:73:6a:81:80:6f:e9:4e:eb:69:
38:b1:ba:96:09:d2:15:7e:3e:65:73:96:a8:dd:f3:fa:2f:b1:
3d:43:90:7c:db:be:70:74:86:a2:22:bf:90:d8:2a:27:73:df:
51:a1:a8:8b:76:17:c4:21:e4:67:47:3d:af:4a:9e:7b:3b:13:
60:d5:c7:8d:86:ad:c0:f6:36:f6:eb:f7:20:8a:58:a6:52:9c:
55:87:ee:6c:78:55:0f:ea:ab:39:a6:1d:9c:7a:cf:04:44:5e:
97:cc:5b:99:11:f6:85:07:35:32:7e:a8:1b:f4:44:3c:98:e3:
8e:80:8e:42:1e:5e:78:e5:47:57:e4:3c:ba:44:23:22:a5:b0:
2a:2f:a7:f4:a1:63:b4:36:f8:2e:34:c1:f6:37:9e:a7:49:ad:
cc:a2:87:d9:49:4c:05:81:74:ff:ee:df:4e:1b:3d:60:b9:53:
a1:cc:b1:c3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnR29+UZLL1s+V8vPTJutpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmZjgwY2JkZmUxODM1NGEzY2ZkYmEyZmUwNzlhYTJlYmM1
OGRjZDQwHhcNMjUwMTAyMTM0OTQwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZDhlMDVhN2UwZTRlZDY5MmIwOWJhYTRlZWI3NDQ4YTIzNDQ5YTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTDpKYmeZCH57s5JU/HciF/7TrM3
NoVHUirwaOMq7/R9ECSZFLv4nCgc7iqBxlvGj+ZEzkHtRnh2v+8xvcUaAZYHr2Zt
50se8x6OgZeVHFWLvjZkJBlO1RUWhCB25xiqzbLiOAZr1nn40KeFciGZRmi2D1ye
NFSRZDgwzVj7HWWlctJdY9Ud/JTZmD0iLd5ywVopQGxPZsNGFuNRXLS+6jZUpzen
EQVVS8iXlm3ICm6pyXIhZWLJxa7ewu4ZgHjw4fo2JKYL+8xSiMhBH07QdWjIOtTV
4HfAdwWyZ6JpQefVDerGg+jajetGoiPknx0RuVBoEyrBauehInsQQIIpawIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK2OBafg5O1pKwm6pO63RIojRJo+MB8GA1UdIwQY
MBaAFA/4DL3+GDVKPP26L+B5qi68WNzUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRF9nTXZmNFlOVW84X2JvdjRIbXFMcnhZM05RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8xMjk1NjQtZjFkYi00ZGM1LTg5MDYt
NmZjZGNkNWFiNjYwLzEvclk0RnAtRGs3V2tyQ2JxazdyZEVpaU5FbWo0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8xMjk1NjQtZjFkYi00ZGM1LTg5MDYtNmZjZGNkNWFiNjYw
LzEvRF9nTXZmNFlOVW84X2JvdjRIbXFMcnhZM05RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBV/4AMA0G
CSqGSIb3DQEBCwUAA4IBAQCDyP6xhPs10i0BEJUdvWy0v0eYqy4WrZqud3eMoQUa
75jS2XvdFuKKYIInG3cFEN+ZrzmzE8g+32aX2G30fzGPTDaJoGwY+VIM2SHT+crM
fFtzaoGAb+lO62k4sbqWCdIVfj5lc5ao3fP6L7E9Q5B8275wdIaiIr+Q2Conc99R
oaiLdhfEIeRnRz2vSp57OxNg1ceNhq3A9jb26/cgilimUpxVh+5seFUP6qs5ph2c
es8ERF6XzFuZEfaFBzUyfqgb9EQ8mOOOgI5CHl545UdX5Dy6RCMipbAqL6f0oWO0
NvguNMH2N56nSa3MoofZSUwFgXT/7t9OGz1guVOhzLHD
-----END CERTIFICATE-----
Generated at Wed Feb 5 19:07:17 2025 by rpki-client