Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/0PRh-Ryf5Bbnr0lOh4NNRU5Dvtk.roa
File: 0PRh-Ryf5Bbnr0lOh4NNRU5Dvtk.roa (raw, json)
Hash identifier: jgK2NNDoTbWiQ7uIBzHm15T4lQ1IK4iXj6RZrP5o0x4=
Subject key identifier: D0:F4:61:F9:1C:9F:E4:16:E7:AF:49:4E:87:83:4D:45:4E:43:BE:D9
Certificate issuer: /CN=fb061a39f0a037923113d6b8bb9b5bdab5b2f466
Certificate serial: 019420D6310F0194CF9F86A17F1B19E2B012
Authority key identifier: FB:06:1A:39:F0:A0:37:92:31:13:D6:B8:BB:9B:5B:DA:B5:B2:F4:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/0PRh-Ryf5Bbnr0lOh4NNRU5Dvtk.roa
Signing time: Wed 01 Jan 2025 07:48:15 +0000
ROA not before: Wed 01 Jan 2025 07:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203214
IP address blocks: 78.109.235.0/24 maxlen: 24
78.109.236.0/24 maxlen: 24
78.109.237.0/24 maxlen: 24
78.109.238.0/24 maxlen: 24
185.52.100.0/24 maxlen: 24
185.52.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 22:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:31:0f:01:94:cf:9f:86:a1:7f:1b:19:e2:b0:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb061a39f0a037923113d6b8bb9b5bdab5b2f466
Validity
Not Before: Jan 1 07:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d0f461f91c9fe416e7af494e87834d454e43bed9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f7:2e:2b:12:b4:4e:a9:e7:e6:48:ca:54:43:
de:fe:c9:88:89:bd:6c:62:cc:db:1c:4f:dc:2d:1a:
11:31:47:a1:af:78:b1:d7:e6:12:20:f1:06:15:49:
7a:3e:cf:96:ff:0d:df:d7:0e:e9:5b:07:ae:6b:0d:
fc:24:3d:95:ab:2a:85:63:0d:cb:89:ad:85:03:1e:
95:6d:2c:18:1a:53:88:1d:ab:7a:6d:ca:e0:9a:57:
da:b2:e0:32:57:e3:cd:af:c2:8c:6e:27:e3:27:4a:
aa:35:38:01:9f:62:db:a7:9a:7b:1f:80:03:4f:1e:
cf:8e:d7:33:38:6e:75:19:0d:93:27:2e:4a:a0:cb:
19:00:34:f0:3a:aa:ef:b8:ab:73:11:c9:30:29:22:
f5:03:2c:6d:98:b1:1b:ab:8b:0f:c0:14:ab:c6:95:
1a:c9:9e:99:88:f3:df:7d:4c:23:59:5b:b3:7d:b4:
7c:cf:fe:ab:2e:67:79:d6:aa:a9:c5:05:27:e8:73:
ae:d2:dc:b2:e1:48:14:63:4c:70:28:e2:8a:9f:ad:
ed:be:62:e0:15:09:73:e3:6f:8a:14:ef:e0:07:f8:
d8:ad:02:b3:85:1d:79:3f:79:3e:fc:cb:1d:3e:22:
52:e2:cd:a8:78:26:0b:c4:e8:00:dc:d0:a9:66:8e:
ff:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:F4:61:F9:1C:9F:E4:16:E7:AF:49:4E:87:83:4D:45:4E:43:BE:D9
X509v3 Authority Key Identifier:
keyid:FB:06:1A:39:F0:A0:37:92:31:13:D6:B8:BB:9B:5B:DA:B5:B2:F4:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/0PRh-Ryf5Bbnr0lOh4NNRU5Dvtk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.109.235.0-78.109.238.255
185.52.100.0/23
Signature Algorithm: sha256WithRSAEncryption
2f:f8:46:27:12:e0:f4:54:35:17:db:2d:a1:db:fb:97:d9:05:
d2:85:0b:43:b9:ce:5d:53:c6:45:de:12:48:9c:7a:53:a2:52:
d7:db:95:ca:e2:4a:f0:c4:63:f9:58:0f:30:5f:a1:b1:5d:b0:
a1:79:eb:2b:18:1d:82:af:f2:eb:9a:0e:a4:ef:d8:26:9a:fb:
46:bb:9b:87:1b:89:2d:88:24:56:d2:1f:e6:1d:99:d5:1c:2f:
07:b1:5c:00:3c:ea:cd:36:b3:e8:cb:08:8e:a4:09:ce:eb:c7:
f6:dd:cc:29:9c:1b:06:03:76:c9:57:03:5e:5f:cf:2a:48:89:
2e:f8:da:c1:3e:ae:8d:c4:24:72:1d:aa:f8:4b:0c:94:94:7c:
e3:fd:f0:d6:9f:81:94:a9:79:6c:46:09:37:f1:b6:56:24:d2:
18:63:7a:5b:c3:55:a4:58:75:d7:05:4b:b5:98:e5:ad:29:92:
53:6f:2e:c2:49:41:ad:42:3c:4f:53:e4:b0:07:36:cf:2f:1f:
eb:95:f4:fa:5b:4b:7d:49:0a:12:b2:ae:77:ff:e3:55:12:14:
08:08:16:c4:1b:34:aa:5f:a3:8b:cd:ee:fa:6e:2c:03:b0:62:
55:5d:d0:3a:14:71:f0:9d:b9:79:3f:69:bf:c7:13:09:7f:89:
da:99:76:57
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgISAZQg1jEPAZTPn4ahfxsZ4rASMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiMDYxYTM5ZjBhMDM3OTIzMTEzZDZiOGJiOWI1YmRhYjVi
MmY0NjYwHhcNMjUwMTAxMDc0ODE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMGY0NjFmOTFjOWZlNDE2ZTdhZjQ5NGU4NzgzNGQ0NTRlNDNiZWQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2PcuKxK0Tqnn5kjKVEPe/smIib1s
YszbHE/cLRoRMUehr3ix1+YSIPEGFUl6Ps+W/w3f1w7pWweuaw38JD2VqyqFYw3L
ia2FAx6VbSwYGlOIHat6bcrgmlfasuAyV+PNr8KMbifjJ0qqNTgBn2Lbp5p7H4AD
Tx7PjtczOG51GQ2TJy5KoMsZADTwOqrvuKtzEckwKSL1AyxtmLEbq4sPwBSrxpUa
yZ6ZiPPffUwjWVuzfbR8z/6rLmd51qqpxQUn6HOu0tyy4UgUY0xwKOKKn63tvmLg
FQlz42+KFO/gB/jYrQKzhR15P3k+/MsdPiJS4s2oeCYLxOgA3NCpZo7/twIDAQAB
o4ICGTCCAhUwHQYDVR0OBBYEFND0Yfkcn+QW569JToeDTUVOQ77ZMB8GA1UdIwQY
MBaAFPsGGjnwoDeSMRPWuLubW9q1svRmMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS13WWFPZkNnTjVJeEU5YTR1NXRiMnJXeTlHWS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjMvYTMyOTRiLWQ0NzgtNGRiZC1hYWU1
LWZkMTY3YWQ5MmE5ZC8xLzBQUmgtUnlmNUJibnIwbE9oNE5OUlU1RHZ0ay5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZjMvYTMyOTRiLWQ0NzgtNGRiZC1hYWU1LWZkMTY3YWQ5MmE5
ZC8xLzEtd1lhT2ZDZ041SXhFOWE0dTV0YjJyV3k5R1kuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwLQYIKwYBBQUHAQcBAf8EHjAcMBoEAgABMBQwDAMEAE5t
6wMEAE5t7gMEAbk0ZDANBgkqhkiG9w0BAQsFAAOCAQEAL/hGJxLg9FQ1F9stodv7
l9kF0oULQ7nOXVPGRd4SSJx6U6JS19uVyuJK8MRj+VgPMF+hsV2woXnrKxgdgq/y
65oOpO/YJpr7RrubhxuJLYgkVtIf5h2Z1RwvB7FcADzqzTaz6MsIjqQJzuvH9t3M
KZwbBgN2yVcDXl/PKkiJLvjawT6ujcQkch2q+EsMlJR84/3w1p+BlKl5bEYJN/G2
ViTSGGN6W8NVpFh11wVLtZjlrSmSU28uwklBrUI8T1PksAc2zy8f65X0+ltLfUkK
ErKud//jVRIUCAgWxBs0ql+ji83u+m4sA7BiVV3QOhRx8J25eT9pv8cTCX+J2pl2
Vw==
-----END CERTIFICATE-----
Generated at Sun Apr 13 07:29:49 2025 by rpki-client