Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/8qPzk3i92WQTk-wt_v7p_vpVqyc.roa
File: 8qPzk3i92WQTk-wt_v7p_vpVqyc.roa (raw, json)
Hash identifier: Vr4+wnI58r5JlZhXLc/F4KXwinF8OGvFwFH/c6ixFo0=
Subject key identifier: F2:A3:F3:93:78:BD:D9:64:13:93:EC:2D:FE:FE:E9:FE:FA:55:AB:27
Certificate issuer: /CN=4dd1b2587490ad061cb207176bdeec81a531588c
Certificate serial: 0194266C176EC0BF76754C4359963BE98121
Authority key identifier: 4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/8qPzk3i92WQTk-wt_v7p_vpVqyc.roa
Signing time: Thu 02 Jan 2025 09:50:05 +0000
ROA not before: Thu 02 Jan 2025 09:50:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 27173
IP address blocks: 80.231.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 11:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:17:6e:c0:bf:76:75:4c:43:59:96:3b:e9:81:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd1b2587490ad061cb207176bdeec81a531588c
Validity
Not Before: Jan 2 09:50:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f2a3f39378bdd9641393ec2dfefee9fefa55ab27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9a:e6:d4:92:53:e6:ad:1b:b3:07:04:73:99:
11:e9:03:3b:ab:c0:c5:41:55:05:eb:ac:dd:8f:b2:
71:e8:83:24:e7:6c:a2:32:0a:d0:5c:66:e4:97:51:
fd:f5:96:42:46:c7:d5:7e:04:bb:5b:45:fa:44:c5:
29:94:65:f7:33:fc:69:bd:1e:50:ff:0e:36:48:41:
1f:7b:b5:97:b4:fa:95:c4:d4:b1:5f:1f:d3:86:9d:
04:7b:26:71:78:56:c7:4e:f3:ac:5c:0c:f9:74:a0:
a6:e8:d9:5d:18:40:76:64:87:5e:45:db:f9:24:6b:
2d:56:b4:95:02:5f:8a:6b:a5:47:06:ce:c6:2a:25:
52:c3:37:a7:30:7a:00:f3:e8:56:a6:c7:79:a3:d6:
f1:65:32:db:bb:59:0a:1a:ae:58:b8:e9:ba:23:01:
82:31:9a:22:74:96:a1:e8:19:37:24:e3:16:b9:e2:
c7:1e:54:c1:3b:90:fe:49:7d:2f:9a:9e:a0:35:f7:
67:cc:97:b3:75:21:3e:3a:70:9b:4d:5f:f3:4b:08:
89:35:9d:bd:db:cb:e6:0b:cd:72:2a:8b:3b:0c:f0:
ca:be:70:0a:4c:48:a5:5f:98:5e:ad:2c:85:20:63:
4f:32:f1:b8:8b:99:dc:1e:6b:1e:59:8d:08:e2:5b:
0d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:A3:F3:93:78:BD:D9:64:13:93:EC:2D:FE:FE:E9:FE:FA:55:AB:27
X509v3 Authority Key Identifier:
keyid:4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/8qPzk3i92WQTk-wt_v7p_vpVqyc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.231.225.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:5c:1e:68:52:cc:da:39:2d:2c:8e:4b:7f:3c:25:07:2c:44:
f3:59:3b:e4:a8:0b:66:d7:48:90:7c:b7:f7:0f:2a:a9:f4:65:
22:39:48:97:9a:c4:8d:33:7f:aa:d7:cb:7a:79:c9:46:bc:72:
ce:d9:dc:53:23:67:72:ae:df:02:a0:ef:32:81:f9:c4:ca:9e:
c6:3f:c1:19:c6:62:94:68:51:15:f9:20:f9:ed:21:eb:51:f1:
cb:d1:10:24:ce:e4:ce:2c:21:50:b9:fd:0a:ff:0a:18:39:ba:
bd:68:0b:d1:21:d7:63:a6:e3:c7:b4:14:10:4b:72:92:f9:39:
89:57:90:70:23:3f:b7:63:49:43:cd:28:1f:5c:9c:1c:75:c5:
56:4e:7e:0d:47:e7:f8:73:ee:3d:07:8d:e3:4e:62:ba:1e:4d:
5d:71:6d:81:12:79:ad:81:4e:ba:11:3a:e3:42:e0:94:c2:09:
1c:cd:28:bc:bc:a7:43:01:a9:12:4b:b0:97:38:0b:c5:fc:3c:
7b:73:19:ab:98:aa:67:99:ee:e2:ab:49:8b:10:ac:e6:13:bc:
2c:f4:00:2b:0e:7d:2f:d3:45:09:df:89:eb:28:80:af:5c:bd:
9a:d4:45:70:d2:26:b0:38:fb:03:69:63:3a:7d:22:82:15:51:
2d:93:3e:c5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQmbBduwL92dUxDWZY76YEhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkZDFiMjU4NzQ5MGFkMDYxY2IyMDcxNzZiZGVlYzgxYTUz
MTU4OGMwHhcNMjUwMTAyMDk1MDA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMmEzZjM5Mzc4YmRkOTY0MTM5M2VjMmRmZWZlZTlmZWZhNTVhYjI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJrm1JJT5q0bswcEc5kR6QM7q8DF
QVUF66zdj7Jx6IMk52yiMgrQXGbkl1H99ZZCRsfVfgS7W0X6RMUplGX3M/xpvR5Q
/w42SEEfe7WXtPqVxNSxXx/Thp0EeyZxeFbHTvOsXAz5dKCm6NldGEB2ZIdeRdv5
JGstVrSVAl+Ka6VHBs7GKiVSwzenMHoA8+hWpsd5o9bxZTLbu1kKGq5YuOm6IwGC
MZoidJah6Bk3JOMWueLHHlTBO5D+SX0vmp6gNfdnzJezdSE+OnCbTV/zSwiJNZ29
28vmC81yKos7DPDKvnAKTEilX5herSyFIGNPMvG4i5ncHmseWY0I4lsNnQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPKj85N4vdlkE5PsLf7+6f76VasnMB8GA1UdIwQY
MBaAFE3Rslh0kK0GHLIHF2ve7IGlMViMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGRHeVdIU1FyUVljc2djWGE5N3NnYVV4V0l3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8wMWQyYWYtMWYyMS00YjgwLWI2NjUt
ZGI0NjNjNWZiMGI0LzEvOHFQemszaTkyV1FUay13dF92N3BfdnBWcXljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8wMWQyYWYtMWYyMS00YjgwLWI2NjUtZGI0NjNjNWZiMGI0
LzEvVGRHeVdIU1FyUVljc2djWGE5N3NnYVV4V0l3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUOfhMA0G
CSqGSIb3DQEBCwUAA4IBAQAfXB5oUszaOS0sjkt/PCUHLETzWTvkqAtm10iQfLf3
Dyqp9GUiOUiXmsSNM3+q18t6eclGvHLO2dxTI2dyrt8CoO8ygfnEyp7GP8EZxmKU
aFEV+SD57SHrUfHL0RAkzuTOLCFQuf0K/woYObq9aAvRIddjpuPHtBQQS3KS+TmJ
V5BwIz+3Y0lDzSgfXJwcdcVWTn4NR+f4c+49B43jTmK6Hk1dcW2BEnmtgU66ETrj
QuCUwgkczSi8vKdDAakSS7CXOAvF/Dx7cxmrmKpnme7iq0mLEKzmE7ws9AArDn0v
00UJ34nrKICvXL2a1EVw0iawOPsDaWM6fSKCFVEtkz7F
-----END CERTIFICATE-----
Generated at Sun Apr 27 20:56:12 2025 by rpki-client