Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/g1mW2cTXmXDUXMTsonFEJzVd1qQ.roa
File: g1mW2cTXmXDUXMTsonFEJzVd1qQ.roa (raw, json)
Hash identifier: KXKW6LSc1R/L0U2ja/o6hahpQQ5ILv403it5PZl5dog=
Subject key identifier: 83:59:96:D9:C4:D7:99:70:D4:5C:C4:EC:A2:71:44:27:35:5D:D6:A4
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01967B951840DF74CDD4E32DDE7101BDD528
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/g1mW2cTXmXDUXMTsonFEJzVd1qQ.roa
Signing time: Mon 28 Apr 2025 08:48:10 +0000
ROA not before: Mon 28 Apr 2025 08:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9232
IP address blocks: 82.153.222.0/24 maxlen: 24
82.153.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 14:57:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:95:18:40:df:74:cd:d4:e3:2d:de:71:01:bd:d5:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Apr 28 08:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=835996d9c4d79970d45cc4eca2714427355dd6a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f1:82:d8:fb:94:17:aa:f4:5e:f1:34:49:b9:
b5:77:9c:98:12:d9:05:a7:89:6e:e5:19:e7:80:61:
4b:bc:d9:64:33:9c:53:56:12:11:85:e7:e8:fd:b9:
25:0a:48:5d:5c:fc:a2:1d:30:f6:da:d6:cd:b4:84:
ae:21:71:e6:78:5a:0a:07:c6:62:68:cd:6f:c2:9f:
23:84:e1:c7:8a:2c:6b:7f:16:48:3e:00:10:26:6c:
ab:70:b1:52:70:07:6c:1c:0d:8f:b9:bc:52:45:fb:
c8:f5:c8:b6:ce:e9:2f:df:bc:1e:4e:d1:e1:d8:8a:
18:b6:f1:41:3f:c0:39:be:58:a2:4b:d4:44:c6:35:
82:a2:94:a3:62:60:80:82:09:b2:05:e4:eb:e5:ec:
7b:b3:9d:9b:5e:5d:44:68:63:eb:58:91:a3:48:09:
f5:3f:05:33:4d:f1:83:80:61:1e:27:45:71:dd:10:
68:e6:89:8f:36:d4:1a:2b:2c:52:c0:19:1f:55:d7:
78:30:5c:0a:b5:c1:59:bb:41:f8:dc:29:07:6d:d9:
51:e2:2c:01:56:e3:45:4d:d7:0c:0e:6a:d8:1e:13:
72:82:82:20:fb:b9:6c:57:c9:94:85:0f:04:f7:51:
4a:1a:ef:28:1c:44:d2:97:5a:a3:23:a9:b1:33:aa:
49:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:59:96:D9:C4:D7:99:70:D4:5C:C4:EC:A2:71:44:27:35:5D:D6:A4
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/g1mW2cTXmXDUXMTsonFEJzVd1qQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.222.0/24
82.153.243.0/24
Signature Algorithm: sha256WithRSAEncryption
23:58:ea:c1:22:df:35:3b:77:6e:53:6b:9f:38:81:67:6b:6f:
a4:89:6a:5a:a1:e0:ca:97:0a:7b:43:f3:94:dc:d9:5f:1f:6f:
fd:70:54:81:88:bc:d6:78:b1:0a:5b:ec:6c:3c:d6:0d:fe:e0:
29:5e:41:ef:14:85:e7:0b:3c:70:0b:c2:bf:c4:49:34:b4:ff:
63:68:fb:fb:a1:0a:73:9b:7e:0f:51:19:47:8a:9a:d8:31:9b:
92:a1:16:c6:93:13:1c:d2:0c:a4:67:6b:69:55:fd:3a:01:8d:
fd:23:6a:71:da:eb:53:dd:26:56:49:c1:3e:6c:c8:6b:af:6f:
e5:32:87:49:de:04:be:13:dd:9e:dc:d9:49:34:e2:f3:cc:04:
a1:73:09:73:c8:38:ed:e9:53:40:bc:aa:65:b3:f9:7d:65:1a:
cb:a1:13:9b:71:d7:22:41:7e:c1:8b:5f:cd:86:8c:73:e0:bf:
9f:be:39:d7:f1:61:13:91:f5:0c:e9:00:93:50:d8:1c:be:d0:
f2:dd:b3:00:75:43:a2:71:3e:36:ed:21:de:fd:25:47:94:f5:
4d:26:e7:26:7f:9a:8c:bb:96:20:24:f7:b9:59:80:75:e5:49:
a5:dc:44:02:f9:10:53:92:a3:2d:14:4d:e7:99:6a:3b:72:f7:
09:41:56:1d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZZ7lRhA33TN1OMt3nEBvdUoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjUwNDI4MDg0ODEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MzU5OTZkOWM0ZDc5OTcwZDQ1Y2M0ZWNhMjcxNDQyNzM1NWRkNmE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPGC2PuUF6r0XvE0Sbm1d5yYEtkF
p4lu5RnngGFLvNlkM5xTVhIRhefo/bklCkhdXPyiHTD22tbNtISuIXHmeFoKB8Zi
aM1vwp8jhOHHiixrfxZIPgAQJmyrcLFScAdsHA2PubxSRfvI9ci2zukv37weTtHh
2IoYtvFBP8A5vliiS9RExjWCopSjYmCAggmyBeTr5ex7s52bXl1EaGPrWJGjSAn1
PwUzTfGDgGEeJ0Vx3RBo5omPNtQaKyxSwBkfVdd4MFwKtcFZu0H43CkHbdlR4iwB
VuNFTdcMDmrYHhNygoIg+7lsV8mUhQ8E91FKGu8oHETSl1qjI6mxM6pJLQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFINZltnE15lw1FzE7KJxRCc1XdakMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvZzFtVzJjVFhtWERVWE1Uc29uRkVKelZkMXFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUpneAwQA
UpnzMA0GCSqGSIb3DQEBCwUAA4IBAQAjWOrBIt81O3duU2ufOIFna2+kiWpaoeDK
lwp7Q/OU3NlfH2/9cFSBiLzWeLEKW+xsPNYN/uApXkHvFIXnCzxwC8K/xEk0tP9j
aPv7oQpzm34PURlHiprYMZuSoRbGkxMc0gykZ2tpVf06AY39I2px2utT3SZWScE+
bMhrr2/lModJ3gS+E92e3NlJNOLzzAShcwlzyDjt6VNAvKpls/l9ZRrLoRObcdci
QX7Bi1/Nhoxz4L+fvjnX8WETkfUM6QCTUNgcvtDy3bMAdUOicT427SHe/SVHlPVN
Jucmf5qMu5YgJPe5WYB15Uml3EQC+RBTkqMtFE3nmWo7cvcJQVYd
-----END CERTIFICATE-----
Generated at Tue Apr 29 18:42:53 2025 by rpki-client