Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/XfGWZo7cWfWs0AeA21V-Q-Ft8as.roa
File: XfGWZo7cWfWs0AeA21V-Q-Ft8as.roa (raw, json)
Hash identifier: wdeLE3gHNM1FBTeMpoIo0xzT6JjYdbIh/aFzX+q2qOI=
Subject key identifier: 5D:F1:96:66:8E:DC:59:F5:AC:D0:07:80:DB:55:7E:43:E1:6D:F1:AB
Certificate issuer: /CN=8a6024b2c27a67dff5b654efa06bf7bfc1222625
Certificate serial: 01942521C5CED752A3609A97DFD70190A727
Authority key identifier: 8A:60:24:B2:C2:7A:67:DF:F5:B6:54:EF:A0:6B:F7:BF:C1:22:26:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/imAkssJ6Z9_1tlTvoGv3v8EiJiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/XfGWZo7cWfWs0AeA21V-Q-Ft8as.roa
Signing time: Thu 02 Jan 2025 03:49:17 +0000
ROA not before: Thu 02 Jan 2025 03:49:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216314
IP address blocks: 91.200.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/imAkssJ6Z9_1tlTvoGv3v8EiJiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 12:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:c5:ce:d7:52:a3:60:9a:97:df:d7:01:90:a7:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a6024b2c27a67dff5b654efa06bf7bfc1222625
Validity
Not Before: Jan 2 03:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5df196668edc59f5acd00780db557e43e16df1ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cc:90:08:dd:5b:d6:5a:be:63:d7:14:67:2f:
a7:72:ff:28:1d:e0:f9:21:34:6c:ae:1b:5d:91:6a:
37:5f:49:bc:12:6c:88:54:de:6a:56:d6:f3:34:17:
10:60:41:bc:2a:7f:f1:03:f5:49:51:7f:72:f9:02:
43:59:a2:b6:9f:d8:c4:06:32:69:94:13:07:6a:d7:
68:9d:83:bc:89:e9:eb:5f:f9:ca:a5:52:03:c5:d8:
76:e4:81:50:2a:11:c2:6a:01:a5:a8:54:f7:9e:b4:
cd:0d:d8:02:0b:e3:17:18:e7:a0:3c:a1:d8:9a:4d:
11:cf:ee:38:19:d7:55:0a:fa:56:cb:44:f8:23:62:
50:56:43:ea:c9:b1:a1:1e:a3:72:f6:17:cf:ce:0f:
3b:ea:2a:76:56:ae:3f:a1:2c:b3:e5:1b:67:17:48:
20:d2:f3:4b:2e:25:e4:8c:4a:a9:a8:06:d3:fe:98:
d8:7b:ac:d8:20:8f:c6:4d:36:48:3f:32:30:1e:45:
08:5c:41:29:ac:f2:fe:38:57:07:5d:63:4d:5a:a0:
5b:dc:46:df:ff:e3:83:87:0c:db:50:a7:2a:6a:2b:
91:16:37:b9:86:64:e3:bd:48:71:b2:ec:35:9c:30:
9b:c2:a7:ce:02:3a:29:8f:49:f3:e9:5a:62:a9:63:
99:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:F1:96:66:8E:DC:59:F5:AC:D0:07:80:DB:55:7E:43:E1:6D:F1:AB
X509v3 Authority Key Identifier:
keyid:8A:60:24:B2:C2:7A:67:DF:F5:B6:54:EF:A0:6B:F7:BF:C1:22:26:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imAkssJ6Z9_1tlTvoGv3v8EiJiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/XfGWZo7cWfWs0AeA21V-Q-Ft8as.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.200.57.0/24
Signature Algorithm: sha256WithRSAEncryption
92:0c:60:df:1a:eb:eb:00:fe:fb:e9:3a:8a:74:b4:b9:97:e6:
87:98:a1:7d:5e:e1:5f:53:84:89:ce:ea:a6:a5:a1:33:40:34:
69:47:66:c3:94:54:03:de:08:60:1e:29:47:f1:e7:cf:60:b3:
c4:b3:38:f6:f7:43:eb:e8:08:bc:88:2d:57:2a:4a:de:37:ac:
0d:9b:6f:42:54:29:c4:99:f8:49:3a:b1:c3:7c:96:17:a6:a9:
7d:1c:77:fb:6c:3c:60:7e:43:2f:da:bc:11:c1:60:f6:b8:fe:
d5:86:a9:37:9a:a4:62:d5:2e:29:bd:70:85:06:ad:24:72:9b:
e6:c2:62:45:80:81:88:41:b7:3c:a3:42:27:9c:19:05:a0:10:
ea:cf:75:5c:7b:0c:9f:53:08:6f:a3:a2:0e:ff:b4:72:8c:26:
23:2b:a7:3d:d7:8f:15:b2:a1:3b:6b:2a:3d:4b:9c:4e:57:0b:
61:e2:cb:93:2a:a0:ef:d6:22:a3:07:94:a7:fb:08:44:97:97:
b0:8c:e5:f1:07:b2:54:fa:cc:c6:82:e8:0a:d0:98:b1:8e:65:
a8:86:8d:de:69:5f:ef:a1:b9:f3:94:e9:f4:8d:99:1c:2e:35:
41:c1:83:86:31:d7:86:27:2b:e5:83:cd:26:1f:a5:54:78:18:
ed:03:de:5e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlIcXO11KjYJqX39cBkKcnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhNjAyNGIyYzI3YTY3ZGZmNWI2NTRlZmEwNmJmN2JmYzEy
MjI2MjUwHhcNMjUwMTAyMDM0OTE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZGYxOTY2NjhlZGM1OWY1YWNkMDA3ODBkYjU1N2U0M2UxNmRmMWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMyQCN1b1lq+Y9cUZy+ncv8oHeD5
ITRsrhtdkWo3X0m8EmyIVN5qVtbzNBcQYEG8Kn/xA/VJUX9y+QJDWaK2n9jEBjJp
lBMHatdonYO8ienrX/nKpVIDxdh25IFQKhHCagGlqFT3nrTNDdgCC+MXGOegPKHY
mk0Rz+44GddVCvpWy0T4I2JQVkPqybGhHqNy9hfPzg876ip2Vq4/oSyz5RtnF0gg
0vNLLiXkjEqpqAbT/pjYe6zYII/GTTZIPzIwHkUIXEEprPL+OFcHXWNNWqBb3Ebf
/+ODhwzbUKcqaiuRFje5hmTjvUhxsuw1nDCbwqfOAjopj0nz6VpiqWOZhQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFF3xlmaO3Fn1rNAHgNtVfkPhbfGrMB8GA1UdIwQY
MBaAFIpgJLLCemff9bZU76Br97/BIiYlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaW1Ba3NzSjZaOV8xdGxUdm9HdjN2OEVpSmlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8zM2VjY2YtMGFlMy00YzdlLWE0NDEt
MDhlOGYwY2JiODQwLzEvWGZHV1pvN2NXZldzMEFlQTIxVi1RLUZ0OGFzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC8zM2VjY2YtMGFlMy00YzdlLWE0NDEtMDhlOGYwY2JiODQw
LzEvaW1Ba3NzSjZaOV8xdGxUdm9HdjN2OEVpSmlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8g5MA0G
CSqGSIb3DQEBCwUAA4IBAQCSDGDfGuvrAP776TqKdLS5l+aHmKF9XuFfU4SJzuqm
paEzQDRpR2bDlFQD3ghgHilH8efPYLPEszj290Pr6Ai8iC1XKkreN6wNm29CVCnE
mfhJOrHDfJYXpql9HHf7bDxgfkMv2rwRwWD2uP7Vhqk3mqRi1S4pvXCFBq0kcpvm
wmJFgIGIQbc8o0InnBkFoBDqz3VcewyfUwhvo6IO/7RyjCYjK6c9148VsqE7ayo9
S5xOVwth4suTKqDv1iKjB5Sn+whEl5ewjOXxB7JU+szGgugK0JixjmWoho3eaV/v
obnzlOn0jZkcLjVBwYOGMdeGJyvlg80mH6VUeBjtA95e
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:08:26 2025 by rpki-client