Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/a78ef1-c3c9-43a0-9b1c-1d9d8d004111/1/g48iOiDRDJ_XgJvC4YquAwkHpcU.roa
File: g48iOiDRDJ_XgJvC4YquAwkHpcU.roa (raw, json)
Hash identifier: W/4pzvw1CPsXQg+e4ipuVBiSg+Ao5Jez6JAYyxmb4bg=
Subject key identifier: 83:8F:22:3A:20:D1:0C:9F:D7:80:9B:C2:E1:8A:AE:03:09:07:A5:C5
Certificate issuer: /CN=5f92bff7a89a8590e6abbaec0282b0f24e0afeb2
Certificate serial: 0194206863B31A8C9850CCF0A35A6423BC1D
Authority key identifier: 5F:92:BF:F7:A8:9A:85:90:E6:AB:BA:EC:02:82:B0:F2:4E:0A:FE:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X5K_96iahZDmq7rsAoKw8k4K_rI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/a78ef1-c3c9-43a0-9b1c-1d9d8d004111/1/g48iOiDRDJ_XgJvC4YquAwkHpcU.roa
Signing time: Wed 01 Jan 2025 05:48:19 +0000
ROA not before: Wed 01 Jan 2025 05:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 46844
IP address blocks: 91.236.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/a78ef1-c3c9-43a0-9b1c-1d9d8d004111/1/X5K_96iahZDmq7rsAoKw8k4K_rI.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/a78ef1-c3c9-43a0-9b1c-1d9d8d004111/1/X5K_96iahZDmq7rsAoKw8k4K_rI.mft
rsync://rpki.ripe.net/repository/DEFAULT/X5K_96iahZDmq7rsAoKw8k4K_rI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:63:b3:1a:8c:98:50:cc:f0:a3:5a:64:23:bc:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f92bff7a89a8590e6abbaec0282b0f24e0afeb2
Validity
Not Before: Jan 1 05:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=838f223a20d10c9fd7809bc2e18aae030907a5c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:cd:16:85:43:21:36:f1:e8:da:e1:4d:51:f1:
3b:0d:f0:d7:2f:ff:9f:5e:c1:ed:0a:5e:04:db:60:
db:68:65:f8:da:a6:cb:75:c5:bb:bd:f7:56:1c:c7:
32:d5:3d:0c:42:bb:01:36:68:13:1e:2e:a7:34:76:
8e:20:f7:b9:bd:62:d1:5b:6c:ea:92:00:f2:01:b7:
54:dc:20:5d:17:e6:f3:40:49:f1:d7:12:76:ec:ac:
20:ff:19:18:a7:8e:53:74:2f:fb:3c:3c:db:05:9a:
f7:d3:65:05:77:16:be:5a:5f:e4:a9:17:7f:b0:3b:
7a:37:70:d2:d6:ac:83:7a:8f:7b:e2:15:76:07:b3:
dd:c5:28:18:4b:b8:89:f9:a9:da:7c:e9:48:9d:83:
04:d1:30:06:0a:41:85:94:30:4a:cb:14:bd:60:b9:
45:a8:82:e6:5c:aa:78:dd:4e:d4:db:07:5f:56:42:
02:60:36:4c:6b:1b:76:e4:a7:be:2e:6d:fd:c1:77:
61:38:9a:23:c7:b1:b1:57:bf:d5:f2:7e:80:bd:e4:
16:db:87:b0:dc:a8:67:1f:71:e6:ab:34:d7:f5:14:
99:62:ae:98:02:f3:6b:e8:14:b1:be:ee:d2:19:cb:
2d:4a:42:e8:fa:b4:f0:db:a0:08:cb:3d:29:37:4b:
57:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:8F:22:3A:20:D1:0C:9F:D7:80:9B:C2:E1:8A:AE:03:09:07:A5:C5
X509v3 Authority Key Identifier:
keyid:5F:92:BF:F7:A8:9A:85:90:E6:AB:BA:EC:02:82:B0:F2:4E:0A:FE:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5K_96iahZDmq7rsAoKw8k4K_rI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a78ef1-c3c9-43a0-9b1c-1d9d8d004111/1/g48iOiDRDJ_XgJvC4YquAwkHpcU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a78ef1-c3c9-43a0-9b1c-1d9d8d004111/1/X5K_96iahZDmq7rsAoKw8k4K_rI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.182.0/24
Signature Algorithm: sha256WithRSAEncryption
71:bd:d9:08:df:a6:e3:19:bb:31:fb:05:8d:88:1f:65:4a:86:
fa:53:c3:37:c7:ef:c9:20:86:e1:fb:92:5e:12:69:89:06:e4:
8e:7d:46:fc:35:7d:86:0e:3e:2c:6c:85:06:0d:6f:32:84:89:
72:89:3c:0c:ca:11:58:e8:38:e1:e3:20:f5:20:0c:1a:ab:b9:
6c:36:b8:f6:c9:c2:b2:f0:c6:49:ed:d6:b5:77:62:2c:d3:dc:
ef:45:6e:3d:4d:f1:42:12:82:83:95:9e:8b:d0:c5:ce:1c:5d:
ba:4c:52:4f:f5:67:fe:20:0f:e6:37:57:a6:46:b2:73:ba:eb:
f8:7a:b0:fa:12:fd:45:f6:de:2f:36:a3:47:b2:f1:88:07:76:
98:ef:7a:3d:13:0b:28:a3:b0:12:5b:90:25:d5:5e:fc:42:48:
78:8d:55:ba:ad:1d:83:41:f7:ab:7b:3c:5b:85:0e:62:82:b2:
fb:1f:e8:44:54:d6:ab:52:e9:6d:06:97:fa:02:bc:f9:2a:05:
62:f0:9e:20:c7:f2:da:95:f2:77:e9:e8:02:88:6e:4e:c2:37:
00:7f:8d:2d:ae:c5:c0:b5:1b:6e:9f:aa:13:9b:ac:1e:04:6a:
29:6e:87:4b:44:29:be:94:06:cd:cf:40:72:f1:0a:dc:b8:0e:
f7:86:72:1e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQgaGOzGoyYUMzwo1pkI7wdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmOTJiZmY3YTg5YTg1OTBlNmFiYmFlYzAyODJiMGYyNGUw
YWZlYjIwHhcNMjUwMTAxMDU0ODE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MzhmMjIzYTIwZDEwYzlmZDc4MDliYzJlMThhYWUwMzA5MDdhNWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi80WhUMhNvHo2uFNUfE7DfDXL/+f
XsHtCl4E22DbaGX42qbLdcW7vfdWHMcy1T0MQrsBNmgTHi6nNHaOIPe5vWLRW2zq
kgDyAbdU3CBdF+bzQEnx1xJ27Kwg/xkYp45TdC/7PDzbBZr302UFdxa+Wl/kqRd/
sDt6N3DS1qyDeo974hV2B7PdxSgYS7iJ+anafOlInYME0TAGCkGFlDBKyxS9YLlF
qILmXKp43U7U2wdfVkICYDZMaxt25Ke+Lm39wXdhOJojx7GxV7/V8n6AveQW24ew
3KhnH3HmqzTX9RSZYq6YAvNr6BSxvu7SGcstSkLo+rTw26AIyz0pN0tXZwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIOPIjog0Qyf14CbwuGKrgMJB6XFMB8GA1UdIwQY
MBaAFF+Sv/eomoWQ5qu67AKCsPJOCv6yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDVLXzk2aWFoWkRtcTdyc0FvS3c4azRLX3JJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9hNzhlZjEtYzNjOS00M2EwLTliMWMt
MWQ5ZDhkMDA0MTExLzEvZzQ4aU9pRFJESl9YZ0p2QzRZcXVBd2tIcGNVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9hNzhlZjEtYzNjOS00M2EwLTliMWMtMWQ5ZDhkMDA0MTEx
LzEvWDVLXzk2aWFoWkRtcTdyc0FvS3c4azRLX3JJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+y2MA0G
CSqGSIb3DQEBCwUAA4IBAQBxvdkI36bjGbsx+wWNiB9lSob6U8M3x+/JIIbh+5Je
EmmJBuSOfUb8NX2GDj4sbIUGDW8yhIlyiTwMyhFY6Djh4yD1IAwaq7lsNrj2ycKy
8MZJ7da1d2Is09zvRW49TfFCEoKDlZ6L0MXOHF26TFJP9Wf+IA/mN1emRrJzuuv4
erD6Ev1F9t4vNqNHsvGIB3aY73o9Ewsoo7ASW5Al1V78Qkh4jVW6rR2DQferezxb
hQ5igrL7H+hEVNarUultBpf6Arz5KgVi8J4gx/LalfJ36egCiG5OwjcAf40trsXA
tRtun6oTm6weBGopbodLRCm+lAbNz0By8QrcuA73hnIe
-----END CERTIFICATE-----
Generated at Sat Apr 5 22:33:42 2025 by rpki-client