Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/6b4a18-07bc-4353-b7ea-19ca50cf34ab/1/GdRMKH6WdmmVubPmURRtVnS8GV8.roa
File: GdRMKH6WdmmVubPmURRtVnS8GV8.roa (raw, json)
Hash identifier: gQYTKVfews/6lfRAQlloM0LgEpj91iqOXwXozcwIpNc=
Subject key identifier: 19:D4:4C:28:7E:96:76:69:95:B9:B3:E6:51:14:6D:56:74:BC:19:5F
Certificate issuer: /CN=b1df8e0037f1ae82f7be2235ae612c4010f6fe91
Certificate serial: 01963352E76D8BC4C79400D7EC74A018AB03
Authority key identifier: B1:DF:8E:00:37:F1:AE:82:F7:BE:22:35:AE:61:2C:40:10:F6:FE:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sd-OADfxroL3viI1rmEsQBD2_pE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/6b4a18-07bc-4353-b7ea-19ca50cf34ab/1/GdRMKH6WdmmVubPmURRtVnS8GV8.roa
Signing time: Mon 14 Apr 2025 08:03:13 +0000
ROA not before: Mon 14 Apr 2025 08:03:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56798
IP address blocks: 91.108.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/6b4a18-07bc-4353-b7ea-19ca50cf34ab/1/sd-OADfxroL3viI1rmEsQBD2_pE.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/6b4a18-07bc-4353-b7ea-19ca50cf34ab/1/sd-OADfxroL3viI1rmEsQBD2_pE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sd-OADfxroL3viI1rmEsQBD2_pE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:33:52:e7:6d:8b:c4:c7:94:00:d7:ec:74:a0:18:ab:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1df8e0037f1ae82f7be2235ae612c4010f6fe91
Validity
Not Before: Apr 14 08:03:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=19d44c287e96766995b9b3e651146d5674bc195f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ea:27:73:ce:11:1a:b8:2f:54:85:c6:19:0b:
74:a4:2e:ff:43:10:ac:70:93:e4:50:3f:b5:52:98:
28:63:ff:d1:9e:c7:6f:93:74:02:c5:61:8a:95:73:
d5:81:68:76:b9:b3:83:b0:64:e9:d5:72:a9:b8:66:
48:a6:f2:16:01:7b:07:21:a7:50:30:79:32:65:4a:
2a:b1:8b:fd:bc:79:06:ee:09:b6:a3:57:4a:b7:0b:
0c:6e:6c:9a:6e:87:87:4c:f5:34:84:c9:34:01:ce:
5f:e5:04:ec:b3:d9:45:03:5e:00:6b:a7:fb:56:29:
28:bd:96:35:e2:89:5b:ee:de:ce:56:74:8c:3c:cb:
a8:2a:67:c0:eb:3e:69:82:ee:50:4c:49:e2:6a:7c:
3a:95:1f:8a:77:31:0f:9c:e0:b5:17:e6:9b:80:e5:
5b:9e:63:44:b0:03:90:f7:f6:0c:bb:53:72:20:57:
ea:33:10:46:2d:31:0a:0b:60:fb:fd:e7:86:80:52:
01:bf:7a:1d:bd:a2:5d:37:cd:9f:2c:40:0a:0e:86:
a2:12:26:40:c3:4f:64:d5:92:83:16:a7:de:a6:4b:
9b:9e:a4:6b:90:c7:a5:bb:b0:61:fd:5c:e9:66:e9:
a6:27:69:36:de:42:3e:f3:18:85:8b:85:c1:ed:16:
a7:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:D4:4C:28:7E:96:76:69:95:B9:B3:E6:51:14:6D:56:74:BC:19:5F
X509v3 Authority Key Identifier:
keyid:B1:DF:8E:00:37:F1:AE:82:F7:BE:22:35:AE:61:2C:40:10:F6:FE:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sd-OADfxroL3viI1rmEsQBD2_pE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/6b4a18-07bc-4353-b7ea-19ca50cf34ab/1/GdRMKH6WdmmVubPmURRtVnS8GV8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/6b4a18-07bc-4353-b7ea-19ca50cf34ab/1/sd-OADfxroL3viI1rmEsQBD2_pE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.184.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:ca:38:02:2e:d1:1c:5e:6e:42:27:0e:1e:71:3a:d1:2a:e8:
c2:d7:e7:bd:44:c0:b1:06:9e:d9:8f:f4:b2:d6:52:28:9e:d2:
d9:fc:9f:ab:56:3a:ce:ec:c3:f6:da:18:1b:99:62:f6:67:09:
1a:15:df:58:75:12:51:a5:93:30:17:ac:66:f5:ed:ce:dc:3e:
29:62:86:98:18:dd:01:43:88:82:f4:e0:fe:b4:8b:9d:74:36:
76:36:c4:00:d1:aa:65:44:c5:3a:eb:d2:6a:72:c2:f7:53:11:
0d:91:b5:0c:33:c7:ba:f9:06:21:f6:cc:07:a2:3f:67:a4:bb:
1e:12:22:9d:50:df:86:e0:ef:e6:e0:12:e4:59:83:26:0f:ed:
27:25:cd:a2:6d:d6:bd:e0:4e:97:9b:21:ee:b4:97:c9:03:96:
f5:5b:af:c9:28:47:6b:b4:d1:28:47:cc:fc:43:cf:06:c6:46:
cf:25:e6:42:85:de:b3:3a:59:21:4b:4b:64:54:ed:9a:90:95:
15:7b:cc:dc:4b:31:f5:f2:24:14:77:75:d6:55:84:70:28:32:
04:39:04:35:b8:60:47:78:3e:a1:03:c4:eb:92:f7:a7:28:74:
eb:b2:6b:f5:a9:aa:55:b7:60:39:f7:1a:e9:7f:ff:00:9c:e6:
6a:76:0e:b2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZYzUudti8THlADX7HSgGKsDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxZGY4ZTAwMzdmMWFlODJmN2JlMjIzNWFlNjEyYzQwMTBm
NmZlOTEwHhcNMjUwNDE0MDgwMzEzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOWQ0NGMyODdlOTY3NjY5OTViOWIzZTY1MTE0NmQ1Njc0YmMxOTVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Oonc84RGrgvVIXGGQt0pC7/QxCs
cJPkUD+1UpgoY//Rnsdvk3QCxWGKlXPVgWh2ubODsGTp1XKpuGZIpvIWAXsHIadQ
MHkyZUoqsYv9vHkG7gm2o1dKtwsMbmyaboeHTPU0hMk0Ac5f5QTss9lFA14Aa6f7
VikovZY14olb7t7OVnSMPMuoKmfA6z5pgu5QTEnianw6lR+KdzEPnOC1F+abgOVb
nmNEsAOQ9/YMu1NyIFfqMxBGLTEKC2D7/eeGgFIBv3odvaJdN82fLEAKDoaiEiZA
w09k1ZKDFqfepkubnqRrkMelu7Bh/VzpZummJ2k23kI+8xiFi4XB7RanjwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBnUTCh+lnZplbmz5lEUbVZ0vBlfMB8GA1UdIwQY
MBaAFLHfjgA38a6C974iNa5hLEAQ9v6RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2QtT0FEZnhyb0wzdmlJMXJtRXNRQkQyX3BFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My82YjRhMTgtMDdiYy00MzUzLWI3ZWEt
MTljYTUwY2YzNGFiLzEvR2RSTUtINldkbW1WdWJQbVVSUnRWblM4R1Y4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My82YjRhMTgtMDdiYy00MzUzLWI3ZWEtMTljYTUwY2YzNGFi
LzEvc2QtT0FEZnhyb0wzdmlJMXJtRXNRQkQyX3BFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW2y4MA0G
CSqGSIb3DQEBCwUAA4IBAQCfyjgCLtEcXm5CJw4ecTrRKujC1+e9RMCxBp7Zj/Sy
1lIontLZ/J+rVjrO7MP22hgbmWL2ZwkaFd9YdRJRpZMwF6xm9e3O3D4pYoaYGN0B
Q4iC9OD+tIuddDZ2NsQA0aplRMU669JqcsL3UxENkbUMM8e6+QYh9swHoj9npLse
EiKdUN+G4O/m4BLkWYMmD+0nJc2ibda94E6XmyHutJfJA5b1W6/JKEdrtNEoR8z8
Q88GxkbPJeZChd6zOlkhS0tkVO2akJUVe8zcSzH18iQUd3XWVYRwKDIEOQQ1uGBH
eD6hA8TrkvenKHTrsmv1qapVt2A59xrpf/8AnOZqdg6y
-----END CERTIFICATE-----
Generated at Mon Apr 21 17:18:16 2025 by rpki-client