Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/HbRQpBgObvXEU2PlNrEx4IzYigA.roa
File: HbRQpBgObvXEU2PlNrEx4IzYigA.roa (raw, json)
Hash identifier: Zv7kNMXOsdDw3zZwNDMjdGrZy1Nvjep0YaEbodwv3Qw=
Subject key identifier: 1D:B4:50:A4:18:0E:6E:F5:C4:53:63:E5:36:B1:31:E0:8C:D8:8A:00
Certificate issuer: /CN=200585361d51a72e7ba6308c0ceb160244831178
Certificate serial: 01942068689ACA003FA4ABABE807395678B9
Authority key identifier: 20:05:85:36:1D:51:A7:2E:7B:A6:30:8C:0C:EB:16:02:44:83:11:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IAWFNh1Rpy57pjCMDOsWAkSDEXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/HbRQpBgObvXEU2PlNrEx4IzYigA.roa
Signing time: Wed 01 Jan 2025 05:48:20 +0000
ROA not before: Wed 01 Jan 2025 05:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209690
IP address blocks: 91.132.244.0/24 maxlen: 24
91.132.246.0/24 maxlen: 24
91.132.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IAWFNh1Rpy57pjCMDOsWAkSDEXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:68:9a:ca:00:3f:a4:ab:ab:e8:07:39:56:78:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=200585361d51a72e7ba6308c0ceb160244831178
Validity
Not Before: Jan 1 05:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1db450a4180e6ef5c45363e536b131e08cd88a00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:62:4c:4e:49:3d:ac:d3:33:ed:8d:e5:ce:47:
fa:c4:44:b1:80:c4:f1:74:cd:5a:59:7c:a2:a1:9c:
e3:39:28:5a:14:ab:b7:dc:cb:96:7b:2f:d0:be:6a:
13:ac:7c:1a:94:74:0d:20:1e:5a:7e:ee:70:ee:81:
06:40:f5:2b:b3:a7:3b:35:de:4b:ef:53:62:ff:2e:
a9:ce:ff:ec:c9:50:87:3d:73:50:8d:17:c8:56:12:
e1:6a:25:08:5a:32:1e:68:99:95:d6:7a:45:cd:f0:
3a:89:04:1b:16:dd:6d:43:72:03:55:34:d0:1b:ca:
6c:96:b1:bc:ff:8b:3f:e8:ec:c9:7c:cc:cd:e4:53:
09:49:7b:fc:a6:a9:ee:4a:80:58:30:17:a6:96:ea:
72:d7:f7:d9:f8:45:f0:a8:95:01:44:6b:ca:7d:fa:
fe:89:c6:c8:1a:9b:4d:dc:2f:b5:e7:83:66:cc:35:
9c:61:b8:f9:27:c7:e9:fd:40:9e:aa:cb:69:40:00:
b7:22:75:1b:1e:0c:65:26:74:47:d8:05:a1:63:46:
02:f2:1a:b2:22:cc:07:21:3c:15:06:7d:f3:e4:25:
4f:5b:40:f3:45:92:32:61:01:3c:0e:42:42:f7:d7:
00:35:1e:ad:56:5e:e7:af:c0:b2:fc:04:78:dd:21:
3a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:B4:50:A4:18:0E:6E:F5:C4:53:63:E5:36:B1:31:E0:8C:D8:8A:00
X509v3 Authority Key Identifier:
keyid:20:05:85:36:1D:51:A7:2E:7B:A6:30:8C:0C:EB:16:02:44:83:11:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IAWFNh1Rpy57pjCMDOsWAkSDEXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/HbRQpBgObvXEU2PlNrEx4IzYigA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.132.244.0/24
91.132.246.0/23
Signature Algorithm: sha256WithRSAEncryption
4e:7b:54:11:ab:e4:e2:d6:bc:42:12:3c:f0:ac:37:bf:11:9a:
8a:2c:12:dc:c8:f4:18:aa:33:93:de:4e:26:28:16:c3:35:5d:
cc:ef:98:f4:5d:bf:12:b2:ae:7f:ce:f1:46:f2:32:0f:9d:10:
4b:15:e6:e8:56:6f:a4:b1:06:fd:ce:ca:99:04:de:ca:97:91:
4d:a0:e2:d1:d3:52:49:f5:98:44:dc:d0:73:91:d4:bd:1f:19:
d7:fa:6e:e4:27:63:6f:e0:57:99:81:66:99:66:07:19:cf:6d:
99:3b:0c:a3:eb:9e:f8:ae:d2:12:dd:09:6b:18:2d:2e:87:df:
47:8a:8e:82:d9:fd:9a:21:2d:54:7b:6e:79:3d:69:f5:e2:3f:
2f:37:56:51:c2:a8:b6:cb:c5:d4:06:19:c0:8b:4c:87:80:4d:
b3:94:89:f0:26:f0:b8:96:11:b7:b6:cc:a9:db:e8:c6:cf:8f:
8e:c9:65:9a:0f:35:f9:c5:3f:62:cd:d2:56:07:3e:c6:e7:6f:
e3:be:16:33:d6:08:47:ef:25:06:c3:62:08:2e:ab:e2:b2:cf:
21:81:43:26:de:95:85:9b:36:4b:24:00:e5:50:22:d1:c9:8f:
ab:c3:3e:32:58:f3:95:fb:e2:22:ba:28:2a:c9:95:77:a4:80:
1d:18:b9:63
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQgaGiaygA/pKur6Ac5Vni5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwMDU4NTM2MWQ1MWE3MmU3YmE2MzA4YzBjZWIxNjAyNDQ4
MzExNzgwHhcNMjUwMTAxMDU0ODIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZGI0NTBhNDE4MGU2ZWY1YzQ1MzYzZTUzNmIxMzFlMDhjZDg4YTAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWJMTkk9rNMz7Y3lzkf6xESxgMTx
dM1aWXyioZzjOShaFKu33MuWey/QvmoTrHwalHQNIB5afu5w7oEGQPUrs6c7Nd5L
71Ni/y6pzv/syVCHPXNQjRfIVhLhaiUIWjIeaJmV1npFzfA6iQQbFt1tQ3IDVTTQ
G8pslrG8/4s/6OzJfMzN5FMJSXv8pqnuSoBYMBemlupy1/fZ+EXwqJUBRGvKffr+
icbIGptN3C+154NmzDWcYbj5J8fp/UCeqstpQAC3InUbHgxlJnRH2AWhY0YC8hqy
IswHITwVBn3z5CVPW0DzRZIyYQE8DkJC99cANR6tVl7nr8Cy/AR43SE6rQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFB20UKQYDm71xFNj5TaxMeCM2IoAMB8GA1UdIwQY
MBaAFCAFhTYdUacue6YwjAzrFgJEgxF4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUFXRk5oMVJweTU3cGpDTURPc1dBa1NERVhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9kODdmOGUtNjcyMy00YjE2LTllNzEt
MzE3Nzk4NzViNGZhLzEvSGJSUXBCZ09idlhFVTJQbE5yRXg0SXpZaWdBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni9kODdmOGUtNjcyMy00YjE2LTllNzEtMzE3Nzk4NzViNGZh
LzEvSUFXRk5oMVJweTU3cGpDTURPc1dBa1NERVhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW4T0AwQB
W4T2MA0GCSqGSIb3DQEBCwUAA4IBAQBOe1QRq+Ti1rxCEjzwrDe/EZqKLBLcyPQY
qjOT3k4mKBbDNV3M75j0Xb8Ssq5/zvFG8jIPnRBLFeboVm+ksQb9zsqZBN7Kl5FN
oOLR01JJ9ZhE3NBzkdS9HxnX+m7kJ2Nv4FeZgWaZZgcZz22ZOwyj6574rtIS3Qlr
GC0uh99Hio6C2f2aIS1Ue255PWn14j8vN1ZRwqi2y8XUBhnAi0yHgE2zlInwJvC4
lhG3tsyp2+jGz4+OyWWaDzX5xT9izdJWBz7G52/jvhYz1ghH7yUGw2IILqviss8h
gUMm3pWFmzZLJADlUCLRyY+rwz4yWPOV++IiuigqyZV3pIAdGLlj
-----END CERTIFICATE-----
Generated at Tue Apr 22 11:14:42 2025 by rpki-client