Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/r1Iga4svRdXgkzzcH3Kg0RXZCVM.roa
File: r1Iga4svRdXgkzzcH3Kg0RXZCVM.roa (raw, json)
Hash identifier: JeLfIM6nAeSe3Dl7vi7FqJjfcjK2HshwWCY2+gwSDpU=
Subject key identifier: AF:52:20:6B:8B:2F:45:D5:E0:93:3C:DC:1F:72:A0:D1:15:D9:09:53
Certificate issuer: /CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9
Certificate serial: 0194282383E815D60EDF903EC6221038303A
Authority key identifier: 1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/r1Iga4svRdXgkzzcH3Kg0RXZCVM.roa
Signing time: Thu 02 Jan 2025 17:50:03 +0000
ROA not before: Thu 02 Jan 2025 17:50:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 398343
IP address blocks: 91.149.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 00:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:83:e8:15:d6:0e:df:90:3e:c6:22:10:38:30:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9
Validity
Not Before: Jan 2 17:50:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=af52206b8b2f45d5e0933cdc1f72a0d115d90953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:da:50:38:df:e7:76:39:37:f1:3d:e0:0d:60:
d4:f8:e7:60:00:13:7e:c5:c5:4c:e0:cd:4c:62:b5:
59:16:0f:a7:6b:37:5d:56:57:0b:49:63:61:f5:19:
bb:a8:8d:58:c5:85:3e:f3:50:92:54:49:72:5e:d7:
d6:b6:b7:c7:fe:d0:7e:89:bb:1d:de:c9:11:03:05:
2b:59:54:36:cf:e4:26:27:5d:b8:0e:09:2e:74:fb:
4a:98:25:83:57:c5:09:56:ee:ed:95:a3:8e:f9:b1:
a5:21:38:d3:a0:2f:d0:5f:15:b3:f8:a9:92:0a:da:
29:ce:58:c6:a4:eb:63:04:34:97:93:6a:60:f4:17:
6b:b7:f4:c4:61:00:05:f2:32:8a:c1:1c:46:6a:00:
48:05:f2:aa:b3:34:e1:3e:76:75:e6:c3:a3:3f:a5:
21:d9:60:3a:da:12:c0:5e:77:43:d9:6e:b7:81:f3:
33:28:c2:64:55:05:c8:34:6b:00:82:ba:94:8d:df:
e6:0a:25:c7:74:e7:70:7a:ae:75:49:c3:39:1a:46:
f2:ed:ee:c7:d9:b5:04:c7:a6:83:03:56:4f:6e:e5:
4c:53:7e:11:3a:33:2c:a6:cd:82:8b:f5:40:b0:02:
87:63:58:00:f8:c7:3b:b6:9f:fc:ad:af:09:85:5d:
f5:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:52:20:6B:8B:2F:45:D5:E0:93:3C:DC:1F:72:A0:D1:15:D9:09:53
X509v3 Authority Key Identifier:
keyid:1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/r1Iga4svRdXgkzzcH3Kg0RXZCVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.149.221.0/24
Signature Algorithm: sha256WithRSAEncryption
28:b5:af:b9:be:25:04:67:73:d7:c3:af:39:b1:49:76:b8:6e:
5b:65:b9:30:bd:87:91:bc:4d:47:a5:57:3a:b1:22:9e:40:3e:
b7:43:9e:86:76:53:55:8d:ee:9c:fc:f9:5d:04:5a:f6:22:b6:
d5:33:42:2f:73:45:99:32:03:06:2c:e5:11:3f:b4:d7:d9:be:
db:5e:37:e8:68:3c:1f:5c:2f:6f:1d:f0:9b:4f:ec:8b:34:c3:
b9:64:ee:97:06:b5:b9:42:d3:43:db:57:35:c2:50:4a:e9:20:
96:9d:50:0c:db:77:c4:73:67:7b:18:a9:c0:54:17:ab:40:10:
99:4f:f9:d7:8c:fc:4c:59:b1:67:24:d2:9e:51:1a:e5:0f:1a:
b2:f2:4e:62:ee:87:35:cd:68:99:f2:5b:bb:fd:3e:01:cc:d5:
cb:54:a8:4b:1c:2a:0b:e4:cb:07:4a:20:29:fd:95:fa:cb:12:
a9:7c:21:f3:ae:a0:45:09:1d:d3:bf:ab:a4:a9:c3:37:79:ab:
24:92:56:44:a2:fd:ec:d6:5a:5d:73:0a:27:58:d1:b5:ac:0a:
2c:2c:30:56:e5:1d:db:69:ad:5a:f9:90:63:8d:d7:6f:0f:e8:
66:5f:41:c6:49:d0:6c:23:2b:19:b8:b8:ed:de:ee:cd:26:27:
4c:dc:f7:65
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQoI4PoFdYO35A+xiIQODA6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhY2I2Mzc2YTE2NDhkNDlkNTVlNGQ3YjAxMzcxMzY3YjBk
YzJhZjkwHhcNMjUwMTAyMTc1MDAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZjUyMjA2YjhiMmY0NWQ1ZTA5MzNjZGMxZjcyYTBkMTE1ZDkwOTUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodpQON/ndjk38T3gDWDU+OdgABN+
xcVM4M1MYrVZFg+nazddVlcLSWNh9Rm7qI1YxYU+81CSVElyXtfWtrfH/tB+ibsd
3skRAwUrWVQ2z+QmJ124DgkudPtKmCWDV8UJVu7tlaOO+bGlITjToC/QXxWz+KmS
CtopzljGpOtjBDSXk2pg9Bdrt/TEYQAF8jKKwRxGagBIBfKqszThPnZ15sOjP6Uh
2WA62hLAXndD2W63gfMzKMJkVQXINGsAgrqUjd/mCiXHdOdweq51ScM5Gkby7e7H
2bUEx6aDA1ZPbuVMU34ROjMsps2Ci/VAsAKHY1gA+Mc7tp/8ra8JhV31CwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK9SIGuLL0XV4JM83B9yoNEV2QlTMB8GA1UdIwQY
MBaAFBrLY3ahZI1J1V5NewE3E2ew3Cr5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3N0amRxRmtqVW5WWGsxN0FUY1RaN0RjS3ZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS83MjQ3YjAtNDk4OS00M2VhLTkzNTAt
N2E5MzY3NTFkYjFiLzEvcjFJZ2E0c3ZSZFhna3p6Y0gzS2cwUlhaQ1ZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS83MjQ3YjAtNDk4OS00M2VhLTkzNTAtN2E5MzY3NTFkYjFi
LzEvR3N0amRxRmtqVW5WWGsxN0FUY1RaN0RjS3ZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW5XdMA0G
CSqGSIb3DQEBCwUAA4IBAQAota+5viUEZ3PXw685sUl2uG5bZbkwvYeRvE1HpVc6
sSKeQD63Q56GdlNVje6c/PldBFr2IrbVM0Ivc0WZMgMGLOURP7TX2b7bXjfoaDwf
XC9vHfCbT+yLNMO5ZO6XBrW5QtND21c1wlBK6SCWnVAM23fEc2d7GKnAVBerQBCZ
T/nXjPxMWbFnJNKeURrlDxqy8k5i7oc1zWiZ8lu7/T4BzNXLVKhLHCoL5MsHSiAp
/ZX6yxKpfCHzrqBFCR3Tv6ukqcM3easkklZEov3s1lpdcwonWNG1rAosLDBW5R3b
aa1a+ZBjjddvD+hmX0HGSdBsIysZuLjt3u7NJidM3Pdl
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:24:50 2025 by rpki-client