Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/57860a-dd5e-46e8-9ecb-d078eec82b2a/1/9tT1Sn3Qux2-pUIWCQe_vjURo9M.roa
File: 9tT1Sn3Qux2-pUIWCQe_vjURo9M.roa (raw, json)
Hash identifier: FairLybhS08hCgrNLc9cEd4IlKo+5RTneSM8eV+/6qk=
Subject key identifier: F6:D4:F5:4A:7D:D0:BB:1D:BE:A5:42:16:09:07:BF:BE:35:11:A3:D3
Certificate issuer: /CN=1b982883e1dfbf4633e08c0b58c85e89ffc32101
Certificate serial: 01942748440AB7F4B9D9AC5D5EE8A900E811
Authority key identifier: 1B:98:28:83:E1:DF:BF:46:33:E0:8C:0B:58:C8:5E:89:FF:C3:21:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G5gog-Hfv0Yz4IwLWMheif_DIQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/57860a-dd5e-46e8-9ecb-d078eec82b2a/1/9tT1Sn3Qux2-pUIWCQe_vjURo9M.roa
Signing time: Thu 02 Jan 2025 13:50:34 +0000
ROA not before: Thu 02 Jan 2025 13:50:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 142113
IP address blocks: 185.48.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/57860a-dd5e-46e8-9ecb-d078eec82b2a/1/G5gog-Hfv0Yz4IwLWMheif_DIQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/57860a-dd5e-46e8-9ecb-d078eec82b2a/1/G5gog-Hfv0Yz4IwLWMheif_DIQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/G5gog-Hfv0Yz4IwLWMheif_DIQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 13:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:44:0a:b7:f4:b9:d9:ac:5d:5e:e8:a9:00:e8:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b982883e1dfbf4633e08c0b58c85e89ffc32101
Validity
Not Before: Jan 2 13:50:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f6d4f54a7dd0bb1dbea542160907bfbe3511a3d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:82:3a:6a:80:3a:4b:c3:3f:cb:8d:24:a2:7a:
62:13:5a:56:b9:0f:8d:ea:a1:84:db:87:5e:7a:53:
42:f1:42:c9:81:34:7f:ec:e3:3f:c3:2b:5f:c6:73:
ef:92:0a:5a:21:f5:c1:1f:14:3a:aa:8b:13:7c:27:
b7:7b:cd:5a:82:c2:f1:3c:e1:2c:a0:14:fe:d3:d3:
ba:90:8a:2b:ec:74:de:69:30:33:fc:f1:09:19:88:
0b:9b:7f:6b:76:d2:cf:5f:1d:21:d2:1e:9f:22:27:
f6:55:a5:ab:c8:b0:5e:3b:77:b9:47:c9:2f:fd:71:
95:7c:87:be:f0:e5:6c:86:66:e3:df:61:2e:a1:ee:
c4:4c:83:19:e3:e3:12:15:69:43:f5:ff:bb:8b:99:
13:29:25:65:11:27:ca:ab:9f:19:9f:de:86:44:94:
f1:b6:06:03:62:93:99:68:75:24:cc:41:0f:5f:6c:
e9:db:72:20:f5:67:76:2b:d3:38:ce:19:dd:6a:5d:
27:05:7c:5b:5e:0e:40:5a:74:7c:bb:42:f5:9a:f9:
63:f2:00:2c:9b:33:4a:a4:3d:3a:a1:fd:40:10:bf:
25:97:ee:db:dd:e1:72:30:31:06:00:cd:46:8d:77:
08:31:86:f6:ce:03:3a:de:89:d2:47:2b:78:94:80:
43:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:D4:F5:4A:7D:D0:BB:1D:BE:A5:42:16:09:07:BF:BE:35:11:A3:D3
X509v3 Authority Key Identifier:
keyid:1B:98:28:83:E1:DF:BF:46:33:E0:8C:0B:58:C8:5E:89:FF:C3:21:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G5gog-Hfv0Yz4IwLWMheif_DIQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/57860a-dd5e-46e8-9ecb-d078eec82b2a/1/9tT1Sn3Qux2-pUIWCQe_vjURo9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/57860a-dd5e-46e8-9ecb-d078eec82b2a/1/G5gog-Hfv0Yz4IwLWMheif_DIQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.48.251.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:53:f7:83:e5:bd:5d:d4:da:fc:87:b9:0b:f4:c7:d9:c6:db:
b2:72:de:4b:44:d8:4f:93:50:56:e6:b2:1e:f0:63:cd:80:3c:
11:f8:42:e2:ef:bf:86:d9:c7:c9:28:c2:73:17:a3:77:61:3b:
c3:37:21:c2:33:f5:9f:08:76:e0:21:c0:c7:cb:50:f6:1f:78:
36:0e:e5:16:ff:a1:6e:9e:b8:19:82:e7:72:19:a2:8d:29:a4:
ac:fd:3c:a0:90:a2:94:c6:2f:07:e1:09:09:39:6e:ed:a9:da:
6a:7d:ef:06:3e:14:d4:87:4d:a3:de:27:84:fe:2e:42:45:2c:
c5:1f:67:97:bb:d5:ec:87:2f:1b:37:e1:88:92:97:7b:bf:8b:
94:2d:49:8e:90:e8:68:68:88:81:6f:94:2b:0a:10:9d:66:8c:
2d:f8:cc:fd:8c:cb:1b:79:df:32:f2:d5:78:50:36:be:54:37:
08:a6:df:b9:fb:ab:9d:aa:7e:4e:de:9b:4e:d4:0d:19:ec:ed:
4c:20:0b:34:6c:f1:c6:55:35:61:48:ba:f9:9c:af:1a:6f:ed:
a4:16:a5:b2:5a:3d:93:93:7a:2d:68:a0:f2:72:6a:f8:47:44:
c0:e2:22:21:d5:8b:87:93:58:2f:ca:75:07:fe:6b:06:5b:19:
59:7b:e6:ac
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnSEQKt/S52axdXuipAOgRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiOTgyODgzZTFkZmJmNDYzM2UwOGMwYjU4Yzg1ZTg5ZmZj
MzIxMDEwHhcNMjUwMTAyMTM1MDM0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNmQ0ZjU0YTdkZDBiYjFkYmVhNTQyMTYwOTA3YmZiZTM1MTFhM2QzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyII6aoA6S8M/y40konpiE1pWuQ+N
6qGE24deelNC8ULJgTR/7OM/wytfxnPvkgpaIfXBHxQ6qosTfCe3e81agsLxPOEs
oBT+09O6kIor7HTeaTAz/PEJGYgLm39rdtLPXx0h0h6fIif2VaWryLBeO3e5R8kv
/XGVfIe+8OVshmbj32Euoe7ETIMZ4+MSFWlD9f+7i5kTKSVlESfKq58Zn96GRJTx
tgYDYpOZaHUkzEEPX2zp23Ig9Wd2K9M4zhndal0nBXxbXg5AWnR8u0L1mvlj8gAs
mzNKpD06of1AEL8ll+7b3eFyMDEGAM1GjXcIMYb2zgM63onSRyt4lIBDCwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPbU9Up90LsdvqVCFgkHv741EaPTMB8GA1UdIwQY
MBaAFBuYKIPh379GM+CMC1jIXon/wyEBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzVnb2ctSGZ2MFl6NEl3TFdNaGVpZl9ESVFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS81Nzg2MGEtZGQ1ZS00NmU4LTllY2It
ZDA3OGVlYzgyYjJhLzEvOXRUMVNuM1F1eDItcFVJV0NRZV92alVSbzlNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS81Nzg2MGEtZGQ1ZS00NmU4LTllY2ItZDA3OGVlYzgyYjJh
LzEvRzVnb2ctSGZ2MFl6NEl3TFdNaGVpZl9ESVFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuTD7MA0G
CSqGSIb3DQEBCwUAA4IBAQCgU/eD5b1d1Nr8h7kL9MfZxtuyct5LRNhPk1BW5rIe
8GPNgDwR+ELi77+G2cfJKMJzF6N3YTvDNyHCM/WfCHbgIcDHy1D2H3g2DuUW/6Fu
nrgZgudyGaKNKaSs/TygkKKUxi8H4QkJOW7tqdpqfe8GPhTUh02j3ieE/i5CRSzF
H2eXu9Xshy8bN+GIkpd7v4uULUmOkOhoaIiBb5QrChCdZowt+Mz9jMsbed8y8tV4
UDa+VDcIpt+5+6udqn5O3ptO1A0Z7O1MIAs0bPHGVTVhSLr5nK8ab+2kFqWyWj2T
k3otaKDycmr4R0TA4iIh1YuHk1gvynUH/msGWxlZe+as
-----END CERTIFICATE-----
Generated at Tue Apr 8 15:33:05 2025 by rpki-client