Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1ga8nVlGxTmTngINMpKry6AQMr4.roa
File: 1ga8nVlGxTmTngINMpKry6AQMr4.roa (raw, json)
Hash identifier: Dm3zUfcqGdu/uBK93tg3lyr6TLgweEHTMY6jPc57f2s=
Subject key identifier: D6:06:BC:9D:59:46:C5:39:93:9E:02:0D:32:92:AB:CB:A0:10:32:BE
Certificate issuer: /CN=d58214cfa326611e9d494135a12ce8276f0f1784
Certificate serial: 019422FC14548B047FAE0D5B841B988BD468
Authority key identifier: D5:82:14:CF:A3:26:61:1E:9D:49:41:35:A1:2C:E8:27:6F:0F:17:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1ga8nVlGxTmTngINMpKry6AQMr4.roa
Signing time: Wed 01 Jan 2025 17:48:53 +0000
ROA not before: Wed 01 Jan 2025 17:48:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201119
IP address blocks: 37.16.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 17:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:14:54:8b:04:7f:ae:0d:5b:84:1b:98:8b:d4:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58214cfa326611e9d494135a12ce8276f0f1784
Validity
Not Before: Jan 1 17:48:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d606bc9d5946c539939e020d3292abcba01032be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:65:1c:12:ff:c2:43:32:cd:23:fd:a7:0a:a6:
32:8a:2e:aa:5d:c2:dd:49:32:2c:43:cc:7e:74:3d:
7f:d4:30:8a:11:ca:ea:e1:fa:6b:ef:42:6a:12:21:
66:a3:f8:56:48:c4:99:4d:a1:46:8e:1a:b3:35:ea:
f1:b8:e8:09:24:6f:57:20:7c:69:49:1f:68:1b:fb:
4e:d9:6a:3d:9e:d0:92:d0:d7:ca:31:cc:0d:f0:2e:
86:71:72:f2:25:0f:6b:e4:a2:ed:7c:11:ff:2d:f2:
58:6b:82:72:bd:3c:54:09:1a:c1:92:34:8d:31:cb:
f4:16:5a:cc:55:fb:57:4c:f4:c6:d0:77:b6:c8:d1:
c5:5d:93:9d:27:66:cf:be:d1:af:b2:7d:20:53:9d:
0b:6f:26:cc:a1:fb:3b:56:dd:11:fb:3a:44:cc:40:
46:55:d2:51:67:e9:b0:a5:cb:7c:a3:ea:85:59:bc:
7e:09:4e:85:1f:8b:74:35:df:47:a8:74:c6:19:e4:
f1:f9:f3:68:e7:ba:e7:49:29:06:c8:69:aa:6e:9b:
e9:5b:f5:1e:8e:80:d3:55:54:dc:2e:eb:6b:e6:2c:
54:eb:f3:d2:3a:0f:bc:35:60:ef:cf:cb:66:73:fe:
0c:2c:22:27:2c:c7:75:58:58:ae:27:22:77:ec:dc:
0e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:06:BC:9D:59:46:C5:39:93:9E:02:0D:32:92:AB:CB:A0:10:32:BE
X509v3 Authority Key Identifier:
keyid:D5:82:14:CF:A3:26:61:1E:9D:49:41:35:A1:2C:E8:27:6F:0F:17:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1ga8nVlGxTmTngINMpKry6AQMr4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.16.90.0/24
Signature Algorithm: sha256WithRSAEncryption
35:38:60:ff:10:5a:5d:41:fe:bd:90:c4:a8:7f:88:f2:87:a0:
58:56:0c:28:77:b8:9d:a2:e3:c7:d0:87:19:e0:d4:64:41:41:
e4:3f:06:7f:14:e7:11:2f:f8:f8:8d:87:f3:b9:97:86:a4:59:
61:75:51:2e:dc:d3:83:9f:af:fb:77:8d:86:5d:0a:de:a3:62:
96:29:cd:fa:1f:46:08:8d:42:d0:13:40:6a:e7:6d:08:80:b2:
8e:1e:8c:0b:86:11:c7:1a:a0:67:2e:57:6b:06:f0:62:3a:e1:
88:1a:39:68:16:4b:4c:09:42:5c:dd:40:05:a9:d2:51:ce:c9:
e6:da:32:11:9f:bd:25:5a:1a:35:e5:5c:21:fc:a8:b5:4e:91:
15:2f:22:ea:e5:5e:b4:4e:38:ed:01:59:de:1b:e5:bc:b8:65:
6c:fd:27:b3:6f:9c:f2:23:b7:db:6c:99:bc:ea:28:d3:ec:33:
8e:b4:10:18:b8:ea:3c:08:16:1a:8b:5d:de:16:eb:33:1f:3e:
88:53:30:4c:77:28:88:40:43:92:65:be:6f:47:f6:67:b1:b2:
e8:23:cb:05:72:f0:83:30:46:56:86:16:fa:71:95:28:e9:a3:
3d:50:44:b8:1b:38:f6:fa:1a:5d:e5:fa:09:4a:d5:c4:c4:3b:
57:ed:ea:02
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQi/BRUiwR/rg1bhBuYi9RoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1ODIxNGNmYTMyNjYxMWU5ZDQ5NDEzNWExMmNlODI3NmYw
ZjE3ODQwHhcNMjUwMTAxMTc0ODUzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNjA2YmM5ZDU5NDZjNTM5OTM5ZTAyMGQzMjkyYWJjYmEwMTAzMmJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9WUcEv/CQzLNI/2nCqYyii6qXcLd
STIsQ8x+dD1/1DCKEcrq4fpr70JqEiFmo/hWSMSZTaFGjhqzNerxuOgJJG9XIHxp
SR9oG/tO2Wo9ntCS0NfKMcwN8C6GcXLyJQ9r5KLtfBH/LfJYa4JyvTxUCRrBkjSN
Mcv0FlrMVftXTPTG0He2yNHFXZOdJ2bPvtGvsn0gU50LbybMofs7Vt0R+zpEzEBG
VdJRZ+mwpct8o+qFWbx+CU6FH4t0Nd9HqHTGGeTx+fNo57rnSSkGyGmqbpvpW/Ue
joDTVVTcLutr5ixU6/PSOg+8NWDvz8tmc/4MLCInLMd1WFiuJyJ37NwOBQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNYGvJ1ZRsU5k54CDTKSq8ugEDK+MB8GA1UdIwQY
MBaAFNWCFM+jJmEenUlBNaEs6CdvDxeEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVlJVXo2TW1ZUjZkU1VFMW9Tem9KMjhQRjRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi83NzdlZWYtNGQwMi00ZDM5LWIxZTQt
MTA3OWQ1NWFlZTkxLzEvMWdhOG5WbEd4VG1UbmdJTk1wS3J5NkFRTXI0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi83NzdlZWYtNGQwMi00ZDM5LWIxZTQtMTA3OWQ1NWFlZTkx
LzEvMVlJVXo2TW1ZUjZkU1VFMW9Tem9KMjhQRjRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJRBaMA0G
CSqGSIb3DQEBCwUAA4IBAQA1OGD/EFpdQf69kMSof4jyh6BYVgwod7idouPH0IcZ
4NRkQUHkPwZ/FOcRL/j4jYfzuZeGpFlhdVEu3NODn6/7d42GXQreo2KWKc36H0YI
jULQE0Bq520IgLKOHowLhhHHGqBnLldrBvBiOuGIGjloFktMCUJc3UAFqdJRzsnm
2jIRn70lWho15Vwh/Ki1TpEVLyLq5V60TjjtAVneG+W8uGVs/Sezb5zyI7fbbJm8
6ijT7DOOtBAYuOo8CBYai13eFuszHz6IUzBMdyiIQEOSZb5vR/ZnsbLoI8sFcvCD
MEZWhhb6cZUo6aM9UES4Gzj2+hpd5foJStXExDtX7eoC
-----END CERTIFICATE-----
Generated at Tue Apr 8 01:15:14 2025 by rpki-client