Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/XNv5R4Pm86vxr_d7wZIi0Xi614M.roa
File: XNv5R4Pm86vxr_d7wZIi0Xi614M.roa (raw, json)
Hash identifier: gIqD/66IF2g/0ovWyFttP7JqaZx+pP8FQh+Ln/imEBY=
Subject key identifier: 5C:DB:F9:47:83:E6:F3:AB:F1:AF:F7:7B:C1:92:22:D1:78:BA:D7:83
Certificate issuer: /CN=b1bc850d17ca6d3c7b4d00e501e2d356f08a585e
Certificate serial: 019421B1BB163E59F3EA8B322079C28AAA44
Authority key identifier: B1:BC:85:0D:17:CA:6D:3C:7B:4D:00:E5:01:E2:D3:56:F0:8A:58:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sbyFDRfKbTx7TQDlAeLTVvCKWF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/XNv5R4Pm86vxr_d7wZIi0Xi614M.roa
Signing time: Wed 01 Jan 2025 11:48:03 +0000
ROA not before: Wed 01 Jan 2025 11:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 91.228.72.0/24 maxlen: 24
91.228.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/sbyFDRfKbTx7TQDlAeLTVvCKWF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:bb:16:3e:59:f3:ea:8b:32:20:79:c2:8a:aa:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1bc850d17ca6d3c7b4d00e501e2d356f08a585e
Validity
Not Before: Jan 1 11:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5cdbf94783e6f3abf1aff77bc19222d178bad783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:fa:b2:8e:30:0e:4d:bc:ef:70:02:dd:c9:5b:
f3:4a:9f:80:31:51:39:f5:eb:bd:95:89:87:2e:2a:
c0:a8:a4:8c:43:fd:12:0c:0d:77:85:3d:fb:79:96:
6d:f4:60:db:ca:28:cd:c6:9b:3f:0c:e9:ef:5c:95:
1b:9c:28:f4:29:a2:05:2e:d3:24:91:98:b4:65:86:
34:26:70:0b:1c:e1:3d:7b:97:b7:60:85:6b:67:c1:
cd:18:d9:76:63:64:6f:f8:2b:9a:99:b1:95:92:1d:
91:ab:5f:0e:6e:32:1b:db:cb:b2:e7:c0:c1:6d:68:
69:d4:90:fa:66:cb:06:1e:78:af:88:ed:ad:cb:7d:
4d:c0:4f:d8:ab:56:d9:7d:c4:7a:5a:90:2c:36:2d:
70:d6:a9:b3:74:9c:d7:af:5d:b3:da:60:b6:cc:de:
41:e8:1e:fe:80:58:1b:21:df:e6:5b:fb:04:c6:e7:
9f:5f:33:f0:d8:1c:37:f9:9e:ac:fe:0a:66:35:2b:
d9:44:96:86:57:b2:e9:60:a2:9d:5f:5f:9b:2c:c8:
fd:f5:5b:33:cf:5d:30:00:2e:33:08:f4:eb:89:3d:
8b:14:aa:4c:20:27:43:9f:29:a2:78:7b:ca:80:93:
db:2d:d9:0d:4e:f7:1a:70:02:1b:df:c6:c1:65:d3:
8b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:DB:F9:47:83:E6:F3:AB:F1:AF:F7:7B:C1:92:22:D1:78:BA:D7:83
X509v3 Authority Key Identifier:
keyid:B1:BC:85:0D:17:CA:6D:3C:7B:4D:00:E5:01:E2:D3:56:F0:8A:58:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sbyFDRfKbTx7TQDlAeLTVvCKWF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/XNv5R4Pm86vxr_d7wZIi0Xi614M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.72.0/24
91.228.74.0/24
Signature Algorithm: sha256WithRSAEncryption
77:00:51:ab:18:d9:5d:ac:3d:11:c9:c5:57:6d:4c:71:3e:4d:
e8:a6:a8:8a:aa:e2:0b:c8:0d:80:4a:ca:46:c9:2f:ee:30:f2:
cf:51:59:de:6a:3d:e4:a2:52:9a:3f:5c:c4:38:b4:18:d2:9f:
6d:39:91:8c:74:2e:c1:b6:30:60:e0:e1:dc:a1:f4:82:0d:9d:
98:aa:17:2e:de:d8:10:09:98:fd:2d:30:cc:39:87:63:c2:5f:
fb:b7:87:09:15:2e:4c:56:19:a3:2b:14:d7:31:e2:7c:6d:27:
6b:f6:15:40:dc:60:bd:6a:ee:49:d1:13:78:e2:a3:08:e3:8b:
9b:49:38:42:7f:4e:15:6b:c8:a5:85:41:3f:2a:6b:c1:3d:d7:
22:9c:e4:2b:e7:71:c7:98:96:ed:c0:04:a2:7d:d4:45:9a:e2:
e4:97:39:f2:70:bc:8f:c9:42:24:a8:86:95:09:1d:53:55:a7:
e2:c4:3f:f3:de:75:71:c3:09:6b:ec:e1:88:a3:92:5d:9b:45:
2e:8e:ae:4e:23:bf:c0:65:10:26:1a:f9:2d:6e:60:ac:6f:7c:
9f:d2:9f:87:f2:59:cd:04:f6:39:5b:a7:1a:17:34:2e:93:f5:
a0:7d:6f:8b:33:b4:ba:02:d7:a5:8a:73:2e:5e:e1:25:97:ba:
ae:4e:ca:a8
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQhsbsWPlnz6osyIHnCiqpEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxYmM4NTBkMTdjYTZkM2M3YjRkMDBlNTAxZTJkMzU2ZjA4
YTU4NWUwHhcNMjUwMTAxMTE0ODAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1Y2RiZjk0NzgzZTZmM2FiZjFhZmY3N2JjMTkyMjJkMTc4YmFkNzgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvqyjjAOTbzvcALdyVvzSp+AMVE5
9eu9lYmHLirAqKSMQ/0SDA13hT37eZZt9GDbyijNxps/DOnvXJUbnCj0KaIFLtMk
kZi0ZYY0JnALHOE9e5e3YIVrZ8HNGNl2Y2Rv+CuambGVkh2Rq18ObjIb28uy58DB
bWhp1JD6ZssGHniviO2ty31NwE/Yq1bZfcR6WpAsNi1w1qmzdJzXr12z2mC2zN5B
6B7+gFgbId/mW/sExuefXzPw2Bw3+Z6s/gpmNSvZRJaGV7LpYKKdX1+bLMj99Vsz
z10wAC4zCPTriT2LFKpMICdDnymieHvKgJPbLdkNTvcacAIb38bBZdOLPQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFzb+UeD5vOr8a/3e8GSItF4uteDMB8GA1UdIwQY
MBaAFLG8hQ0Xym08e00A5QHi01bwilheMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2J5RkRSZktiVHg3VFFEbEFlTFRWdkNLV0Y0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC84YWEwMmQtOTRjOC00Njc4LTkyYWMt
MTdmYjRmZmI5ZmFkLzEvWE52NVI0UG04NnZ4cl9kN3daSWkwWGk2MTRNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC84YWEwMmQtOTRjOC00Njc4LTkyYWMtMTdmYjRmZmI5ZmFk
LzEvc2J5RkRSZktiVHg3VFFEbEFlTFRWdkNLV0Y0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW+RIAwQA
W+RKMA0GCSqGSIb3DQEBCwUAA4IBAQB3AFGrGNldrD0RycVXbUxxPk3opqiKquIL
yA2ASspGyS/uMPLPUVneaj3kolKaP1zEOLQY0p9tOZGMdC7BtjBg4OHcofSCDZ2Y
qhcu3tgQCZj9LTDMOYdjwl/7t4cJFS5MVhmjKxTXMeJ8bSdr9hVA3GC9au5J0RN4
4qMI44ubSThCf04Va8ilhUE/KmvBPdcinOQr53HHmJbtwASifdRFmuLklznycLyP
yUIkqIaVCR1TVafixD/z3nVxwwlr7OGIo5Jdm0Uujq5OI7/AZRAmGvktbmCsb3yf
0p+H8lnNBPY5W6caFzQuk/WgfW+LM7S6AtelinMuXuEll7quTsqo
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:21:08 2025 by rpki-client