Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/jSOy5FaXl1S-Obr1YdaCignR9a8.roa
File: jSOy5FaXl1S-Obr1YdaCignR9a8.roa (raw, json)
Hash identifier: yYEGAEpJB4t7L5q86t/lqbzz/tPx+TQT6wXoohYrOVI=
Subject key identifier: 8D:23:B2:E4:56:97:97:54:BE:39:BA:F5:61:D6:82:8A:09:D1:F5:AF
Certificate issuer: /CN=ad4c830b11261483a62b6696a4c3720e8ad88a0d
Certificate serial: 019428230FC87FE293A8391C0A8669CC40E5
Authority key identifier: AD:4C:83:0B:11:26:14:83:A6:2B:66:96:A4:C3:72:0E:8A:D8:8A:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rUyDCxEmFIOmK2aWpMNyDorYig0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/jSOy5FaXl1S-Obr1YdaCignR9a8.roa
Signing time: Thu 02 Jan 2025 17:49:33 +0000
ROA not before: Thu 02 Jan 2025 17:49:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198949
IP address blocks: 91.216.108.0/24 maxlen: 24
195.66.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/rUyDCxEmFIOmK2aWpMNyDorYig0.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/rUyDCxEmFIOmK2aWpMNyDorYig0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rUyDCxEmFIOmK2aWpMNyDorYig0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:0f:c8:7f:e2:93:a8:39:1c:0a:86:69:cc:40:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad4c830b11261483a62b6696a4c3720e8ad88a0d
Validity
Not Before: Jan 2 17:49:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8d23b2e456979754be39baf561d6828a09d1f5af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:66:97:51:aa:d6:9a:f2:0c:6c:05:ad:e9:45:
d6:5d:54:c7:8f:a5:9b:1a:86:43:2c:55:d0:af:a2:
11:f6:76:dd:d5:cb:ec:76:e9:ff:0d:77:5a:73:3c:
7b:16:3e:eb:24:42:5d:7f:e9:aa:3c:95:78:1f:cb:
04:92:6b:24:d8:47:2e:d8:06:09:ee:c6:65:41:f0:
38:8e:37:87:d5:94:e0:46:29:94:6c:4b:b7:be:66:
7b:01:13:7c:88:26:07:b6:47:0c:3e:e4:8f:be:63:
16:8c:11:f0:9b:c1:5d:d7:e4:9c:3f:eb:d9:eb:2e:
6e:4a:0b:5a:cc:7a:05:d2:f3:69:89:62:61:eb:b8:
7c:0f:70:dc:78:1d:4e:ab:1d:d8:2b:2a:51:ab:d2:
d8:21:40:83:01:56:b3:21:e4:d5:b6:08:d7:28:6b:
cf:01:49:ce:a0:9f:b4:f4:5d:2d:50:0a:93:49:54:
88:ea:ec:d1:03:f8:5b:8d:40:49:4d:37:84:f5:43:
af:9d:fa:24:35:a7:cf:05:05:10:78:9b:2d:50:6b:
72:89:16:08:29:2e:9e:44:06:43:12:30:43:b6:97:
07:83:95:87:9b:21:2c:62:74:29:23:3d:d2:d2:0b:
60:50:54:c0:1f:d8:5c:cd:5b:33:e8:8c:15:da:ae:
b0:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:23:B2:E4:56:97:97:54:BE:39:BA:F5:61:D6:82:8A:09:D1:F5:AF
X509v3 Authority Key Identifier:
keyid:AD:4C:83:0B:11:26:14:83:A6:2B:66:96:A4:C3:72:0E:8A:D8:8A:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rUyDCxEmFIOmK2aWpMNyDorYig0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/jSOy5FaXl1S-Obr1YdaCignR9a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/rUyDCxEmFIOmK2aWpMNyDorYig0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.108.0/24
195.66.76.0/24
Signature Algorithm: sha256WithRSAEncryption
05:65:2c:b2:91:c6:1a:0b:3e:f2:ca:d3:a8:55:0a:cc:63:7e:
77:f9:8a:ed:cc:46:36:6b:27:e0:78:fe:77:8f:09:6a:f1:c5:
05:d5:2b:1e:da:13:61:07:1f:7e:70:3e:18:3c:85:b3:9d:0d:
f3:b6:10:70:11:21:04:28:73:ce:bf:aa:07:93:d3:f2:5a:38:
08:a1:ca:f8:be:4d:2b:ff:11:13:a6:c8:9c:00:f7:2b:0d:ba:
d4:28:9c:74:92:8c:68:c5:31:09:fe:96:03:57:79:f3:c6:e7:
50:a5:d3:87:23:e4:4a:c4:ee:0b:9b:fd:0d:2b:68:1b:dc:2b:
67:2e:38:69:ee:d7:f8:a3:77:e2:17:71:f3:98:40:52:37:bf:
80:45:9a:61:4e:ca:ab:49:8e:99:be:7f:65:79:1e:70:33:4e:
ab:e4:f4:de:d6:52:df:e2:e2:46:14:6f:7e:08:2e:dc:28:17:
64:b8:0b:42:c1:5d:ff:7d:95:c9:e2:7f:f7:74:b7:07:ff:07:
b9:b8:ee:60:bb:5e:31:23:69:a8:a2:0d:28:90:41:01:e2:27:
2f:00:4f:74:b0:99:ef:44:93:b0:96:1d:61:83:cc:f5:4d:96:
7b:fd:8e:89:e5:af:f6:fe:6a:c7:c4:d8:8e:c1:af:c1:7d:98:
0d:dc:7f:1c
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQoIw/If+KTqDkcCoZpzEDlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkNGM4MzBiMTEyNjE0ODNhNjJiNjY5NmE0YzM3MjBlOGFk
ODhhMGQwHhcNMjUwMTAyMTc0OTMzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZDIzYjJlNDU2OTc5NzU0YmUzOWJhZjU2MWQ2ODI4YTA5ZDFmNWFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2aXUarWmvIMbAWt6UXWXVTHj6Wb
GoZDLFXQr6IR9nbd1cvsdun/DXdaczx7Fj7rJEJdf+mqPJV4H8sEkmsk2Ecu2AYJ
7sZlQfA4jjeH1ZTgRimUbEu3vmZ7ARN8iCYHtkcMPuSPvmMWjBHwm8Fd1+ScP+vZ
6y5uSgtazHoF0vNpiWJh67h8D3DceB1Oqx3YKypRq9LYIUCDAVazIeTVtgjXKGvP
AUnOoJ+09F0tUAqTSVSI6uzRA/hbjUBJTTeE9UOvnfokNafPBQUQeJstUGtyiRYI
KS6eRAZDEjBDtpcHg5WHmyEsYnQpIz3S0gtgUFTAH9hczVsz6IwV2q6wbwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFI0jsuRWl5dUvjm69WHWgooJ0fWvMB8GA1UdIwQY
MBaAFK1MgwsRJhSDpitmlqTDcg6K2IoNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclV5REN4RW1GSU9tSzJhV3BNTnlEb3JZaWcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9jNmE2YmEtYWUwNS00NTI0LTg0ZDEt
MjIyY2ViNmMzNDRjLzEvalNPeTVGYVhsMVMtT2JyMVlkYUNpZ25SOWE4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9jNmE2YmEtYWUwNS00NTI0LTg0ZDEtMjIyY2ViNmMzNDRj
LzEvclV5REN4RW1GSU9tSzJhV3BNTnlEb3JZaWcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW9hsAwQA
w0JMMA0GCSqGSIb3DQEBCwUAA4IBAQAFZSyykcYaCz7yytOoVQrMY353+YrtzEY2
ayfgeP53jwlq8cUF1Sse2hNhBx9+cD4YPIWznQ3zthBwESEEKHPOv6oHk9PyWjgI
ocr4vk0r/xETpsicAPcrDbrUKJx0koxoxTEJ/pYDV3nzxudQpdOHI+RKxO4Lm/0N
K2gb3CtnLjhp7tf4o3fiF3HzmEBSN7+ARZphTsqrSY6Zvn9leR5wM06r5PTe1lLf
4uJGFG9+CC7cKBdkuAtCwV3/fZXJ4n/3dLcH/we5uO5gu14xI2moog0okEEB4icv
AE90sJnvRJOwlh1hg8z1TZZ7/Y6J5a/2/mrHxNiOwa/BfZgN3H8c
-----END CERTIFICATE-----
Generated at Sat Apr 12 07:47:28 2025 by rpki-client