Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/bGBL61Pb5C5jQn9lTt04zeAidWQ.roa
File: bGBL61Pb5C5jQn9lTt04zeAidWQ.roa (raw, json)
Hash identifier: tcI+1ZDPgb0dQJ/mWEWyrYgZXPfZZ/VnqvsqqlmCxEY=
Subject key identifier: 6C:60:4B:EB:53:DB:E4:2E:63:42:7F:65:4E:DD:38:CD:E0:22:75:64
Certificate issuer: /CN=77cc46ade957c8f066a5c6fe25310a4cf5a7e9d4
Certificate serial: 0194258F7A9864FF8A9A571F4E3443C61945
Authority key identifier: 77:CC:46:AD:E9:57:C8:F0:66:A5:C6:FE:25:31:0A:4C:F5:A7:E9:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8xGrelXyPBmpcb-JTEKTPWn6dQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/bGBL61Pb5C5jQn9lTt04zeAidWQ.roa
Signing time: Thu 02 Jan 2025 05:49:07 +0000
ROA not before: Thu 02 Jan 2025 05:49:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 91.212.127.0/24 maxlen: 24
91.238.107.0/24 maxlen: 24
193.110.146.0/24 maxlen: 24
193.138.90.0/24 maxlen: 24
194.165.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/d8xGrelXyPBmpcb-JTEKTPWn6dQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/d8xGrelXyPBmpcb-JTEKTPWn6dQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/d8xGrelXyPBmpcb-JTEKTPWn6dQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:7a:98:64:ff:8a:9a:57:1f:4e:34:43:c6:19:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77cc46ade957c8f066a5c6fe25310a4cf5a7e9d4
Validity
Not Before: Jan 2 05:49:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6c604beb53dbe42e63427f654edd38cde0227564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:46:05:dd:48:b4:5d:b2:32:66:11:6f:78:33:
b3:cc:d8:ad:50:19:83:36:ab:dd:46:2e:ec:e3:97:
87:ca:e3:44:ed:5b:62:af:61:e7:06:a1:45:96:0a:
df:68:fd:0e:02:4e:9f:9e:e5:3c:df:91:db:2b:42:
e5:9b:9b:f7:e3:3d:1d:07:43:da:99:fe:38:74:02:
a9:f2:d6:e9:9a:d3:84:50:5a:b9:57:4c:5a:89:65:
0a:01:bb:75:b4:96:91:eb:50:26:ad:48:b8:24:e4:
0a:77:39:04:7c:aa:a6:3c:f4:a3:30:b1:87:d6:d9:
05:65:fa:fa:62:98:29:98:31:cb:96:6c:26:98:4e:
4d:b7:57:8e:dc:02:c1:b3:a5:37:d1:d3:07:4d:c4:
ff:3a:e3:13:e4:c5:55:14:30:e4:19:05:c3:12:43:
77:ec:27:55:b2:b9:99:e7:4a:eb:75:cb:5b:8d:7b:
a5:64:e8:1b:88:20:55:aa:cf:47:b8:f4:76:e8:02:
76:9c:56:6d:aa:be:19:e2:6f:40:60:ae:99:f7:f7:
7d:4a:b2:71:bc:6d:3c:16:d1:b5:34:41:15:5a:f5:
83:1c:50:9c:78:26:e8:a1:7d:bb:8c:8c:be:69:45:
1e:ba:20:50:6e:dd:c8:c0:a7:1d:5b:f8:a8:5f:f7:
1f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:60:4B:EB:53:DB:E4:2E:63:42:7F:65:4E:DD:38:CD:E0:22:75:64
X509v3 Authority Key Identifier:
keyid:77:CC:46:AD:E9:57:C8:F0:66:A5:C6:FE:25:31:0A:4C:F5:A7:E9:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8xGrelXyPBmpcb-JTEKTPWn6dQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/bGBL61Pb5C5jQn9lTt04zeAidWQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d61b54-ee9f-4e00-b1e3-f7d027560058/1/d8xGrelXyPBmpcb-JTEKTPWn6dQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.127.0/24
91.238.107.0/24
193.110.146.0/24
193.138.90.0/24
194.165.43.0/24
Signature Algorithm: sha256WithRSAEncryption
64:ed:05:0f:17:9b:d7:cd:7c:7b:76:ab:64:72:ba:b1:27:32:
cb:79:4f:3d:00:d7:97:01:5d:b9:34:86:29:5f:10:08:a6:73:
93:a8:be:77:db:01:45:d3:96:16:73:43:a9:c8:bf:68:94:85:
43:6d:9e:63:33:43:b6:eb:bc:a5:6b:b3:bf:92:7b:25:0d:21:
e5:e6:ef:05:5c:3b:87:6e:e3:98:78:92:1e:f8:2e:b1:e9:3f:
47:95:6c:f9:aa:c5:f4:5f:eb:9a:c3:12:4a:14:ac:58:cd:bc:
57:f9:86:be:f9:90:5c:54:e7:e6:3f:ee:07:ff:b0:a2:15:50:
1f:a4:2b:c7:dc:e4:dc:00:24:03:c1:9d:b5:6b:ab:41:e6:37:
98:41:b9:8f:32:97:51:f6:ee:88:bd:95:17:09:6b:1b:e7:4d:
29:36:e2:25:24:14:9b:d4:db:72:91:12:92:4e:f2:17:53:e3:
d4:3e:d8:6f:23:1d:d3:13:a4:43:c1:20:c4:10:1d:ba:de:ca:
a2:17:13:c4:a5:3d:fa:0f:9b:ee:b3:12:62:08:12:2b:ff:85:
4f:a7:9e:40:e2:7f:8e:3a:11:22:e8:1b:13:95:83:c5:3b:72:
3a:54:48:86:de:89:9f:a8:2e:8b:52:f1:e2:60:d4:a3:b7:f0:
90:06:7b:b4
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZQlj3qYZP+KmlcfTjRDxhlFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3Y2M0NmFkZTk1N2M4ZjA2NmE1YzZmZTI1MzEwYTRjZjVh
N2U5ZDQwHhcNMjUwMTAyMDU0OTA3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YzYwNGJlYjUzZGJlNDJlNjM0MjdmNjU0ZWRkMzhjZGUwMjI3NTY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkYF3Ui0XbIyZhFveDOzzNitUBmD
NqvdRi7s45eHyuNE7Vtir2HnBqFFlgrfaP0OAk6fnuU835HbK0Llm5v34z0dB0Pa
mf44dAKp8tbpmtOEUFq5V0xaiWUKAbt1tJaR61AmrUi4JOQKdzkEfKqmPPSjMLGH
1tkFZfr6YpgpmDHLlmwmmE5Nt1eO3ALBs6U30dMHTcT/OuMT5MVVFDDkGQXDEkN3
7CdVsrmZ50rrdctbjXulZOgbiCBVqs9HuPR26AJ2nFZtqr4Z4m9AYK6Z9/d9SrJx
vG08FtG1NEEVWvWDHFCceCbooX27jIy+aUUeuiBQbt3IwKcdW/ioX/cfWQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFGxgS+tT2+QuY0J/ZU7dOM3gInVkMB8GA1UdIwQY
MBaAFHfMRq3pV8jwZqXG/iUxCkz1p+nUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDh4R3JlbFh5UEJtcGNiLUpURUtUUFduNmRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9kNjFiNTQtZWU5Zi00ZTAwLWIxZTMt
ZjdkMDI3NTYwMDU4LzEvYkdCTDYxUGI1QzVqUW45bFR0MDR6ZUFpZFdRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9kNjFiNTQtZWU5Zi00ZTAwLWIxZTMtZjdkMDI3NTYwMDU4
LzEvZDh4R3JlbFh5UEJtcGNiLUpURUtUUFduNmRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAW9R/AwQA
W+5rAwQAwW6SAwQAwYpaAwQAwqUrMA0GCSqGSIb3DQEBCwUAA4IBAQBk7QUPF5vX
zXx7dqtkcrqxJzLLeU89ANeXAV25NIYpXxAIpnOTqL532wFF05YWc0OpyL9olIVD
bZ5jM0O267yla7O/knslDSHl5u8FXDuHbuOYeJIe+C6x6T9HlWz5qsX0X+uawxJK
FKxYzbxX+Ya++ZBcVOfmP+4H/7CiFVAfpCvH3OTcACQDwZ21a6tB5jeYQbmPMpdR
9u6IvZUXCWsb500pNuIlJBSb1NtykRKSTvIXU+PUPthvIx3TE6RDwSDEEB263sqi
FxPEpT36D5vusxJiCBIr/4VPp55A4n+OOhEi6BsTlYPFO3I6VEiG3omfqC6LUvHi
YNSjt/CQBnu0
-----END CERTIFICATE-----
Generated at Sat Apr 5 00:00:39 2025 by rpki-client