Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/aa9X3LEP7JFFyzNj6RGjf_q5LvU.roa
File: aa9X3LEP7JFFyzNj6RGjf_q5LvU.roa (raw, json)
Hash identifier: vHw1TWhYagjDNjrau+5AkZqzGTI4TSsrgwSd45hDcWk=
Subject key identifier: 69:AF:57:DC:B1:0F:EC:91:45:CB:33:63:E9:11:A3:7F:FA:B9:2E:F5
Certificate issuer: /CN=b9ac49d1ccdcaedd9a13f4803df1aedce6dc1112
Certificate serial: 0195DD216C518B9565A3B91B56B142FD0BE4
Authority key identifier: B9:AC:49:D1:CC:DC:AE:DD:9A:13:F4:80:3D:F1:AE:DC:E6:DC:11:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uaxJ0czcrt2aE_SAPfGu3ObcERI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/aa9X3LEP7JFFyzNj6RGjf_q5LvU.roa
Signing time: Fri 28 Mar 2025 14:21:49 +0000
ROA not before: Fri 28 Mar 2025 14:21:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60908
IP address blocks: 91.135.58.0/23 maxlen: 24
91.135.59.0/24 maxlen: 24
91.135.60.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.mft
rsync://rpki.ripe.net/repository/DEFAULT/uaxJ0czcrt2aE_SAPfGu3ObcERI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 21:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:dd:21:6c:51:8b:95:65:a3:b9:1b:56:b1:42:fd:0b:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9ac49d1ccdcaedd9a13f4803df1aedce6dc1112
Validity
Not Before: Mar 28 14:21:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69af57dcb10fec9145cb3363e911a37ffab92ef5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7f:b6:a3:a4:c1:70:f0:01:20:1e:81:f9:39:
cb:14:58:08:bc:cf:1c:31:0e:c4:96:d0:0e:b4:ea:
a2:f1:33:29:58:fe:2e:be:15:0e:ff:25:a3:d1:9e:
1f:8e:6d:b8:09:d1:a9:dd:49:00:8a:94:a2:8c:ea:
47:f7:9e:78:2b:03:19:02:9b:e6:8a:65:a3:76:c8:
1b:79:59:d1:1f:5b:41:49:d8:58:20:ef:f3:c1:d9:
4b:04:92:4c:f8:e7:78:21:2b:8a:e4:c8:83:82:0e:
f5:4e:c3:d3:3a:e1:d6:93:d1:71:5a:4d:86:d8:b2:
eb:34:7c:06:f5:11:3d:7d:fc:22:1b:72:e3:ca:31:
a9:98:9b:dc:6e:77:40:4d:8a:17:91:ec:76:86:8b:
fa:4d:48:72:1e:e2:cb:3f:ff:d5:8a:43:d6:ae:79:
8d:e6:30:bb:46:e4:c9:63:6d:85:b5:d3:7b:9c:76:
fa:f6:d8:69:62:a3:c6:b0:9c:6f:77:91:6d:57:3a:
e1:4d:85:a9:e1:74:be:04:3a:3b:a4:cc:0c:2e:6a:
b2:1f:e5:ee:6e:f1:01:58:0a:77:1a:22:b1:9b:23:
ee:a9:60:c6:0f:c3:4c:12:5a:82:ec:39:81:37:53:
45:5a:00:9d:9c:44:29:16:44:4a:08:81:b5:e6:e6:
91:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:AF:57:DC:B1:0F:EC:91:45:CB:33:63:E9:11:A3:7F:FA:B9:2E:F5
X509v3 Authority Key Identifier:
keyid:B9:AC:49:D1:CC:DC:AE:DD:9A:13:F4:80:3D:F1:AE:DC:E6:DC:11:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uaxJ0czcrt2aE_SAPfGu3ObcERI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/aa9X3LEP7JFFyzNj6RGjf_q5LvU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.135.58.0-91.135.63.255
Signature Algorithm: sha256WithRSAEncryption
70:d6:d9:41:a1:ea:16:e3:51:05:90:4a:0c:2a:c5:4e:7d:c0:
ee:eb:a7:34:81:67:4d:b1:61:75:55:c5:39:09:e1:fe:1f:98:
37:d4:18:2e:95:84:07:3c:e2:32:bb:da:bd:92:8e:1a:08:74:
b8:1d:07:d3:c3:bb:59:64:6c:8f:95:6a:95:c0:57:5c:0a:6d:
f4:ac:95:49:a7:92:a0:b9:68:90:22:4a:ff:2a:df:de:e6:6b:
60:f2:34:b9:cb:79:82:ff:8c:f5:8d:a8:82:37:0e:43:da:3f:
1f:73:e9:c9:2e:e5:ea:f7:6d:0d:ff:d8:66:c6:51:de:64:1e:
83:2f:f6:85:13:7b:a1:5e:14:53:64:52:09:40:4d:b5:ea:75:
b4:13:6c:dd:be:66:88:fa:94:fb:8c:39:0a:8d:d7:46:6e:0f:
42:76:cb:36:91:9e:6d:02:13:c1:c1:c9:4c:04:4d:e1:03:56:
1d:12:e8:f6:9b:68:15:d5:6b:20:77:12:02:cf:eb:12:55:1b:
77:5b:09:52:f8:35:61:0a:55:2c:0a:31:40:e0:97:d7:d6:59:
99:49:1e:0d:06:3b:08:16:67:ff:ba:49:a7:29:41:fa:99:51:
3e:56:fa:ae:94:3a:63:49:61:17:bc:9b:0f:f8:80:90:0d:f5:
f3:ef:19:00
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZXdIWxRi5Vlo7kbVrFC/QvkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5YWM0OWQxY2NkY2FlZGQ5YTEzZjQ4MDNkZjFhZWRjZTZk
YzExMTIwHhcNMjUwMzI4MTQyMTQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OWFmNTdkY2IxMGZlYzkxNDVjYjMzNjNlOTExYTM3ZmZhYjkyZWY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsn+2o6TBcPABIB6B+TnLFFgIvM8c
MQ7EltAOtOqi8TMpWP4uvhUO/yWj0Z4fjm24CdGp3UkAipSijOpH9554KwMZApvm
imWjdsgbeVnRH1tBSdhYIO/zwdlLBJJM+Od4ISuK5MiDgg71TsPTOuHWk9FxWk2G
2LLrNHwG9RE9ffwiG3LjyjGpmJvcbndATYoXkex2hov6TUhyHuLLP//VikPWrnmN
5jC7RuTJY22FtdN7nHb69thpYqPGsJxvd5FtVzrhTYWp4XS+BDo7pMwMLmqyH+Xu
bvEBWAp3GiKxmyPuqWDGD8NMElqC7DmBN1NFWgCdnEQpFkRKCIG15uaRkQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFGmvV9yxD+yRRcszY+kRo3/6uS71MB8GA1UdIwQY
MBaAFLmsSdHM3K7dmhP0gD3xrtzm3BESMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWF4SjBjemNydDJhRV9TQVBmR3UzT2JjRVJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC81MzcxOTEtMTE3OS00OGVjLWFkOWYt
ZmZlNDNhNTJkM2Y2LzEvYWE5WDNMRVA3SkZGeXpOajZSR2pmX3E1THZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC81MzcxOTEtMTE3OS00OGVjLWFkOWYtZmZlNDNhNTJkM2Y2
LzEvdWF4SjBjemNydDJhRV9TQVBmR3UzT2JjRVJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAFbhzoD
BAZbhwAwDQYJKoZIhvcNAQELBQADggEBAHDW2UGh6hbjUQWQSgwqxU59wO7rpzSB
Z02xYXVVxTkJ4f4fmDfUGC6VhAc84jK72r2SjhoIdLgdB9PDu1lkbI+VapXAV1wK
bfSslUmnkqC5aJAiSv8q397ma2DyNLnLeYL/jPWNqII3DkPaPx9z6cku5er3bQ3/
2GbGUd5kHoMv9oUTe6FeFFNkUglATbXqdbQTbN2+Zoj6lPuMOQqN10ZuD0J2yzaR
nm0CE8HByUwETeEDVh0S6PabaBXVayB3EgLP6xJVG3dbCVL4NWEKVSwKMUDgl9fW
WZlJHg0GOwgWZ/+6SacpQfqZUT5W+q6UOmNJYRe8mw/4gJAN9fPvGQA=
-----END CERTIFICATE-----
Generated at Thu Apr 17 02:21:21 2025 by rpki-client