Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/UhAz9MFvMvHhcsanrMhKMnsnk8g.roa
File: UhAz9MFvMvHhcsanrMhKMnsnk8g.roa (raw, json)
Hash identifier: r9jUBDvsXmF/Cp2cTaPW5/auM8Oojq92LndCKcjtAzc=
Subject key identifier: 52:10:33:F4:C1:6F:32:F1:E1:72:C6:A7:AC:C8:4A:32:7B:27:93:C8
Certificate issuer: /CN=2065ced829c011cdb5abb381c164782ded1627e0
Certificate serial: 019425215652201BECA4D067DA85FB6E9AB7
Authority key identifier: 20:65:CE:D8:29:C0:11:CD:B5:AB:B3:81:C1:64:78:2D:ED:16:27:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IGXO2CnAEc21q7OBwWR4Le0WJ-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/UhAz9MFvMvHhcsanrMhKMnsnk8g.roa
Signing time: Thu 02 Jan 2025 03:48:49 +0000
ROA not before: Thu 02 Jan 2025 03:48:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31027
IP address blocks: 91.224.174.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/IGXO2CnAEc21q7OBwWR4Le0WJ-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/IGXO2CnAEc21q7OBwWR4Le0WJ-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/IGXO2CnAEc21q7OBwWR4Le0WJ-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 12:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:56:52:20:1b:ec:a4:d0:67:da:85:fb:6e:9a:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2065ced829c011cdb5abb381c164782ded1627e0
Validity
Not Before: Jan 2 03:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=521033f4c16f32f1e172c6a7acc84a327b2793c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:61:56:bc:37:c1:b0:dd:43:74:c9:39:65:6f:
2b:6e:48:b3:12:52:db:19:34:8b:d9:6d:f7:82:8e:
7a:96:de:1c:a0:c8:b3:c2:03:ac:38:e8:0e:51:f5:
d0:fe:7d:ff:43:c1:33:b4:19:e2:89:3b:04:63:64:
c0:e6:3a:50:61:3a:a4:64:60:02:5b:f2:58:b3:33:
ba:67:a4:71:56:a1:db:f9:d5:fe:a4:92:3d:36:05:
58:48:aa:ec:f4:47:d5:09:fa:ac:98:ee:4a:58:a6:
64:ff:9e:12:1f:f0:fd:c8:a7:97:b5:a0:09:f3:75:
3f:24:63:d4:fe:2e:14:f1:a2:f5:0d:b7:43:10:23:
c1:45:5a:3e:7b:b6:3b:00:4a:04:ec:eb:78:ad:38:
52:57:74:fe:2a:44:2c:b7:de:88:8c:e3:43:b1:f2:
72:e0:f0:5e:a3:3a:65:4e:a2:2b:66:37:9a:dd:4f:
40:cf:53:aa:00:d2:30:72:11:c4:3b:9e:4d:6b:15:
f3:c3:99:8a:f2:cf:08:b4:d6:91:f9:22:66:29:97:
7c:ab:94:1a:82:1e:c1:34:23:34:2f:28:7f:21:02:
67:f2:1c:87:42:74:9e:77:5e:5d:e7:59:d7:d2:af:
ab:e2:94:e9:6a:1a:75:b1:f8:22:d7:6a:82:c9:d7:
b9:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:10:33:F4:C1:6F:32:F1:E1:72:C6:A7:AC:C8:4A:32:7B:27:93:C8
X509v3 Authority Key Identifier:
keyid:20:65:CE:D8:29:C0:11:CD:B5:AB:B3:81:C1:64:78:2D:ED:16:27:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IGXO2CnAEc21q7OBwWR4Le0WJ-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/UhAz9MFvMvHhcsanrMhKMnsnk8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/IGXO2CnAEc21q7OBwWR4Le0WJ-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.224.174.0/23
Signature Algorithm: sha256WithRSAEncryption
a4:6a:e0:4c:85:66:52:bb:9a:5c:18:b7:2f:21:89:53:f1:7c:
d6:2b:c7:51:60:71:ae:8a:47:f3:38:05:fd:fa:0c:ba:48:14:
df:66:a0:6f:55:25:97:b7:e7:93:2d:64:5b:3b:c5:7b:5c:8c:
d9:87:b3:ea:11:8a:4a:d7:b1:a7:6b:8f:74:72:bf:fe:e2:f8:
20:f2:7d:c8:27:23:dc:b3:7c:5f:27:7a:00:58:6d:ce:f1:a5:
00:f2:cd:8d:d4:36:62:da:2c:6e:78:ed:4f:3a:c3:46:39:7e:
b2:75:68:d8:cd:93:69:32:dd:1b:83:01:86:52:c1:62:b4:8f:
89:12:82:50:34:38:c0:13:f6:21:f9:7a:20:86:a9:29:94:ee:
2b:71:54:88:d2:98:62:74:77:64:af:e5:a8:f1:d3:70:0b:e4:
76:f1:47:73:dd:25:4e:33:14:ce:e0:66:85:3e:f4:a4:74:89:
ac:e6:51:0d:eb:f0:43:39:61:ae:97:03:96:fe:e2:f7:ee:dd:
51:e5:82:d6:7f:d2:43:82:d0:ec:6c:8f:08:72:cd:70:d7:e2:
d3:1b:ca:00:43:2b:ef:95:b4:45:5b:c0:02:46:91:b0:af:9d:
5a:c1:13:7f:47:55:8c:85:08:bd:d0:34:0c:01:57:f9:38:24:
ea:4c:8e:82
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlIVZSIBvspNBn2oX7bpq3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwNjVjZWQ4MjljMDExY2RiNWFiYjM4MWMxNjQ3ODJkZWQx
NjI3ZTAwHhcNMjUwMTAyMDM0ODQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MjEwMzNmNGMxNmYzMmYxZTE3MmM2YTdhY2M4NGEzMjdiMjc5M2M4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1WFWvDfBsN1DdMk5ZW8rbkizElLb
GTSL2W33go56lt4coMizwgOsOOgOUfXQ/n3/Q8EztBniiTsEY2TA5jpQYTqkZGAC
W/JYszO6Z6RxVqHb+dX+pJI9NgVYSKrs9EfVCfqsmO5KWKZk/54SH/D9yKeXtaAJ
83U/JGPU/i4U8aL1DbdDECPBRVo+e7Y7AEoE7Ot4rThSV3T+KkQst96IjONDsfJy
4PBeozplTqIrZjea3U9Az1OqANIwchHEO55NaxXzw5mK8s8ItNaR+SJmKZd8q5Qa
gh7BNCM0Lyh/IQJn8hyHQnSed15d51nX0q+r4pTpahp1sfgi12qCyde5KQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFIQM/TBbzLx4XLGp6zISjJ7J5PIMB8GA1UdIwQY
MBaAFCBlztgpwBHNtauzgcFkeC3tFifgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUdYTzJDbkFFYzIxcTdPQndXUjRMZTBXSi1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy85NDliOGItY2Q1MS00MzcwLWFlN2Qt
MzhmOGVkMDAwMWVkLzEvVWhBejlNRnZNdkhoY3NhbnJNaEtNbnNuazhnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy85NDliOGItY2Q1MS00MzcwLWFlN2QtMzhmOGVkMDAwMWVk
LzEvSUdYTzJDbkFFYzIxcTdPQndXUjRMZTBXSi1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW+CuMA0G
CSqGSIb3DQEBCwUAA4IBAQCkauBMhWZSu5pcGLcvIYlT8XzWK8dRYHGuikfzOAX9
+gy6SBTfZqBvVSWXt+eTLWRbO8V7XIzZh7PqEYpK17Gna490cr/+4vgg8n3IJyPc
s3xfJ3oAWG3O8aUA8s2N1DZi2ixueO1POsNGOX6ydWjYzZNpMt0bgwGGUsFitI+J
EoJQNDjAE/Yh+XoghqkplO4rcVSI0phidHdkr+Wo8dNwC+R28Udz3SVOMxTO4GaF
PvSkdIms5lEN6/BDOWGulwOW/uL37t1R5YLWf9JDgtDsbI8Ics1w1+LTG8oAQyvv
lbRFW8ACRpGwr51awRN/R1WMhQi90DQMAVf5OCTqTI6C
-----END CERTIFICATE-----
Generated at Tue Apr 8 21:29:54 2025 by rpki-client