Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/bGYDsivIDWy4V3AGJnFaWRR_UWA.roa
File: bGYDsivIDWy4V3AGJnFaWRR_UWA.roa (raw, json)
Hash identifier: 1bv32v7MbphDZMbOL8tbzX2CVHIOhlKKmzB0Tz6d3ak=
Subject key identifier: 6C:66:03:B2:2B:C8:0D:6C:B8:57:70:06:26:71:5A:59:14:7F:51:60
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0194222010A19A1898CA8A5FF40A13F042F2
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/bGYDsivIDWy4V3AGJnFaWRR_UWA.roa
Signing time: Wed 01 Jan 2025 13:48:34 +0000
ROA not before: Wed 01 Jan 2025 13:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212049
IP address blocks: 77.90.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:10:a1:9a:18:98:ca:8a:5f:f4:0a:13:f0:42:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 1 13:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6c6603b22bc80d6cb857700626715a59147f5160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9e:dd:2d:ab:25:3c:81:f4:3a:2d:a0:42:61:
e4:b8:cf:97:6c:fd:36:46:66:6d:7e:ed:e5:63:29:
e4:8f:f4:03:16:36:18:5b:d7:0d:04:2c:19:14:ad:
f1:2c:6a:10:93:5d:d4:b3:08:10:12:61:f1:f7:97:
b2:12:97:01:ce:d1:68:17:b6:27:c5:4b:0b:cb:5b:
4b:fe:2d:f3:cd:45:ca:e5:04:74:1d:d9:94:a3:7b:
6b:81:34:54:5c:ad:50:e9:9a:4b:8e:75:55:c8:d5:
21:0a:a9:a8:72:c1:9b:86:7c:42:1c:60:4e:59:1c:
38:41:4f:cf:59:6a:d6:03:2f:d3:dc:69:b7:b6:e2:
69:e8:00:31:ea:e8:15:b7:d1:44:62:50:71:94:af:
51:f1:66:72:fe:78:a6:2a:20:cb:5b:84:d7:f4:8c:
0c:89:f8:f9:a5:0d:d8:80:5b:55:1f:d1:d6:61:d3:
3f:08:dc:fb:26:dc:12:0b:c3:24:6e:4c:71:eb:98:
72:6d:76:1b:79:37:05:ac:e7:d4:47:0d:47:d0:30:
83:6a:6e:e5:7c:42:db:24:dc:f6:7c:93:e9:c9:5a:
9e:04:c5:69:a9:0a:8f:35:81:fa:b1:d9:24:a4:9b:
e6:5c:8c:55:8c:bb:a2:e1:7f:41:d0:ed:b8:ba:db:
42:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:66:03:B2:2B:C8:0D:6C:B8:57:70:06:26:71:5A:59:14:7F:51:60
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/bGYDsivIDWy4V3AGJnFaWRR_UWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.9.0/24
Signature Algorithm: sha256WithRSAEncryption
82:59:55:ce:a1:ea:de:ba:d7:ae:ad:da:c5:e1:fe:2e:64:57:
c8:78:8f:8f:d9:e1:61:fe:8c:47:3f:92:79:d5:6e:d6:cc:93:
06:c6:b0:dc:41:2c:90:cd:6f:bb:e6:7c:52:8d:02:ad:fa:9c:
de:5c:cf:2f:c7:af:86:86:76:fa:c7:29:88:33:a0:96:c4:11:
26:29:eb:c8:03:5e:4f:c1:52:cf:9c:a1:e0:cc:58:b0:3e:e8:
69:26:46:b4:b2:3f:6e:d3:94:9c:c3:85:85:5e:fc:d4:ec:67:
6e:49:bc:d4:ef:d0:14:aa:32:72:3d:ef:d0:2e:24:41:b1:44:
35:d9:eb:93:43:7f:5c:a9:28:52:49:64:da:2d:db:9e:f9:80:
3a:7a:9d:25:ed:b8:5f:fb:0f:72:2c:1d:8f:ec:54:eb:34:2f:
42:cb:43:c3:28:af:19:19:d8:1e:52:3f:3d:6d:8e:4c:e1:b0:
45:3f:ac:85:cd:b7:72:31:26:c4:7b:58:f6:d2:26:d2:e3:d3:
94:24:a8:a5:34:27:86:ed:fa:bb:ed:f4:b1:58:fb:cf:a1:89:
d4:57:99:30:42:41:69:e4:ca:54:06:1b:5f:6d:03:07:fa:57:
23:04:78:27:c3:0a:c6:a4:52:5f:c0:23:98:d3:bf:91:a7:c2:
7b:a4:90:69
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQiIBChmhiYyopf9AoT8ELyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjUwMTAxMTM0ODM0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YzY2MDNiMjJiYzgwZDZjYjg1NzcwMDYyNjcxNWE1OTE0N2Y1MTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAup7dLaslPIH0Oi2gQmHkuM+XbP02
RmZtfu3lYynkj/QDFjYYW9cNBCwZFK3xLGoQk13UswgQEmHx95eyEpcBztFoF7Yn
xUsLy1tL/i3zzUXK5QR0HdmUo3trgTRUXK1Q6ZpLjnVVyNUhCqmocsGbhnxCHGBO
WRw4QU/PWWrWAy/T3Gm3tuJp6AAx6ugVt9FEYlBxlK9R8WZy/nimKiDLW4TX9IwM
ifj5pQ3YgFtVH9HWYdM/CNz7JtwSC8Mkbkxx65hybXYbeTcFrOfURw1H0DCDam7l
fELbJNz2fJPpyVqeBMVpqQqPNYH6sdkkpJvmXIxVjLui4X9B0O24uttCZQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGxmA7IryA1suFdwBiZxWlkUf1FgMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvYkdZRHNpdklEV3k0VjNBR0puRmFXUlJfVVdBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATVoJMA0G
CSqGSIb3DQEBCwUAA4IBAQCCWVXOoereuteurdrF4f4uZFfIeI+P2eFh/oxHP5J5
1W7WzJMGxrDcQSyQzW+75nxSjQKt+pzeXM8vx6+Ghnb6xymIM6CWxBEmKevIA15P
wVLPnKHgzFiwPuhpJka0sj9u05Scw4WFXvzU7GduSbzU79AUqjJyPe/QLiRBsUQ1
2euTQ39cqShSSWTaLdue+YA6ep0l7bhf+w9yLB2P7FTrNC9Cy0PDKK8ZGdgeUj89
bY5M4bBFP6yFzbdyMSbEe1j20ibS49OUJKilNCeG7fq77fSxWPvPoYnUV5kwQkFp
5MpUBhtfbQMH+lcjBHgnwwrGpFJfwCOY07+Rp8J7pJBp
-----END CERTIFICATE-----
Generated at Mon Apr 7 02:17:32 2025 by rpki-client