Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/5c29c1-194a-410d-8c76-bbd01d425084/1/_aQ7HAc4oxc5vbNE-bDdRfJ_I5M.roa
File: _aQ7HAc4oxc5vbNE-bDdRfJ_I5M.roa (raw, json)
Hash identifier: vqzaWyeuzw7jDRILE1vVohCUPlKRF+7OXLUlnA1mX4M=
Subject key identifier: FD:A4:3B:1C:07:38:A3:17:39:BD:B3:44:F9:B0:DD:45:F2:7F:23:93
Certificate issuer: /CN=78988b2081d9942203d22248acd805db3a13dcc5
Certificate serial: 019423D808BB4F182825FD3A0C51A256765B
Authority key identifier: 78:98:8B:20:81:D9:94:22:03:D2:22:48:AC:D8:05:DB:3A:13:DC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eJiLIIHZlCID0iJIrNgF2zoT3MU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/5c29c1-194a-410d-8c76-bbd01d425084/1/_aQ7HAc4oxc5vbNE-bDdRfJ_I5M.roa
Signing time: Wed 01 Jan 2025 21:49:07 +0000
ROA not before: Wed 01 Jan 2025 21:49:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206293
IP address blocks: 91.195.140.0/23 maxlen: 23
91.198.163.0/24 maxlen: 24
185.20.188.0/22 maxlen: 22
194.6.226.0/24 maxlen: 24
194.9.10.0/23 maxlen: 23
195.62.44.0/23 maxlen: 23
2a00:4fa0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/5c29c1-194a-410d-8c76-bbd01d425084/1/eJiLIIHZlCID0iJIrNgF2zoT3MU.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/5c29c1-194a-410d-8c76-bbd01d425084/1/eJiLIIHZlCID0iJIrNgF2zoT3MU.mft
rsync://rpki.ripe.net/repository/DEFAULT/eJiLIIHZlCID0iJIrNgF2zoT3MU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 18:31:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d8:08:bb:4f:18:28:25:fd:3a:0c:51:a2:56:76:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78988b2081d9942203d22248acd805db3a13dcc5
Validity
Not Before: Jan 1 21:49:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fda43b1c0738a31739bdb344f9b0dd45f27f2393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:54:6a:4a:f3:79:3f:a5:20:36:a1:0a:de:27:
fa:bf:49:a1:82:ac:3b:8d:a0:73:6e:f8:77:66:b6:
1e:6e:8c:26:07:f4:a4:b6:a5:a8:6f:69:37:fb:c3:
9a:94:f2:8a:04:b9:e5:55:4b:e4:ee:86:64:19:f9:
19:ad:1c:1d:08:69:25:f9:42:87:59:44:0f:03:d4:
8b:d7:3b:a8:f3:90:8c:8d:02:10:b9:06:4c:2d:50:
62:37:9d:0f:06:ee:f0:b2:ad:70:f0:c6:aa:db:dd:
00:62:6e:d9:6a:1f:5e:33:e4:14:61:31:1c:6f:84:
ca:26:69:00:97:83:f0:5b:3b:2e:1f:25:f0:b2:e3:
a4:b7:03:41:c4:d1:19:48:25:42:42:27:fb:90:92:
b9:e6:bf:93:7b:00:6e:80:8e:14:67:b2:15:86:1e:
33:9b:f2:f5:b3:5a:f1:60:2d:c3:23:1c:82:1a:9d:
91:a3:f7:72:9f:89:97:ce:00:bf:54:6a:d1:24:76:
b4:72:d6:fe:e6:8b:0e:46:1b:92:88:4a:74:91:14:
1f:88:b2:f9:7f:47:33:cc:90:8a:6c:b4:2f:cb:9f:
85:82:4c:3e:64:6d:d3:28:bd:74:52:9b:34:a9:67:
8c:6a:0a:24:aa:25:a1:69:a3:15:71:89:ea:c3:67:
c1:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:A4:3B:1C:07:38:A3:17:39:BD:B3:44:F9:B0:DD:45:F2:7F:23:93
X509v3 Authority Key Identifier:
keyid:78:98:8B:20:81:D9:94:22:03:D2:22:48:AC:D8:05:DB:3A:13:DC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eJiLIIHZlCID0iJIrNgF2zoT3MU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5c29c1-194a-410d-8c76-bbd01d425084/1/_aQ7HAc4oxc5vbNE-bDdRfJ_I5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5c29c1-194a-410d-8c76-bbd01d425084/1/eJiLIIHZlCID0iJIrNgF2zoT3MU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.195.140.0/23
91.198.163.0/24
185.20.188.0/22
194.6.226.0/24
194.9.10.0/23
195.62.44.0/23
IPv6:
2a00:4fa0::/29
Signature Algorithm: sha256WithRSAEncryption
d2:9a:9f:07:5b:19:09:4f:ca:b9:19:39:e4:ec:62:33:3b:3b:
ce:9e:cf:26:42:10:32:3f:ce:ec:99:e0:ab:0c:27:6a:d6:11:
af:7c:c0:95:c0:eb:b2:cb:c4:a4:8c:5c:e8:5b:3c:0b:c3:af:
76:3c:44:cb:54:aa:64:65:b6:9b:2b:eb:b5:92:21:2b:2c:23:
23:9a:e0:09:50:c4:b6:e4:d7:c2:4f:15:3c:54:c0:b3:78:ff:
b9:24:2e:22:df:cd:5d:cb:91:1d:e8:35:c1:48:30:35:5d:79:
42:e8:56:6e:63:af:e1:48:42:5e:ee:80:8a:2f:64:a6:06:f4:
a6:03:89:9e:98:61:e2:fc:8c:26:5e:42:4b:6c:ab:7b:23:f8:
8b:f5:31:aa:57:37:5a:44:5f:0c:db:2a:69:37:c5:04:a1:c3:
19:ca:a6:44:40:39:bf:69:0c:9c:a6:16:fd:49:46:c5:2d:9f:
d3:b0:6a:5e:4f:39:2c:5b:ac:91:7f:c8:f1:16:d4:c0:c5:a5:
3d:68:17:04:05:ae:6b:63:f3:b6:4e:e5:b7:63:cb:09:85:f6:
84:39:51:6b:b1:5f:22:05:58:3b:b5:6c:a2:1a:3e:44:bc:26:
47:65:7e:06:31:e9:d2:c4:6a:08:a9:90:2a:6b:25:60:c5:6c:
9d:61:75:e1
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgISAZQj2Ai7TxgoJf06DFGiVnZbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4OTg4YjIwODFkOTk0MjIwM2QyMjI0OGFjZDgwNWRiM2Ex
M2RjYzUwHhcNMjUwMTAxMjE0OTA3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZGE0M2IxYzA3MzhhMzE3MzliZGIzNDRmOWIwZGQ0NWYyN2YyMzkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlRqSvN5P6UgNqEK3if6v0mhgqw7
jaBzbvh3ZrYebowmB/SktqWob2k3+8OalPKKBLnlVUvk7oZkGfkZrRwdCGkl+UKH
WUQPA9SL1zuo85CMjQIQuQZMLVBiN50PBu7wsq1w8Maq290AYm7Zah9eM+QUYTEc
b4TKJmkAl4PwWzsuHyXwsuOktwNBxNEZSCVCQif7kJK55r+TewBugI4UZ7IVhh4z
m/L1s1rxYC3DIxyCGp2Ro/dyn4mXzgC/VGrRJHa0ctb+5osORhuSiEp0kRQfiLL5
f0czzJCKbLQvy5+Fgkw+ZG3TKL10Ups0qWeMagokqiWhaaMVcYnqw2fBmQIDAQAB
o4ICNjCCAjIwHQYDVR0OBBYEFP2kOxwHOKMXOb2zRPmw3UXyfyOTMB8GA1UdIwQY
MBaAFHiYiyCB2ZQiA9IiSKzYBds6E9zFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUppTElJSFpsQ0lEMGlKSXJOZ0Yyem9UM01VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC81YzI5YzEtMTk0YS00MTBkLThjNzYt
YmJkMDFkNDI1MDg0LzEvX2FRN0hBYzRveGM1dmJORS1iRGRSZkpfSTVNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC81YzI5YzEtMTk0YS00MTBkLThjNzYtYmJkMDFkNDI1MDg0
LzEvZUppTElJSFpsQ0lEMGlKSXJOZ0Yyem9UM01VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQBW8OMAwQA
W8ajAwQCuRS8AwQAwgbiAwQBwgkKAwQBwz4sMA0EAgACMAcDBQMqAE+gMA0GCSqG
SIb3DQEBCwUAA4IBAQDSmp8HWxkJT8q5GTnk7GIzOzvOns8mQhAyP87smeCrDCdq
1hGvfMCVwOuyy8SkjFzoWzwLw692PETLVKpkZbabK+u1kiErLCMjmuAJUMS25NfC
TxU8VMCzeP+5JC4i381dy5Ed6DXBSDA1XXlC6FZuY6/hSEJe7oCKL2SmBvSmA4me
mGHi/IwmXkJLbKt7I/iL9TGqVzdaRF8M2yppN8UEocMZyqZEQDm/aQycphb9SUbF
LZ/TsGpeTzksW6yRf8jxFtTAxaU9aBcEBa5rY/O2TuW3Y8sJhfaEOVFrsV8iBVg7
tWyiGj5EvCZHZX4GMenSxGoIqZAqayVgxWydYXXh
-----END CERTIFICATE-----
Generated at Mon Apr 14 04:03:14 2025 by rpki-client