Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/c15cf7-422d-4a8a-8f4c-2d54e582b5e0/1/TBNCAmXPiITjG3rsN7mx1xrR_KY.roa
File: TBNCAmXPiITjG3rsN7mx1xrR_KY.roa (raw, json)
Hash identifier: iXvzmMuxsBGvkR+ftL5TgUS2Lpzgxj9Gu947ZjpDrMU=
Subject key identifier: 4C:13:42:02:65:CF:88:84:E3:1B:7A:EC:37:B9:B1:D7:1A:D1:FC:A6
Certificate issuer: /CN=874fc0fba1b836c23ff6df468c8abf7d3a8216ce
Certificate serial: 0194206870A17BD90D855CA69D010B2E80A3
Authority key identifier: 87:4F:C0:FB:A1:B8:36:C2:3F:F6:DF:46:8C:8A:BF:7D:3A:82:16:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0_A-6G4NsI_9t9GjIq_fTqCFs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/c15cf7-422d-4a8a-8f4c-2d54e582b5e0/1/TBNCAmXPiITjG3rsN7mx1xrR_KY.roa
Signing time: Wed 01 Jan 2025 05:48:22 +0000
ROA not before: Wed 01 Jan 2025 05:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49589
IP address blocks: 91.214.244.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/c15cf7-422d-4a8a-8f4c-2d54e582b5e0/1/h0_A-6G4NsI_9t9GjIq_fTqCFs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/c15cf7-422d-4a8a-8f4c-2d54e582b5e0/1/h0_A-6G4NsI_9t9GjIq_fTqCFs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/h0_A-6G4NsI_9t9GjIq_fTqCFs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:70:a1:7b:d9:0d:85:5c:a6:9d:01:0b:2e:80:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=874fc0fba1b836c23ff6df468c8abf7d3a8216ce
Validity
Not Before: Jan 1 05:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4c13420265cf8884e31b7aec37b9b1d71ad1fca6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e6:70:bd:db:c4:74:25:4f:38:da:0b:f7:70:
c5:3b:ed:16:df:b9:17:43:02:b8:d3:00:24:8a:93:
5c:0a:9b:66:30:56:c6:b0:01:0c:f8:e6:ba:e1:b1:
e6:55:52:26:be:43:39:63:b2:4f:69:f5:78:fd:ab:
c3:b5:59:7c:3d:a5:dc:94:3d:d2:e2:e8:95:92:f2:
00:f5:27:ee:ac:c6:34:fe:24:3f:d3:b8:52:72:67:
9b:12:65:7e:1d:ac:c2:9e:aa:89:31:6f:02:d0:b5:
87:8d:f6:7d:8b:af:c5:80:2f:2d:c6:2f:2b:d1:81:
05:34:24:0f:26:4f:91:ae:12:4e:92:e7:9c:f8:ef:
4f:88:f5:f7:f3:31:fa:56:69:f8:07:ea:10:07:15:
86:52:7a:9b:74:be:21:aa:bb:c9:2c:de:c5:40:91:
12:2c:f5:64:70:4e:57:b9:d6:fa:6c:60:b9:91:0b:
2a:18:85:43:82:c8:99:95:d6:27:52:b0:fe:3a:e7:
2a:ad:0c:7f:8c:41:ee:5f:05:c4:c2:a4:cc:99:29:
2f:6e:9e:b8:fe:82:ea:f7:1f:99:b6:3f:95:db:07:
c1:7b:ac:cc:9b:ce:b3:44:3e:1a:52:65:80:54:73:
ce:e0:3c:22:29:7f:eb:2d:49:31:ad:a8:76:9a:4a:
04:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:13:42:02:65:CF:88:84:E3:1B:7A:EC:37:B9:B1:D7:1A:D1:FC:A6
X509v3 Authority Key Identifier:
keyid:87:4F:C0:FB:A1:B8:36:C2:3F:F6:DF:46:8C:8A:BF:7D:3A:82:16:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0_A-6G4NsI_9t9GjIq_fTqCFs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c15cf7-422d-4a8a-8f4c-2d54e582b5e0/1/TBNCAmXPiITjG3rsN7mx1xrR_KY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c15cf7-422d-4a8a-8f4c-2d54e582b5e0/1/h0_A-6G4NsI_9t9GjIq_fTqCFs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.214.244.0/22
Signature Algorithm: sha256WithRSAEncryption
cb:35:30:5b:10:93:0a:e4:06:03:06:50:c7:d9:4c:b3:6b:5b:
d7:4c:56:5b:f8:62:5d:87:c9:df:3f:06:9d:7f:91:77:86:3c:
84:82:26:48:a3:79:f0:40:9e:f0:e1:42:4d:50:ff:e4:2c:53:
cd:1d:cf:b0:7c:0d:f1:ef:58:01:b1:74:39:42:b0:ff:9f:0b:
6d:64:7f:a0:59:dd:ae:97:b5:42:f5:94:bd:9e:af:4e:9f:d9:
7c:84:67:b8:95:29:d9:45:0b:33:51:de:90:97:1d:bb:36:fc:
44:49:a3:1a:72:1f:9b:a7:e9:e1:f3:6b:b1:a2:7d:0d:3b:d6:
75:c9:57:c4:36:fa:71:ce:23:f5:5c:9c:a6:65:c5:64:fa:49:
49:34:3d:e3:e8:a6:ed:31:e6:eb:9d:0a:1e:40:d7:ed:b8:00:
bd:5d:35:21:1b:51:61:6d:5d:f9:4e:37:33:82:18:87:5d:64:
50:5c:9c:fb:a8:a1:10:46:19:09:55:90:1a:1c:77:63:5e:44:
97:ff:db:4d:01:d3:37:11:24:28:6f:6b:86:12:cf:bb:e8:1c:
47:2b:b3:31:c0:68:b1:35:eb:77:c6:d6:12:f3:62:23:97:d6:
57:12:37:c6:09:f6:e8:37:75:6f:3b:b1:b5:0d:d1:1e:11:b5:
51:97:e4:3e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQgaHChe9kNhVymnQELLoCjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3NGZjMGZiYTFiODM2YzIzZmY2ZGY0NjhjOGFiZjdkM2E4
MjE2Y2UwHhcNMjUwMTAxMDU0ODIyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YzEzNDIwMjY1Y2Y4ODg0ZTMxYjdhZWMzN2I5YjFkNzFhZDFmY2E2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1eZwvdvEdCVPONoL93DFO+0W37kX
QwK40wAkipNcCptmMFbGsAEM+Oa64bHmVVImvkM5Y7JPafV4/avDtVl8PaXclD3S
4uiVkvIA9SfurMY0/iQ/07hScmebEmV+HazCnqqJMW8C0LWHjfZ9i6/FgC8txi8r
0YEFNCQPJk+RrhJOkuec+O9PiPX38zH6Vmn4B+oQBxWGUnqbdL4hqrvJLN7FQJES
LPVkcE5Xudb6bGC5kQsqGIVDgsiZldYnUrD+OucqrQx/jEHuXwXEwqTMmSkvbp64
/oLq9x+Ztj+V2wfBe6zMm86zRD4aUmWAVHPO4DwiKX/rLUkxrah2mkoEEQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEwTQgJlz4iE4xt67De5sdca0fymMB8GA1UdIwQY
MBaAFIdPwPuhuDbCP/bfRoyKv306ghbOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDBfQS02RzROc0lfOXQ5R2pJcV9mVHFDRnM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9jMTVjZjctNDIyZC00YThhLThmNGMt
MmQ1NGU1ODJiNWUwLzEvVEJOQ0FtWFBpSVRqRzNyc043bXgxeHJSX0tZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS9jMTVjZjctNDIyZC00YThhLThmNGMtMmQ1NGU1ODJiNWUw
LzEvaDBfQS02RzROc0lfOXQ5R2pJcV9mVHFDRnM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW9b0MA0G
CSqGSIb3DQEBCwUAA4IBAQDLNTBbEJMK5AYDBlDH2Uyza1vXTFZb+GJdh8nfPwad
f5F3hjyEgiZIo3nwQJ7w4UJNUP/kLFPNHc+wfA3x71gBsXQ5QrD/nwttZH+gWd2u
l7VC9ZS9nq9On9l8hGe4lSnZRQszUd6Qlx27NvxESaMach+bp+nh82uxon0NO9Z1
yVfENvpxziP1XJymZcVk+klJND3j6KbtMebrnQoeQNftuAC9XTUhG1FhbV35Tjcz
ghiHXWRQXJz7qKEQRhkJVZAaHHdjXkSX/9tNAdM3ESQob2uGEs+76BxHK7MxwGix
Net3xtYS82Ijl9ZXEjfGCfboN3VvO7G1DdEeEbVRl+Q+
-----END CERTIFICATE-----
Generated at Thu Apr 17 22:25:32 2025 by rpki-client