Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/9JlOX8sBl__Qf5ZEztj3xRoWT0w.roa
File: 9JlOX8sBl__Qf5ZEztj3xRoWT0w.roa (raw, json)
Hash identifier: yFMJTSvXNN5G3iWxcUQycJKuWi+/CwtiHhA9xSKG2JY=
Subject key identifier: F4:99:4E:5F:CB:01:97:FF:D0:7F:96:44:CE:D8:F7:C5:1A:16:4F:4C
Certificate issuer: /CN=6559cf34d4cfc59640862d1e4b79d48d9e4d8e7b
Certificate serial: 0194206868EF6D730BA6F3F0CCF4A62D1AAB
Authority key identifier: 65:59:CF:34:D4:CF:C5:96:40:86:2D:1E:4B:79:D4:8D:9E:4D:8E:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/9JlOX8sBl__Qf5ZEztj3xRoWT0w.roa
Signing time: Wed 01 Jan 2025 05:48:21 +0000
ROA not before: Wed 01 Jan 2025 05:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3170
IP address blocks: 91.238.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 17:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:68:ef:6d:73:0b:a6:f3:f0:cc:f4:a6:2d:1a:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6559cf34d4cfc59640862d1e4b79d48d9e4d8e7b
Validity
Not Before: Jan 1 05:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f4994e5fcb0197ffd07f9644ced8f7c51a164f4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:03:d1:89:da:87:3e:19:5c:f0:56:69:cd:3b:
b0:cc:b4:77:93:75:3c:eb:d7:68:a8:25:80:94:fa:
8f:81:62:b3:bb:5d:6a:97:e9:a2:10:bb:ea:16:d7:
45:65:04:c3:fc:a0:23:fc:12:ef:00:f3:91:c3:0c:
a4:43:25:ba:82:e8:06:d5:f3:2a:c0:e2:0c:36:f8:
2b:0d:d1:0d:09:86:3b:36:a5:fb:b2:72:fa:05:78:
f4:e9:2a:5e:bf:b8:23:6d:8f:62:30:93:ff:fc:ab:
b7:e8:84:fe:7a:4c:89:dd:64:03:70:eb:2e:58:2c:
e7:b3:6c:fc:6c:f9:39:86:08:58:61:92:0d:72:aa:
c1:05:b6:cb:78:a6:4b:8c:82:6d:7f:7e:46:80:c3:
31:77:0d:07:86:22:ab:b9:6b:99:9f:aa:ce:6f:b5:
6a:b3:d1:fd:c4:f0:16:9c:4f:3d:57:7a:72:c9:fa:
e6:48:c9:e5:ed:5d:e1:5a:b2:10:74:38:f2:f0:7b:
90:1b:e4:73:48:e1:f9:00:06:33:35:a1:36:c9:26:
b1:c1:ca:60:cb:da:37:f4:a3:1c:eb:32:1c:ee:61:
03:d4:80:c1:da:8c:d6:2f:4c:08:71:65:cf:37:86:
e7:7a:11:81:95:8d:94:03:47:3c:12:ec:29:47:61:
dc:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:99:4E:5F:CB:01:97:FF:D0:7F:96:44:CE:D8:F7:C5:1A:16:4F:4C
X509v3 Authority Key Identifier:
keyid:65:59:CF:34:D4:CF:C5:96:40:86:2D:1E:4B:79:D4:8D:9E:4D:8E:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/9JlOX8sBl__Qf5ZEztj3xRoWT0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.238.195.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:80:34:03:72:7d:ca:a1:e6:19:ec:18:de:f8:f2:34:cd:c7:
97:68:fd:52:81:64:b6:29:8a:8f:80:02:8d:40:b8:f4:8b:5d:
c3:4c:96:f5:e2:3b:81:bb:55:9d:d9:dd:c7:d9:52:61:73:de:
bf:aa:2d:60:5d:ca:1e:be:19:63:ae:57:1f:51:5d:a4:4f:5b:
2f:28:17:17:45:92:dc:10:1c:76:39:6f:f8:0b:f7:b4:b5:ad:
ee:26:5c:58:57:1e:45:d9:ca:18:99:48:e8:71:53:33:bf:81:
d1:b3:93:f6:28:30:c3:5b:95:9e:fc:4d:5e:53:f5:da:00:c2:
37:bd:f8:85:65:d6:aa:72:d6:c2:a1:b4:55:03:b8:47:90:d4:
ac:eb:63:80:9c:e4:97:e0:7d:89:71:2c:3f:d9:84:be:69:4c:
38:81:10:dc:c2:3f:17:70:b5:31:cd:7a:d7:ed:98:1a:c7:49:
1b:cc:17:85:c3:af:22:28:31:5b:d1:ca:16:22:7a:8e:2e:cf:
1a:4a:f8:a9:d2:56:0c:29:23:1a:35:38:b4:23:fb:fd:c2:93:
7c:d4:ee:69:3b:8d:91:c7:c9:aa:35:ab:0e:d0:f1:63:02:f7:
bb:b9:d5:4c:4c:8a:3b:fb:6a:27:88:bf:35:69:b5:dc:f1:bc:
94:87:55:63
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQgaGjvbXMLpvPwzPSmLRqrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1NTljZjM0ZDRjZmM1OTY0MDg2MmQxZTRiNzlkNDhkOWU0
ZDhlN2IwHhcNMjUwMTAxMDU0ODIxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNDk5NGU1ZmNiMDE5N2ZmZDA3Zjk2NDRjZWQ4ZjdjNTFhMTY0ZjRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQPRidqHPhlc8FZpzTuwzLR3k3U8
69doqCWAlPqPgWKzu11ql+miELvqFtdFZQTD/KAj/BLvAPORwwykQyW6gugG1fMq
wOIMNvgrDdENCYY7NqX7snL6BXj06Spev7gjbY9iMJP//Ku36IT+ekyJ3WQDcOsu
WCzns2z8bPk5hghYYZINcqrBBbbLeKZLjIJtf35GgMMxdw0HhiKruWuZn6rOb7Vq
s9H9xPAWnE89V3pyyfrmSMnl7V3hWrIQdDjy8HuQG+RzSOH5AAYzNaE2ySaxwcpg
y9o39KMc6zIc7mED1IDB2ozWL0wIcWXPN4bnehGBlY2UA0c8EuwpR2HcvQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPSZTl/LAZf/0H+WRM7Y98UaFk9MMB8GA1UdIwQY
MBaAFGVZzzTUz8WWQIYtHkt51I2eTY57MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlZuUE5OVFB4WlpBaGkwZVMzblVqWjVOam5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS82YTg2MDctYTMzYS00NGFmLWIyYzAt
MTM0MWRlOGFiZTUxLzEvOUpsT1g4c0JsX19RZjVaRXp0ajN4Um9XVDB3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS82YTg2MDctYTMzYS00NGFmLWIyYzAtMTM0MWRlOGFiZTUx
LzEvWlZuUE5OVFB4WlpBaGkwZVMzblVqWjVOam5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+7DMA0G
CSqGSIb3DQEBCwUAA4IBAQCpgDQDcn3KoeYZ7Bje+PI0zceXaP1SgWS2KYqPgAKN
QLj0i13DTJb14juBu1Wd2d3H2VJhc96/qi1gXcoevhljrlcfUV2kT1svKBcXRZLc
EBx2OW/4C/e0ta3uJlxYVx5F2coYmUjocVMzv4HRs5P2KDDDW5We/E1eU/XaAMI3
vfiFZdaqctbCobRVA7hHkNSs62OAnOSX4H2JcSw/2YS+aUw4gRDcwj8XcLUxzXrX
7Zgax0kbzBeFw68iKDFb0coWInqOLs8aSvip0lYMKSMaNTi0I/v9wpN81O5pO42R
x8mqNasO0PFjAve7udVMTIo7+2oniL81abXc8byUh1Vj
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:57:59 2025 by rpki-client