Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/a0ba88-4d88-4691-aa6c-b5b8f5784dfe/1/aveWHqfuaX_kG8WIp_xJcLumQBk.roa
File: aveWHqfuaX_kG8WIp_xJcLumQBk.roa (raw, json)
Hash identifier: 3xccH6hLZrL399VCmO0jTOsOoPHpVJqnI9JkWpXbAog=
Subject key identifier: 6A:F7:96:1E:A7:EE:69:7F:E4:1B:C5:88:A7:FC:49:70:BB:A6:40:19
Certificate issuer: /CN=18b7377ce5efa3ca030ebb4dd77567fc032fcd01
Certificate serial: 019425FCFB8EBF7939E0756235BF2C9687A0
Authority key identifier: 18:B7:37:7C:E5:EF:A3:CA:03:0E:BB:4D:D7:75:67:FC:03:2F:CD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GLc3fOXvo8oDDrtN13Vn_AMvzQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/a0ba88-4d88-4691-aa6c-b5b8f5784dfe/1/aveWHqfuaX_kG8WIp_xJcLumQBk.roa
Signing time: Thu 02 Jan 2025 07:48:43 +0000
ROA not before: Thu 02 Jan 2025 07:48:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199638
IP address blocks: 91.245.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/a0ba88-4d88-4691-aa6c-b5b8f5784dfe/1/GLc3fOXvo8oDDrtN13Vn_AMvzQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/a0ba88-4d88-4691-aa6c-b5b8f5784dfe/1/GLc3fOXvo8oDDrtN13Vn_AMvzQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GLc3fOXvo8oDDrtN13Vn_AMvzQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:fb:8e:bf:79:39:e0:75:62:35:bf:2c:96:87:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18b7377ce5efa3ca030ebb4dd77567fc032fcd01
Validity
Not Before: Jan 2 07:48:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6af7961ea7ee697fe41bc588a7fc4970bba64019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:57:c2:f4:dd:9e:f0:0c:81:e3:14:2f:a4:a7:
e6:9a:87:29:a7:60:2c:da:1d:eb:9f:0d:c7:2b:6e:
36:0f:d9:df:d8:37:f8:13:5a:37:09:c1:b0:35:cf:
7e:86:92:29:e4:9f:40:65:6c:b5:bf:ac:d1:45:e6:
bd:c9:1e:18:29:d9:45:49:8a:d2:48:4b:2e:b2:39:
4c:52:5d:a8:c2:7b:50:84:4f:ad:86:88:f0:82:ac:
4b:f0:b7:9c:fe:f6:75:29:1c:16:19:c3:23:f9:06:
cd:8f:b5:06:61:97:64:29:fa:93:c8:08:ae:60:ac:
a2:8a:b6:09:f4:bd:f3:52:ab:cd:bd:d7:36:89:16:
ab:99:74:a6:0b:92:d8:3f:71:00:cf:99:dd:86:10:
4f:e6:00:6b:1e:2f:93:08:f0:c0:8f:e0:d8:cc:1b:
d3:d4:b4:74:82:fa:2e:44:bb:73:34:f5:27:86:a9:
0b:b0:6d:9e:10:d0:f9:cc:11:ad:07:de:0b:cc:f3:
91:36:70:ba:31:0c:4a:b6:12:b1:d6:77:9a:3b:a4:
32:17:f4:11:e8:55:16:f3:8b:6d:46:b4:ec:27:dc:
e1:5a:a5:18:a7:df:fd:d3:77:6f:a0:88:d3:32:13:
0e:ef:2c:4b:e3:f8:91:8a:29:25:28:4f:83:ef:70:
80:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:F7:96:1E:A7:EE:69:7F:E4:1B:C5:88:A7:FC:49:70:BB:A6:40:19
X509v3 Authority Key Identifier:
keyid:18:B7:37:7C:E5:EF:A3:CA:03:0E:BB:4D:D7:75:67:FC:03:2F:CD:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GLc3fOXvo8oDDrtN13Vn_AMvzQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a0ba88-4d88-4691-aa6c-b5b8f5784dfe/1/aveWHqfuaX_kG8WIp_xJcLumQBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a0ba88-4d88-4691-aa6c-b5b8f5784dfe/1/GLc3fOXvo8oDDrtN13Vn_AMvzQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.245.193.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:e8:73:d8:21:98:40:08:e2:c7:fc:7f:14:e3:d5:1f:62:28:
03:c4:b2:54:74:b8:02:3b:df:39:27:48:ba:0a:b8:49:54:35:
f2:84:21:2d:e3:1c:95:0c:29:18:23:f9:aa:1c:3f:6e:bd:d0:
40:17:da:ab:22:a2:c5:f1:e4:65:a4:02:c6:46:42:68:e4:bc:
66:72:0e:33:e5:41:75:47:74:a4:8b:49:c4:73:0e:9d:b1:49:
61:28:bc:d1:3b:48:de:6e:24:82:f8:f0:70:8a:f2:3c:ee:35:
c1:5e:63:af:eb:cb:33:43:26:fc:04:9a:f4:eb:24:32:9e:3b:
1c:ca:7b:d4:8b:b3:f5:07:08:c3:9b:60:42:55:2d:a6:80:55:
39:38:c2:7c:45:fc:f6:be:30:47:d5:57:99:13:92:12:b8:dd:
d1:75:83:e4:69:75:d9:49:5f:c4:32:0c:2b:11:84:e6:b7:c0:
73:a0:2b:6e:ac:cb:16:e6:d2:b0:de:55:c0:97:31:54:2b:fc:
8f:3d:e1:f2:84:2f:a7:8d:ed:9a:09:d8:98:d0:c0:49:65:29:
59:13:14:9c:05:98:8f:a6:ac:4a:ba:b3:93:cd:4a:fe:f2:a7:
5e:a7:50:f8:91:9b:ba:8a:d8:f8:fb:7b:11:9e:1b:e3:51:8d:
01:a0:25:74
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQl/PuOv3k54HViNb8sloegMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4YjczNzdjZTVlZmEzY2EwMzBlYmI0ZGQ3NzU2N2ZjMDMy
ZmNkMDEwHhcNMjUwMTAyMDc0ODQzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YWY3OTYxZWE3ZWU2OTdmZTQxYmM1ODhhN2ZjNDk3MGJiYTY0MDE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslfC9N2e8AyB4xQvpKfmmocpp2As
2h3rnw3HK242D9nf2Df4E1o3CcGwNc9+hpIp5J9AZWy1v6zRRea9yR4YKdlFSYrS
SEsusjlMUl2owntQhE+thojwgqxL8Lec/vZ1KRwWGcMj+QbNj7UGYZdkKfqTyAiu
YKyiirYJ9L3zUqvNvdc2iRarmXSmC5LYP3EAz5ndhhBP5gBrHi+TCPDAj+DYzBvT
1LR0gvouRLtzNPUnhqkLsG2eEND5zBGtB94LzPORNnC6MQxKthKx1neaO6QyF/QR
6FUW84ttRrTsJ9zhWqUYp9/903dvoIjTMhMO7yxL4/iRiiklKE+D73CAFQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGr3lh6n7ml/5BvFiKf8SXC7pkAZMB8GA1UdIwQY
MBaAFBi3N3zl76PKAw67Tdd1Z/wDL80BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0xjM2ZPWHZvOG9ERHJ0TjEzVm5fQU12elFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9hMGJhODgtNGQ4OC00NjkxLWFhNmMt
YjViOGY1Nzg0ZGZlLzEvYXZlV0hxZnVhWF9rRzhXSXBfeEpjTHVtUUJrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi9hMGJhODgtNGQ4OC00NjkxLWFhNmMtYjViOGY1Nzg0ZGZl
LzEvR0xjM2ZPWHZvOG9ERHJ0TjEzVm5fQU12elFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW/XBMA0G
CSqGSIb3DQEBCwUAA4IBAQB76HPYIZhACOLH/H8U49UfYigDxLJUdLgCO985J0i6
CrhJVDXyhCEt4xyVDCkYI/mqHD9uvdBAF9qrIqLF8eRlpALGRkJo5Lxmcg4z5UF1
R3Ski0nEcw6dsUlhKLzRO0jebiSC+PBwivI87jXBXmOv68szQyb8BJr06yQynjsc
ynvUi7P1BwjDm2BCVS2mgFU5OMJ8Rfz2vjBH1VeZE5ISuN3RdYPkaXXZSV/EMgwr
EYTmt8BzoCturMsW5tKw3lXAlzFUK/yPPeHyhC+nje2aCdiY0MBJZSlZExScBZiP
pqxKurOTzUr+8qdep1D4kZu6itj4+3sRnhvjUY0BoCV0
-----END CERTIFICATE-----
Generated at Fri Apr 18 20:20:23 2025 by rpki-client