Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/9VVp8d5PITjRebtJI95NWoj3khM.roa
File: 9VVp8d5PITjRebtJI95NWoj3khM.roa (raw, json)
Hash identifier: sM5bfll/1l5qJR4i1l44MyPQTreoxHZoTvH9jHmFoqs=
Subject key identifier: F5:55:69:F1:DE:4F:21:38:D1:79:BB:49:23:DE:4D:5A:88:F7:92:13
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 019427B59C2F72B8B6CB15BF380A480B5534
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/9VVp8d5PITjRebtJI95NWoj3khM.roa
Signing time: Thu 02 Jan 2025 15:50:00 +0000
ROA not before: Thu 02 Jan 2025 15:50:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35830
IP address blocks: 5.188.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 18:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:9c:2f:72:b8:b6:cb:15:bf:38:0a:48:0b:55:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 2 15:50:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f55569f1de4f2138d179bb4923de4d5a88f79213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a9:af:14:8d:f5:c7:9c:f4:34:6c:3a:61:29:
66:93:83:10:60:0b:5f:ee:e2:01:69:d4:38:43:23:
7f:e0:44:73:93:a9:a0:55:5a:df:ce:84:c6:a4:0c:
7f:1b:4b:76:11:7b:2b:af:f7:3f:7a:35:7d:ea:0b:
75:79:f2:c4:46:6c:be:da:ac:64:9c:0c:14:80:05:
01:65:83:67:a7:da:6f:0a:5a:6b:cb:7b:c5:ca:05:
44:2a:ef:de:56:eb:6e:f5:e0:08:e8:93:35:c6:0c:
7b:0e:39:0b:3f:9a:09:93:62:79:a1:02:0c:ee:e2:
0c:68:0a:44:e8:ee:1f:6c:2d:93:5a:f3:d8:18:bf:
c5:2c:81:bc:8c:fa:6c:29:a4:80:3b:51:fd:eb:58:
5d:c8:b6:96:f1:fd:57:5c:0e:0d:53:1b:56:e2:62:
97:21:88:be:de:6e:e5:e1:3c:6a:69:ef:08:69:cc:
ed:bd:37:df:26:e9:90:1c:70:a3:1a:46:22:6f:a8:
31:3e:85:64:ca:8f:9a:5b:9a:df:fb:64:bf:d3:72:
99:81:04:0f:79:17:33:48:64:43:77:0f:a8:1b:0b:
62:2a:75:22:90:30:eb:db:9f:48:3a:7e:e0:65:57:
fc:a4:f1:58:24:d1:e7:b4:27:c3:06:76:4e:0d:fc:
52:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:55:69:F1:DE:4F:21:38:D1:79:BB:49:23:DE:4D:5A:88:F7:92:13
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/9VVp8d5PITjRebtJI95NWoj3khM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.188.217.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:9e:b5:ca:b3:f7:bf:de:43:4b:ba:7c:18:af:22:b6:e2:a7:
05:4b:07:91:a8:df:7a:21:7a:94:d7:d4:7e:86:19:70:fd:8a:
92:75:1f:95:31:81:48:d4:60:a2:ea:4f:59:7c:c9:b9:e0:39:
5b:b9:a6:e0:ff:5e:3e:92:2d:20:d8:99:77:e7:9d:e1:6e:b3:
5e:fc:ac:61:36:42:75:b1:8c:fe:44:81:cb:c9:45:c4:4e:0e:
aa:7e:c2:76:b6:a6:1a:f3:ab:3e:e1:49:b9:c7:a7:00:6d:93:
35:06:a4:f1:6a:1b:68:d7:59:1f:c7:13:4f:a9:58:21:07:75:
0a:1b:e6:4d:e7:bf:b9:39:99:77:23:7e:80:72:0d:f5:0d:7a:
22:63:7b:46:74:56:f7:7d:ac:b9:b5:52:3d:9c:80:0a:9a:0d:
58:d0:d4:60:1a:ba:a5:56:45:6e:6f:7f:06:fe:e9:e0:71:2d:
57:87:7a:90:c3:be:4e:ff:a7:06:00:f3:15:8e:b9:f0:cf:fa:
ed:bb:91:9f:35:78:f5:f2:0b:67:da:8a:95:24:29:19:86:bf:
0d:7c:74:95:9c:64:76:66:5c:89:5f:48:93:48:aa:c0:e3:37:
59:58:f3:b4:01:a0:7d:f8:20:39:b3:62:10:2c:09:37:82:a2:
08:48:41:2e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQntZwvcri2yxW/OApIC1U0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhYWE4YTBhNWZkZmQ2OThlMTA0YmUzNmEyYWVlYzgxM2Fl
Y2EwNzEwHhcNMjUwMTAyMTU1MDAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNTU1NjlmMWRlNGYyMTM4ZDE3OWJiNDkyM2RlNGQ1YTg4Zjc5MjEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqmvFI31x5z0NGw6YSlmk4MQYAtf
7uIBadQ4QyN/4ERzk6mgVVrfzoTGpAx/G0t2EXsrr/c/ejV96gt1efLERmy+2qxk
nAwUgAUBZYNnp9pvClpry3vFygVEKu/eVutu9eAI6JM1xgx7DjkLP5oJk2J5oQIM
7uIMaApE6O4fbC2TWvPYGL/FLIG8jPpsKaSAO1H961hdyLaW8f1XXA4NUxtW4mKX
IYi+3m7l4Txqae8IacztvTffJumQHHCjGkYib6gxPoVkyo+aW5rf+2S/03KZgQQP
eRczSGRDdw+oGwtiKnUikDDr259IOn7gZVf8pPFYJNHntCfDBnZODfxS6QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPVVafHeTyE40Xm7SSPeTVqI95ITMB8GA1UdIwQY
MBaAFOqqigpf39aY4QS+NqKu7IE67KBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQt
ODlkMDkyNDBjNDNiLzEvOVZWcDhkNVBJVGpSZWJ0Skk5NU5Xb2oza2hNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQtODlkMDkyNDBjNDNi
LzEvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABbzZMA0G
CSqGSIb3DQEBCwUAA4IBAQDOnrXKs/e/3kNLunwYryK24qcFSweRqN96IXqU19R+
hhlw/YqSdR+VMYFI1GCi6k9ZfMm54Dlbuabg/14+ki0g2Jl3553hbrNe/KxhNkJ1
sYz+RIHLyUXETg6qfsJ2tqYa86s+4Um5x6cAbZM1BqTxahto11kfxxNPqVghB3UK
G+ZN57+5OZl3I36Acg31DXoiY3tGdFb3fay5tVI9nIAKmg1Y0NRgGrqlVkVub38G
/ungcS1Xh3qQw75O/6cGAPMVjrnwz/rtu5GfNXj18gtn2oqVJCkZhr8NfHSVnGR2
ZlyJX0iTSKrA4zdZWPO0AaB9+CA5s2IQLAk3gqIISEEu
-----END CERTIFICATE-----
Generated at Sun Apr 6 00:50:38 2025 by rpki-client