Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/kaIqrvIylKzH38yKAlXttfxPtJc.roa
File: kaIqrvIylKzH38yKAlXttfxPtJc.roa (raw, json)
Hash identifier: PlwxrbNQdnXd0tF4s7w1NH4MDh/rQaSBAh1pK6XUPBU=
Subject key identifier: 91:A2:2A:AE:F2:32:94:AC:C7:DF:CC:8A:02:55:ED:B5:FC:4F:B4:97
Certificate issuer: /CN=53b46ab79b9fc58f5dc4cf29d72dc5267ec3edde
Certificate serial: 0194266BF5CC57C7E547C9595B0EB65B360A
Authority key identifier: 53:B4:6A:B7:9B:9F:C5:8F:5D:C4:CF:29:D7:2D:C5:26:7E:C3:ED:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/kaIqrvIylKzH38yKAlXttfxPtJc.roa
Signing time: Thu 02 Jan 2025 09:49:56 +0000
ROA not before: Thu 02 Jan 2025 09:49:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42695
IP address blocks: 80.254.229.0/24 maxlen: 24
80.254.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.mft
rsync://rpki.ripe.net/repository/DEFAULT/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:f5:cc:57:c7:e5:47:c9:59:5b:0e:b6:5b:36:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53b46ab79b9fc58f5dc4cf29d72dc5267ec3edde
Validity
Not Before: Jan 2 09:49:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=91a22aaef23294acc7dfcc8a0255edb5fc4fb497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:42:2d:05:00:1a:81:82:35:0a:5f:9a:23:c7:
27:75:57:39:80:fa:4e:79:0f:14:71:3a:96:b9:2e:
f4:24:b4:15:e9:e5:45:62:fb:e9:4e:4b:fd:b1:6b:
bc:26:70:61:2b:09:b1:83:ac:42:30:db:3c:44:c7:
30:28:aa:c4:42:de:92:a4:c7:1e:25:a6:59:b9:f1:
bf:ba:95:ff:98:43:1e:2f:00:45:22:cd:78:9e:45:
58:b0:13:e5:f6:cb:95:cb:50:8b:66:f7:e4:3b:82:
0a:b8:1c:67:88:1e:7b:6e:f9:7d:4b:67:58:c0:46:
eb:eb:ea:d9:d1:1b:7b:9b:72:11:7b:a1:ce:ec:46:
f9:27:0c:b2:b3:2a:44:8e:01:c3:62:62:cf:45:4a:
e4:18:5b:24:3a:16:00:f4:e3:2c:76:de:c2:7b:b3:
64:7c:bb:30:7e:5b:ff:12:41:b2:d9:69:3e:28:4b:
ce:8a:55:ad:08:9d:67:cb:2a:be:4d:89:fa:ee:af:
07:e8:b3:6f:f2:22:ea:96:96:a9:75:4f:f2:9a:0c:
58:7b:59:50:b3:e8:d7:c6:ea:8a:5f:00:45:3c:e9:
5d:7b:93:d1:98:e1:2f:42:e2:34:80:a6:27:e5:b0:
cd:cd:ab:6b:b2:6f:54:44:81:07:45:57:c2:04:9c:
a0:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:A2:2A:AE:F2:32:94:AC:C7:DF:CC:8A:02:55:ED:B5:FC:4F:B4:97
X509v3 Authority Key Identifier:
keyid:53:B4:6A:B7:9B:9F:C5:8F:5D:C4:CF:29:D7:2D:C5:26:7E:C3:ED:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/kaIqrvIylKzH38yKAlXttfxPtJc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.254.229.0-80.254.230.255
Signature Algorithm: sha256WithRSAEncryption
0c:42:ed:24:2d:dc:82:67:b7:ae:dc:78:96:8c:e3:0a:5f:c3:
16:b3:13:ca:ff:4c:cc:bf:6a:d2:66:50:4f:74:74:70:33:11:
0e:1c:50:6d:a6:c6:52:73:77:82:37:b2:ac:ba:a3:18:b1:19:
a6:93:49:22:f7:38:3e:f2:65:3f:32:b8:29:19:17:30:f9:c4:
4d:1f:b3:00:35:d5:17:f0:09:54:6a:52:ec:d2:3a:af:5d:d3:
1c:d1:8d:73:f9:76:54:35:cd:b4:e5:08:a2:09:31:11:f4:97:
f4:64:7f:9e:98:68:1f:26:4c:2e:a6:f3:60:16:21:34:a2:ac:
e7:d9:82:86:1b:16:76:ec:76:18:f1:47:7d:c9:00:65:64:eb:
63:33:b3:19:77:53:bd:e0:96:9c:6e:5b:59:ab:c0:19:9e:ea:
bf:28:88:c1:d5:f7:4a:c9:3f:a7:78:ab:36:b2:cb:52:b5:69:
60:14:78:66:00:3e:ef:d7:a0:b6:93:65:95:35:91:e5:dd:7b:
20:17:b0:6d:a4:07:24:9a:b2:4a:1a:84:4f:6f:99:80:0d:53:
53:cb:99:ac:ef:69:c8:69:21:d6:4a:4d:ef:e4:61:d2:48:05:
ca:4b:0d:6a:5f:2c:07:5b:5f:ad:c3:45:ad:03:57:9b:72:f4:
29:3e:0c:ec
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZQma/XMV8flR8lZWw62WzYKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzYjQ2YWI3OWI5ZmM1OGY1ZGM0Y2YyOWQ3MmRjNTI2N2Vj
M2VkZGUwHhcNMjUwMTAyMDk0OTU2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MWEyMmFhZWYyMzI5NGFjYzdkZmNjOGEwMjU1ZWRiNWZjNGZiNDk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEItBQAagYI1Cl+aI8cndVc5gPpO
eQ8UcTqWuS70JLQV6eVFYvvpTkv9sWu8JnBhKwmxg6xCMNs8RMcwKKrEQt6SpMce
JaZZufG/upX/mEMeLwBFIs14nkVYsBPl9suVy1CLZvfkO4IKuBxniB57bvl9S2dY
wEbr6+rZ0Rt7m3IRe6HO7Eb5JwyysypEjgHDYmLPRUrkGFskOhYA9OMsdt7Ce7Nk
fLswflv/EkGy2Wk+KEvOilWtCJ1nyyq+TYn67q8H6LNv8iLqlpapdU/ymgxYe1lQ
s+jXxuqKXwBFPOlde5PRmOEvQuI0gKYn5bDNzatrsm9URIEHRVfCBJygMwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFJGiKq7yMpSsx9/MigJV7bX8T7SXMB8GA1UdIwQY
MBaAFFO0arebn8WPXcTPKdctxSZ+w+3eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTdScXQ1dWZ4WTlkeE04cDF5M0ZKbjdEN2Q0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9hYzlhZjYtN2ZjMy00ZDEzLWE1OTQt
MDYwYTQ3MzgwOTFkLzEva2FJcXJ2SXlsS3pIMzh5S0FsWHR0ZnhQdEpjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9hYzlhZjYtN2ZjMy00ZDEzLWE1OTQtMDYwYTQ3MzgwOTFk
LzEvVTdScXQ1dWZ4WTlkeE04cDF5M0ZKbjdEN2Q0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABQ/uUD
BABQ/uYwDQYJKoZIhvcNAQELBQADggEBAAxC7SQt3IJnt67ceJaM4wpfwxazE8r/
TMy/atJmUE90dHAzEQ4cUG2mxlJzd4I3sqy6oxixGaaTSSL3OD7yZT8yuCkZFzD5
xE0fswA11RfwCVRqUuzSOq9d0xzRjXP5dlQ1zbTlCKIJMRH0l/Rkf56YaB8mTC6m
82AWITSirOfZgoYbFnbsdhjxR33JAGVk62Mzsxl3U73glpxuW1mrwBme6r8oiMHV
90rJP6d4qzayy1K1aWAUeGYAPu/XoLaTZZU1keXdeyAXsG2kBySaskoahE9vmYAN
U1PLmazvachpIdZKTe/kYdJIBcpLDWpfLAdbX63DRa0DV5ty9Ck+DOw=
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:15:22 2025 by rpki-client