Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/d8Xz3-bGuhIZgsQQ9i5--ho3Oww.roa
File: d8Xz3-bGuhIZgsQQ9i5--ho3Oww.roa (raw, json)
Hash identifier: IWceS0RshH45cyCliaS645b9Aam5xIXOMpxjPlIX0ww=
Subject key identifier: 77:C5:F3:DF:E6:C6:BA:12:19:82:C4:10:F6:2E:7E:FA:1A:37:3B:0C
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 019422FC06AC7B0DE371A4DB790D0FEA58F8
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/d8Xz3-bGuhIZgsQQ9i5--ho3Oww.roa
Signing time: Wed 01 Jan 2025 17:48:49 +0000
ROA not before: Wed 01 Jan 2025 17:48:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6461
IP address blocks: 91.242.108.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:06:ac:7b:0d:e3:71:a4:db:79:0d:0f:ea:58:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jan 1 17:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=77c5f3dfe6c6ba121982c410f62e7efa1a373b0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:20:d3:d0:94:54:fc:fc:18:ff:f7:d6:88:32:
aa:2c:2e:b1:15:21:fb:b8:0a:38:65:0d:08:66:4a:
31:5b:04:85:be:a1:fe:35:da:b6:be:a3:0b:00:d8:
57:35:bc:f2:de:23:d6:8d:55:93:d4:f7:a0:c4:3a:
e5:09:6d:c3:ed:8a:ac:ab:c5:8a:e2:d3:d9:9c:b4:
ae:b0:24:aa:d1:9a:a4:89:92:42:c6:cf:fb:84:e6:
be:46:89:47:f5:3b:61:26:7e:e5:d4:59:07:79:d9:
89:fb:0f:4f:e3:0b:6c:93:70:22:75:09:a5:fc:61:
2d:2d:36:92:88:dd:2f:43:ed:99:cf:25:d8:22:14:
c7:f4:ed:c3:1e:9b:2e:66:5d:ef:f7:65:2d:59:17:
16:56:31:69:3a:71:16:b4:b8:07:4c:69:c2:77:c0:
66:24:e9:32:12:bb:de:38:03:64:20:6e:c9:f4:32:
4d:bf:80:40:5b:b8:26:bd:2f:8a:de:41:41:f5:69:
a5:20:59:02:37:7e:5a:7b:ae:7d:4f:d7:9f:af:19:
ae:ab:af:1c:7a:c2:71:4f:9b:db:c5:30:bc:71:2a:
d4:6a:6f:28:c0:ce:09:ec:ad:9e:78:3f:1f:6b:7d:
9a:ff:97:54:3b:df:61:71:f9:3a:d7:ad:50:8d:69:
e5:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:C5:F3:DF:E6:C6:BA:12:19:82:C4:10:F6:2E:7E:FA:1A:37:3B:0C
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/d8Xz3-bGuhIZgsQQ9i5--ho3Oww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.108.0/22
Signature Algorithm: sha256WithRSAEncryption
b0:7e:60:09:d2:49:76:6e:63:51:ea:c6:87:10:78:09:86:2d:
5e:61:92:94:3b:b5:52:63:5e:10:4e:3a:27:73:34:71:cb:28:
91:e2:a3:f3:f7:56:5a:c1:48:d5:ad:43:81:32:a7:6c:b9:4b:
d0:62:f0:b5:00:5d:4f:6e:2e:bf:4b:9b:f5:8f:ca:c2:68:bc:
b9:04:0e:5d:23:33:20:29:f0:e2:36:a5:3d:f6:e6:71:2c:f6:
b8:b1:01:db:16:60:74:75:79:f9:ea:85:b8:72:26:28:d9:2d:
28:50:ed:a7:fa:65:39:04:eb:e0:60:1a:2a:bd:4d:d1:db:5a:
11:8a:88:e2:a5:29:b6:53:ed:4d:39:b2:0b:a0:d0:16:74:73:
5b:38:59:ef:e3:0f:d9:0d:b6:c8:25:c7:97:63:c2:86:a5:89:
58:fe:da:4f:dd:05:0a:d4:74:19:3c:9e:25:ac:e0:5f:4a:5c:
23:c7:48:14:fa:35:e4:3b:4c:a9:04:78:65:ec:7a:27:d9:9e:
95:98:c4:d0:b7:90:7a:7e:e6:3c:04:ee:14:42:62:7a:c4:ce:
c8:ee:0f:e7:20:e7:37:17:23:19:f0:f1:f9:4d:0f:6d:9d:3a:
76:75:f5:d2:ad:60:1b:26:d5:9b:ae:89:06:78:49:0d:81:6a:
34:8e:96:49
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQi/Aasew3jcaTbeQ0P6lj4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiYWIzMDY4Mzg1OWVjN2UwMjA2ZmU5MjY1MzYzZThlMzk3
MWE5YTgwHhcNMjUwMTAxMTc0ODQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3N2M1ZjNkZmU2YzZiYTEyMTk4MmM0MTBmNjJlN2VmYTFhMzczYjBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCDT0JRU/PwY//fWiDKqLC6xFSH7
uAo4ZQ0IZkoxWwSFvqH+Ndq2vqMLANhXNbzy3iPWjVWT1PegxDrlCW3D7Yqsq8WK
4tPZnLSusCSq0ZqkiZJCxs/7hOa+RolH9TthJn7l1FkHedmJ+w9P4wtsk3AidQml
/GEtLTaSiN0vQ+2ZzyXYIhTH9O3DHpsuZl3v92UtWRcWVjFpOnEWtLgHTGnCd8Bm
JOkyErveOANkIG7J9DJNv4BAW7gmvS+K3kFB9WmlIFkCN35ae659T9efrxmuq68c
esJxT5vbxTC8cSrUam8owM4J7K2eeD8fa32a/5dUO99hcfk6161QjWnlCQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHfF89/mxroSGYLEEPYufvoaNzsMMB8GA1UdIwQY
MBaAFIurMGg4Wex+Agb+kmU2Po45camoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQt
M2FjOWU1NmMzMDg5LzEvZDhYejMtYkd1aElaZ3NRUTlpNS0taG8zT3d3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQtM2FjOWU1NmMzMDg5
LzEvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW/JsMA0G
CSqGSIb3DQEBCwUAA4IBAQCwfmAJ0kl2bmNR6saHEHgJhi1eYZKUO7VSY14QTjon
czRxyyiR4qPz91ZawUjVrUOBMqdsuUvQYvC1AF1Pbi6/S5v1j8rCaLy5BA5dIzMg
KfDiNqU99uZxLPa4sQHbFmB0dXn56oW4ciYo2S0oUO2n+mU5BOvgYBoqvU3R21oR
iojipSm2U+1NObILoNAWdHNbOFnv4w/ZDbbIJceXY8KGpYlY/tpP3QUK1HQZPJ4l
rOBfSlwjx0gU+jXkO0ypBHhl7Hon2Z6VmMTQt5B6fuY8BO4UQmJ6xM7I7g/nIOc3
FyMZ8PH5TQ9tnTp2dfXSrWAbJtWbrokGeEkNgWo0jpZJ
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:33:12 2025 by rpki-client