Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/e31KG_8dad-8ny4PFtbT297H7Sw.roa
File: e31KG_8dad-8ny4PFtbT297H7Sw.roa (raw, json)
Hash identifier: GQmunQnH91NAJBx06ug5Vq/w7qs39J3e7sMnlc2OutE=
Subject key identifier: 7B:7D:4A:1B:FF:1D:69:DF:BC:9F:2E:0F:16:D6:D3:DB:DE:C7:ED:2C
Certificate issuer: /CN=0692c5f16313653425bc467105875e3a297cff9b
Certificate serial: 01942067F6E008023A31EAD5B0812C9979FA
Authority key identifier: 06:92:C5:F1:63:13:65:34:25:BC:46:71:05:87:5E:3A:29:7C:FF:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BpLF8WMTZTQlvEZxBYdeOil8_5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/e31KG_8dad-8ny4PFtbT297H7Sw.roa
Signing time: Wed 01 Jan 2025 05:47:51 +0000
ROA not before: Wed 01 Jan 2025 05:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198178
IP address blocks: 77.91.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/BpLF8WMTZTQlvEZxBYdeOil8_5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:f6:e0:08:02:3a:31:ea:d5:b0:81:2c:99:79:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0692c5f16313653425bc467105875e3a297cff9b
Validity
Not Before: Jan 1 05:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7b7d4a1bff1d69dfbc9f2e0f16d6d3dbdec7ed2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:46:92:ca:f2:cd:64:bd:1a:86:1b:8c:44:ac:
72:a0:59:c8:44:20:e5:18:ba:ea:ce:f9:76:2d:d8:
4d:aa:b0:bb:58:ef:fe:39:26:e6:2a:74:76:d9:21:
83:f7:8f:2b:71:cd:9d:56:f1:0b:92:4f:87:76:1a:
6e:3f:15:9f:16:68:94:63:51:56:83:2c:32:d2:93:
3e:77:a8:b3:20:5f:12:da:f7:9b:25:b2:f9:b7:e1:
08:41:0a:e7:d4:9c:3d:32:75:29:70:3e:25:0f:b3:
b5:f6:da:8a:65:46:1a:46:51:bd:d9:98:2d:26:4a:
13:03:f7:50:d4:33:df:c0:07:31:2f:31:47:00:ce:
29:c1:fb:22:b5:15:ef:f7:9e:61:68:00:5f:ca:f7:
b6:ff:8b:4b:16:27:82:2c:00:0b:d3:c9:1e:d5:fa:
0b:d6:6d:a0:99:c3:9d:a8:e1:dd:1a:55:d0:e0:c3:
fb:c4:27:df:c3:46:2c:0d:7c:5f:43:40:44:40:21:
fc:ee:10:28:54:28:aa:f4:cb:c4:53:38:3b:92:71:
d1:09:04:94:4a:4e:d3:cd:fa:47:97:ee:ea:a6:6f:
74:11:ee:e0:cb:1f:78:e2:01:6c:03:aa:c2:7b:2a:
2c:f6:b4:83:0c:47:c3:7d:2b:94:fa:5c:84:a2:42:
ca:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:7D:4A:1B:FF:1D:69:DF:BC:9F:2E:0F:16:D6:D3:DB:DE:C7:ED:2C
X509v3 Authority Key Identifier:
keyid:06:92:C5:F1:63:13:65:34:25:BC:46:71:05:87:5E:3A:29:7C:FF:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BpLF8WMTZTQlvEZxBYdeOil8_5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/e31KG_8dad-8ny4PFtbT297H7Sw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.91.127.0/24
Signature Algorithm: sha256WithRSAEncryption
14:a6:7e:da:d8:0c:33:95:0e:e7:6a:28:e0:7d:8f:e6:7a:f8:
99:12:5a:64:24:ea:b3:48:e9:3a:21:c6:d0:9a:e6:4e:6c:a6:
4a:a2:92:94:48:5e:d9:63:31:7b:52:c4:ee:96:bf:f2:52:1e:
4a:72:ea:f0:37:c9:33:8b:2a:d2:d3:47:e0:49:2e:11:a6:4d:
65:7a:cc:d4:72:3b:91:78:9b:48:a3:cd:df:27:19:b5:b2:5d:
74:da:eb:f5:1f:e2:56:59:9a:7c:43:94:b3:55:38:a0:d9:c9:
9c:d3:72:bd:ae:1d:0c:6d:c0:91:f5:35:3f:94:9f:1e:73:98:
f6:40:da:63:74:08:23:20:9a:79:68:a1:41:b6:25:b1:a4:43:
86:c5:f6:90:b8:cc:fb:ea:0a:a2:cb:09:28:31:d1:70:65:36:
da:33:3d:57:7e:e3:d6:5f:93:0d:3b:c9:99:47:e4:76:b8:56:
e6:01:78:96:8d:06:f7:a3:5e:fa:22:93:7d:69:ea:23:36:e2:
2f:41:cf:2d:53:ad:3f:d6:a4:8e:cb:08:ca:91:87:53:a1:c8:
c2:a6:a9:38:a7:f1:28:3c:72:fb:55:3f:26:e9:54:8b:fd:7b:
4f:6d:e9:ed:d3:e4:d5:be:35:0a:a2:73:e9:b3:aa:3a:56:9f:
d1:d6:d2:f7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQgZ/bgCAI6MerVsIEsmXn6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2OTJjNWYxNjMxMzY1MzQyNWJjNDY3MTA1ODc1ZTNhMjk3
Y2ZmOWIwHhcNMjUwMTAxMDU0NzUxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YjdkNGExYmZmMWQ2OWRmYmM5ZjJlMGYxNmQ2ZDNkYmRlYzdlZDJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUaSyvLNZL0ahhuMRKxyoFnIRCDl
GLrqzvl2LdhNqrC7WO/+OSbmKnR22SGD948rcc2dVvELkk+HdhpuPxWfFmiUY1FW
gywy0pM+d6izIF8S2vebJbL5t+EIQQrn1Jw9MnUpcD4lD7O19tqKZUYaRlG92Zgt
JkoTA/dQ1DPfwAcxLzFHAM4pwfsitRXv955haABfyve2/4tLFieCLAAL08ke1foL
1m2gmcOdqOHdGlXQ4MP7xCffw0YsDXxfQ0BEQCH87hAoVCiq9MvEUzg7knHRCQSU
Sk7TzfpHl+7qpm90Ee7gyx944gFsA6rCeyos9rSDDEfDfSuU+lyEokLKZQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHt9Shv/HWnfvJ8uDxbW09vex+0sMB8GA1UdIwQY
MBaAFAaSxfFjE2U0JbxGcQWHXjopfP+bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnBMRjhXTVRaVFFsdkVaeEJZZGVPaWw4XzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS83Nzk5MjgtODgxYy00MzNhLWIyNDMt
YzlmNTdlOTU5ZWYxLzEvZTMxS0dfOGRhZC04bnk0UEZ0YlQyOTdIN1N3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS83Nzk5MjgtODgxYy00MzNhLWIyNDMtYzlmNTdlOTU5ZWYx
LzEvQnBMRjhXTVRaVFFsdkVaeEJZZGVPaWw4XzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATVt/MA0G
CSqGSIb3DQEBCwUAA4IBAQAUpn7a2AwzlQ7naijgfY/meviZElpkJOqzSOk6IcbQ
muZObKZKopKUSF7ZYzF7UsTulr/yUh5KcurwN8kziyrS00fgSS4Rpk1leszUcjuR
eJtIo83fJxm1sl102uv1H+JWWZp8Q5SzVTig2cmc03K9rh0MbcCR9TU/lJ8ec5j2
QNpjdAgjIJp5aKFBtiWxpEOGxfaQuMz76gqiywkoMdFwZTbaMz1XfuPWX5MNO8mZ
R+R2uFbmAXiWjQb3o176IpN9aeojNuIvQc8tU60/1qSOywjKkYdTocjCpqk4p/Eo
PHL7VT8m6VSL/XtPbent0+TVvjUKonPps6o6Vp/R1tL3
-----END CERTIFICATE-----
Generated at Mon Apr 7 22:19:06 2025 by rpki-client