Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/GaOIxHYrGt_x1xNOwfVe1mM1uls.roa
File: GaOIxHYrGt_x1xNOwfVe1mM1uls.roa (raw, json)
Hash identifier: 6h4qg1f7k4UwgHPBRYv76SUwfsVkd9pZo7L1FeBQMpI=
Subject key identifier: 19:A3:88:C4:76:2B:1A:DF:F1:D7:13:4E:C1:F5:5E:D6:63:35:BA:5B
Certificate issuer: /CN=f72e9c9146ed7bc58c85cdab6eb858e42286eef4
Certificate serial: 0194266C2806756EB7378547E844CD787540
Authority key identifier: F7:2E:9C:91:46:ED:7B:C5:8C:85:CD:AB:6E:B8:58:E4:22:86:EE:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9y6ckUbte8WMhc2rbrhY5CKG7vQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/GaOIxHYrGt_x1xNOwfVe1mM1uls.roa
Signing time: Thu 02 Jan 2025 09:50:09 +0000
ROA not before: Thu 02 Jan 2025 09:50:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15083
IP address blocks: 91.208.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/9y6ckUbte8WMhc2rbrhY5CKG7vQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/9y6ckUbte8WMhc2rbrhY5CKG7vQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9y6ckUbte8WMhc2rbrhY5CKG7vQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:28:06:75:6e:b7:37:85:47:e8:44:cd:78:75:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f72e9c9146ed7bc58c85cdab6eb858e42286eef4
Validity
Not Before: Jan 2 09:50:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=19a388c4762b1adff1d7134ec1f55ed66335ba5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cf:58:24:e9:e6:a8:18:1d:a3:c8:3c:8b:a1:
2c:d5:44:f2:4f:89:11:8d:e2:38:46:7c:35:a7:61:
b8:ea:e8:1d:e7:9b:ef:af:a8:b9:2e:dc:7b:f3:cc:
dc:c5:c9:5d:20:b8:6f:2b:a3:1a:a8:33:e2:19:e0:
cb:dc:d0:a5:69:81:0b:d5:18:1e:ec:95:11:6e:14:
e1:46:47:5f:85:3e:52:e7:d9:55:ad:44:66:f6:e1:
06:c2:7f:83:16:9b:af:05:df:10:27:79:11:dc:cc:
4c:ea:83:4d:32:c0:94:9e:57:8d:39:c4:5c:d4:db:
ef:ec:c5:a6:ae:a4:b5:d1:36:ec:d6:22:79:97:e6:
5a:cb:9c:a6:da:e5:3c:2f:37:6c:19:c4:c4:93:44:
ea:18:d9:3f:f7:3d:aa:3f:66:67:f3:2f:cf:ee:d6:
32:32:eb:33:c4:5b:52:0e:52:a5:a3:0c:f9:76:ce:
6d:00:25:8e:9b:c1:b7:0a:16:9d:32:43:31:75:8f:
99:8d:98:65:22:40:ec:6c:91:a0:da:92:5d:7d:d8:
e1:f0:e7:d0:59:d9:b6:cf:53:7c:c5:54:b6:09:92:
a9:73:cf:7b:d7:84:0b:f0:84:b7:55:da:ab:db:08:
a2:d8:9f:f3:2f:ed:84:97:7f:15:10:86:a7:f9:42:
f1:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:A3:88:C4:76:2B:1A:DF:F1:D7:13:4E:C1:F5:5E:D6:63:35:BA:5B
X509v3 Authority Key Identifier:
keyid:F7:2E:9C:91:46:ED:7B:C5:8C:85:CD:AB:6E:B8:58:E4:22:86:EE:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9y6ckUbte8WMhc2rbrhY5CKG7vQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/GaOIxHYrGt_x1xNOwfVe1mM1uls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/9y6ckUbte8WMhc2rbrhY5CKG7vQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.108.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:23:d9:06:7a:55:1c:dd:de:62:c0:09:45:6d:6b:a7:bb:3a:
ff:c1:9e:b4:e9:e4:2f:ae:ff:e9:82:fb:f1:cf:9a:3e:a5:4e:
f4:a9:15:5b:df:39:4b:6f:be:77:62:52:06:d9:e7:bb:41:63:
b7:f2:3d:16:d8:c1:42:6f:30:18:e9:47:33:a7:f2:aa:65:f1:
5f:44:0f:54:80:28:30:f4:05:25:0d:aa:05:27:5f:5b:3a:37:
be:8a:91:51:eb:03:c5:8c:89:69:ca:9d:38:11:05:78:56:ac:
25:a2:b1:67:67:22:ba:51:4b:a1:f7:9a:9e:a2:a3:37:cb:c2:
4a:13:61:af:5f:5f:8f:05:98:72:fa:30:ce:e3:0e:fb:b1:17:
4a:7f:aa:bb:5a:22:a0:ac:bb:8a:0d:4b:1a:53:ac:e2:e3:73:
96:15:61:5c:0f:1c:fc:ae:7c:a0:34:16:66:a3:b8:26:31:70:
99:d2:c4:de:2d:c2:90:9f:06:fb:c9:e1:dd:cc:96:a5:73:85:
35:4b:00:8a:65:b3:af:8e:9f:bc:83:3a:a4:56:f1:79:aa:fb:
2f:14:14:55:3e:0a:be:a3:a9:be:ae:38:3c:d2:db:af:ad:75:
c9:5a:0a:52:bd:9d:da:73:ea:c5:4d:b2:40:62:f7:9a:2e:ee:
ef:64:c6:17
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQmbCgGdW63N4VH6ETNeHVAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3MmU5YzkxNDZlZDdiYzU4Yzg1Y2RhYjZlYjg1OGU0MjI4
NmVlZjQwHhcNMjUwMTAyMDk1MDA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOWEzODhjNDc2MmIxYWRmZjFkNzEzNGVjMWY1NWVkNjYzMzViYTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqs9YJOnmqBgdo8g8i6Es1UTyT4kR
jeI4Rnw1p2G46ugd55vvr6i5Ltx788zcxcldILhvK6MaqDPiGeDL3NClaYEL1Rge
7JURbhThRkdfhT5S59lVrURm9uEGwn+DFpuvBd8QJ3kR3MxM6oNNMsCUnleNOcRc
1Nvv7MWmrqS10Tbs1iJ5l+Zay5ym2uU8LzdsGcTEk0TqGNk/9z2qP2Zn8y/P7tYy
MuszxFtSDlKlowz5ds5tACWOm8G3ChadMkMxdY+ZjZhlIkDsbJGg2pJdfdjh8OfQ
Wdm2z1N8xVS2CZKpc89714QL8IS3Vdqr2wii2J/zL+2El38VEIan+ULxQQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBmjiMR2Kxrf8dcTTsH1XtZjNbpbMB8GA1UdIwQY
MBaAFPcunJFG7XvFjIXNq264WOQihu70MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXk2Y2tVYnRlOFdNaGMycmJyaFk1Q0tHN3ZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC81ZWZlZjQtNjI5OS00N2NjLWE5Y2Et
ZDUxNmYwZTE0ODdiLzEvR2FPSXhIWXJHdF94MXhOT3dmVmUxbU0xdWxzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC81ZWZlZjQtNjI5OS00N2NjLWE5Y2EtZDUxNmYwZTE0ODdi
LzEvOXk2Y2tVYnRlOFdNaGMycmJyaFk1Q0tHN3ZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9BsMA0G
CSqGSIb3DQEBCwUAA4IBAQAPI9kGelUc3d5iwAlFbWunuzr/wZ606eQvrv/pgvvx
z5o+pU70qRVb3zlLb753YlIG2ee7QWO38j0W2MFCbzAY6Uczp/KqZfFfRA9UgCgw
9AUlDaoFJ19bOje+ipFR6wPFjIlpyp04EQV4VqwlorFnZyK6UUuh95qeoqM3y8JK
E2GvX1+PBZhy+jDO4w77sRdKf6q7WiKgrLuKDUsaU6zi43OWFWFcDxz8rnygNBZm
o7gmMXCZ0sTeLcKQnwb7yeHdzJalc4U1SwCKZbOvjp+8gzqkVvF5qvsvFBRVPgq+
o6m+rjg80tuvrXXJWgpSvZ3ac+rFTbJAYveaLu7vZMYX
-----END CERTIFICATE-----
Generated at Sat Apr 5 13:22:26 2025 by rpki-client