Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/xsFDhAZJurVFLNSpvCJf1kS8dwM.roa
File: xsFDhAZJurVFLNSpvCJf1kS8dwM.roa (raw, json)
Hash identifier: wMuwURUbdvicot2CMjliv2z3rDNvHfV1WIAmLSMG/Bo=
Subject key identifier: C6:C1:43:84:06:49:BA:B5:45:2C:D4:A9:BC:22:5F:D6:44:BC:77:03
Certificate issuer: /CN=ca9ea5167807b7085b51310ca60dbf2b91982fc7
Certificate serial: 019422FC4A1FF0A86A9DBEDB5563126975E8
Authority key identifier: CA:9E:A5:16:78:07:B7:08:5B:51:31:0C:A6:0D:BF:2B:91:98:2F:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yp6lFngHtwhbUTEMpg2_K5GYL8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/xsFDhAZJurVFLNSpvCJf1kS8dwM.roa
Signing time: Wed 01 Jan 2025 17:49:06 +0000
ROA not before: Wed 01 Jan 2025 17:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197935
IP address blocks: 91.227.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/yp6lFngHtwhbUTEMpg2_K5GYL8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/yp6lFngHtwhbUTEMpg2_K5GYL8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/yp6lFngHtwhbUTEMpg2_K5GYL8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:4a:1f:f0:a8:6a:9d:be:db:55:63:12:69:75:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca9ea5167807b7085b51310ca60dbf2b91982fc7
Validity
Not Before: Jan 1 17:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c6c143840649bab5452cd4a9bc225fd644bc7703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:9f:22:ef:ea:01:0d:d7:12:08:a3:c4:89:0c:
09:9b:29:e1:d5:53:7c:8f:e1:07:2f:2c:c5:3a:35:
3b:24:92:27:f0:f5:fc:4c:f3:f4:a6:63:c2:98:5c:
d3:f0:1c:79:59:2e:09:41:38:df:dd:f5:ba:40:08:
a6:1a:39:8c:86:47:fe:bb:7a:fa:68:fd:50:3d:9b:
99:6a:06:6f:b6:6b:55:16:21:69:75:5a:92:88:8d:
47:4d:11:71:b8:1f:22:20:7e:df:e1:5b:65:b3:a0:
6d:f9:ca:cd:b3:a8:89:fc:1b:a3:19:5a:e1:5d:14:
57:2b:3a:86:96:1a:81:4b:f5:0a:e3:ed:1d:de:ba:
00:a9:0b:37:a8:a3:48:25:00:9e:be:86:cb:a9:c0:
d7:78:ba:f8:53:25:17:9a:9f:d0:df:02:3c:48:5a:
71:3c:49:7d:24:5f:25:2d:eb:ed:ab:6c:50:2b:e3:
a2:3c:31:0e:09:d4:4b:52:de:3c:e0:3e:2d:a7:65:
a0:bb:8b:36:f6:be:e6:ac:55:bb:2d:64:ad:ce:db:
34:cf:27:4c:50:b2:88:ef:f9:58:26:fb:f0:40:19:
b3:25:77:7c:64:1d:46:e3:78:da:75:db:9a:97:e6:
30:96:ff:fe:4d:b3:e1:19:ae:9a:c4:f3:42:4c:74:
fd:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:C1:43:84:06:49:BA:B5:45:2C:D4:A9:BC:22:5F:D6:44:BC:77:03
X509v3 Authority Key Identifier:
keyid:CA:9E:A5:16:78:07:B7:08:5B:51:31:0C:A6:0D:BF:2B:91:98:2F:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yp6lFngHtwhbUTEMpg2_K5GYL8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/xsFDhAZJurVFLNSpvCJf1kS8dwM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/yp6lFngHtwhbUTEMpg2_K5GYL8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.227.76.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:51:22:d8:b5:bb:12:24:3b:5d:29:38:76:ea:05:e0:7a:fc:
ac:60:c9:dc:cf:8c:cd:23:8d:91:f0:3f:fa:ca:57:c8:65:d0:
19:ec:c7:59:7e:46:e0:02:4b:6d:e8:d5:2e:8b:73:22:54:cf:
fd:e2:55:7e:21:30:31:7a:a4:0c:c9:0a:a0:df:76:d5:6c:7c:
d9:0f:be:f2:18:69:fd:60:61:ad:b0:46:ec:5d:20:22:cb:93:
46:58:3c:ed:5a:5f:cb:29:c2:d7:ec:9d:2a:77:e2:b1:d9:ed:
b3:81:4d:5a:c7:2f:f3:90:8f:65:69:79:1b:bf:f5:43:f2:f1:
88:5f:ac:18:ba:25:cf:9f:99:6c:50:48:20:ef:87:52:41:7d:
10:91:87:a1:11:f9:26:da:31:ea:92:d6:88:ac:24:c6:64:50:
6e:c1:ad:6a:a9:2e:0f:e5:31:e6:6b:d5:3a:ab:46:6f:05:f8:
e5:df:fe:e7:97:13:41:33:fb:2b:a5:0a:38:7c:fe:1d:be:a3:
76:9f:ed:c0:cd:4c:3d:67:3e:85:72:23:30:b3:76:75:1c:15:
09:b8:ae:96:c0:32:28:52:25:5f:4f:1f:1b:b1:5d:e6:de:87:
3d:11:3a:0a:ca:88:aa:40:eb:14:19:49:49:79:c5:94:90:31:
e2:d2:65:70
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQi/Eof8Khqnb7bVWMSaXXoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhOWVhNTE2NzgwN2I3MDg1YjUxMzEwY2E2MGRiZjJiOTE5
ODJmYzcwHhcNMjUwMTAxMTc0OTA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNmMxNDM4NDA2NDliYWI1NDUyY2Q0YTliYzIyNWZkNjQ0YmM3NzAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6J8i7+oBDdcSCKPEiQwJmynh1VN8
j+EHLyzFOjU7JJIn8PX8TPP0pmPCmFzT8Bx5WS4JQTjf3fW6QAimGjmMhkf+u3r6
aP1QPZuZagZvtmtVFiFpdVqSiI1HTRFxuB8iIH7f4Vtls6Bt+crNs6iJ/BujGVrh
XRRXKzqGlhqBS/UK4+0d3roAqQs3qKNIJQCevobLqcDXeLr4UyUXmp/Q3wI8SFpx
PEl9JF8lLevtq2xQK+OiPDEOCdRLUt484D4tp2Wgu4s29r7mrFW7LWStzts0zydM
ULKI7/lYJvvwQBmzJXd8ZB1G43jaddual+Ywlv/+TbPhGa6axPNCTHT9yQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMbBQ4QGSbq1RSzUqbwiX9ZEvHcDMB8GA1UdIwQY
MBaAFMqepRZ4B7cIW1ExDKYNvyuRmC/HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXA2bEZuZ0h0d2hiVVRFTXBnMl9LNUdZTDhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9iZTI1NDAtNDhiYi00YzY2LThiMjQt
Mjc0MWIzNmI3NWRlLzEveHNGRGhBWkp1clZGTE5TcHZDSmYxa1M4ZHdNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC9iZTI1NDAtNDhiYi00YzY2LThiMjQtMjc0MWIzNmI3NWRl
LzEveXA2bEZuZ0h0d2hiVVRFTXBnMl9LNUdZTDhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+NMMA0G
CSqGSIb3DQEBCwUAA4IBAQA7USLYtbsSJDtdKTh26gXgevysYMncz4zNI42R8D/6
ylfIZdAZ7MdZfkbgAktt6NUui3MiVM/94lV+ITAxeqQMyQqg33bVbHzZD77yGGn9
YGGtsEbsXSAiy5NGWDztWl/LKcLX7J0qd+Kx2e2zgU1axy/zkI9laXkbv/VD8vGI
X6wYuiXPn5lsUEgg74dSQX0QkYehEfkm2jHqktaIrCTGZFBuwa1qqS4P5THma9U6
q0ZvBfjl3/7nlxNBM/srpQo4fP4dvqN2n+3AzUw9Zz6FciMws3Z1HBUJuK6WwDIo
UiVfTx8bsV3m3oc9EToKyoiqQOsUGUlJecWUkDHi0mVw
-----END CERTIFICATE-----
Generated at Tue Apr 22 22:46:38 2025 by rpki-client