Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/8o5AYWh-4RXgT7Kh5e_5gWGFnZs.roa
File: 8o5AYWh-4RXgT7Kh5e_5gWGFnZs.roa (raw, json)
Hash identifier: WhyrbQbNYw+ibwL1fIGjF77XjkxU2NCmWVAW1D5cDrM=
Subject key identifier: F2:8E:40:61:68:7E:E1:15:E0:4F:B2:A1:E5:EF:F9:81:61:85:9D:9B
Certificate issuer: /CN=cc9816cafffa56263dd0d74819c94d5402f1bb6d
Certificate serial: 019500C9ABF86A9E721FF26F5BCE482EE232
Authority key identifier: CC:98:16:CA:FF:FA:56:26:3D:D0:D7:48:19:C9:4D:54:02:F1:BB:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zJgWyv_6ViY90NdIGclNVALxu20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/8o5AYWh-4RXgT7Kh5e_5gWGFnZs.roa
Signing time: Thu 13 Feb 2025 19:29:31 +0000
ROA not before: Thu 13 Feb 2025 19:29:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202137
IP address blocks: 91.208.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.mft
rsync://rpki.ripe.net/repository/DEFAULT/zJgWyv_6ViY90NdIGclNVALxu20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:00:c9:ab:f8:6a:9e:72:1f:f2:6f:5b:ce:48:2e:e2:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc9816cafffa56263dd0d74819c94d5402f1bb6d
Validity
Not Before: Feb 13 19:29:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f28e4061687ee115e04fb2a1e5eff98161859d9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:05:8e:84:cd:96:95:71:b3:39:09:b8:ac:f8:
cd:9f:bd:d5:02:24:d7:53:ca:47:5f:c3:c4:69:7c:
45:3a:75:be:27:f7:70:fd:16:dd:29:c2:b0:c1:89:
f4:8d:f0:54:11:70:41:a3:43:35:73:bb:51:41:70:
c2:af:5d:8b:da:78:29:aa:91:da:ac:44:33:8c:fa:
a9:b8:6c:53:ed:8d:91:61:c2:f4:b2:f7:aa:b3:12:
93:4a:36:b6:6e:8f:89:1e:53:78:fe:f1:34:34:f6:
c7:81:3b:54:a0:9c:fb:2b:60:41:48:d4:ce:5e:c4:
58:b3:25:a3:33:c7:6b:fa:c9:29:e4:31:4c:ed:ff:
ad:3a:c2:f6:dd:8f:83:8c:47:28:40:cb:92:05:e3:
26:86:f3:ba:7c:ac:21:7e:ee:e6:a8:84:06:8e:0e:
33:d0:6c:3e:d7:80:96:8f:6d:bc:f3:ed:be:d2:31:
9f:f4:46:eb:fb:ad:c4:9b:4f:cf:d9:25:43:e9:b7:
d1:d3:e0:3b:28:a2:ca:77:b2:62:b4:3a:a0:4e:87:
8d:e6:e9:4e:6b:54:db:9f:26:57:81:e2:c2:df:f2:
09:23:68:16:1f:45:47:90:a3:54:29:e4:74:6e:3a:
51:1e:60:85:ce:9d:29:f8:95:5f:a2:3a:bd:21:84:
8e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:8E:40:61:68:7E:E1:15:E0:4F:B2:A1:E5:EF:F9:81:61:85:9D:9B
X509v3 Authority Key Identifier:
keyid:CC:98:16:CA:FF:FA:56:26:3D:D0:D7:48:19:C9:4D:54:02:F1:BB:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zJgWyv_6ViY90NdIGclNVALxu20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/8o5AYWh-4RXgT7Kh5e_5gWGFnZs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.243.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:0f:88:1a:fb:5d:5f:99:01:71:a8:1d:29:14:a1:37:b2:7f:
82:09:ab:9a:f6:93:72:52:ae:8b:8e:5a:58:98:dc:19:8a:f3:
24:04:e4:ef:62:75:26:48:c2:ee:48:71:56:a0:59:49:c8:c1:
f5:2e:6a:5c:a1:13:8d:48:d8:49:43:c2:fb:1b:75:f5:35:fb:
2d:b0:d3:e9:b5:c2:74:9d:48:cf:9b:d9:4b:56:be:60:a2:da:
97:a2:33:e5:02:5e:3e:4d:fd:15:3d:35:26:84:77:69:05:2f:
01:99:ef:09:0a:75:cc:01:2e:f2:f4:48:01:b0:8d:96:1a:97:
7b:ed:09:ef:96:4c:44:5a:6c:de:17:8d:50:0c:95:82:96:d4:
af:48:fc:2b:41:17:e5:de:d1:1c:03:22:e0:36:fb:9d:70:70:
b6:6b:2a:43:00:7f:d0:3d:1f:84:f8:1b:e6:48:b2:23:42:0a:
82:98:13:63:94:70:ca:4a:5d:35:6a:72:94:f4:b1:fc:32:5d:
0d:c2:3f:2c:b1:a2:9f:62:6f:9f:8b:74:5c:8e:87:07:ee:eb:
69:79:47:f3:85:7b:97:b3:f7:cb:84:ee:76:b5:59:81:f2:49:
e8:ba:6a:d0:c7:24:e7:12:f6:00:04:15:92:7a:9d:79:91:77:
20:2a:cb:ea
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZUAyav4ap5yH/JvW85ILuIyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjOTgxNmNhZmZmYTU2MjYzZGQwZDc0ODE5Yzk0ZDU0MDJm
MWJiNmQwHhcNMjUwMjEzMTkyOTMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMjhlNDA2MTY4N2VlMTE1ZTA0ZmIyYTFlNWVmZjk4MTYxODU5ZDliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAWOhM2WlXGzOQm4rPjNn73VAiTX
U8pHX8PEaXxFOnW+J/dw/RbdKcKwwYn0jfBUEXBBo0M1c7tRQXDCr12L2ngpqpHa
rEQzjPqpuGxT7Y2RYcL0sveqsxKTSja2bo+JHlN4/vE0NPbHgTtUoJz7K2BBSNTO
XsRYsyWjM8dr+skp5DFM7f+tOsL23Y+DjEcoQMuSBeMmhvO6fKwhfu7mqIQGjg4z
0Gw+14CWj2288+2+0jGf9Ebr+63Em0/P2SVD6bfR0+A7KKLKd7JitDqgToeN5ulO
a1TbnyZXgeLC3/IJI2gWH0VHkKNUKeR0bjpRHmCFzp0p+JVfojq9IYSOKQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPKOQGFofuEV4E+yoeXv+YFhhZ2bMB8GA1UdIwQY
MBaAFMyYFsr/+lYmPdDXSBnJTVQC8bttMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekpnV3l2XzZWaVk5ME5kSUdjbE5WQUx4dTIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni80MDdhM2YtNjZjMC00OTc5LWE3MjUt
MDllYjAwMTNmYzI0LzEvOG81QVlXaC00UlhnVDdLaDVlXzVnV0dGblpzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni80MDdhM2YtNjZjMC00OTc5LWE3MjUtMDllYjAwMTNmYzI0
LzEvekpnV3l2XzZWaVk5ME5kSUdjbE5WQUx4dTIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9DzMA0G
CSqGSIb3DQEBCwUAA4IBAQAbD4ga+11fmQFxqB0pFKE3sn+CCaua9pNyUq6LjlpY
mNwZivMkBOTvYnUmSMLuSHFWoFlJyMH1LmpcoRONSNhJQ8L7G3X1NfstsNPptcJ0
nUjPm9lLVr5gotqXojPlAl4+Tf0VPTUmhHdpBS8Bme8JCnXMAS7y9EgBsI2WGpd7
7QnvlkxEWmzeF41QDJWCltSvSPwrQRfl3tEcAyLgNvudcHC2aypDAH/QPR+E+Bvm
SLIjQgqCmBNjlHDKSl01anKU9LH8Ml0Nwj8ssaKfYm+fi3RcjocH7utpeUfzhXuX
s/fLhO52tVmB8knoumrQxyTnEvYABBWSep15kXcgKsvq
-----END CERTIFICATE-----
Generated at Fri Apr 18 02:48:53 2025 by rpki-client