Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/cvViwCnJHbOmjnS2VIR4xe7m6w0.roa
File: cvViwCnJHbOmjnS2VIR4xe7m6w0.roa (raw, json)
Hash identifier: fo4ubxrjnffY7zW1GcJNKmk2YbysHvDvLAY+YQK8Gj8=
Subject key identifier: 72:F5:62:C0:29:C9:1D:B3:A6:8E:74:B6:54:84:78:C5:EE:E6:EB:0D
Certificate issuer: /CN=cc323163bbb465f2a0fa2f93fa50ef3b0d4c6a9a
Certificate serial: 01941FF9FE46C858A646C6BC582FABD50086
Authority key identifier: CC:32:31:63:BB:B4:65:F2:A0:FA:2F:93:FA:50:EF:3B:0D:4C:6A:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/cvViwCnJHbOmjnS2VIR4xe7m6w0.roa
Signing time: Wed 01 Jan 2025 03:47:44 +0000
ROA not before: Wed 01 Jan 2025 03:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48415
IP address blocks: 91.223.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:f9:fe:46:c8:58:a6:46:c6:bc:58:2f:ab:d5:00:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc323163bbb465f2a0fa2f93fa50ef3b0d4c6a9a
Validity
Not Before: Jan 1 03:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=72f562c029c91db3a68e74b6548478c5eee6eb0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:da:ef:19:58:f3:44:6d:a7:4e:b2:86:fa:3b:
68:bf:ef:fb:7f:ac:c9:98:5a:a1:f2:41:09:c0:ef:
56:f6:a8:2b:42:bd:a6:35:95:86:a2:cb:3c:05:60:
bb:f8:08:ce:ec:15:14:c9:26:e9:84:3a:71:0c:6d:
9e:eb:89:a1:7c:76:ca:67:e3:f5:72:ac:3f:a6:49:
6b:46:a8:ec:7d:98:48:01:df:e1:18:64:c2:3d:65:
be:de:7d:25:38:8a:1c:c6:6a:79:2c:74:b6:2d:94:
55:7a:8a:81:40:c8:45:35:79:a0:7f:14:7c:6d:df:
fc:d8:87:d0:d4:f3:84:cf:36:58:28:55:ed:d3:21:
af:74:6a:03:9a:c7:ec:a3:c8:a2:f6:6e:7e:4d:18:
72:5b:8d:fa:0f:78:59:1a:99:ac:b6:ba:05:1c:c7:
7a:f4:15:31:0f:51:1d:14:a1:76:be:1b:28:9c:ab:
33:35:cf:57:ef:1f:f7:50:23:31:22:cd:f1:a6:fb:
76:d9:58:e4:68:24:4f:43:57:0a:47:34:fd:76:92:
1d:12:4d:68:3b:60:ec:46:f4:e4:9a:05:aa:cd:5f:
4a:8a:bb:f9:99:af:ed:6d:29:26:93:b5:a7:ac:b8:
3f:a9:ff:67:17:6b:06:18:ed:09:16:e0:41:4f:e3:
67:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:F5:62:C0:29:C9:1D:B3:A6:8E:74:B6:54:84:78:C5:EE:E6:EB:0D
X509v3 Authority Key Identifier:
keyid:CC:32:31:63:BB:B4:65:F2:A0:FA:2F:93:FA:50:EF:3B:0D:4C:6A:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/cvViwCnJHbOmjnS2VIR4xe7m6w0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.245.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:9b:85:a3:7a:49:7b:04:4a:3b:cc:1c:62:f9:91:0f:ba:99:
35:fa:5f:e0:ce:45:40:6f:67:96:e8:48:36:c5:aa:34:d7:01:
49:55:3f:17:c0:23:ce:13:18:4b:b5:27:8f:59:fb:bb:27:1d:
19:f5:31:6b:91:1e:25:a5:5b:71:04:ec:9c:af:2b:20:76:8b:
bc:20:e9:01:ab:41:64:7e:d1:75:d1:e3:21:a0:c1:06:70:19:
aa:47:2a:fe:f3:00:da:00:9c:69:08:fe:c1:f2:2d:fa:74:f1:
07:6c:0d:45:78:db:58:1c:7f:3f:1e:79:b6:c9:a4:f4:15:51:
cb:2f:ba:b4:a6:da:43:ed:64:98:a8:64:5c:97:ff:e2:94:6f:
e4:15:96:4c:8a:39:82:b5:b6:c1:7c:cb:bf:86:12:bf:8f:ab:
08:de:53:84:6f:3c:c6:bf:4a:9b:64:d3:d2:34:4b:0d:16:e8:
06:e6:aa:71:e3:4d:44:43:50:8d:73:a4:cc:c6:47:be:89:0e:
1b:d6:68:da:a0:a6:c5:f3:e2:8b:6d:99:5b:8d:cc:90:dc:0c:
3a:01:ac:08:44:04:34:21:66:fb:48:07:aa:48:c9:54:b2:a5:
1d:8d:89:7a:45:5d:a9:44:03:23:b4:7f:04:c7:9f:a9:84:64:
b2:b9:bc:6a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQf+f5GyFimRsa8WC+r1QCGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjMzIzMTYzYmJiNDY1ZjJhMGZhMmY5M2ZhNTBlZjNiMGQ0
YzZhOWEwHhcNMjUwMTAxMDM0NzQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MmY1NjJjMDI5YzkxZGIzYTY4ZTc0YjY1NDg0NzhjNWVlZTZlYjBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNrvGVjzRG2nTrKG+jtov+/7f6zJ
mFqh8kEJwO9W9qgrQr2mNZWGoss8BWC7+AjO7BUUySbphDpxDG2e64mhfHbKZ+P1
cqw/pklrRqjsfZhIAd/hGGTCPWW+3n0lOIocxmp5LHS2LZRVeoqBQMhFNXmgfxR8
bd/82IfQ1POEzzZYKFXt0yGvdGoDmsfso8ii9m5+TRhyW436D3hZGpmstroFHMd6
9BUxD1EdFKF2vhsonKszNc9X7x/3UCMxIs3xpvt22VjkaCRPQ1cKRzT9dpIdEk1o
O2DsRvTkmgWqzV9Kirv5ma/tbSkmk7WnrLg/qf9nF2sGGO0JFuBBT+NnAQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHL1YsApyR2zpo50tlSEeMXu5usNMB8GA1UdIwQY
MBaAFMwyMWO7tGXyoPovk/pQ7zsNTGqaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekRJeFk3dTBaZktnLWktVC1sRHZPdzFNYXBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi83MTNiZDctZjczYi00NjE0LThlOTIt
MWVmMDA5MGI3MTU0LzEvY3ZWaXdDbkpIYk9tam5TMlZJUjR4ZTdtNncwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi83MTNiZDctZjczYi00NjE0LThlOTItMWVmMDA5MGI3MTU0
LzEvekRJeFk3dTBaZktnLWktVC1sRHZPdzFNYXBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9/1MA0G
CSqGSIb3DQEBCwUAA4IBAQA8m4Wjekl7BEo7zBxi+ZEPupk1+l/gzkVAb2eW6Eg2
xao01wFJVT8XwCPOExhLtSePWfu7Jx0Z9TFrkR4lpVtxBOycrysgdou8IOkBq0Fk
ftF10eMhoMEGcBmqRyr+8wDaAJxpCP7B8i36dPEHbA1FeNtYHH8/Hnm2yaT0FVHL
L7q0ptpD7WSYqGRcl//ilG/kFZZMijmCtbbBfMu/hhK/j6sI3lOEbzzGv0qbZNPS
NEsNFugG5qpx401EQ1CNc6TMxke+iQ4b1mjaoKbF8+KLbZlbjcyQ3Aw6AawIRAQ0
IWb7SAeqSMlUsqUdjYl6RV2pRAMjtH8Ex5+phGSyubxq
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:56:47 2025 by rpki-client