Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/kP9aQuI7wcHVXgn-kDSiHGt-vho.roa
File: kP9aQuI7wcHVXgn-kDSiHGt-vho.roa (raw, json)
Hash identifier: bFJwlfQvVNTaFKApBOi3yPTTEB3m1CFWEgGCK1vAL44=
Subject key identifier: 90:FF:5A:42:E2:3B:C1:C1:D5:5E:09:FE:90:34:A2:1C:6B:7E:BE:1A
Certificate issuer: /CN=b0dfafd36730396fe338e772dadbe4c3c85cd952
Certificate serial: 019425FC9FF544A8D900D7408943B70D4135
Authority key identifier: B0:DF:AF:D3:67:30:39:6F:E3:38:E7:72:DA:DB:E4:C3:C8:5C:D9:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sN-v02cwOW_jOOdy2tvkw8hc2VI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/kP9aQuI7wcHVXgn-kDSiHGt-vho.roa
Signing time: Thu 02 Jan 2025 07:48:20 +0000
ROA not before: Thu 02 Jan 2025 07:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42295
IP address blocks: 93.152.231.0/24 maxlen: 24
93.152.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.mft
rsync://rpki.ripe.net/repository/DEFAULT/sN-v02cwOW_jOOdy2tvkw8hc2VI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:9f:f5:44:a8:d9:00:d7:40:89:43:b7:0d:41:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0dfafd36730396fe338e772dadbe4c3c85cd952
Validity
Not Before: Jan 2 07:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=90ff5a42e23bc1c1d55e09fe9034a21c6b7ebe1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:07:97:f4:0e:f6:38:d8:ab:30:45:05:df:bc:
e0:28:b7:70:78:65:12:0b:1e:db:0c:3f:e8:a3:09:
eb:5f:eb:6f:de:bd:b2:2d:ca:03:92:d3:22:a4:34:
5c:50:98:01:a3:36:27:c5:aa:2d:15:63:23:8f:bb:
88:37:80:db:71:0d:22:2f:ea:be:21:6d:ec:25:2a:
8a:a8:a1:9c:b9:f6:4d:08:2b:34:ea:46:ea:bc:4e:
ed:ff:00:8b:03:f2:e7:07:46:54:a3:5b:e4:6a:79:
2f:85:ee:ca:d8:e6:45:fa:bf:dd:12:e5:7e:5a:13:
4c:54:68:b0:e1:07:56:e6:df:1d:16:13:38:b4:7a:
1a:d0:0b:6b:d0:2c:fe:64:20:22:6e:63:30:cd:23:
02:17:27:1c:5c:bb:fb:5b:f8:53:fe:16:7a:ac:98:
31:a5:50:d3:62:41:1d:27:97:a3:70:32:ec:9a:45:
6f:7a:ff:13:30:87:06:73:ce:9f:54:ad:d5:e8:84:
47:cf:28:00:d9:29:22:b9:bb:56:05:72:59:0f:4c:
b5:16:d9:5c:9e:db:f4:e3:a6:bd:14:4e:fd:00:02:
8f:49:85:95:67:c1:3a:68:65:07:2d:00:af:f8:be:
45:fa:ef:58:2f:ab:1b:b1:eb:db:ab:d1:e8:b9:92:
11:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:FF:5A:42:E2:3B:C1:C1:D5:5E:09:FE:90:34:A2:1C:6B:7E:BE:1A
X509v3 Authority Key Identifier:
keyid:B0:DF:AF:D3:67:30:39:6F:E3:38:E7:72:DA:DB:E4:C3:C8:5C:D9:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sN-v02cwOW_jOOdy2tvkw8hc2VI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/kP9aQuI7wcHVXgn-kDSiHGt-vho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.152.231.0-93.152.232.255
Signature Algorithm: sha256WithRSAEncryption
a4:d0:f9:0d:27:a0:b1:3d:dd:5f:08:7f:d3:d6:91:cd:df:eb:
bf:dc:f3:d8:96:e5:e2:ce:4d:ca:46:4c:e2:ab:83:a9:4e:f3:
61:85:8f:8f:23:39:f2:78:81:db:af:e2:23:2c:49:45:ff:b3:
bd:bd:55:ee:fc:95:7c:8d:1d:95:b8:41:32:d7:84:08:a7:8c:
29:16:a2:d0:a9:97:b9:44:27:16:8e:f9:16:3a:e4:75:a1:e4:
0f:3c:36:07:9e:94:6e:b3:30:b1:a7:0b:1e:bf:5e:d9:2f:b1:
21:60:ac:49:fc:3d:70:4d:5c:a4:a4:54:bb:32:3c:88:ac:0f:
7c:e0:0f:5a:d2:57:e9:0d:75:b8:09:20:84:bc:c1:40:2a:14:
61:5b:c8:76:20:df:1b:30:0f:70:c1:28:a3:8e:9a:b4:78:b9:
f3:eb:b0:22:8c:a0:f6:bc:3a:7f:30:d3:46:fa:46:ad:fa:d8:
40:03:d8:40:89:cd:7f:b1:82:b3:b3:23:44:6a:fc:78:56:a5:
17:e2:ff:8c:6b:d3:b5:a0:c3:20:46:e6:e9:89:92:48:40:2a:
e6:59:ac:30:ff:59:b4:e2:32:50:45:2e:e7:6e:b2:3f:ad:5e:
5d:c3:da:f5:84:fd:5e:37:ff:3e:ac:eb:d6:4f:6f:f0:24:83:
82:a6:60:db
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZQl/J/1RKjZANdAiUO3DUE1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwZGZhZmQzNjczMDM5NmZlMzM4ZTc3MmRhZGJlNGMzYzg1
Y2Q5NTIwHhcNMjUwMTAyMDc0ODIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MGZmNWE0MmUyM2JjMWMxZDU1ZTA5ZmU5MDM0YTIxYzZiN2ViZTFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogeX9A72ONirMEUF37zgKLdweGUS
Cx7bDD/oownrX+tv3r2yLcoDktMipDRcUJgBozYnxaotFWMjj7uIN4DbcQ0iL+q+
IW3sJSqKqKGcufZNCCs06kbqvE7t/wCLA/LnB0ZUo1vkankvhe7K2OZF+r/dEuV+
WhNMVGiw4QdW5t8dFhM4tHoa0Atr0Cz+ZCAibmMwzSMCFyccXLv7W/hT/hZ6rJgx
pVDTYkEdJ5ejcDLsmkVvev8TMIcGc86fVK3V6IRHzygA2SkiubtWBXJZD0y1Ftlc
ntv046a9FE79AAKPSYWVZ8E6aGUHLQCv+L5F+u9YL6sbsevbq9HouZIRewIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFJD/WkLiO8HB1V4J/pA0ohxrfr4aMB8GA1UdIwQY
MBaAFLDfr9NnMDlv4zjnctrb5MPIXNlSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc04tdjAyY3dPV19qT09keTJ0dmt3OGhjMlZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mNjk2ZmQtNGQ5ZC00ZTI4LTkyNmUt
MGFhNWI0NmJmOGFhLzEva1A5YVF1STd3Y0hWWGduLWtEU2lIR3QtdmhvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9mNjk2ZmQtNGQ5ZC00ZTI4LTkyNmUtMGFhNWI0NmJmOGFh
LzEvc04tdjAyY3dPV19qT09keTJ0dmt3OGhjMlZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABdmOcD
BABdmOgwDQYJKoZIhvcNAQELBQADggEBAKTQ+Q0noLE93V8If9PWkc3f67/c89iW
5eLOTcpGTOKrg6lO82GFj48jOfJ4gduv4iMsSUX/s729Ve78lXyNHZW4QTLXhAin
jCkWotCpl7lEJxaO+RY65HWh5A88NgeelG6zMLGnCx6/XtkvsSFgrEn8PXBNXKSk
VLsyPIisD3zgD1rSV+kNdbgJIIS8wUAqFGFbyHYg3xswD3DBKKOOmrR4ufPrsCKM
oPa8On8w00b6Rq362EAD2ECJzX+xgrOzI0Rq/HhWpRfi/4xr07WgwyBG5umJkkhA
KuZZrDD/WbTiMlBFLudusj+tXl3D2vWE/V43/z6s69ZPb/Akg4KmYNs=
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:55:44 2025 by rpki-client