Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/f9twcyYK2by7ABlD3vJjZJJTE9A.roa
File: f9twcyYK2by7ABlD3vJjZJJTE9A.roa (raw, json)
Hash identifier: yE/0XoRiP4N9ruMBiHFcxDsyw4D7EJrDKYC2qthpjzs=
Subject key identifier: 7F:DB:70:73:26:0A:D9:BC:BB:00:19:43:DE:F2:63:64:92:53:13:D0
Certificate issuer: /CN=07f231365985828d5a9663ed1b440624b24fec13
Certificate serial: 019427B585E06C61A3E179D4481D4C5D7F55
Authority key identifier: 07:F2:31:36:59:85:82:8D:5A:96:63:ED:1B:44:06:24:B2:4F:EC:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_IxNlmFgo1almPtG0QGJLJP7BM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/f9twcyYK2by7ABlD3vJjZJJTE9A.roa
Signing time: Thu 02 Jan 2025 15:49:55 +0000
ROA not before: Thu 02 Jan 2025 15:49:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 91.199.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.mft
rsync://rpki.ripe.net/repository/DEFAULT/B_IxNlmFgo1almPtG0QGJLJP7BM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 12:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:85:e0:6c:61:a3:e1:79:d4:48:1d:4c:5d:7f:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07f231365985828d5a9663ed1b440624b24fec13
Validity
Not Before: Jan 2 15:49:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7fdb7073260ad9bcbb001943def26364925313d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f3:3b:ad:f1:d0:c6:0b:77:ba:89:b8:78:d2:
f7:7a:00:25:ab:48:e5:fd:09:4c:ab:e1:9a:71:e0:
0c:7a:65:0f:58:53:cf:a8:21:a4:32:18:10:e5:11:
5f:ec:bb:89:f1:e2:c1:0d:f9:98:b5:d6:c1:a0:ef:
44:a7:09:b6:e3:1d:3b:6a:2c:8f:7a:e7:97:2a:0c:
60:e9:e1:42:5b:a7:96:65:49:26:80:84:87:65:0a:
04:2a:5d:60:dd:45:bf:5e:2e:7a:c8:70:e7:1d:39:
0e:0f:af:cf:cb:5c:97:f0:a0:26:de:7a:28:46:8a:
c2:0b:bf:b0:59:52:42:0f:a0:04:95:46:f8:23:b4:
73:40:ae:52:e6:bf:b5:aa:9e:2c:6a:8a:f3:de:13:
23:1b:1c:b3:9a:e1:39:fc:c4:b0:6c:ec:60:7a:ea:
d0:72:60:01:58:17:fa:cc:e7:30:d5:72:23:22:34:
eb:40:ea:8b:0c:50:69:33:2f:be:61:24:61:04:f0:
96:d2:1a:dc:e0:95:5f:84:6b:97:f6:8a:1d:29:6e:
03:1c:31:d0:ed:1f:7c:32:93:dd:34:4b:68:65:36:
e3:7b:62:e2:d9:78:a7:09:f3:76:b0:1f:5d:7a:ef:
26:bb:5c:b8:6c:eb:d8:e6:57:ca:5d:55:95:4d:19:
ea:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:DB:70:73:26:0A:D9:BC:BB:00:19:43:DE:F2:63:64:92:53:13:D0
X509v3 Authority Key Identifier:
keyid:07:F2:31:36:59:85:82:8D:5A:96:63:ED:1B:44:06:24:B2:4F:EC:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_IxNlmFgo1almPtG0QGJLJP7BM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/f9twcyYK2by7ABlD3vJjZJJTE9A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.47.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:b8:4c:89:28:bd:f0:3f:f6:e1:a4:ee:a6:33:cb:e7:48:ad:
89:cb:8f:4b:54:1b:29:14:0d:08:1e:3b:2f:74:57:bb:79:5f:
db:5c:ff:52:1e:4c:ef:cc:03:8a:6e:3b:61:1b:46:00:74:42:
80:91:ca:72:72:d6:f3:f3:86:1e:68:0e:f7:99:86:74:a3:11:
51:bc:7a:a8:d7:a4:44:c5:26:60:cb:70:c9:cd:43:a2:34:eb:
4e:a6:be:44:e4:e0:ff:ac:cf:e3:02:eb:c0:4d:6f:16:d5:b1:
a8:57:45:74:44:40:d5:be:45:62:d0:9d:66:bc:8c:48:d3:71:
ae:16:ab:45:47:2d:24:e5:9c:41:42:ce:a3:00:c4:28:4d:48:
68:38:8d:a9:33:fa:d2:77:39:ad:c7:58:88:a0:54:9b:65:95:
c3:f2:ff:81:13:68:a6:cc:d5:d2:1c:fd:82:d5:dc:bb:96:81:
ae:9c:68:a9:33:f4:88:ff:1e:2b:04:d3:06:cd:c0:3e:82:37:
53:cd:b6:ad:4b:b8:f0:c7:ae:0b:68:e8:8f:3f:06:a2:0b:9e:
43:f6:68:5e:f8:cd:7a:64:a7:75:5d:09:87:c6:b5:96:3a:95:
ff:da:e0:11:b8:86:33:7d:06:a4:2d:7c:97:52:d4:2d:de:05:
ad:e4:16:ed
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQntYXgbGGj4XnUSB1MXX9VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3ZjIzMTM2NTk4NTgyOGQ1YTk2NjNlZDFiNDQwNjI0YjI0
ZmVjMTMwHhcNMjUwMTAyMTU0OTU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZmRiNzA3MzI2MGFkOWJjYmIwMDE5NDNkZWYyNjM2NDkyNTMxM2QwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/M7rfHQxgt3uom4eNL3egAlq0jl
/QlMq+GaceAMemUPWFPPqCGkMhgQ5RFf7LuJ8eLBDfmYtdbBoO9Epwm24x07aiyP
eueXKgxg6eFCW6eWZUkmgISHZQoEKl1g3UW/Xi56yHDnHTkOD6/Py1yX8KAm3noo
RorCC7+wWVJCD6AElUb4I7RzQK5S5r+1qp4saorz3hMjGxyzmuE5/MSwbOxgeurQ
cmABWBf6zOcw1XIjIjTrQOqLDFBpMy++YSRhBPCW0hrc4JVfhGuX9oodKW4DHDHQ
7R98MpPdNEtoZTbje2Li2XinCfN2sB9deu8mu1y4bOvY5lfKXVWVTRnq0QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH/bcHMmCtm8uwAZQ97yY2SSUxPQMB8GA1UdIwQY
MBaAFAfyMTZZhYKNWpZj7RtEBiSyT+wTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQl9JeE5sbUZnbzFhbG1QdEcwUUdKTEpQN0JNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9lZjVmYjMtM2U1Ni00Yjc3LWFhYzct
MDg1ZmEwYTU2MDUyLzEvZjl0d2N5WUsyYnk3QUJsRDN2SmpaSkpURTlBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9lZjVmYjMtM2U1Ni00Yjc3LWFhYzctMDg1ZmEwYTU2MDUy
LzEvQl9JeE5sbUZnbzFhbG1QdEcwUUdKTEpQN0JNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8cvMA0G
CSqGSIb3DQEBCwUAA4IBAQDFuEyJKL3wP/bhpO6mM8vnSK2Jy49LVBspFA0IHjsv
dFe7eV/bXP9SHkzvzAOKbjthG0YAdEKAkcpyctbz84YeaA73mYZ0oxFRvHqo16RE
xSZgy3DJzUOiNOtOpr5E5OD/rM/jAuvATW8W1bGoV0V0REDVvkVi0J1mvIxI03Gu
FqtFRy0k5ZxBQs6jAMQoTUhoOI2pM/rSdzmtx1iIoFSbZZXD8v+BE2imzNXSHP2C
1dy7loGunGipM/SI/x4rBNMGzcA+gjdTzbatS7jwx64LaOiPPwaiC55D9mhe+M16
ZKd1XQmHxrWWOpX/2uARuIYzfQakLXyXUtQt3gWt5Bbt
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:01:07 2025 by rpki-client