Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/eAUsqio3gBfmNb6-utIzUr7aZng.roa
File: eAUsqio3gBfmNb6-utIzUr7aZng.roa (raw, json)
Hash identifier: uitRV+QEa1rnNZo9/bqmtkICrxnt46Ad8T68cujpvFM=
Subject key identifier: 78:05:2C:AA:2A:37:80:17:E6:35:BE:BE:BA:D2:33:52:BE:DA:66:78
Certificate issuer: /CN=a1dc0630e96096de4822d1f51ef80c6fff54191b
Certificate serial: 019749947E716001323F0939C6C8DEAFF7DC
Authority key identifier: A1:DC:06:30:E9:60:96:DE:48:22:D1:F5:1E:F8:0C:6F:FF:54:19:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odwGMOlglt5IItH1HvgMb_9UGRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/eAUsqio3gBfmNb6-utIzUr7aZng.roa
Signing time: Sat 07 Jun 2025 08:49:17 +0000
ROA not before: Sat 07 Jun 2025 08:49:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60223
IP address blocks: 91.227.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/odwGMOlglt5IItH1HvgMb_9UGRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/odwGMOlglt5IItH1HvgMb_9UGRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/odwGMOlglt5IItH1HvgMb_9UGRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:94:7e:71:60:01:32:3f:09:39:c6:c8:de:af:f7:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1dc0630e96096de4822d1f51ef80c6fff54191b
Validity
Not Before: Jun 7 08:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=78052caa2a378017e635bebebad23352beda6678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a7:f6:55:f2:10:b7:86:8d:f8:24:dc:99:d9:
0a:e6:f0:55:08:ec:97:86:66:78:64:6e:8d:d8:ba:
b2:e4:50:03:66:22:60:f4:8e:51:f2:c2:bb:8c:13:
55:24:8a:00:c5:08:55:46:65:23:4e:dc:bb:96:05:
01:2a:82:66:7e:01:3a:f9:65:06:f9:9a:a7:15:23:
0d:e5:88:b9:58:f0:c5:36:73:59:8b:30:89:14:5e:
2f:14:81:a6:c1:58:75:b1:52:7d:59:14:00:2d:51:
43:9b:0b:e8:2a:91:db:2e:15:d7:42:8e:fa:7b:d7:
37:42:ab:1f:cd:eb:9e:ce:bd:0c:41:0c:98:cc:4a:
7b:a5:19:66:6d:dd:b9:75:8b:24:3b:15:f1:5b:38:
75:20:35:44:84:33:72:7f:31:ae:21:6a:3b:f0:1c:
44:73:d3:fa:5b:99:06:82:8a:97:9a:b9:fd:16:58:
c2:24:fc:d3:4e:9b:70:bc:57:29:64:d6:96:0a:b4:
cd:4d:94:21:bb:ce:d1:01:da:bb:a9:79:6c:1f:9f:
a8:15:71:45:1d:a4:b7:fe:79:d2:72:ce:9e:c1:80:
a4:51:78:3c:b4:7b:14:c0:64:85:a2:c0:3f:ff:cb:
27:65:2b:e8:aa:37:62:33:53:3e:1f:d6:8c:3a:f4:
f4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:05:2C:AA:2A:37:80:17:E6:35:BE:BE:BA:D2:33:52:BE:DA:66:78
X509v3 Authority Key Identifier:
keyid:A1:DC:06:30:E9:60:96:DE:48:22:D1:F5:1E:F8:0C:6F:FF:54:19:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odwGMOlglt5IItH1HvgMb_9UGRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/eAUsqio3gBfmNb6-utIzUr7aZng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/odwGMOlglt5IItH1HvgMb_9UGRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.227.62.0/24
Signature Algorithm: sha256WithRSAEncryption
81:a5:ad:bb:90:7c:b5:c5:94:32:ed:7c:7f:fb:45:1d:7c:3f:
57:3a:cf:d9:98:ca:3a:7c:b3:51:a9:44:4e:1d:e7:4e:69:61:
4f:55:62:97:54:c5:6b:d6:5e:c8:6a:20:24:4e:3d:f2:5a:07:
98:2f:11:78:f1:59:59:a6:b3:0c:9c:3c:30:d4:0c:ec:df:21:
f2:78:6d:2c:96:2b:29:2f:77:25:0f:5f:3e:57:46:42:d0:0b:
25:c3:dc:22:f0:54:46:83:11:bb:83:1f:1d:76:27:74:f9:74:
36:b1:4b:b7:8c:32:d5:e4:76:6a:12:fe:33:25:02:c5:cb:a7:
86:ed:50:ad:83:24:a8:c4:f5:0c:4a:bb:7d:4e:c8:45:94:1a:
0b:4e:a5:28:19:d0:3b:3b:4a:2e:08:0a:21:e3:0c:f5:66:a9:
45:df:55:6a:09:04:01:0c:79:64:d1:88:60:27:e8:f7:a0:e6:
80:ae:07:2d:5d:81:08:15:03:56:0d:de:91:e7:b9:cb:78:6a:
1e:b9:b4:a4:14:51:c2:bf:44:d2:d0:36:98:f5:d2:6e:2f:04:
7d:c6:76:a0:86:17:22:3f:c8:ab:ef:46:b9:dc:17:fa:b6:fb:
d8:8d:ac:e5:71:3a:c0:2f:b2:88:43:3d:68:ea:06:b4:4b:50:
d1:39:e4:12
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZdJlH5xYAEyPwk5xsjer/fcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExZGMwNjMwZTk2MDk2ZGU0ODIyZDFmNTFlZjgwYzZmZmY1
NDE5MWIwHhcNMjUwNjA3MDg0OTE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ODA1MmNhYTJhMzc4MDE3ZTYzNWJlYmViYWQyMzM1MmJlZGE2Njc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtaf2VfIQt4aN+CTcmdkK5vBVCOyX
hmZ4ZG6N2Lqy5FADZiJg9I5R8sK7jBNVJIoAxQhVRmUjTty7lgUBKoJmfgE6+WUG
+ZqnFSMN5Yi5WPDFNnNZizCJFF4vFIGmwVh1sVJ9WRQALVFDmwvoKpHbLhXXQo76
e9c3Qqsfzeuezr0MQQyYzEp7pRlmbd25dYskOxXxWzh1IDVEhDNyfzGuIWo78BxE
c9P6W5kGgoqXmrn9FljCJPzTTptwvFcpZNaWCrTNTZQhu87RAdq7qXlsH5+oFXFF
HaS3/nnScs6ewYCkUXg8tHsUwGSFosA//8snZSvoqjdiM1M+H9aMOvT0qwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHgFLKoqN4AX5jW+vrrSM1K+2mZ4MB8GA1UdIwQY
MBaAFKHcBjDpYJbeSCLR9R74DG//VBkbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2R3R01PbGdsdDVJSXRIMUh2Z01iXzlVR1JzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8zZjkxNTgtNmE5MC00ZTU3LWEyOGYt
M2UwNmEwMTgyNjE0LzEvZUFVc3FpbzNnQmZtTmI2LXV0SXpVcjdhWm5nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8zZjkxNTgtNmE5MC00ZTU3LWEyOGYtM2UwNmEwMTgyNjE0
LzEvb2R3R01PbGdsdDVJSXRIMUh2Z01iXzlVR1JzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+M+MA0G
CSqGSIb3DQEBCwUAA4IBAQCBpa27kHy1xZQy7Xx/+0UdfD9XOs/ZmMo6fLNRqURO
HedOaWFPVWKXVMVr1l7IaiAkTj3yWgeYLxF48VlZprMMnDww1Azs3yHyeG0slisp
L3clD18+V0ZC0Aslw9wi8FRGgxG7gx8ddid0+XQ2sUu3jDLV5HZqEv4zJQLFy6eG
7VCtgySoxPUMSrt9TshFlBoLTqUoGdA7O0ouCAoh4wz1ZqlF31VqCQQBDHlk0Yhg
J+j3oOaArgctXYEIFQNWDd6R57nLeGoeubSkFFHCv0TS0DaY9dJuLwR9xnaghhci
P8ir70a53Bf6tvvYjazlcTrAL7KIQz1o6ga0S1DROeQS
-----END CERTIFICATE-----
Generated at Sun Jun 8 13:33:41 2025 by rpki-client