Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/50o06An3k3A8kOiunWV55W1-Ajg.roa
File: 50o06An3k3A8kOiunWV55W1-Ajg.roa (raw, json)
Hash identifier: AcFz8bkfqTGlKpcv2q2Ys5Hm4t2OZ+46UtANIMDmoyM=
Subject key identifier: E7:4A:34:E8:09:F7:93:70:3C:90:E8:AE:9D:65:79:E5:6D:7E:02:38
Certificate issuer: /CN=94ec5d3d4db1484a77e2c8763d74a0bd7c434da9
Certificate serial: 019426D94EF9C7C9E5CD635B96F7551BF07F
Authority key identifier: 94:EC:5D:3D:4D:B1:48:4A:77:E2:C8:76:3D:74:A0:BD:7C:43:4D:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lOxdPU2xSEp34sh2PXSgvXxDTak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/50o06An3k3A8kOiunWV55W1-Ajg.roa
Signing time: Thu 02 Jan 2025 11:49:23 +0000
ROA not before: Thu 02 Jan 2025 11:49:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57126
IP address blocks: 91.230.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/lOxdPU2xSEp34sh2PXSgvXxDTak.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/lOxdPU2xSEp34sh2PXSgvXxDTak.mft
rsync://rpki.ripe.net/repository/DEFAULT/lOxdPU2xSEp34sh2PXSgvXxDTak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 08:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:4e:f9:c7:c9:e5:cd:63:5b:96:f7:55:1b:f0:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94ec5d3d4db1484a77e2c8763d74a0bd7c434da9
Validity
Not Before: Jan 2 11:49:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e74a34e809f793703c90e8ae9d6579e56d7e0238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:10:29:b5:79:42:7c:3c:eb:be:74:f5:7f:75:
21:bc:7d:fa:d8:c8:e4:35:ca:75:76:51:5e:72:c7:
36:92:99:61:0f:a1:2d:ec:54:d0:ab:39:6a:0b:bd:
9b:25:8f:6b:21:59:1a:88:dc:a1:73:09:40:38:0b:
f9:2b:df:11:b2:e1:27:d2:a6:b0:a3:3a:70:ef:68:
4d:c7:38:0b:a1:b9:a7:be:4b:80:c4:74:e0:a4:7c:
d1:ec:38:4d:88:bf:eb:42:58:ac:df:d4:c7:b3:34:
d4:fc:e6:d4:bf:51:17:35:47:4f:71:59:85:4e:d0:
ae:50:a2:e0:fa:77:19:ec:c6:52:87:b7:15:de:05:
f2:f1:3e:cf:bf:5b:b3:f2:e1:32:1f:d0:aa:80:ec:
08:3b:fb:45:76:b4:22:6e:e9:39:7f:1a:c4:1b:0e:
d1:f4:0a:e4:b2:95:17:ad:a5:a7:8e:d0:55:71:97:
cb:05:9a:29:b1:18:ad:91:38:28:b4:3f:31:79:52:
7f:29:18:b0:67:d5:5d:18:96:e8:b3:7c:cc:89:ea:
41:d5:27:56:f9:7b:85:62:b3:cf:aa:f4:e9:be:cb:
f2:e5:c4:ed:77:2b:c3:c7:39:a3:4b:2c:e4:ea:10:
ab:8c:9c:59:96:ce:91:43:96:29:83:74:5b:33:bf:
4b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:4A:34:E8:09:F7:93:70:3C:90:E8:AE:9D:65:79:E5:6D:7E:02:38
X509v3 Authority Key Identifier:
keyid:94:EC:5D:3D:4D:B1:48:4A:77:E2:C8:76:3D:74:A0:BD:7C:43:4D:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lOxdPU2xSEp34sh2PXSgvXxDTak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/50o06An3k3A8kOiunWV55W1-Ajg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/lOxdPU2xSEp34sh2PXSgvXxDTak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.230.234.0/24
Signature Algorithm: sha256WithRSAEncryption
55:60:bb:fd:07:68:d0:e6:7d:22:d8:e5:80:59:df:db:7b:df:
c9:70:32:37:63:44:28:c9:33:c5:9d:0d:ac:93:70:7e:61:05:
7d:e8:54:fc:4c:eb:d4:f1:6e:c1:2f:c1:51:1b:d1:45:52:4c:
72:01:84:f3:be:e8:04:77:e0:f2:b1:9c:46:1d:c0:60:63:38:
c3:99:e3:49:1e:79:fd:62:c2:39:b5:1b:7f:af:1f:d6:5f:35:
08:1a:49:81:90:47:31:d1:7a:8b:f5:0a:2b:c6:23:33:69:a1:
80:8d:43:20:5b:90:57:b6:d6:1e:59:92:13:43:8a:27:d8:e3:
a9:39:12:91:3a:b1:a6:d6:63:f3:ac:d4:b5:55:af:5b:15:44:
97:49:2d:1e:2a:d0:3a:11:ea:12:09:fd:e5:4b:a2:19:c2:1a:
ff:36:25:2d:44:f6:a1:89:e2:e8:61:2a:57:3a:99:66:62:ab:
c1:1d:c9:99:23:7a:84:a6:32:67:22:ea:dc:16:3d:7e:a6:a3:
d6:85:6b:ac:e2:8f:5a:eb:68:90:fc:7d:b2:a0:ad:2c:2f:7b:
a9:f7:81:ad:8c:cd:ef:26:7c:9d:de:db:0c:7c:e1:be:a5:66:
9a:a3:27:0c:0c:b1:4d:4c:04:5e:38:d8:5e:7b:b2:ed:cf:06:
16:5a:49:86
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQm2U75x8nlzWNblvdVG/B/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0ZWM1ZDNkNGRiMTQ4NGE3N2UyYzg3NjNkNzRhMGJkN2M0
MzRkYTkwHhcNMjUwMTAyMTE0OTIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNzRhMzRlODA5Zjc5MzcwM2M5MGU4YWU5ZDY1NzllNTZkN2UwMjM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgxAptXlCfDzrvnT1f3UhvH362Mjk
Ncp1dlFecsc2kplhD6Et7FTQqzlqC72bJY9rIVkaiNyhcwlAOAv5K98RsuEn0qaw
ozpw72hNxzgLobmnvkuAxHTgpHzR7DhNiL/rQlis39THszTU/ObUv1EXNUdPcVmF
TtCuUKLg+ncZ7MZSh7cV3gXy8T7Pv1uz8uEyH9CqgOwIO/tFdrQibuk5fxrEGw7R
9ArkspUXraWnjtBVcZfLBZopsRitkTgotD8xeVJ/KRiwZ9VdGJbos3zMiepB1SdW
+XuFYrPPqvTpvsvy5cTtdyvDxzmjSyzk6hCrjJxZls6RQ5Ypg3RbM79LcQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOdKNOgJ95NwPJDorp1leeVtfgI4MB8GA1UdIwQY
MBaAFJTsXT1NsUhKd+LIdj10oL18Q02pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbE94ZFBVMnhTRXAzNHNoMlBYU2d2WHhEVGFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC84YjEwODktYWEzNy00MjM2LWJiMWUt
NGYzZWU4MzY1ZDhmLzEvNTBvMDZBbjNrM0E4a09pdW5XVjU1VzEtQWpnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC84YjEwODktYWEzNy00MjM2LWJiMWUtNGYzZWU4MzY1ZDhm
LzEvbE94ZFBVMnhTRXAzNHNoMlBYU2d2WHhEVGFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+bqMA0G
CSqGSIb3DQEBCwUAA4IBAQBVYLv9B2jQ5n0i2OWAWd/be9/JcDI3Y0QoyTPFnQ2s
k3B+YQV96FT8TOvU8W7BL8FRG9FFUkxyAYTzvugEd+DysZxGHcBgYzjDmeNJHnn9
YsI5tRt/rx/WXzUIGkmBkEcx0XqL9QorxiMzaaGAjUMgW5BXttYeWZITQ4on2OOp
ORKROrGm1mPzrNS1Va9bFUSXSS0eKtA6EeoSCf3lS6IZwhr/NiUtRPahieLoYSpX
OplmYqvBHcmZI3qEpjJnIurcFj1+pqPWhWus4o9a62iQ/H2yoK0sL3up94GtjM3v
Jnyd3tsMfOG+pWaaoycMDLFNTAReONhee7LtzwYWWkmG
-----END CERTIFICATE-----
Generated at Fri Feb 21 12:37:40 2025 by rpki-client