Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/xG8mhMV87H4zrHIWKqzuRUqeQPg.roa
File: xG8mhMV87H4zrHIWKqzuRUqeQPg.roa (raw, json)
Hash identifier: urIMILztFQN60p/ZQRBKUgWXG4HvMI/s4ku0GaXCltA=
Subject key identifier: C4:6F:26:84:C5:7C:EC:7E:33:AC:72:16:2A:AC:EE:45:4A:9E:40:F8
Certificate issuer: /CN=ce7180c4bad3cf425a50672e1cb7a9d2ac78e20c
Certificate serial: 019423D75040043AD2A830340C5059FCA0B9
Authority key identifier: CE:71:80:C4:BA:D3:CF:42:5A:50:67:2E:1C:B7:A9:D2:AC:78:E2:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/znGAxLrTz0JaUGcuHLep0qx44gw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/xG8mhMV87H4zrHIWKqzuRUqeQPg.roa
Signing time: Wed 01 Jan 2025 21:48:20 +0000
ROA not before: Wed 01 Jan 2025 21:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12670
IP address blocks: 91.234.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.mft
rsync://rpki.ripe.net/repository/DEFAULT/znGAxLrTz0JaUGcuHLep0qx44gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:50:40:04:3a:d2:a8:30:34:0c:50:59:fc:a0:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce7180c4bad3cf425a50672e1cb7a9d2ac78e20c
Validity
Not Before: Jan 1 21:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c46f2684c57cec7e33ac72162aacee454a9e40f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b6:df:57:03:da:f7:2a:c9:30:5d:3e:b6:ba:
69:65:76:03:91:22:2e:bb:d9:19:fe:58:9f:fb:3a:
eb:98:8d:1e:52:e4:af:ae:31:50:63:87:f5:36:10:
8d:8a:0c:a2:92:9d:86:98:5c:e0:11:51:a5:42:04:
b4:06:a7:dc:cc:d0:c0:27:43:7c:02:13:e5:63:9e:
ce:32:c5:ba:6f:eb:3b:35:14:1f:64:7c:75:37:8f:
f3:88:65:bd:c5:4e:63:be:65:3e:da:f1:ec:47:b1:
74:21:4b:69:14:e3:9b:13:cb:7f:78:8c:80:f7:08:
16:d5:ad:f2:d6:4c:c2:f6:b8:88:22:69:97:e4:67:
d5:47:86:bf:65:a3:c5:95:8f:24:93:e3:d2:6e:7a:
2c:09:62:c8:78:50:36:59:4e:99:69:96:78:28:b9:
b8:e9:b1:f8:8b:83:74:62:fa:93:c7:74:2d:09:38:
0a:68:be:94:3d:4d:48:b9:f1:e1:c8:af:de:b1:a3:
21:a5:91:62:d6:21:ad:1a:d5:ad:06:ed:28:dd:b9:
a1:bb:9c:b3:30:b9:ba:4f:e9:1f:f6:56:e1:01:05:
55:3c:3c:9d:5d:76:0a:4f:36:a5:ec:92:7c:89:7d:
ae:53:7b:67:86:3b:ee:8d:f6:25:44:2f:1f:89:eb:
cd:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:6F:26:84:C5:7C:EC:7E:33:AC:72:16:2A:AC:EE:45:4A:9E:40:F8
X509v3 Authority Key Identifier:
keyid:CE:71:80:C4:BA:D3:CF:42:5A:50:67:2E:1C:B7:A9:D2:AC:78:E2:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znGAxLrTz0JaUGcuHLep0qx44gw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/xG8mhMV87H4zrHIWKqzuRUqeQPg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.234.9.0/24
Signature Algorithm: sha256WithRSAEncryption
05:6f:28:18:94:32:1a:38:9a:e8:3d:cc:bf:7e:8e:80:51:ab:
51:79:82:81:dc:6d:dd:70:91:14:cf:0e:44:23:e5:2c:df:d3:
56:4a:e1:61:4b:44:a6:74:07:63:d3:ba:08:38:21:61:eb:15:
7b:26:76:cf:95:9c:f1:cd:13:7d:85:5a:7e:b3:f1:51:e0:88:
c1:82:9e:1c:e4:e9:54:af:11:df:2c:ec:4c:9e:97:fb:c1:ec:
a0:05:af:24:1e:2c:5d:54:a2:5a:b4:5e:24:52:d7:5e:57:1c:
e9:f6:69:5b:47:14:de:85:a1:b2:da:19:3f:f7:8d:cc:27:16:
34:3a:f4:f0:7c:95:d6:44:77:b1:c4:d2:2c:46:ce:c9:4c:fa:
56:ed:61:b0:fa:e6:ad:70:97:52:9c:91:73:b7:44:14:b8:51:
48:96:f7:26:51:73:25:7b:92:ee:54:d8:9f:fc:77:d7:85:ed:
48:06:fc:33:2b:a4:bd:31:ae:d2:58:4f:02:25:58:a3:bb:85:
aa:9a:78:20:4c:c6:7f:fe:ec:a4:32:5f:7e:9f:37:33:2f:97:
4a:1c:48:f9:87:30:87:3c:13:7a:ca:ae:bc:34:64:a0:a3:39:
84:a0:7f:dc:70:e4:b9:6b:2f:63:f5:9a:75:02:9e:cc:87:2c:
22:1b:2d:8a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQj11BABDrSqDA0DFBZ/KC5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlNzE4MGM0YmFkM2NmNDI1YTUwNjcyZTFjYjdhOWQyYWM3
OGUyMGMwHhcNMjUwMTAxMjE0ODIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNDZmMjY4NGM1N2NlYzdlMzNhYzcyMTYyYWFjZWU0NTRhOWU0MGY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrbfVwPa9yrJMF0+trppZXYDkSIu
u9kZ/lif+zrrmI0eUuSvrjFQY4f1NhCNigyikp2GmFzgEVGlQgS0BqfczNDAJ0N8
AhPlY57OMsW6b+s7NRQfZHx1N4/ziGW9xU5jvmU+2vHsR7F0IUtpFOObE8t/eIyA
9wgW1a3y1kzC9riIImmX5GfVR4a/ZaPFlY8kk+PSbnosCWLIeFA2WU6ZaZZ4KLm4
6bH4i4N0YvqTx3QtCTgKaL6UPU1IufHhyK/esaMhpZFi1iGtGtWtBu0o3bmhu5yz
MLm6T+kf9lbhAQVVPDydXXYKTzal7JJ8iX2uU3tnhjvujfYlRC8fievNrQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMRvJoTFfOx+M6xyFiqs7kVKnkD4MB8GA1UdIwQY
MBaAFM5xgMS6089CWlBnLhy3qdKseOIMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvem5HQXhMclR6MEphVUdjdUhMZXAwcXg0NGd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9kN2Q1Y2QtNzlhOS00YzgyLThmYzQt
MDQ2ZDJlMmFkY2Q1LzEveEc4bWhNVjg3SDR6ckhJV0txenVSVXFlUVBnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC9kN2Q1Y2QtNzlhOS00YzgyLThmYzQtMDQ2ZDJlMmFkY2Q1
LzEvem5HQXhMclR6MEphVUdjdUhMZXAwcXg0NGd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+oJMA0G
CSqGSIb3DQEBCwUAA4IBAQAFbygYlDIaOJroPcy/fo6AUatReYKB3G3dcJEUzw5E
I+Us39NWSuFhS0SmdAdj07oIOCFh6xV7JnbPlZzxzRN9hVp+s/FR4IjBgp4c5OlU
rxHfLOxMnpf7weygBa8kHixdVKJatF4kUtdeVxzp9mlbRxTehaGy2hk/943MJxY0
OvTwfJXWRHexxNIsRs7JTPpW7WGw+uatcJdSnJFzt0QUuFFIlvcmUXMle5LuVNif
/HfXhe1IBvwzK6S9Ma7SWE8CJViju4WqmnggTMZ//uykMl9+nzczL5dKHEj5hzCH
PBN6yq68NGSgozmEoH/ccOS5ay9j9Zp1Ap7MhywiGy2K
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:12:40 2025 by rpki-client