Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/o2GAlRjqrWRT3XBGB9RwTDs_Ew0.roa
File: o2GAlRjqrWRT3XBGB9RwTDs_Ew0.roa (raw, json)
Hash identifier: HIy6rjCdEt9bpDveV9D2228Lv0B3K1QWnfoHF9Amb5w=
Subject key identifier: A3:61:80:95:18:EA:AD:64:53:DD:70:46:07:D4:70:4C:3B:3F:13:0D
Certificate issuer: /CN=962ebca2ab6218e1f1ae0687c3144454fd5d996b
Certificate serial: 0194236982FAFA81ABC6D8868BA899629BBB
Authority key identifier: 96:2E:BC:A2:AB:62:18:E1:F1:AE:06:87:C3:14:44:54:FD:5D:99:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/li68oqtiGOHxrgaHwxREVP1dmWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/o2GAlRjqrWRT3XBGB9RwTDs_Ew0.roa
Signing time: Wed 01 Jan 2025 19:48:24 +0000
ROA not before: Wed 01 Jan 2025 19:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51559
IP address blocks: 91.227.4.0/24 maxlen: 24
91.227.5.0/24 maxlen: 24
91.227.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/li68oqtiGOHxrgaHwxREVP1dmWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:82:fa:fa:81:ab:c6:d8:86:8b:a8:99:62:9b:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=962ebca2ab6218e1f1ae0687c3144454fd5d996b
Validity
Not Before: Jan 1 19:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a361809518eaad6453dd704607d4704c3b3f130d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4e:e5:57:d9:3a:9d:9d:19:a4:b3:1d:7f:d3:
76:78:a0:a1:6d:7a:6d:de:a5:bd:40:92:61:57:cd:
b8:22:49:3c:01:e5:38:62:6c:7f:a8:54:9c:8c:66:
7d:c6:dd:1b:ba:35:67:c0:de:86:01:41:2a:84:4e:
90:2a:de:5f:00:84:b6:67:74:b1:8e:0d:ae:c0:bb:
26:3a:8d:fc:a9:f0:46:1f:6f:0a:79:4d:24:5a:26:
b8:f5:3a:0b:74:09:29:05:59:f6:d2:38:40:a4:b7:
b2:05:a4:84:3a:30:1d:b1:52:1b:b6:07:6c:62:3a:
51:3a:12:ef:fa:d7:0a:50:75:97:96:17:95:70:97:
dc:eb:d2:e5:0f:52:9b:51:cb:ca:71:78:0a:97:2d:
3c:3e:37:85:0b:b1:1b:73:dc:c1:35:7d:90:73:7f:
d6:e7:cc:64:9f:ec:29:14:31:5f:32:68:4c:35:b4:
82:7d:fe:b8:26:5e:c8:fc:21:20:7a:79:35:a6:cf:
1a:e2:fa:c5:3f:b2:96:6a:3e:02:af:7b:0a:1a:12:
f7:ff:4f:2b:d8:33:08:ce:33:c6:a2:63:e7:3e:1b:
60:2d:a2:5d:47:b2:45:56:c0:5f:1a:48:30:7b:7d:
84:c1:1f:e4:23:6a:12:64:99:23:08:92:27:62:3a:
34:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:61:80:95:18:EA:AD:64:53:DD:70:46:07:D4:70:4C:3B:3F:13:0D
X509v3 Authority Key Identifier:
keyid:96:2E:BC:A2:AB:62:18:E1:F1:AE:06:87:C3:14:44:54:FD:5D:99:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/li68oqtiGOHxrgaHwxREVP1dmWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/o2GAlRjqrWRT3XBGB9RwTDs_Ew0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.227.4.0-91.227.6.255
Signature Algorithm: sha256WithRSAEncryption
53:de:c6:00:6d:fd:9d:d2:a5:7a:9c:28:72:19:b9:d2:0d:a7:
bb:6b:bc:b2:78:b7:74:b9:49:98:17:f7:bd:d1:73:20:c6:50:
ca:df:22:5a:cd:45:a9:7d:e7:9f:1f:e3:f3:05:0d:af:5a:59:
be:82:44:a1:32:6b:10:c6:63:23:2c:be:34:fd:4c:71:ff:64:
82:6a:97:e2:b9:c3:48:c4:2c:25:03:ed:42:ee:e2:f4:c8:95:
51:f4:42:79:c5:fd:78:31:4c:ec:1a:8a:37:ee:71:c0:80:27:
39:ac:a6:af:a4:72:47:07:4f:09:79:52:82:da:91:d9:5a:3f:
67:73:03:88:30:c1:fe:8a:b1:49:bd:29:0f:fb:4f:17:de:f0:
aa:e1:bd:91:75:c2:24:f1:7f:3e:24:0b:a7:19:6c:08:a2:29:
61:35:15:6d:5f:c0:a6:60:17:56:9c:f4:4a:7f:dd:ea:d5:72:
d7:e6:e3:82:98:a7:87:a5:f3:e7:77:2a:76:23:db:9d:28:5a:
f1:1e:be:17:06:71:a6:0e:58:dc:de:7a:b0:b4:b5:de:40:e2:
a1:86:0b:02:a8:7a:6d:2f:fb:e6:46:f3:ee:90:85:57:81:d3:
ec:e6:ed:d7:d7:e8:8d:7d:1f:48:7d:92:2f:bf:8a:59:71:eb:
8b:99:02:68
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZQjaYL6+oGrxtiGi6iZYpu7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2MmViY2EyYWI2MjE4ZTFmMWFlMDY4N2MzMTQ0NDU0ZmQ1
ZDk5NmIwHhcNMjUwMTAxMTk0ODI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMzYxODA5NTE4ZWFhZDY0NTNkZDcwNDYwN2Q0NzA0YzNiM2YxMzBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArE7lV9k6nZ0ZpLMdf9N2eKChbXpt
3qW9QJJhV824Ikk8AeU4Ymx/qFScjGZ9xt0bujVnwN6GAUEqhE6QKt5fAIS2Z3Sx
jg2uwLsmOo38qfBGH28KeU0kWia49ToLdAkpBVn20jhApLeyBaSEOjAdsVIbtgds
YjpROhLv+tcKUHWXlheVcJfc69LlD1KbUcvKcXgKly08PjeFC7Ebc9zBNX2Qc3/W
58xkn+wpFDFfMmhMNbSCff64Jl7I/CEgenk1ps8a4vrFP7KWaj4Cr3sKGhL3/08r
2DMIzjPGomPnPhtgLaJdR7JFVsBfGkgwe32EwR/kI2oSZJkjCJInYjo0eQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFKNhgJUY6q1kU91wRgfUcEw7PxMNMB8GA1UdIwQY
MBaAFJYuvKKrYhjh8a4Gh8MURFT9XZlrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGk2OG9xdGlHT0h4cmdhSHd4UkVWUDFkbVdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy81NjBhYzYtMTk0Zi00YjFiLWI1YWMt
ZmQ4N2I3MzM1OTU1LzEvbzJHQWxSanFyV1JUM1hCR0I5UndURHNfRXcwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy81NjBhYzYtMTk0Zi00YjFiLWI1YWMtZmQ4N2I3MzM1OTU1
LzEvbGk2OG9xdGlHT0h4cmdhSHd4UkVWUDFkbVdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAJb4wQD
BABb4wYwDQYJKoZIhvcNAQELBQADggEBAFPexgBt/Z3SpXqcKHIZudINp7trvLJ4
t3S5SZgX973RcyDGUMrfIlrNRal9558f4/MFDa9aWb6CRKEyaxDGYyMsvjT9THH/
ZIJql+K5w0jELCUD7ULu4vTIlVH0QnnF/XgxTOwaijfuccCAJzmspq+kckcHTwl5
UoLakdlaP2dzA4gwwf6KsUm9KQ/7Txfe8KrhvZF1wiTxfz4kC6cZbAiiKWE1FW1f
wKZgF1ac9Ep/3erVctfm44KYp4el8+d3KnYj250oWvEevhcGcaYOWNzeerC0td5A
4qGGCwKoem0v++ZG8+6QhVeB0+zm7dfX6I19H0h9ki+/illx64uZAmg=
-----END CERTIFICATE-----
Generated at Sat Apr 5 21:19:02 2025 by rpki-client