Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/O9nHfOl2QVEFkw8z5PZAG-bDmQE.roa
File: O9nHfOl2QVEFkw8z5PZAG-bDmQE.roa (raw, json)
Hash identifier: CmUudjBRBoLhGNB6o4EaSfh+UkgJVlz+52jeWbtrV5A=
Subject key identifier: 3B:D9:C7:7C:E9:76:41:51:05:93:0F:33:E4:F6:40:1B:E6:C3:99:01
Certificate issuer: /CN=4c37f27eb4997b3bef9f28266a39694050fe74f9
Certificate serial: 0194258F9F3EBB818B6ABA498AEAF630ECB9
Authority key identifier: 4C:37:F2:7E:B4:99:7B:3B:EF:9F:28:26:6A:39:69:40:50:FE:74:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/O9nHfOl2QVEFkw8z5PZAG-bDmQE.roa
Signing time: Thu 02 Jan 2025 05:49:16 +0000
ROA not before: Thu 02 Jan 2025 05:49:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47253
IP address blocks: 77.91.148.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 02:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:9f:3e:bb:81:8b:6a:ba:49:8a:ea:f6:30:ec:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c37f27eb4997b3bef9f28266a39694050fe74f9
Validity
Not Before: Jan 2 05:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3bd9c77ce976415105930f33e4f6401be6c39901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1c:d9:b0:33:76:2f:da:ab:99:ce:ce:1d:0e:
03:5b:f3:78:c5:d7:82:9a:fa:0c:41:f3:b2:8e:a9:
ab:85:c2:56:55:7e:b8:59:79:ca:28:58:89:ac:2a:
80:33:e3:28:59:93:4a:e9:a3:a4:1b:65:6d:9a:25:
c7:4d:b6:11:b1:87:d8:79:48:1d:f8:ae:64:d1:0e:
f2:26:94:24:d4:e3:f2:fc:f2:83:49:40:0e:4e:bd:
34:fa:1a:66:33:53:0e:33:86:f6:a3:17:eb:ef:eb:
0d:7e:a0:82:3a:bb:60:06:a6:fe:62:8c:e2:0b:3a:
85:d2:9b:83:a7:02:2d:69:d8:7d:13:54:c7:15:89:
68:21:79:80:8e:61:00:cb:af:c2:4c:45:08:73:a9:
6b:18:17:a9:31:e0:4e:1c:48:42:a4:bb:02:c7:de:
b9:d7:14:d3:e6:e0:4a:f4:6e:2f:01:4e:27:36:c9:
30:49:c1:72:55:e6:e2:91:b3:18:00:ed:2b:bd:be:
ea:34:44:bb:ed:91:a4:ae:ad:a6:81:08:4a:85:39:
29:1b:a1:8f:8a:90:65:73:5c:91:d1:b3:06:f3:88:
e2:1f:58:49:b6:45:62:d3:3d:c9:34:d1:7b:c5:e7:
70:23:09:5a:5e:cf:8a:62:79:78:4c:a1:21:28:c2:
93:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:D9:C7:7C:E9:76:41:51:05:93:0F:33:E4:F6:40:1B:E6:C3:99:01
X509v3 Authority Key Identifier:
keyid:4C:37:F2:7E:B4:99:7B:3B:EF:9F:28:26:6A:39:69:40:50:FE:74:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/O9nHfOl2QVEFkw8z5PZAG-bDmQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.91.148.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:ec:ab:31:88:28:6c:d8:92:a5:f2:3c:ee:c1:8b:56:db:9e:
71:e3:b2:82:a3:26:2b:d5:f6:c2:cd:fb:41:5e:96:29:97:0d:
21:6c:db:a6:30:b1:12:30:82:f5:24:00:0d:a6:50:87:7a:7f:
d0:fb:bf:0d:d0:0b:0d:07:08:05:86:3a:55:9e:2e:0e:65:8b:
50:fa:fe:eb:d1:af:d0:98:07:af:9e:ef:73:ee:e9:aa:c4:47:
82:bf:19:42:8e:83:d0:08:bb:c5:bb:92:70:f4:2e:af:5c:ce:
05:f0:f2:f1:ce:40:fe:18:10:dd:3d:54:91:ac:8e:54:a2:73:
38:93:af:44:c0:a2:3f:1a:2f:be:7f:65:1d:e9:54:d4:70:f7:
39:b0:06:9d:c7:1b:54:6b:d7:6d:15:5b:d2:cf:69:17:f4:76:
d2:ef:83:c4:b6:84:4c:ba:b2:ec:50:18:7c:14:31:7b:83:0d:
d0:37:05:c3:c3:e4:0b:a1:61:1a:f6:5c:47:58:77:6c:99:27:
d5:af:a9:2a:45:ed:2d:4c:cf:c6:17:cc:2a:bf:95:9b:a2:f1:
ee:6b:24:4a:b7:70:f4:5f:d7:e7:4a:ae:f0:8a:de:47:01:df:
e0:51:19:f9:7e:78:6e:6d:42:c2:30:ec:21:06:c9:38:d4:0d:
54:10:37:d1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlj58+u4GLarpJiur2MOy5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjMzdmMjdlYjQ5OTdiM2JlZjlmMjgyNjZhMzk2OTQwNTBm
ZTc0ZjkwHhcNMjUwMTAyMDU0OTE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYmQ5Yzc3Y2U5NzY0MTUxMDU5MzBmMzNlNGY2NDAxYmU2YzM5OTAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxzZsDN2L9qrmc7OHQ4DW/N4xdeC
mvoMQfOyjqmrhcJWVX64WXnKKFiJrCqAM+MoWZNK6aOkG2VtmiXHTbYRsYfYeUgd
+K5k0Q7yJpQk1OPy/PKDSUAOTr00+hpmM1MOM4b2oxfr7+sNfqCCOrtgBqb+Yozi
CzqF0puDpwItadh9E1THFYloIXmAjmEAy6/CTEUIc6lrGBepMeBOHEhCpLsCx965
1xTT5uBK9G4vAU4nNskwScFyVebikbMYAO0rvb7qNES77ZGkrq2mgQhKhTkpG6GP
ipBlc1yR0bMG84jiH1hJtkVi0z3JNNF7xedwIwlaXs+KYnl4TKEhKMKTGQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDvZx3zpdkFRBZMPM+T2QBvmw5kBMB8GA1UdIwQY
MBaAFEw38n60mXs7758oJmo5aUBQ/nT5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVERmeWZyU1plenZ2bnlnbWFqbHBRRkQtZFBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8wOWNlYTAtZWYyYi00ZjIwLWExOWEt
ZWI1YTYyN2U3NmEzLzEvTzluSGZPbDJRVkVGa3c4ejVQWkFHLWJEbVFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC8wOWNlYTAtZWYyYi00ZjIwLWExOWEtZWI1YTYyN2U3NmEz
LzEvVERmeWZyU1plenZ2bnlnbWFqbHBRRkQtZFBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTVuUMA0G
CSqGSIb3DQEBCwUAA4IBAQBt7KsxiChs2JKl8jzuwYtW255x47KCoyYr1fbCzftB
XpYplw0hbNumMLESMIL1JAANplCHen/Q+78N0AsNBwgFhjpVni4OZYtQ+v7r0a/Q
mAevnu9z7umqxEeCvxlCjoPQCLvFu5Jw9C6vXM4F8PLxzkD+GBDdPVSRrI5UonM4
k69EwKI/Gi++f2Ud6VTUcPc5sAadxxtUa9dtFVvSz2kX9HbS74PEtoRMurLsUBh8
FDF7gw3QNwXDw+QLoWEa9lxHWHdsmSfVr6kqRe0tTM/GF8wqv5WbovHuayRKt3D0
X9fnSq7wit5HAd/gURn5fnhubULCMOwhBsk41A1UEDfR
-----END CERTIFICATE-----
Generated at Sun Apr 13 12:18:07 2025 by rpki-client