Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/0e7ef7-1831-42f6-a2cc-ae290d55bdb7/1/yl9TGfZBXnKybJW81dLesyL85jw.roa
File: yl9TGfZBXnKybJW81dLesyL85jw.roa (raw, json)
Hash identifier: 5T9nUKakC/d5Fj82Q3FOurA0Y8gDP1/Vr4z0jWpM3OA=
Subject key identifier: CA:5F:53:19:F6:41:5E:72:B2:6C:95:BC:D5:D2:DE:B3:22:FC:E6:3C
Certificate issuer: /CN=8edf6c2ad7acecad066e1f77fe05922f01691536
Certificate serial: 019421B22004D1C34D4F9849D07AFF242434
Authority key identifier: 8E:DF:6C:2A:D7:AC:EC:AD:06:6E:1F:77:FE:05:92:2F:01:69:15:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jt9sKtes7K0Gbh93_gWSLwFpFTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/0e7ef7-1831-42f6-a2cc-ae290d55bdb7/1/yl9TGfZBXnKybJW81dLesyL85jw.roa
Signing time: Wed 01 Jan 2025 11:48:29 +0000
ROA not before: Wed 01 Jan 2025 11:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50261
IP address blocks: 91.223.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/0e7ef7-1831-42f6-a2cc-ae290d55bdb7/1/jt9sKtes7K0Gbh93_gWSLwFpFTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/0e7ef7-1831-42f6-a2cc-ae290d55bdb7/1/jt9sKtes7K0Gbh93_gWSLwFpFTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jt9sKtes7K0Gbh93_gWSLwFpFTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 11:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:20:04:d1:c3:4d:4f:98:49:d0:7a:ff:24:24:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8edf6c2ad7acecad066e1f77fe05922f01691536
Validity
Not Before: Jan 1 11:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ca5f5319f6415e72b26c95bcd5d2deb322fce63c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ab:24:bc:8f:04:07:b9:b1:d4:11:9b:92:dd:
0e:2e:91:f3:ff:dc:64:7b:ac:da:0b:60:57:69:36:
c8:9d:2c:1b:9f:3f:8a:c5:e2:c5:79:bd:36:eb:26:
ec:5e:f1:3b:21:15:d5:df:35:8c:35:de:f0:1b:b1:
12:01:35:f7:5f:f4:70:c6:c9:83:57:cf:62:38:d4:
7f:48:50:7c:e3:9f:c8:80:e2:e8:8a:4b:7d:c2:db:
43:53:c3:03:98:76:b5:35:d6:50:97:04:0e:0d:2c:
d5:1e:94:59:97:e9:35:2b:0f:b5:9b:99:68:20:86:
b9:85:38:ef:eb:60:85:dc:e6:14:fd:42:b2:e4:22:
c9:37:0b:11:59:9e:4e:f2:03:b7:45:25:f8:72:83:
0f:b3:a6:c4:f4:7f:a5:f0:c2:df:92:87:00:f0:b5:
0e:27:39:f4:f5:72:03:4e:19:95:54:40:66:3f:22:
d1:a7:2c:56:d6:cc:b7:d2:10:e2:43:04:59:a1:39:
a0:c6:dd:4c:58:a0:c1:e7:40:79:77:f0:d9:5f:1c:
51:a2:85:9a:6d:1c:a9:c0:3a:8f:55:97:8b:88:50:
e4:12:cb:a7:c8:31:d5:ee:16:08:28:7b:eb:e8:1d:
db:dd:7a:1b:22:63:af:e1:84:2e:e0:2d:8a:1f:b5:
70:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:5F:53:19:F6:41:5E:72:B2:6C:95:BC:D5:D2:DE:B3:22:FC:E6:3C
X509v3 Authority Key Identifier:
keyid:8E:DF:6C:2A:D7:AC:EC:AD:06:6E:1F:77:FE:05:92:2F:01:69:15:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jt9sKtes7K0Gbh93_gWSLwFpFTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0e7ef7-1831-42f6-a2cc-ae290d55bdb7/1/yl9TGfZBXnKybJW81dLesyL85jw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0e7ef7-1831-42f6-a2cc-ae290d55bdb7/1/jt9sKtes7K0Gbh93_gWSLwFpFTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.222.0/24
Signature Algorithm: sha256WithRSAEncryption
07:94:aa:f9:b8:c7:c5:d5:19:71:83:61:1e:38:22:ad:aa:f7:
c4:0a:cd:70:71:a0:2c:52:c1:37:5f:99:d8:6a:e0:4f:d2:cf:
9d:92:c7:64:2f:8a:7f:51:b3:16:5b:3e:fb:e0:4b:6b:54:92:
c0:85:51:50:b9:fc:71:3d:03:a2:a1:df:1a:71:7d:6a:33:3b:
aa:91:02:01:3b:7b:c3:a6:ac:35:c4:72:13:6c:57:81:e6:cd:
d4:f5:9e:91:1f:c9:1f:82:c5:f6:d5:24:b2:ba:15:43:7f:77:
11:15:3a:57:f5:33:3c:93:ec:1f:e6:52:7e:3f:53:44:86:87:
26:1e:92:3d:ad:d6:4d:cf:a4:ef:af:53:3b:3a:3c:a7:84:65:
02:3e:7b:14:7e:dc:2a:82:c7:a7:b9:bd:3b:9d:bd:c8:d4:f4:
1c:4d:7d:c6:c9:0d:3a:97:18:5b:af:ec:24:ac:dd:3b:7a:de:
57:89:5e:3f:9a:6d:95:68:92:f1:e9:e9:78:ef:68:66:74:a4:
66:29:3d:bb:26:e6:d9:35:c5:ac:a7:5c:0a:17:e2:b2:3c:96:
b9:fe:a9:bf:d4:57:85:38:55:01:52:ed:02:e8:a9:26:4a:77:
3f:78:72:45:88:64:f6:c7:95:99:1a:dd:01:f1:fb:3f:7b:f4:
c2:92:f2:0d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhsiAE0cNNT5hJ0Hr/JCQ0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlZGY2YzJhZDdhY2VjYWQwNjZlMWY3N2ZlMDU5MjJmMDE2
OTE1MzYwHhcNMjUwMTAxMTE0ODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYTVmNTMxOWY2NDE1ZTcyYjI2Yzk1YmNkNWQyZGViMzIyZmNlNjNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2askvI8EB7mx1BGbkt0OLpHz/9xk
e6zaC2BXaTbInSwbnz+KxeLFeb026ybsXvE7IRXV3zWMNd7wG7ESATX3X/RwxsmD
V89iONR/SFB845/IgOLoikt9wttDU8MDmHa1NdZQlwQODSzVHpRZl+k1Kw+1m5lo
IIa5hTjv62CF3OYU/UKy5CLJNwsRWZ5O8gO3RSX4coMPs6bE9H+l8MLfkocA8LUO
Jzn09XIDThmVVEBmPyLRpyxW1sy30hDiQwRZoTmgxt1MWKDB50B5d/DZXxxRooWa
bRypwDqPVZeLiFDkEsunyDHV7hYIKHvr6B3b3XobImOv4YQu4C2KH7Vw7wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMpfUxn2QV5ysmyVvNXS3rMi/OY8MB8GA1UdIwQY
MBaAFI7fbCrXrOytBm4fd/4Fki8BaRU2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanQ5c0t0ZXM3SzBHYmg5M19nV1NMd0ZwRlRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8wZTdlZjctMTgzMS00MmY2LWEyY2Mt
YWUyOTBkNTViZGI3LzEveWw5VEdmWkJYbkt5YkpXODFkTGVzeUw4NWp3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My8wZTdlZjctMTgzMS00MmY2LWEyY2MtYWUyOTBkNTViZGI3
LzEvanQ5c0t0ZXM3SzBHYmg5M19nV1NMd0ZwRlRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9/eMA0G
CSqGSIb3DQEBCwUAA4IBAQAHlKr5uMfF1Rlxg2EeOCKtqvfECs1wcaAsUsE3X5nY
auBP0s+dksdkL4p/UbMWWz774EtrVJLAhVFQufxxPQOiod8acX1qMzuqkQIBO3vD
pqw1xHITbFeB5s3U9Z6RH8kfgsX21SSyuhVDf3cRFTpX9TM8k+wf5lJ+P1NEhocm
HpI9rdZNz6Tvr1M7OjynhGUCPnsUftwqgsenub07nb3I1PQcTX3GyQ06lxhbr+wk
rN07et5XiV4/mm2VaJLx6el472hmdKRmKT27JubZNcWsp1wKF+KyPJa5/qm/1FeF
OFUBUu0C6KkmSnc/eHJFiGT2x5WZGt0B8fs/e/TCkvIN
-----END CERTIFICATE-----
Generated at Mon Apr 7 20:10:09 2025 by rpki-client