Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/kBL0NGTyltK_bUGqu0ZT8FN5oyY.roa
File: kBL0NGTyltK_bUGqu0ZT8FN5oyY.roa (raw, json)
Hash identifier: RQ7q9e83VNSzPNBYQofT5w9K3HiXcrFugBatkkxu9/Y=
Subject key identifier: 90:12:F4:34:64:F2:96:D2:BF:6D:41:AA:BB:46:53:F0:53:79:A3:26
Certificate issuer: /CN=f31d1c05abd714c67c3291e010d21c70a35dd57e
Certificate serial: 01941FFA2AEBA7E8662DA334892D26CADCDF
Authority key identifier: F3:1D:1C:05:AB:D7:14:C6:7C:32:91:E0:10:D2:1C:70:A3:5D:D5:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8x0cBavXFMZ8MpHgENIccKNd1X4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/kBL0NGTyltK_bUGqu0ZT8FN5oyY.roa
Signing time: Wed 01 Jan 2025 03:47:56 +0000
ROA not before: Wed 01 Jan 2025 03:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12843
IP address blocks: 91.103.241.0/24 maxlen: 24
91.103.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8x0cBavXFMZ8MpHgENIccKNd1X4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 21:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:2a:eb:a7:e8:66:2d:a3:34:89:2d:26:ca:dc:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f31d1c05abd714c67c3291e010d21c70a35dd57e
Validity
Not Before: Jan 1 03:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9012f43464f296d2bf6d41aabb4653f05379a326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:35:19:36:4c:7f:c4:d0:22:08:a0:a0:15:4e:
87:e1:c4:82:88:d1:81:aa:5a:66:02:c4:c7:d9:a0:
0a:57:71:b7:29:26:fb:7f:1c:6f:c5:fa:6f:e6:16:
59:37:6e:d5:bd:f2:78:a8:34:ad:aa:e6:b6:d0:5a:
99:5d:3e:4e:05:87:e2:c0:cf:17:94:da:d2:cc:fd:
c4:be:0f:df:37:17:a1:64:a4:77:49:fe:0f:7d:57:
e2:29:a3:18:08:d2:c1:bc:6d:83:0b:a4:56:25:85:
3e:bf:e9:26:ba:dc:b7:a8:fa:5f:67:47:46:4c:74:
f9:6c:ab:29:f4:6f:6f:d2:84:08:69:cc:a4:05:37:
77:68:d4:68:eb:de:9e:f9:64:25:ca:75:17:68:4d:
93:bb:c5:cd:a8:6f:64:e4:6b:b3:e3:10:6f:ed:48:
d0:57:b6:55:46:47:d6:bb:52:d3:cc:12:03:f6:67:
b8:50:15:2e:d8:fd:75:e4:33:c2:9e:8c:e2:2e:3e:
c9:7b:1b:83:99:5e:12:44:74:80:e9:67:ac:25:bc:
d8:26:0c:2b:37:03:fa:ce:de:af:57:bc:f3:80:8c:
1e:a5:50:2e:33:a6:8e:65:9f:27:ef:9e:47:37:57:
fc:f4:93:02:4c:7d:32:72:4c:ea:02:68:64:df:f6:
41:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:12:F4:34:64:F2:96:D2:BF:6D:41:AA:BB:46:53:F0:53:79:A3:26
X509v3 Authority Key Identifier:
keyid:F3:1D:1C:05:AB:D7:14:C6:7C:32:91:E0:10:D2:1C:70:A3:5D:D5:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8x0cBavXFMZ8MpHgENIccKNd1X4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/kBL0NGTyltK_bUGqu0ZT8FN5oyY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.103.241.0-91.103.242.255
Signature Algorithm: sha256WithRSAEncryption
61:35:66:54:b1:71:4c:ce:81:bc:8a:1c:f4:e5:03:82:87:43:
1a:7a:b9:89:e6:3a:d5:6e:ba:21:94:27:3a:40:50:37:ee:6b:
dd:ad:67:e8:c0:91:35:29:9a:52:cf:77:7a:c9:de:d5:a5:c9:
cb:ed:7b:c6:36:a6:d1:cb:71:d6:f2:04:7c:3f:52:05:36:45:
d3:ed:a0:01:8c:2b:55:78:e9:0e:c9:8c:5d:ef:87:c6:9e:84:
50:e8:f4:f4:94:6e:5a:f9:f3:c4:02:57:cc:6a:e0:65:19:4f:
e4:ae:d8:e1:6c:bf:b6:40:fd:8c:bc:b4:96:fb:91:a8:32:00:
7a:2b:72:a5:c7:fb:67:74:71:84:38:76:28:41:aa:98:c0:5f:
e2:32:7d:57:59:86:13:59:df:19:a5:ae:b2:43:aa:38:1d:07:
21:9f:0d:78:a0:aa:ed:8d:d3:5c:35:02:99:b6:78:55:fc:6a:
1b:45:aa:58:e6:50:fd:6a:52:5a:6a:50:bd:a9:da:56:66:49:
53:b3:6c:ec:80:2c:6e:6b:7b:d6:15:2e:62:f5:c2:d8:4b:24:
57:db:92:1d:69:4e:fd:f1:ad:4d:06:e3:ad:43:1d:74:ac:13:
14:5f:be:67:09:95:49:70:e2:4c:dc:2b:5e:17:87:ba:1f:d5:
a0:f5:30:a0
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZQf+irrp+hmLaM0iS0mytzfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzMWQxYzA1YWJkNzE0YzY3YzMyOTFlMDEwZDIxYzcwYTM1
ZGQ1N2UwHhcNMjUwMTAxMDM0NzU2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MDEyZjQzNDY0ZjI5NmQyYmY2ZDQxYWFiYjQ2NTNmMDUzNzlhMzI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDUZNkx/xNAiCKCgFU6H4cSCiNGB
qlpmAsTH2aAKV3G3KSb7fxxvxfpv5hZZN27VvfJ4qDStqua20FqZXT5OBYfiwM8X
lNrSzP3Evg/fNxehZKR3Sf4PfVfiKaMYCNLBvG2DC6RWJYU+v+kmuty3qPpfZ0dG
THT5bKsp9G9v0oQIacykBTd3aNRo696e+WQlynUXaE2Tu8XNqG9k5Guz4xBv7UjQ
V7ZVRkfWu1LTzBID9me4UBUu2P115DPCnoziLj7JexuDmV4SRHSA6WesJbzYJgwr
NwP6zt6vV7zzgIwepVAuM6aOZZ8n755HN1f89JMCTH0yckzqAmhk3/ZBlQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFJAS9DRk8pbSv21BqrtGU/BTeaMmMB8GA1UdIwQY
MBaAFPMdHAWr1xTGfDKR4BDSHHCjXdV+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHgwY0JhdlhGTVo4TXBIZ0VOSWNjS05kMVg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC84ODY2YmItMmViNy00Mjg4LWE4MmMt
NTU1OWFjNDEwYWNlLzEva0JMME5HVHlsdEtfYlVHcXUwWlQ4Rk41b3lZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC84ODY2YmItMmViNy00Mjg4LWE4MmMtNTU1OWFjNDEwYWNl
LzEvOHgwY0JhdlhGTVo4TXBIZ0VOSWNjS05kMVg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABbZ/ED
BABbZ/IwDQYJKoZIhvcNAQELBQADggEBAGE1ZlSxcUzOgbyKHPTlA4KHQxp6uYnm
OtVuuiGUJzpAUDfua92tZ+jAkTUpmlLPd3rJ3tWlycvte8Y2ptHLcdbyBHw/UgU2
RdPtoAGMK1V46Q7JjF3vh8aehFDo9PSUblr588QCV8xq4GUZT+Su2OFsv7ZA/Yy8
tJb7kagyAHorcqXH+2d0cYQ4dihBqpjAX+IyfVdZhhNZ3xmlrrJDqjgdByGfDXig
qu2N01w1Apm2eFX8ahtFqljmUP1qUlpqUL2p2lZmSVOzbOyALG5re9YVLmL1wthL
JFfbkh1pTv3xrU0G461DHXSsExRfvmcJlUlw4kzcK14Xh7of1aD1MKA=
-----END CERTIFICATE-----
Generated at Tue Apr 8 05:30:49 2025 by rpki-client