Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/O0pEQEzhWfGPoGN9_GYQs2aEBkA.roa
File: O0pEQEzhWfGPoGN9_GYQs2aEBkA.roa (raw, json)
Hash identifier: SE3IDQJtlW1HyYxGFEmw6qC9BXcob4+h3FZns0TYNu4=
Subject key identifier: 3B:4A:44:40:4C:E1:59:F1:8F:A0:63:7D:FC:66:10:B3:66:84:06:40
Certificate issuer: /CN=cdea4adee80b06519ce40dd3d13f28ba9f575957
Certificate serial: 019423D6D013F0BB770DAEE4437B97D36F53
Authority key identifier: CD:EA:4A:DE:E8:0B:06:51:9C:E4:0D:D3:D1:3F:28:BA:9F:57:59:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zepK3ugLBlGc5A3T0T8oup9XWVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/O0pEQEzhWfGPoGN9_GYQs2aEBkA.roa
Signing time: Wed 01 Jan 2025 21:47:48 +0000
ROA not before: Wed 01 Jan 2025 21:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 91.227.208.0/24 maxlen: 24
185.64.72.0/24 maxlen: 24
185.64.73.0/24 maxlen: 24
185.64.74.0/24 maxlen: 24
185.64.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/zepK3ugLBlGc5A3T0T8oup9XWVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/zepK3ugLBlGc5A3T0T8oup9XWVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zepK3ugLBlGc5A3T0T8oup9XWVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:d0:13:f0:bb:77:0d:ae:e4:43:7b:97:d3:6f:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdea4adee80b06519ce40dd3d13f28ba9f575957
Validity
Not Before: Jan 1 21:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3b4a44404ce159f18fa0637dfc6610b366840640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:56:94:94:ed:ab:95:1e:60:88:e7:8a:c5:de:
c9:7a:15:65:cc:f9:a9:e1:40:5b:2f:1d:79:ac:9e:
8b:70:2c:2f:75:a3:6e:3b:ee:b0:27:ad:9a:f6:dc:
ae:1b:cf:de:10:c1:5e:e9:3c:4e:fe:3e:69:34:d0:
ba:6b:dc:2b:71:2d:1a:a4:fb:e6:15:4a:3e:4c:63:
3e:c5:f4:ed:83:29:d3:c6:8d:8d:c8:44:24:fe:10:
f1:06:af:22:a9:f4:02:b6:37:43:1f:21:59:84:9b:
a8:49:f3:ab:4d:13:f8:64:e8:e6:c0:93:d9:23:04:
85:59:a1:b6:8c:ca:c8:36:11:48:f6:a1:fe:8d:0f:
89:d3:51:2a:e0:1d:c2:82:5c:fd:10:17:4a:f2:c0:
7d:a2:ac:75:e1:53:3e:c8:5c:27:ac:58:5f:d4:57:
24:02:26:79:a7:ac:3b:47:f3:b1:b8:50:e3:31:41:
5e:59:d2:13:2e:41:5f:86:cf:de:12:f6:82:5e:fb:
2f:21:19:a1:ab:e1:06:e5:c4:8e:c2:11:c6:84:49:
b9:b8:ed:96:77:31:cb:c5:59:65:69:69:8f:f0:52:
ed:4f:d9:52:9c:84:1b:c3:10:4c:b3:b6:a3:17:b9:
e4:4d:5b:27:b4:b2:6c:58:65:34:f2:ee:d4:cd:6c:
61:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:4A:44:40:4C:E1:59:F1:8F:A0:63:7D:FC:66:10:B3:66:84:06:40
X509v3 Authority Key Identifier:
keyid:CD:EA:4A:DE:E8:0B:06:51:9C:E4:0D:D3:D1:3F:28:BA:9F:57:59:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zepK3ugLBlGc5A3T0T8oup9XWVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/O0pEQEzhWfGPoGN9_GYQs2aEBkA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/zepK3ugLBlGc5A3T0T8oup9XWVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.227.208.0/24
185.64.72.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:a2:58:97:4c:a9:09:66:cc:e3:da:12:84:c2:91:4f:47:b3:
9d:28:d1:40:13:53:6b:bd:d8:90:06:60:a1:47:ec:02:f8:ad:
84:33:55:ce:2c:a5:49:20:14:ed:6d:3a:82:ea:19:0b:2d:18:
40:27:ca:b3:ad:b5:ba:20:83:f5:02:12:c2:a8:67:1b:36:2d:
26:e6:5d:87:67:53:36:2a:94:a2:de:50:2a:df:b3:98:1f:3c:
0e:0e:e6:86:76:52:c9:5d:2d:da:86:8f:c0:df:1d:d7:96:79:
98:9b:b0:1a:ec:c3:fd:7b:fb:38:bc:76:09:cb:e3:35:ca:aa:
d0:62:46:d0:27:d4:b0:ef:79:17:7f:f0:ed:35:76:15:99:26:
cc:4d:01:c2:46:d2:a3:4b:8f:d6:8d:70:17:d9:5b:e5:3e:80:
e5:ca:65:8b:02:b7:0f:ad:6f:a1:cd:be:84:ed:4c:39:6a:73:
70:48:1b:fc:e7:4f:99:a0:70:b1:ba:27:06:63:ee:94:e4:12:
12:d2:e1:19:f6:2b:da:99:f4:38:f1:0a:68:f4:85:46:a9:cf:
f2:84:af:a8:f7:94:4b:7d:9f:b2:a1:f2:7d:fb:b2:f1:3f:51:
36:bb:bd:16:92:3f:73:cc:b9:3f:bf:10:c6:bd:af:9e:a4:d6:
a7:29:9b:ca
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQj1tAT8Lt3Da7kQ3uX029TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkZWE0YWRlZTgwYjA2NTE5Y2U0MGRkM2QxM2YyOGJhOWY1
NzU5NTcwHhcNMjUwMTAxMjE0NzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYjRhNDQ0MDRjZTE1OWYxOGZhMDYzN2RmYzY2MTBiMzY2ODQwNjQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1aUlO2rlR5giOeKxd7JehVlzPmp
4UBbLx15rJ6LcCwvdaNuO+6wJ62a9tyuG8/eEMFe6TxO/j5pNNC6a9wrcS0apPvm
FUo+TGM+xfTtgynTxo2NyEQk/hDxBq8iqfQCtjdDHyFZhJuoSfOrTRP4ZOjmwJPZ
IwSFWaG2jMrINhFI9qH+jQ+J01Eq4B3Cglz9EBdK8sB9oqx14VM+yFwnrFhf1Fck
AiZ5p6w7R/OxuFDjMUFeWdITLkFfhs/eEvaCXvsvIRmhq+EG5cSOwhHGhEm5uO2W
dzHLxVllaWmP8FLtT9lSnIQbwxBMs7ajF7nkTVsntLJsWGU08u7UzWxhNQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFDtKREBM4Vnxj6BjffxmELNmhAZAMB8GA1UdIwQY
MBaAFM3qSt7oCwZRnOQN09E/KLqfV1lXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemVwSzN1Z0xCbEdjNUEzVDBUOG91cDlYV1ZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81YjVmMGMtM2MzZC00ZTIwLWIwMzUt
MDU2YzdiZjZkN2Q4LzEvTzBwRVFFemhXZkdQb0dOOV9HWVFzMmFFQmtBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS81YjVmMGMtM2MzZC00ZTIwLWIwMzUtMDU2YzdiZjZkN2Q4
LzEvemVwSzN1Z0xCbEdjNUEzVDBUOG91cDlYV1ZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW+PQAwQC
uUBIMA0GCSqGSIb3DQEBCwUAA4IBAQCPoliXTKkJZszj2hKEwpFPR7OdKNFAE1Nr
vdiQBmChR+wC+K2EM1XOLKVJIBTtbTqC6hkLLRhAJ8qzrbW6IIP1AhLCqGcbNi0m
5l2HZ1M2KpSi3lAq37OYHzwODuaGdlLJXS3aho/A3x3XlnmYm7Aa7MP9e/s4vHYJ
y+M1yqrQYkbQJ9Sw73kXf/DtNXYVmSbMTQHCRtKjS4/WjXAX2VvlPoDlymWLArcP
rW+hzb6E7Uw5anNwSBv850+ZoHCxuicGY+6U5BIS0uEZ9ivamfQ48Qpo9IVGqc/y
hK+o95RLfZ+yofJ9+7LxP1E2u70Wkj9zzLk/vxDGva+epNanKZvK
-----END CERTIFICATE-----
Generated at Fri Apr 4 23:44:16 2025 by rpki-client