Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/7mu7dSdOdivtbUb5Ar1MUUCeTYk.roa
File: 7mu7dSdOdivtbUb5Ar1MUUCeTYk.roa (raw, json)
Hash identifier: q+lzjmvfQiLwsG4m5ztsli480LBdARkn+qQlJRAHsqg=
Subject key identifier: EE:6B:BB:75:27:4E:76:2B:ED:6D:46:F9:02:BD:4C:51:40:9E:4D:89
Certificate issuer: /CN=1903647efb243662e57e61d4ec45b4a25a37eac8
Certificate serial: 019427B5C1EC28D1FAAB126744E60194AFCE
Authority key identifier: 19:03:64:7E:FB:24:36:62:E5:7E:61:D4:EC:45:B4:A2:5A:37:EA:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQNkfvskNmLlfmHU7EW0olo36sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/7mu7dSdOdivtbUb5Ar1MUUCeTYk.roa
Signing time: Thu 02 Jan 2025 15:50:10 +0000
ROA not before: Thu 02 Jan 2025 15:50:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25538
IP address blocks: 91.210.72.0/22 maxlen: 22
193.110.90.0/24 maxlen: 24
217.10.0.0/20 maxlen: 20
2001:1410::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GQNkfvskNmLlfmHU7EW0olo36sg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:c1:ec:28:d1:fa:ab:12:67:44:e6:01:94:af:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1903647efb243662e57e61d4ec45b4a25a37eac8
Validity
Not Before: Jan 2 15:50:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ee6bbb75274e762bed6d46f902bd4c51409e4d89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6b:dc:94:82:ff:72:0a:78:41:f5:b7:71:34:
cb:a1:c3:bc:c5:8e:78:dd:8a:30:97:d8:7b:39:b1:
d0:f1:fd:c3:c8:54:13:c3:3e:1f:44:91:b3:56:27:
33:13:14:6d:36:27:bc:61:17:31:03:f1:5b:78:9c:
c0:37:53:cb:d3:e9:03:0f:25:00:5e:94:79:18:57:
2a:a0:13:14:48:79:22:94:ef:00:d7:b1:2c:00:25:
2f:5a:bd:e2:5b:85:6b:d8:88:98:2f:5e:69:10:00:
01:f6:f2:cc:bc:81:7e:6b:eb:33:a8:93:bc:a5:95:
cf:e3:57:39:db:e3:36:d1:18:00:2c:93:8d:d8:40:
d8:0c:55:a1:1c:94:38:16:1d:25:34:d6:e1:ff:76:
30:99:35:10:a5:cd:c0:1e:7d:f3:b8:04:3d:78:b8:
6a:d5:85:37:4c:06:22:db:2e:f4:a6:03:d2:65:aa:
74:5a:a6:0d:3f:41:03:ff:cf:f2:1b:b8:00:c2:3f:
95:bf:27:91:4e:17:0f:d7:a1:83:e9:78:87:39:6d:
4c:08:63:0c:dc:a0:6d:91:4d:b4:21:33:39:37:ee:
d7:6e:70:f5:5c:b4:df:5e:ac:0b:90:48:1d:fe:68:
0f:39:47:d7:5c:71:c1:6e:ef:f3:f4:cd:2c:62:ca:
80:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:6B:BB:75:27:4E:76:2B:ED:6D:46:F9:02:BD:4C:51:40:9E:4D:89
X509v3 Authority Key Identifier:
keyid:19:03:64:7E:FB:24:36:62:E5:7E:61:D4:EC:45:B4:A2:5A:37:EA:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQNkfvskNmLlfmHU7EW0olo36sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/7mu7dSdOdivtbUb5Ar1MUUCeTYk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.210.72.0/22
193.110.90.0/24
217.10.0.0/20
IPv6:
2001:1410::/32
Signature Algorithm: sha256WithRSAEncryption
9f:10:cd:ef:53:52:66:ef:77:44:74:30:11:e6:92:21:6f:a0:
98:2b:42:44:73:58:79:33:a4:ed:bc:6c:94:56:fa:73:3c:ea:
5b:ff:af:0d:7c:55:03:c2:0d:34:c4:33:24:fe:a0:39:24:dd:
48:d4:ac:4b:a9:1c:4a:4c:48:73:bd:6a:1a:fa:cd:2c:08:64:
36:db:8b:1f:b1:48:5c:c7:81:48:50:02:d6:e7:4e:59:18:ae:
01:f9:18:7c:23:62:c5:50:45:38:2e:c3:50:8d:90:3f:7b:fc:
6b:33:3d:3c:22:2c:17:03:13:85:c6:1e:2a:98:e8:44:0a:98:
6f:d5:c9:9d:04:ea:c7:88:c0:c3:07:4b:d7:1c:6f:d8:d9:b8:
95:2b:a5:56:ca:69:a1:ff:dd:c0:11:5f:94:57:11:8a:c6:7c:
e5:4e:92:5d:b5:2d:8b:70:8b:05:32:5f:07:2e:ca:e4:eb:b1:
c1:9e:a8:00:07:c2:73:32:8d:72:69:2c:e1:5d:e7:41:e3:fc:
55:57:a5:b0:9f:c3:8c:2c:f2:bc:59:22:1d:91:97:5a:97:2c:
05:2a:df:87:89:b4:34:13:ff:0e:01:d5:24:81:bf:77:da:e9:
05:55:a7:aa:37:28:80:64:58:f7:47:a1:be:5a:16:63:74:ff:
35:a0:f8:1a
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAZQntcHsKNH6qxJnROYBlK/OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5MDM2NDdlZmIyNDM2NjJlNTdlNjFkNGVjNDViNGEyNWEz
N2VhYzgwHhcNMjUwMTAyMTU1MDEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZTZiYmI3NTI3NGU3NjJiZWQ2ZDQ2ZjkwMmJkNGM1MTQwOWU0ZDg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGvclIL/cgp4QfW3cTTLocO8xY54
3Yowl9h7ObHQ8f3DyFQTwz4fRJGzViczExRtNie8YRcxA/FbeJzAN1PL0+kDDyUA
XpR5GFcqoBMUSHkilO8A17EsACUvWr3iW4Vr2IiYL15pEAAB9vLMvIF+a+szqJO8
pZXP41c52+M20RgALJON2EDYDFWhHJQ4Fh0lNNbh/3YwmTUQpc3AHn3zuAQ9eLhq
1YU3TAYi2y70pgPSZap0WqYNP0ED/8/yG7gAwj+VvyeRThcP16GD6XiHOW1MCGMM
3KBtkU20ITM5N+7XbnD1XLTfXqwLkEgd/mgPOUfXXHHBbu/z9M0sYsqAsQIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFO5ru3UnTnYr7W1G+QK9TFFAnk2JMB8GA1UdIwQY
MBaAFBkDZH77JDZi5X5h1OxFtKJaN+rIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1FOa2Z2c2tObUxsZm1IVTdFVzBvbG8zNnNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS82ZWVmZWUtYzlkZS00NzI4LWFjYTgt
YTRjMzQzMmZiMDBmLzEvN211N2RTZE9kaXZ0YlViNUFyMU1VVUNlVFlrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS82ZWVmZWUtYzlkZS00NzI4LWFjYTgtYTRjMzQzMmZiMDBm
LzEvR1FOa2Z2c2tObUxsZm1IVTdFVzBvbG8zNnNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCW9JIAwQA
wW5aAwQE2QoAMA0EAgACMAcDBQAgARQQMA0GCSqGSIb3DQEBCwUAA4IBAQCfEM3v
U1Jm73dEdDAR5pIhb6CYK0JEc1h5M6TtvGyUVvpzPOpb/68NfFUDwg00xDMk/qA5
JN1I1KxLqRxKTEhzvWoa+s0sCGQ224sfsUhcx4FIUALW505ZGK4B+Rh8I2LFUEU4
LsNQjZA/e/xrMz08IiwXAxOFxh4qmOhECphv1cmdBOrHiMDDB0vXHG/Y2biVK6VW
ymmh/93AEV+UVxGKxnzlTpJdtS2LcIsFMl8HLsrk67HBnqgAB8JzMo1yaSzhXedB
4/xVV6Wwn8OMLPK8WSIdkZdalywFKt+HibQ0E/8OAdUkgb932ukFVaeqNyiAZFj3
R6G+WhZjdP81oPga
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:30:51 2025 by rpki-client