Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/9bOB6b6MxNxbt_5l2-PBsncoDqw.roa
File: 9bOB6b6MxNxbt_5l2-PBsncoDqw.roa (raw, json)
Hash identifier: QEQypt0X0TX2mtLGbYHx1ANMkfhYk+vJFgeQrG97OiA=
Subject key identifier: F5:B3:81:E9:BE:8C:C4:DC:5B:B7:FE:65:DB:E3:C1:B2:77:28:0E:AC
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 019420D5B39CC97A9A0D05E5F69D2C5F6662
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/9bOB6b6MxNxbt_5l2-PBsncoDqw.roa
Signing time: Wed 01 Jan 2025 07:47:43 +0000
ROA not before: Wed 01 Jan 2025 07:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47150
IP address blocks: 90.84.12.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 07:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:b3:9c:c9:7a:9a:0d:05:e5:f6:9d:2c:5f:66:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 1 07:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f5b381e9be8cc4dc5bb7fe65dbe3c1b277280eac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6b:a5:eb:31:cf:97:3f:c2:47:22:94:97:83:
11:e0:28:67:c5:ab:43:16:41:c9:61:ce:8f:bf:c8:
4b:f4:bb:81:9f:42:35:77:21:07:bf:38:25:15:a6:
3f:0e:44:73:1f:82:fb:73:c7:bc:d0:8e:fb:35:f6:
8d:ac:41:78:16:09:fe:e5:67:10:d9:cf:21:74:00:
d2:96:29:b9:a9:47:db:5f:bd:5b:ac:ad:98:5f:59:
d6:99:46:a2:f4:11:25:e3:a4:bd:00:5f:2b:18:40:
27:d0:9e:6f:c5:a5:a4:3b:b4:c8:44:1a:67:f9:25:
da:91:ab:30:7d:9d:54:37:38:ed:38:b1:f1:53:a3:
77:82:84:77:f6:bc:b5:eb:2f:db:2f:b9:0b:22:ce:
e6:54:57:e1:02:25:57:fe:f9:ec:72:fe:46:72:7a:
76:4f:02:aa:97:05:3d:15:60:c7:ef:dc:89:5c:40:
8a:59:c4:2f:d1:f4:7b:4c:52:9e:f4:a0:a9:0d:24:
95:cd:63:64:12:16:4a:db:61:33:cb:d1:3d:ec:37:
42:5b:96:1a:8f:4f:65:29:10:69:5b:fd:81:46:ff:
15:3d:c3:5f:10:99:ca:ee:1d:ac:1e:70:7e:07:94:
97:8b:e5:37:82:94:0f:58:e1:d3:fc:72:5b:7f:fe:
ff:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:B3:81:E9:BE:8C:C4:DC:5B:B7:FE:65:DB:E3:C1:B2:77:28:0E:AC
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/9bOB6b6MxNxbt_5l2-PBsncoDqw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.84.12.0/23
Signature Algorithm: sha256WithRSAEncryption
ac:98:eb:c4:4e:37:c0:be:46:ea:fe:79:42:6a:5d:1f:41:fd:
f8:4f:2b:5d:c5:8b:df:ae:f9:3a:97:36:80:59:4b:70:60:b1:
9e:5d:25:83:1d:2b:ac:b4:b7:7b:6a:97:5d:fb:29:d4:22:92:
f3:33:73:16:3b:8d:aa:a9:9b:85:4b:b8:b4:d5:d7:ce:4d:43:
3b:69:12:9e:d5:db:22:72:ba:65:05:8a:7b:65:06:35:88:bd:
7b:d9:07:70:87:53:f4:ce:e0:c4:84:80:67:14:30:b2:f6:16:
13:54:17:08:7c:a4:49:d7:1f:50:3e:35:59:86:35:24:fc:62:
78:2d:2d:f0:1d:0a:61:d9:70:28:a2:ae:6e:a0:b0:bb:a7:c2:
4c:5d:d8:d5:43:d1:2e:8c:59:a8:d8:ff:7d:14:0c:df:29:a4:
d6:27:c7:2b:c7:98:ae:62:50:9e:ea:df:eb:f2:b0:38:c8:2d:
26:bc:a1:f6:4d:74:ec:ea:83:10:dd:c6:18:b0:f7:c6:22:5b:
6c:b0:06:64:a0:90:72:bc:77:7f:07:25:69:4e:22:b5:c8:71:
4e:8a:b8:f9:e0:e8:e4:da:26:59:6e:f0:48:f8:5b:46:cc:29:
a8:70:7c:db:ee:65:55:30:38:ff:72:91:2b:5c:7a:e4:a5:f4:
1e:8e:ce:d8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQg1bOcyXqaDQXl9p0sX2ZiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZjA5YmEzM2I1YWU1ODFiMGQyOTMyMzI0OTMxNGY3NmFh
MTA1MTEwHhcNMjUwMTAxMDc0NzQzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNWIzODFlOWJlOGNjNGRjNWJiN2ZlNjVkYmUzYzFiMjc3MjgwZWFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGul6zHPlz/CRyKUl4MR4ChnxatD
FkHJYc6Pv8hL9LuBn0I1dyEHvzglFaY/DkRzH4L7c8e80I77NfaNrEF4Fgn+5WcQ
2c8hdADSlim5qUfbX71brK2YX1nWmUai9BEl46S9AF8rGEAn0J5vxaWkO7TIRBpn
+SXakaswfZ1UNzjtOLHxU6N3goR39ry16y/bL7kLIs7mVFfhAiVX/vnscv5Gcnp2
TwKqlwU9FWDH79yJXECKWcQv0fR7TFKe9KCpDSSVzWNkEhZK22Ezy9E97DdCW5Ya
j09lKRBpW/2BRv8VPcNfEJnK7h2sHnB+B5SXi+U3gpQPWOHT/HJbf/7/9wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPWzgem+jMTcW7f+ZdvjwbJ3KA6sMB8GA1UdIwQY
MBaAFDrwm6M7WuWBsNKTIySTFPdqoQURMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQt
NDU5MzVmNTA2YTEyLzEvOWJPQjZiNk14TnhidF81bDItUEJzbmNvRHF3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQtNDU5MzVmNTA2YTEy
LzEvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBWlQMMA0G
CSqGSIb3DQEBCwUAA4IBAQCsmOvETjfAvkbq/nlCal0fQf34TytdxYvfrvk6lzaA
WUtwYLGeXSWDHSustLd7apdd+ynUIpLzM3MWO42qqZuFS7i01dfOTUM7aRKe1dsi
crplBYp7ZQY1iL172Qdwh1P0zuDEhIBnFDCy9hYTVBcIfKRJ1x9QPjVZhjUk/GJ4
LS3wHQph2XAooq5uoLC7p8JMXdjVQ9EujFmo2P99FAzfKaTWJ8crx5iuYlCe6t/r
8rA4yC0mvKH2TXTs6oMQ3cYYsPfGIltssAZkoJByvHd/ByVpTiK1yHFOirj54Ojk
2iZZbvBI+FtGzCmocHzb7mVVMDj/cpErXHrkpfQejs7Y
-----END CERTIFICATE-----
Generated at Wed Apr 9 14:12:47 2025 by rpki-client