Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/xduoMOkUXzQ7Kdoh4zDKE9taGqM.roa
File: xduoMOkUXzQ7Kdoh4zDKE9taGqM.roa (raw, json)
Hash identifier: v6JdlRVd2u7tIbRYZCLJ9Bn+UkQd4MO8kZwoWQAa+WM=
Subject key identifier: C5:DB:A8:30:E9:14:5F:34:3B:29:DA:21:E3:30:CA:13:DB:5A:1A:A3
Certificate issuer: /CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Certificate serial: 01949DC2565F66321A4526C7E352C047E680
Authority key identifier: 27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/xduoMOkUXzQ7Kdoh4zDKE9taGqM.roa
Signing time: Sat 25 Jan 2025 13:59:06 +0000
ROA not before: Sat 25 Jan 2025 13:59:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56582
IP address blocks: 91.102.160.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 07:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:9d:c2:56:5f:66:32:1a:45:26:c7:e3:52:c0:47:e6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Validity
Not Before: Jan 25 13:59:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c5dba830e9145f343b29da21e330ca13db5a1aa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e8:c2:a7:13:49:5a:31:cd:1c:1f:c5:82:fd:
27:38:9c:e1:cc:f3:70:0f:3b:ca:5d:52:d8:a2:30:
88:b7:2d:e0:84:45:f5:39:92:61:87:1f:31:5e:71:
aa:4d:3c:d9:a7:d0:cd:5e:77:ce:1f:26:ed:95:54:
27:5f:46:b9:ef:01:c9:d7:c3:0b:d3:0d:50:ac:aa:
fa:d7:d3:af:41:38:43:ba:ba:52:f7:ba:e2:ea:95:
9c:83:b9:b8:06:15:21:94:5b:f4:1b:e7:35:28:1c:
fa:12:a9:e6:91:6f:33:fb:83:f3:38:4f:47:5a:04:
8e:cc:74:dd:8a:e1:14:a1:a0:04:62:86:7c:e1:f1:
6f:76:7b:12:41:80:fa:65:24:e1:5a:6e:ba:c9:05:
aa:1e:e0:59:75:9c:5d:8a:6e:45:20:37:16:d2:86:
8b:49:b4:42:cb:e1:28:9d:9f:2f:e3:44:8b:ab:d1:
97:42:64:ba:84:af:74:df:73:7e:f9:f0:67:ad:bf:
cb:ba:08:7e:b1:6c:97:1d:43:4d:90:43:b4:43:e1:
f0:20:e8:10:94:02:96:d3:1f:93:fc:15:8c:28:37:
62:3b:fa:14:a5:4c:81:b4:02:1e:b1:1f:e9:d7:60:
8b:60:6b:0a:b1:5f:79:79:a7:04:4c:35:4f:1d:31:
3e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:DB:A8:30:E9:14:5F:34:3B:29:DA:21:E3:30:CA:13:DB:5A:1A:A3
X509v3 Authority Key Identifier:
keyid:27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/xduoMOkUXzQ7Kdoh4zDKE9taGqM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.102.160.0/23
Signature Algorithm: sha256WithRSAEncryption
a1:b9:23:b5:71:52:8f:44:c7:23:1b:43:4b:2b:ea:0a:1b:55:
9c:3f:d8:2c:03:22:e2:aa:fe:5a:47:a8:10:e9:f9:10:f6:96:
15:dc:31:32:ab:45:37:0d:c6:f6:53:36:46:ce:e5:52:ac:af:
f8:08:d2:95:9d:9f:bc:80:d7:29:b4:35:cd:8f:e2:17:2c:9b:
44:d3:66:98:f7:74:6b:a8:ab:bf:82:96:8c:25:8f:78:b4:f8:
aa:a6:76:24:96:0a:62:36:d4:20:d4:ef:97:23:76:2b:b7:93:
d8:4d:ef:08:38:67:7b:4b:68:fd:4e:43:2d:96:fe:27:ee:d5:
89:5c:3f:6e:91:80:16:e7:8d:70:e5:0f:5a:db:d4:eb:4e:0f:
85:31:d7:d8:8e:23:ca:d7:b8:6c:7d:50:2a:40:76:52:6d:10:
e3:d1:6d:e9:1d:81:b8:c3:9c:ab:94:88:59:e1:33:50:7d:0c:
6a:d3:58:fd:52:62:04:2f:e0:d0:d7:6a:e1:08:6b:ae:57:3f:
6a:40:43:aa:83:07:e7:60:af:97:0d:48:8a:bf:10:00:21:8b:
e7:35:bd:11:fd:43:b9:c6:9b:9a:6e:b6:66:97:24:30:b2:57:
99:a3:35:76:26:94:b1:d2:f4:42:26:d3:16:40:53:33:18:c5:
9f:38:dd:5e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZSdwlZfZjIaRSbH41LAR+aAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3YzhiNDI3YzMxMzU5OGE5MmU4ZDhlYzYwZTI5NTBkYTM5
ZmMyYzkwHhcNMjUwMTI1MTM1OTA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNWRiYTgzMGU5MTQ1ZjM0M2IyOWRhMjFlMzMwY2ExM2RiNWExYWEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+jCpxNJWjHNHB/Fgv0nOJzhzPNw
DzvKXVLYojCIty3ghEX1OZJhhx8xXnGqTTzZp9DNXnfOHybtlVQnX0a57wHJ18ML
0w1QrKr619OvQThDurpS97ri6pWcg7m4BhUhlFv0G+c1KBz6EqnmkW8z+4PzOE9H
WgSOzHTdiuEUoaAEYoZ84fFvdnsSQYD6ZSThWm66yQWqHuBZdZxdim5FIDcW0oaL
SbRCy+EonZ8v40SLq9GXQmS6hK9033N++fBnrb/Lugh+sWyXHUNNkEO0Q+HwIOgQ
lAKW0x+T/BWMKDdiO/oUpUyBtAIesR/p12CLYGsKsV95eacETDVPHTE+0wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMXbqDDpFF80OynaIeMwyhPbWhqjMB8GA1UdIwQY
MBaAFCfItCfDE1mKkujY7GDilQ2jn8LJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjhpMEo4TVRXWXFTNk5qc1lPS1ZEYU9md3NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9hN2NkYmYtZGE4ZS00ZDQzLWJkYzct
MWM2ZWU0NGUxMWFkLzEveGR1b01Pa1VYelE3S2RvaDR6REtFOXRhR3FNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS9hN2NkYmYtZGE4ZS00ZDQzLWJkYzctMWM2ZWU0NGUxMWFk
LzEvSjhpMEo4TVRXWXFTNk5qc1lPS1ZEYU9md3NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW2agMA0G
CSqGSIb3DQEBCwUAA4IBAQChuSO1cVKPRMcjG0NLK+oKG1WcP9gsAyLiqv5aR6gQ
6fkQ9pYV3DEyq0U3Dcb2UzZGzuVSrK/4CNKVnZ+8gNcptDXNj+IXLJtE02aY93Rr
qKu/gpaMJY94tPiqpnYklgpiNtQg1O+XI3Yrt5PYTe8IOGd7S2j9TkMtlv4n7tWJ
XD9ukYAW541w5Q9a29TrTg+FMdfYjiPK17hsfVAqQHZSbRDj0W3pHYG4w5yrlIhZ
4TNQfQxq01j9UmIEL+DQ12rhCGuuVz9qQEOqgwfnYK+XDUiKvxAAIYvnNb0R/UO5
xpuabrZmlyQwsleZozV2JpSx0vRCJtMWQFMzGMWfON1e
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:52:36 2025 by rpki-client