Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/EDx9UJr_bR_MLAO7n7AlYPzVgHk.roa
File: EDx9UJr_bR_MLAO7n7AlYPzVgHk.roa (raw, json)
Hash identifier: PJhAgFMtqQqa+J5NxHAYtorfHqm6JLgt9UdAzlPMssM=
Subject key identifier: 10:3C:7D:50:9A:FF:6D:1F:CC:2C:03:BB:9F:B0:25:60:FC:D5:80:79
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 01942823CD8B4622E2F3DD547EAF9006E8D3
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/EDx9UJr_bR_MLAO7n7AlYPzVgHk.roa
Signing time: Thu 02 Jan 2025 17:50:22 +0000
ROA not before: Thu 02 Jan 2025 17:50:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29372
IP address blocks: 91.68.247.0/24 maxlen: 24
91.68.248.0/24 maxlen: 24
91.68.249.0/24 maxlen: 24
91.68.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 04:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:cd:8b:46:22:e2:f3:dd:54:7e:af:90:06:e8:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Jan 2 17:50:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=103c7d509aff6d1fcc2c03bb9fb02560fcd58079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:09:35:6e:15:90:fe:30:87:09:f4:dc:f0:07:
c5:a7:68:97:8d:1d:73:31:c5:13:c2:33:49:99:fe:
85:09:73:6e:db:34:7c:30:49:e4:40:08:c2:c7:bd:
b6:fd:bd:db:e1:58:f9:b4:12:42:d3:c4:32:cd:81:
bc:8f:f3:3f:6c:40:cf:0e:96:d4:2f:91:8b:0a:d4:
e5:f5:9a:69:e8:76:b1:b2:8d:0a:02:56:14:72:3b:
e9:eb:1d:88:9f:84:f3:7d:0f:04:7c:e7:94:c6:29:
e9:28:a9:ed:5a:c7:46:1e:35:67:2b:16:05:1a:88:
d1:3d:dc:06:88:33:55:ef:0a:46:c5:4a:b4:06:40:
aa:a3:e3:be:24:69:49:41:9a:a4:4b:82:af:db:dc:
18:65:11:ba:93:77:88:15:63:73:ec:14:65:11:07:
3c:71:73:6e:17:1c:6f:5a:ca:4e:66:4c:c1:49:8c:
0e:61:41:72:31:f8:f1:e2:ba:d9:ea:99:a3:64:c2:
1f:ca:ed:29:dd:4c:b0:bb:72:46:28:fd:3f:11:69:
a5:3a:e6:89:67:46:37:13:c0:35:c7:ff:bc:ee:6f:
23:85:e3:2b:41:4a:70:3d:f4:8f:3e:81:9e:1e:cb:
aa:6c:eb:3b:d8:cd:44:b4:e0:15:96:15:d9:ef:3a:
79:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:3C:7D:50:9A:FF:6D:1F:CC:2C:03:BB:9F:B0:25:60:FC:D5:80:79
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/EDx9UJr_bR_MLAO7n7AlYPzVgHk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.68.247.0-91.68.250.255
Signature Algorithm: sha256WithRSAEncryption
09:19:a8:0c:22:88:06:e0:77:a4:3e:c3:6f:16:46:ec:a0:75:
bb:5e:1b:bd:16:19:b2:dc:38:03:4b:ec:07:b6:9c:90:7a:81:
ba:e8:b1:99:61:69:bc:a1:68:58:72:0e:ab:db:fa:8b:1f:3e:
0c:95:cf:90:48:9e:c0:d8:3d:7f:1e:79:4b:0a:0d:e3:eb:93:
d1:7f:e5:e4:2c:58:89:f5:66:46:a6:b8:3b:e9:fa:36:fd:32:
b9:af:d9:7e:26:7c:0c:a5:f4:7b:1d:1b:ef:66:13:16:35:80:
9c:86:08:40:bc:65:47:0e:83:61:35:2c:d6:a0:81:d7:04:fb:
97:ba:1c:09:d2:97:30:f3:51:18:28:65:64:88:89:f2:48:c2:
8c:15:97:b0:c3:eb:77:eb:2d:fd:3e:e8:4d:b4:82:29:a6:7f:
88:d1:6b:76:12:92:49:cf:b5:9c:69:4c:75:f0:2b:b5:ed:cf:
ca:0a:5a:09:f2:be:7e:8c:77:c9:76:2b:46:b9:3f:c3:60:4a:
15:43:75:a9:81:48:16:23:5d:5b:1c:8a:04:0a:d9:bc:3c:59:
b7:e0:03:cd:22:c5:ff:08:02:5e:06:57:7d:ca:87:cd:42:e5:
d7:ca:7c:51:a9:83:03:30:fd:00:f0:80:8e:42:35:af:5f:e8:
be:49:eb:b2
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZQoI82LRiLi891Ufq+QBujTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwZWY1ZmJiZmNhN2E5M2NmZWU5NjVlZWI2YmRlZTZmYjQz
YzQwM2UwHhcNMjUwMTAyMTc1MDIyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMDNjN2Q1MDlhZmY2ZDFmY2MyYzAzYmI5ZmIwMjU2MGZjZDU4MDc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwk1bhWQ/jCHCfTc8AfFp2iXjR1z
McUTwjNJmf6FCXNu2zR8MEnkQAjCx722/b3b4Vj5tBJC08QyzYG8j/M/bEDPDpbU
L5GLCtTl9Zpp6Haxso0KAlYUcjvp6x2In4TzfQ8EfOeUxinpKKntWsdGHjVnKxYF
GojRPdwGiDNV7wpGxUq0BkCqo+O+JGlJQZqkS4Kv29wYZRG6k3eIFWNz7BRlEQc8
cXNuFxxvWspOZkzBSYwOYUFyMfjx4rrZ6pmjZMIfyu0p3Uywu3JGKP0/EWmlOuaJ
Z0Y3E8A1x/+87m8jheMrQUpwPfSPPoGeHsuqbOs72M1EtOAVlhXZ7zp5FwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFBA8fVCa/20fzCwDu5+wJWD81YB5MB8GA1UdIwQY
MBaAFKDvX7v8p6k8/ull7ra97m+0PEA+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb085ZnVfeW5xVHotNldYdXRyM3ViN1E4UUQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9mZTkxNWMtYmY3MC00NjAyLThhM2Mt
MDI5MmIwMjAxNTBhLzEvRUR4OVVKcl9iUl9NTEFPN243QWxZUHpWZ0hrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi9mZTkxNWMtYmY3MC00NjAyLThhM2MtMDI5MmIwMjAxNTBh
LzEvb085ZnVfeW5xVHotNldYdXRyM3ViN1E4UUQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABbRPcD
BABbRPowDQYJKoZIhvcNAQELBQADggEBAAkZqAwiiAbgd6Q+w28WRuygdbteG70W
GbLcOANL7Ae2nJB6gbrosZlhabyhaFhyDqvb+osfPgyVz5BInsDYPX8eeUsKDePr
k9F/5eQsWIn1ZkamuDvp+jb9Mrmv2X4mfAyl9HsdG+9mExY1gJyGCEC8ZUcOg2E1
LNaggdcE+5e6HAnSlzDzURgoZWSIifJIwowVl7DD63frLf0+6E20gimmf4jRa3YS
kknPtZxpTHXwK7Xtz8oKWgnyvn6Md8l2K0a5P8NgShVDdamBSBYjXVscigQK2bw8
WbfgA80ixf8IAl4GV33Kh81C5dfKfFGpgwMw/QDwgI5CNa9f6L5J67I=
-----END CERTIFICATE-----
Generated at Mon Apr 7 13:04:50 2025 by rpki-client