Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/ad1301-149c-4c21-98b3-446a8913d4b8/1/F_5jyI70I8rVjTf2ep027mY2RmU.roa
File: F_5jyI70I8rVjTf2ep027mY2RmU.roa (raw, json)
Hash identifier: P/CUUf/qaBdESN8cQx3ZzCN3CEChdcz8YXHGB8DZwPM=
Subject key identifier: 17:FE:63:C8:8E:F4:23:CA:D5:8D:37:F6:7A:9D:36:EE:66:36:46:65
Certificate issuer: /CN=b26bb4333efe9e14c4831b05821416e5c55bdf42
Certificate serial: 019423D6EA701D1530CEBBEFD140E5AD4EE8
Authority key identifier: B2:6B:B4:33:3E:FE:9E:14:C4:83:1B:05:82:14:16:E5:C5:5B:DF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/smu0Mz7-nhTEgxsFghQW5cVb30I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/ad1301-149c-4c21-98b3-446a8913d4b8/1/F_5jyI70I8rVjTf2ep027mY2RmU.roa
Signing time: Wed 01 Jan 2025 21:47:54 +0000
ROA not before: Wed 01 Jan 2025 21:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 91.212.235.0/24 maxlen: 24
2001:7f8:9f::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/ad1301-149c-4c21-98b3-446a8913d4b8/1/smu0Mz7-nhTEgxsFghQW5cVb30I.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/ad1301-149c-4c21-98b3-446a8913d4b8/1/smu0Mz7-nhTEgxsFghQW5cVb30I.mft
rsync://rpki.ripe.net/repository/DEFAULT/smu0Mz7-nhTEgxsFghQW5cVb30I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:ea:70:1d:15:30:ce:bb:ef:d1:40:e5:ad:4e:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b26bb4333efe9e14c4831b05821416e5c55bdf42
Validity
Not Before: Jan 1 21:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=17fe63c88ef423cad58d37f67a9d36ee66364665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9f:70:ab:93:9b:c0:38:58:41:52:ae:3a:b1:
41:4a:9e:cb:f6:ff:c3:d8:9f:28:59:24:5f:5f:4d:
c4:52:21:20:05:12:e2:c3:56:0b:cf:a5:62:f0:30:
37:10:5a:ab:d6:d3:7d:48:1d:ee:81:57:f5:d5:bd:
b7:8a:85:c5:27:5a:e1:8c:e7:68:6f:af:74:4a:7e:
7b:e1:23:a7:1e:2f:20:d6:43:62:29:cb:0e:0f:f7:
04:a8:31:5a:ed:55:c5:86:9e:ee:d4:02:1d:c4:21:
74:ad:c2:c4:1d:32:00:be:33:79:cd:bf:35:99:16:
ec:52:e8:fd:e3:f1:7b:42:f5:d4:be:be:a8:3e:bb:
76:07:db:53:97:a6:fb:06:a7:ed:e9:fc:66:59:b6:
d9:4c:b6:44:97:c1:80:9c:f9:bc:dc:f7:5c:6d:e5:
f2:8a:f1:2a:2a:f6:d0:96:71:1a:d4:0b:60:0c:fd:
7e:6e:f8:ad:31:f9:de:ca:89:19:72:bb:ae:7a:86:
a2:22:ab:db:14:e0:2a:1f:62:bc:99:51:90:25:56:
71:dd:ed:a3:89:f5:a9:8b:02:04:c6:34:61:2d:c9:
ac:61:08:2a:91:93:78:9b:ba:47:4e:14:92:da:ff:
3f:f1:44:bc:ca:e2:a2:46:c4:7a:d9:b2:f6:03:c3:
6a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:FE:63:C8:8E:F4:23:CA:D5:8D:37:F6:7A:9D:36:EE:66:36:46:65
X509v3 Authority Key Identifier:
keyid:B2:6B:B4:33:3E:FE:9E:14:C4:83:1B:05:82:14:16:E5:C5:5B:DF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/smu0Mz7-nhTEgxsFghQW5cVb30I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/ad1301-149c-4c21-98b3-446a8913d4b8/1/F_5jyI70I8rVjTf2ep027mY2RmU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/ad1301-149c-4c21-98b3-446a8913d4b8/1/smu0Mz7-nhTEgxsFghQW5cVb30I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.235.0/24
IPv6:
2001:7f8:9f::/64
Signature Algorithm: sha256WithRSAEncryption
b1:2f:0a:89:49:aa:78:51:aa:4e:08:f1:51:75:84:71:84:d0:
c2:da:8e:6b:d6:fe:f9:27:8a:b0:c8:47:8a:7a:e1:a6:39:86:
9a:c3:fb:20:61:a8:a5:ae:1f:30:9c:b0:1a:ea:bf:12:a5:b8:
0f:46:f2:7f:10:51:87:77:7c:8a:f4:95:fa:2a:b5:31:a3:c3:
e9:22:48:50:ed:be:96:f8:b9:fd:5c:20:bd:30:37:3b:82:c4:
db:fe:eb:ff:f2:c8:ad:74:99:68:4e:ad:52:f7:da:74:df:a2:
90:8e:86:cb:f8:7c:55:38:66:bc:4c:20:51:45:83:ab:a6:b9:
5e:34:36:dc:84:26:66:31:60:9e:23:71:d2:ae:7e:28:96:c9:
e3:0e:dc:ac:85:eb:97:07:ee:7a:60:a7:b7:89:f0:2d:21:96:
16:05:7a:a7:e7:a3:33:81:03:36:e3:6f:52:e6:eb:c9:19:93:
89:1a:16:f7:91:e3:92:5b:8c:77:24:2b:1a:1f:ed:c1:68:1a:
dd:2f:7c:d8:fa:81:d8:b5:65:20:a3:35:49:57:72:d6:49:a0:
0e:0c:1f:23:41:42:e7:53:d7:03:9f:b2:9a:91:55:b2:00:fb:
5e:d7:67:52:01:e7:21:0a:77:a6:b2:28:0f:4c:22:4f:f2:88:
13:81:d4:04
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgISAZQj1upwHRUwzrvv0UDlrU7oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyNmJiNDMzM2VmZTllMTRjNDgzMWIwNTgyMTQxNmU1YzU1
YmRmNDIwHhcNMjUwMTAxMjE0NzU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxN2ZlNjNjODhlZjQyM2NhZDU4ZDM3ZjY3YTlkMzZlZTY2MzY0NjY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzp9wq5ObwDhYQVKuOrFBSp7L9v/D
2J8oWSRfX03EUiEgBRLiw1YLz6Vi8DA3EFqr1tN9SB3ugVf11b23ioXFJ1rhjOdo
b690Sn574SOnHi8g1kNiKcsOD/cEqDFa7VXFhp7u1AIdxCF0rcLEHTIAvjN5zb81
mRbsUuj94/F7QvXUvr6oPrt2B9tTl6b7Bqft6fxmWbbZTLZEl8GAnPm83PdcbeXy
ivEqKvbQlnEa1AtgDP1+bvitMfneyokZcruueoaiIqvbFOAqH2K8mVGQJVZx3e2j
ifWpiwIExjRhLcmsYQgqkZN4m7pHThSS2v8/8US8yuKiRsR62bL2A8NqBQIDAQAB
o4ICHDCCAhgwHQYDVR0OBBYEFBf+Y8iO9CPK1Y039nqdNu5mNkZlMB8GA1UdIwQY
MBaAFLJrtDM+/p4UxIMbBYIUFuXFW99CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc211ME16Ny1uaFRFZ3hzRmdoUVc1Y1ZiMzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9hZDEzMDEtMTQ5Yy00YzIxLTk4YjMt
NDQ2YTg5MTNkNGI4LzEvRl81anlJNzBJOHJWalRmMmVwMDI3bVkyUm1VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS9hZDEzMDEtMTQ5Yy00YzIxLTk4YjMtNDQ2YTg5MTNkNGI4
LzEvc211ME16Ny1uaFRFZ3hzRmdoUVc1Y1ZiMzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDIGCCsGAQUFBwEHAQH/BCMwITAMBAIAATAGAwQAW9TrMBEE
AgACMAsDCQAgAQf4AJ8AADANBgkqhkiG9w0BAQsFAAOCAQEAsS8KiUmqeFGqTgjx
UXWEcYTQwtqOa9b++SeKsMhHinrhpjmGmsP7IGGopa4fMJywGuq/EqW4D0byfxBR
h3d8ivSV+iq1MaPD6SJIUO2+lvi5/VwgvTA3O4LE2/7r//LIrXSZaE6tUvfadN+i
kI6Gy/h8VThmvEwgUUWDq6a5XjQ23IQmZjFgniNx0q5+KJbJ4w7crIXrlwfuemCn
t4nwLSGWFgV6p+ejM4EDNuNvUubryRmTiRoW95HjkluMdyQrGh/twWga3S982PqB
2LVlIKM1SVdy1kmgDgwfI0FC51PXA5+ympFVsgD7XtdnUgHnIQp3prIoD0wiT/KI
E4HUBA==
-----END CERTIFICATE-----
Generated at Sat Apr 12 03:23:01 2025 by rpki-client