Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/_n0xC-sidbdSFPfTnRV-lr4kGic.roa
File: _n0xC-sidbdSFPfTnRV-lr4kGic.roa (raw, json)
Hash identifier: ++bpQemmXYA46AzwIRn3gko69y6uULCJsSLSxSSwsGM=
Subject key identifier: FE:7D:31:0B:EB:22:75:B7:52:14:F7:D3:9D:15:7E:96:BE:24:1A:27
Certificate issuer: /CN=a92b2440a7c7a2dfcf2e4216da8a3bde68b9b898
Certificate serial: 019422FB6C19A8E7037E5A51B739EA76AEDE
Authority key identifier: A9:2B:24:40:A7:C7:A2:DF:CF:2E:42:16:DA:8A:3B:DE:68:B9:B8:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qSskQKfHot_PLkIW2oo73mi5uJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/_n0xC-sidbdSFPfTnRV-lr4kGic.roa
Signing time: Wed 01 Jan 2025 17:48:10 +0000
ROA not before: Wed 01 Jan 2025 17:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51088
IP address blocks: 91.213.13.0/24 maxlen: 24
193.108.238.0/24 maxlen: 24
2001:67c:1064::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/qSskQKfHot_PLkIW2oo73mi5uJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:6c:19:a8:e7:03:7e:5a:51:b7:39:ea:76:ae:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a92b2440a7c7a2dfcf2e4216da8a3bde68b9b898
Validity
Not Before: Jan 1 17:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fe7d310beb2275b75214f7d39d157e96be241a27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:72:24:ee:0f:19:34:66:f2:ec:02:6e:77:0d:
4e:c3:2e:64:86:54:d2:aa:fb:47:aa:77:24:c4:52:
9a:a8:a6:3c:dd:9f:04:55:e2:73:c3:5c:6d:15:39:
b6:ef:ec:1f:f3:2f:fc:13:75:2a:27:59:5b:61:16:
a8:38:55:63:2f:2b:2e:30:f6:da:6a:31:d0:b8:a1:
83:59:90:5f:31:18:cc:8b:b5:02:80:ce:9c:95:10:
e2:3c:3b:3f:c2:66:aa:9b:5f:43:eb:12:3c:7a:52:
58:0e:a1:a4:5f:49:29:52:dd:af:78:2b:8e:24:0d:
f5:ba:2e:cc:3b:bd:40:b2:7a:80:84:56:ef:c1:ab:
52:72:5a:5d:b5:f1:20:a5:95:fb:d8:cf:9a:db:53:
3e:9e:d9:4c:30:d8:9e:bf:42:b2:95:7a:d8:0d:37:
77:27:41:d3:58:e2:f1:b7:13:ae:b9:aa:fa:99:6b:
68:5e:95:7c:48:1c:1e:a9:ee:fe:3a:63:79:05:da:
57:bc:8a:ad:2d:a0:8b:a9:72:49:f9:9d:40:50:f2:
0e:ba:84:18:39:e1:26:bd:69:fc:31:fc:d1:3a:15:
03:ed:29:a0:41:d2:dc:ba:b9:ad:02:41:81:8e:84:
96:58:f2:c3:5d:c5:61:3e:45:3d:54:00:0a:83:d4:
13:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:7D:31:0B:EB:22:75:B7:52:14:F7:D3:9D:15:7E:96:BE:24:1A:27
X509v3 Authority Key Identifier:
keyid:A9:2B:24:40:A7:C7:A2:DF:CF:2E:42:16:DA:8A:3B:DE:68:B9:B8:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qSskQKfHot_PLkIW2oo73mi5uJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/_n0xC-sidbdSFPfTnRV-lr4kGic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.13.0/24
193.108.238.0/24
IPv6:
2001:67c:1064::/48
Signature Algorithm: sha256WithRSAEncryption
9a:b4:7d:c7:31:ac:14:65:48:72:8e:46:b1:c7:3c:4c:0b:2b:
3a:67:aa:bf:4c:b3:c3:59:28:74:94:e9:cf:a8:cf:b2:db:48:
13:f0:a5:0f:5d:18:c3:ed:8f:57:f0:71:b2:12:6a:b8:a3:1b:
4c:20:0b:9e:ee:04:bd:fa:c5:62:40:94:a1:be:fe:4a:a9:db:
eb:46:9b:f4:22:e6:a1:5d:dc:95:fe:8b:6f:35:9f:6d:da:02:
80:cf:92:13:0a:7c:16:5c:d4:05:8d:a9:e0:2b:d1:52:24:c2:
d4:33:14:aa:44:df:6e:7f:53:4b:15:40:92:4f:5f:54:20:2c:
da:37:3b:d8:2f:43:d8:6f:81:93:5d:d4:50:cd:54:7c:c8:f2:
0f:1e:43:25:49:b6:88:bb:28:48:21:35:9d:c6:f0:5b:56:a2:
42:1e:44:e4:3f:b2:74:e4:e3:62:1d:19:00:11:83:2e:4c:54:
03:bf:b7:a3:33:f8:0c:82:d4:d9:1a:58:ba:30:bc:ea:ca:dc:
23:39:cb:39:f6:d5:98:52:3c:9b:08:3f:73:54:9b:9d:5b:6a:
41:c9:42:e8:c3:49:a3:da:dc:30:6c:55:7e:1f:69:03:1f:f3:
b6:ac:f8:97:68:13:fc:d4:b2:0e:22:47:1a:f1:81:17:6b:cc:
5d:d7:3f:50
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAZQi+2wZqOcDflpRtznqdq7eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5MmIyNDQwYTdjN2EyZGZjZjJlNDIxNmRhOGEzYmRlNjhi
OWI4OTgwHhcNMjUwMTAxMTc0ODEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZTdkMzEwYmViMjI3NWI3NTIxNGY3ZDM5ZDE1N2U5NmJlMjQxYTI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6XIk7g8ZNGby7AJudw1Owy5khlTS
qvtHqnckxFKaqKY83Z8EVeJzw1xtFTm27+wf8y/8E3UqJ1lbYRaoOFVjLysuMPba
ajHQuKGDWZBfMRjMi7UCgM6clRDiPDs/wmaqm19D6xI8elJYDqGkX0kpUt2veCuO
JA31ui7MO71AsnqAhFbvwatSclpdtfEgpZX72M+a21M+ntlMMNiev0KylXrYDTd3
J0HTWOLxtxOuuar6mWtoXpV8SBweqe7+OmN5BdpXvIqtLaCLqXJJ+Z1AUPIOuoQY
OeEmvWn8MfzROhUD7SmgQdLcurmtAkGBjoSWWPLDXcVhPkU9VAAKg9QTPQIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFP59MQvrInW3UhT3050Vfpa+JBonMB8GA1UdIwQY
MBaAFKkrJECnx6Lfzy5CFtqKO95oubiYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVNza1FLZkhvdF9QTGtJVzJvbzczbWk1dUpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS84OTIxOTMtOWVkOS00NDQ3LTg0MDIt
ZjJjNjdlY2EzZTViLzEvX24weEMtc2lkYmRTRlBmVG5SVi1scjRrR2ljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS84OTIxOTMtOWVkOS00NDQ3LTg0MDItZjJjNjdlY2EzZTVi
LzEvcVNza1FLZkhvdF9QTGtJVzJvbzczbWk1dUpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAW9UNAwQA
wWzuMA8EAgACMAkDBwAgAQZ8EGQwDQYJKoZIhvcNAQELBQADggEBAJq0fccxrBRl
SHKORrHHPEwLKzpnqr9Ms8NZKHSU6c+oz7LbSBPwpQ9dGMPtj1fwcbISarijG0wg
C57uBL36xWJAlKG+/kqp2+tGm/Qi5qFd3JX+i281n23aAoDPkhMKfBZc1AWNqeAr
0VIkwtQzFKpE325/U0sVQJJPX1QgLNo3O9gvQ9hvgZNd1FDNVHzI8g8eQyVJtoi7
KEghNZ3G8FtWokIeROQ/snTk42IdGQARgy5MVAO/t6Mz+AyC1NkaWLowvOrK3CM5
yzn21ZhSPJsIP3NUm51bakHJQujDSaPa3DBsVX4faQMf87as+JdoE/zUsg4iRxrx
gRdrzF3XP1A=
-----END CERTIFICATE-----
Generated at Tue Apr 8 13:18:26 2025 by rpki-client