Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/9fb1d7-8424-4c84-b0cb-2f51ecd1aa0e/1/Xbs_--8RTj7NVNdnHjguAeVIjoo.roa
File: Xbs_--8RTj7NVNdnHjguAeVIjoo.roa (raw, json)
Hash identifier: wMCRs2Eg0y2oiiX2U9OgxEoMnX9Jd9Ptutf57Q4oqbI=
Subject key identifier: 5D:BB:3F:FB:EF:11:4E:3E:CD:54:D7:67:1E:38:2E:01:E5:48:8E:8A
Certificate issuer: /CN=5134d1320645644e2eaf3685879d693f72522c76
Certificate serial: 019421440767A6DC805EA7E983C856841FF4
Authority key identifier: 51:34:D1:32:06:45:64:4E:2E:AF:36:85:87:9D:69:3F:72:52:2C:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UTTRMgZFZE4urzaFh51pP3JSLHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/9fb1d7-8424-4c84-b0cb-2f51ecd1aa0e/1/Xbs_--8RTj7NVNdnHjguAeVIjoo.roa
Signing time: Wed 01 Jan 2025 09:48:14 +0000
ROA not before: Wed 01 Jan 2025 09:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 91.194.25.0/24 maxlen: 24
91.194.104.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/9fb1d7-8424-4c84-b0cb-2f51ecd1aa0e/1/UTTRMgZFZE4urzaFh51pP3JSLHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/9fb1d7-8424-4c84-b0cb-2f51ecd1aa0e/1/UTTRMgZFZE4urzaFh51pP3JSLHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UTTRMgZFZE4urzaFh51pP3JSLHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Mar 2025 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:07:67:a6:dc:80:5e:a7:e9:83:c8:56:84:1f:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5134d1320645644e2eaf3685879d693f72522c76
Validity
Not Before: Jan 1 09:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5dbb3ffbef114e3ecd54d7671e382e01e5488e8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:34:db:90:80:da:18:4d:20:c5:77:3b:74:7b:
c6:3c:cd:07:9d:02:c2:16:9f:27:fc:1f:17:41:0c:
07:0a:f4:a0:66:37:89:1b:e4:9e:5e:bd:40:86:1e:
3a:af:1b:56:20:be:74:e4:28:4d:00:5f:60:87:01:
f9:6b:3a:b9:67:62:54:96:66:ba:d1:4c:7d:b7:f9:
e7:05:e4:fb:f4:7e:07:85:2a:82:e0:0a:6d:e1:ae:
2c:58:b8:2a:4e:c5:cf:1d:6a:fa:c6:94:cb:5b:df:
18:4d:af:12:4f:b4:d8:23:ff:a2:ba:ed:c1:a4:dc:
2d:b1:8d:5a:63:af:aa:07:69:c1:25:5e:d7:d1:ae:
b1:cb:55:81:62:9b:b8:37:22:1c:09:65:75:21:6e:
50:1d:26:0d:35:ce:ec:ce:55:80:a5:d2:60:59:fa:
b3:d6:b1:2e:0d:d3:51:45:ae:71:97:8b:73:fb:78:
39:1d:b4:a5:0e:24:e3:d0:fa:f8:45:e3:80:8e:63:
53:db:ba:2b:da:2c:aa:48:38:6d:bd:47:17:03:dd:
d8:40:4b:31:93:43:14:7c:41:26:ff:3e:c1:9a:77:
4c:74:6e:a8:17:61:28:34:51:e8:8c:ad:f3:90:cd:
a4:2c:b7:6b:ec:ba:57:6a:15:ef:dc:63:32:d2:e6:
48:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:BB:3F:FB:EF:11:4E:3E:CD:54:D7:67:1E:38:2E:01:E5:48:8E:8A
X509v3 Authority Key Identifier:
keyid:51:34:D1:32:06:45:64:4E:2E:AF:36:85:87:9D:69:3F:72:52:2C:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UTTRMgZFZE4urzaFh51pP3JSLHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/9fb1d7-8424-4c84-b0cb-2f51ecd1aa0e/1/Xbs_--8RTj7NVNdnHjguAeVIjoo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/9fb1d7-8424-4c84-b0cb-2f51ecd1aa0e/1/UTTRMgZFZE4urzaFh51pP3JSLHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.25.0/24
91.194.104.0/23
Signature Algorithm: sha256WithRSAEncryption
07:83:22:aa:23:c2:3f:23:04:55:72:8c:fa:a8:47:6b:e9:1b:
40:34:dc:50:48:d9:60:48:07:41:f6:6d:e0:c4:e6:f7:6d:c5:
eb:4b:08:f3:68:73:26:0a:a2:9b:b9:f7:c8:65:29:1a:ca:0e:
fa:c2:ec:6c:d9:27:c9:6c:dd:4f:f5:4a:df:88:04:d4:14:93:
ff:18:79:4f:f3:f7:5a:44:a6:4e:1a:7a:91:51:79:f2:07:f7:
8f:48:37:25:0d:a6:c3:29:61:e1:93:a0:45:17:8c:77:df:23:
cf:7a:d7:a3:b0:b0:17:02:97:30:73:af:e9:f7:04:14:eb:97:
0e:4c:26:7b:c9:67:2b:0e:3f:ef:3a:77:f1:27:1f:b0:ff:fb:
b4:50:dc:6c:f4:9c:fb:e4:16:61:50:c0:e4:4f:15:c8:fd:04:
39:ed:72:e9:02:d1:5b:aa:ea:01:ca:59:fc:d1:8d:33:86:e7:
5c:7a:d5:c6:5c:d9:a0:16:b5:3a:cf:9a:7e:55:20:74:6d:7a:
7a:c2:6b:60:15:36:aa:f0:74:e8:ff:bb:b3:0e:8f:dd:97:83:
a2:6a:db:90:15:a8:58:6f:be:a2:2c:8e:4b:67:81:64:b9:f7:
2e:a5:fd:d1:a6:db:01:eb:93:89:d5:43:0e:6d:c2:78:eb:1c:
36:fb:0b:ab
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQhRAdnptyAXqfpg8hWhB/0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxMzRkMTMyMDY0NTY0NGUyZWFmMzY4NTg3OWQ2OTNmNzI1
MjJjNzYwHhcNMjUwMTAxMDk0ODE0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZGJiM2ZmYmVmMTE0ZTNlY2Q1NGQ3NjcxZTM4MmUwMWU1NDg4ZThhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDTbkIDaGE0gxXc7dHvGPM0HnQLC
Fp8n/B8XQQwHCvSgZjeJG+SeXr1Ahh46rxtWIL505ChNAF9ghwH5azq5Z2JUlma6
0Ux9t/nnBeT79H4HhSqC4Apt4a4sWLgqTsXPHWr6xpTLW98YTa8ST7TYI/+iuu3B
pNwtsY1aY6+qB2nBJV7X0a6xy1WBYpu4NyIcCWV1IW5QHSYNNc7szlWApdJgWfqz
1rEuDdNRRa5xl4tz+3g5HbSlDiTj0Pr4ReOAjmNT27or2iyqSDhtvUcXA93YQEsx
k0MUfEEm/z7BmndMdG6oF2EoNFHojK3zkM2kLLdr7LpXahXv3GMy0uZIhwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFF27P/vvEU4+zVTXZx44LgHlSI6KMB8GA1UdIwQY
MBaAFFE00TIGRWROLq82hYedaT9yUix2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVRUUk1nWkZaRTR1cnphRmg1MXBQM0pTTEhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS85ZmIxZDctODQyNC00Yzg0LWIwY2It
MmY1MWVjZDFhYTBlLzEvWGJzXy0tOFJUajdOVk5kbkhqZ3VBZVZJam9vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS85ZmIxZDctODQyNC00Yzg0LWIwY2ItMmY1MWVjZDFhYTBl
LzEvVVRUUk1nWkZaRTR1cnphRmg1MXBQM0pTTEhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW8IZAwQB
W8JoMA0GCSqGSIb3DQEBCwUAA4IBAQAHgyKqI8I/IwRVcoz6qEdr6RtANNxQSNlg
SAdB9m3gxOb3bcXrSwjzaHMmCqKbuffIZSkayg76wuxs2SfJbN1P9UrfiATUFJP/
GHlP8/daRKZOGnqRUXnyB/ePSDclDabDKWHhk6BFF4x33yPPetejsLAXApcwc6/p
9wQU65cOTCZ7yWcrDj/vOnfxJx+w//u0UNxs9Jz75BZhUMDkTxXI/QQ57XLpAtFb
quoByln80Y0zhudcetXGXNmgFrU6z5p+VSB0bXp6wmtgFTaq8HTo/7uzDo/dl4Oi
atuQFahYb76iLI5LZ4Fkufcupf3RptsB65OJ1UMObcJ46xw2+wur
-----END CERTIFICATE-----
Generated at Fri Mar 14 12:12:32 2025 by rpki-client