Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/dfVrorkgDXq-b3-QlttQA8sgW4w.roa
File: dfVrorkgDXq-b3-QlttQA8sgW4w.roa (raw, json)
Hash identifier: 5H66iIzqCMGoksSoQLOuKiVcrRxOIQ4J1jOJkX6At50=
Subject key identifier: 75:F5:6B:A2:B9:20:0D:7A:BE:6F:7F:90:96:DB:50:03:CB:20:5B:8C
Certificate issuer: /CN=3aba1172472ea80265d12982967de0a8b0bc5901
Certificate serial: 019424B27473FD4C664B9343DBF98FD64542
Authority key identifier: 3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/dfVrorkgDXq-b3-QlttQA8sgW4w.roa
Signing time: Thu 02 Jan 2025 01:47:42 +0000
ROA not before: Thu 02 Jan 2025 01:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202636
IP address blocks: 91.246.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:74:73:fd:4c:66:4b:93:43:db:f9:8f:d6:45:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aba1172472ea80265d12982967de0a8b0bc5901
Validity
Not Before: Jan 2 01:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=75f56ba2b9200d7abe6f7f9096db5003cb205b8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:63:be:c7:b7:17:f3:bb:bb:a5:0c:5b:4c:7b:
ac:38:11:9c:d3:59:52:b5:ac:31:e7:8b:18:4c:3a:
3f:b6:11:84:a8:98:cc:9b:96:72:0a:85:09:a6:3a:
98:7b:83:25:44:ef:1e:63:04:50:05:b8:0c:23:71:
af:e6:57:bf:7b:ef:77:72:b3:6c:ca:60:09:03:3a:
2a:5e:ef:20:f6:58:24:c7:09:94:ed:aa:82:cc:7c:
c1:47:ee:00:1e:1d:de:ab:47:e7:bc:ae:55:bc:55:
94:d5:9c:bd:19:54:fa:61:b9:e2:86:ce:e4:96:10:
b4:c7:39:00:4b:50:30:11:9e:92:ad:c4:c0:1e:1e:
a5:f8:35:6f:19:f1:a3:a7:62:22:d0:1c:96:4e:0a:
b4:fd:35:d2:45:c9:49:ec:07:8f:cd:c4:02:4b:61:
b7:50:ff:a0:a1:a1:2c:29:df:ba:35:11:08:f7:98:
ca:3f:b4:49:7b:06:21:7e:4f:1d:cb:f0:d0:99:ba:
79:f6:17:67:bf:92:4f:ed:e7:11:b7:18:96:74:a3:
e3:cf:74:4e:c8:e7:45:40:20:21:6e:ca:22:60:4b:
5d:6d:26:92:5e:1f:dc:2c:b2:54:d1:c0:98:30:53:
32:0d:39:5e:64:57:35:7d:bc:3d:e3:55:65:6f:e3:
73:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:F5:6B:A2:B9:20:0D:7A:BE:6F:7F:90:96:DB:50:03:CB:20:5B:8C
X509v3 Authority Key Identifier:
keyid:3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/dfVrorkgDXq-b3-QlttQA8sgW4w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.246.52.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:6e:9c:25:e5:7b:d1:02:3b:84:2a:e1:76:b1:cf:75:2b:9a:
e7:2f:c8:52:91:eb:fe:0a:86:73:3b:be:74:aa:2f:56:2e:32:
af:e4:e7:8a:b7:0f:80:8c:a0:14:dc:c1:67:8f:fd:3f:fc:38:
0f:da:41:24:43:d3:ce:a5:2d:10:7e:19:93:e7:ee:d9:7d:36:
b6:c3:3b:e4:7c:e5:0e:41:87:59:c6:f9:ff:4f:1c:64:20:a9:
e8:99:30:5b:be:03:3c:1c:b0:29:fa:4c:a2:23:7a:b1:cf:15:
6f:33:17:52:f9:82:09:53:2a:75:b0:4f:78:bd:b1:83:e2:b5:
35:ac:07:be:d0:7f:8d:a5:cb:6a:7b:7b:de:3f:f5:7c:37:2d:
d2:f8:1e:dd:7f:8b:5e:b5:15:32:d4:41:97:cd:d7:70:a8:41:
41:f9:76:6a:0d:96:d5:63:fc:84:e1:17:5b:7d:45:96:a7:57:
8b:66:9e:88:d3:43:73:32:63:d6:f8:c7:63:67:34:8f:b6:cb:
c1:e2:2a:81:d7:f1:3b:67:a5:5e:72:5f:67:62:fc:7b:c3:1e:
6f:75:fb:4e:5f:f1:95:e9:f2:81:cd:07:23:8a:7c:65:c0:8b:
b6:6e:be:67:e8:c6:dc:43:68:39:cb:89:65:ae:ec:72:7b:18:
98:c0:b6:64
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQksnRz/UxmS5ND2/mP1kVCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhYmExMTcyNDcyZWE4MDI2NWQxMjk4Mjk2N2RlMGE4YjBi
YzU5MDEwHhcNMjUwMTAyMDE0NzQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NWY1NmJhMmI5MjAwZDdhYmU2ZjdmOTA5NmRiNTAwM2NiMjA1YjhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2GO+x7cX87u7pQxbTHusOBGc01lS
tawx54sYTDo/thGEqJjMm5ZyCoUJpjqYe4MlRO8eYwRQBbgMI3Gv5le/e+93crNs
ymAJAzoqXu8g9lgkxwmU7aqCzHzBR+4AHh3eq0fnvK5VvFWU1Zy9GVT6Ybnihs7k
lhC0xzkAS1AwEZ6SrcTAHh6l+DVvGfGjp2Ii0ByWTgq0/TXSRclJ7AePzcQCS2G3
UP+goaEsKd+6NREI95jKP7RJewYhfk8dy/DQmbp59hdnv5JP7ecRtxiWdKPjz3RO
yOdFQCAhbsoiYEtdbSaSXh/cLLJU0cCYMFMyDTleZFc1fbw941Vlb+NzewIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHX1a6K5IA16vm9/kJbbUAPLIFuMMB8GA1UdIwQY
MBaAFDq6EXJHLqgCZdEpgpZ94KiwvFkBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3JvUmNrY3VxQUpsMFNtQ2xuM2dxTEM4V1FFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My83YjFjNTUtZGRkMC00MjgxLTgzNzgt
NGRkMDQzNDZhYmMzLzEvZGZWcm9ya2dEWHEtYjMtUWx0dFFBOHNnVzR3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My83YjFjNTUtZGRkMC00MjgxLTgzNzgtNGRkMDQzNDZhYmMz
LzEvT3JvUmNrY3VxQUpsMFNtQ2xuM2dxTEM4V1FFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW/Y0MA0G
CSqGSIb3DQEBCwUAA4IBAQA+bpwl5XvRAjuEKuF2sc91K5rnL8hSkev+CoZzO750
qi9WLjKv5OeKtw+AjKAU3MFnj/0//DgP2kEkQ9POpS0QfhmT5+7ZfTa2wzvkfOUO
QYdZxvn/TxxkIKnomTBbvgM8HLAp+kyiI3qxzxVvMxdS+YIJUyp1sE94vbGD4rU1
rAe+0H+Npctqe3veP/V8Ny3S+B7df4tetRUy1EGXzddwqEFB+XZqDZbVY/yE4Rdb
fUWWp1eLZp6I00NzMmPW+MdjZzSPtsvB4iqB1/E7Z6Vecl9nYvx7wx5vdftOX/GV
6fKBzQcjinxlwIu2br5n6MbcQ2g5y4llruxyexiYwLZk
-----END CERTIFICATE-----
Generated at Tue Apr 8 07:36:41 2025 by rpki-client