Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/995e4f-cd42-4dc9-ae24-0ec12cfce421/1/hSQntvd9v3MOWIssEgGbLB1SW7w.roa
File: hSQntvd9v3MOWIssEgGbLB1SW7w.roa (raw, json)
Hash identifier: n6KLHzcpdLpUHWf9UFnS7ncqlbroso3meC9DViXUm1o=
Subject key identifier: 85:24:27:B6:F7:7D:BF:73:0E:58:8B:2C:12:01:9B:2C:1D:52:5B:BC
Certificate issuer: /CN=f9d7469be0d9c4ba889d3e2026ad8adc42c3cf53
Certificate serial: 019422FB0604F76E363091F031D146F7B946
Authority key identifier: F9:D7:46:9B:E0:D9:C4:BA:88:9D:3E:20:26:AD:8A:DC:42:C3:CF:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ddGm-DZxLqInT4gJq2K3ELDz1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/995e4f-cd42-4dc9-ae24-0ec12cfce421/1/hSQntvd9v3MOWIssEgGbLB1SW7w.roa
Signing time: Wed 01 Jan 2025 17:47:43 +0000
ROA not before: Wed 01 Jan 2025 17:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49049
IP address blocks: 91.212.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/995e4f-cd42-4dc9-ae24-0ec12cfce421/1/1-ddGm-DZxLqInT4gJq2K3ELDz1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/995e4f-cd42-4dc9-ae24-0ec12cfce421/1/1-ddGm-DZxLqInT4gJq2K3ELDz1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-ddGm-DZxLqInT4gJq2K3ELDz1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 08:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:06:04:f7:6e:36:30:91:f0:31:d1:46:f7:b9:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9d7469be0d9c4ba889d3e2026ad8adc42c3cf53
Validity
Not Before: Jan 1 17:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=852427b6f77dbf730e588b2c12019b2c1d525bbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:d3:aa:d2:9e:2d:73:15:ff:85:ee:50:e4:04:
24:5b:2f:54:f8:4d:0c:c7:19:d2:d5:0e:92:62:f1:
cf:fc:ef:f3:f7:b9:31:d0:1c:f2:81:7b:49:f4:1b:
0d:75:f2:dc:29:da:15:45:f6:1e:70:e6:a5:b7:98:
a2:f5:a2:66:b7:53:18:56:58:6c:ff:0a:f1:6c:42:
90:2d:cd:56:00:30:11:ae:73:2c:2c:05:74:fc:ce:
e5:a1:9a:4e:0a:0b:7a:91:02:29:32:6b:b9:d7:fc:
c5:90:1d:e7:e6:f9:13:ff:26:a7:58:47:1d:cf:0d:
2b:ec:6d:32:6f:3a:34:a1:41:13:f4:1a:b4:4b:c7:
35:8a:a8:23:79:80:b3:b2:a5:d2:56:a2:65:00:62:
a8:15:a8:7e:48:6c:a2:ef:57:e4:30:70:08:9b:26:
11:2e:2f:81:36:ea:f0:fc:33:69:e1:1c:dd:2e:b7:
11:9a:fd:52:78:d7:20:57:10:9d:73:cc:b7:18:f5:
79:e5:70:f1:60:5f:5d:e1:de:e0:91:49:b9:e7:bf:
a3:5b:dd:a0:ed:d8:4e:e0:fb:ae:78:fa:54:d6:d5:
75:d1:cf:c4:25:e5:72:c4:77:2a:f2:25:ba:dd:7a:
b4:dd:bb:43:3b:52:51:61:1f:be:80:d2:ac:b9:aa:
d0:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:24:27:B6:F7:7D:BF:73:0E:58:8B:2C:12:01:9B:2C:1D:52:5B:BC
X509v3 Authority Key Identifier:
keyid:F9:D7:46:9B:E0:D9:C4:BA:88:9D:3E:20:26:AD:8A:DC:42:C3:CF:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ddGm-DZxLqInT4gJq2K3ELDz1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/995e4f-cd42-4dc9-ae24-0ec12cfce421/1/hSQntvd9v3MOWIssEgGbLB1SW7w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/995e4f-cd42-4dc9-ae24-0ec12cfce421/1/1-ddGm-DZxLqInT4gJq2K3ELDz1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.105.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:b7:0c:66:9e:61:53:26:7e:82:91:7a:f9:0c:67:5c:40:62:
31:b0:36:e5:ff:80:a7:b9:b4:4f:bf:10:3b:7e:c5:41:b6:a5:
5e:89:25:26:70:09:29:91:a6:64:98:e1:9e:51:b7:6d:cc:14:
5f:a5:3d:bb:7e:15:c8:f7:c4:06:bc:55:22:c5:b4:44:0f:1e:
45:55:a9:ab:67:b5:a9:91:8e:88:0d:88:3f:5a:41:1b:1b:09:
83:dc:7d:8e:42:80:e8:65:82:f9:30:d7:70:6d:d3:d6:e7:45:
96:63:a2:3a:4a:28:df:63:41:2c:02:aa:e1:ec:75:bd:82:17:
a1:5d:9b:59:bf:49:77:a0:bc:f6:9c:50:7b:c3:bd:0b:be:c4:
34:2d:41:2d:f1:26:aa:30:a0:90:f5:25:39:07:35:be:8a:a8:
e7:bb:be:db:89:80:80:74:fd:ec:e7:65:bd:0f:99:55:c2:65:
fa:19:19:48:16:1c:4a:37:80:a2:ba:73:ff:ba:9a:50:0e:d4:
79:5e:81:9f:33:f5:95:57:1a:56:0c:a3:fa:f2:f2:cb:32:c7:
82:88:9e:48:ce:6a:6a:a2:dd:ac:b7:e4:bf:1e:5e:23:13:3f:
a0:0d:5d:98:3e:af:9f:4e:9d:ff:95:bd:54:31:ba:ac:64:47:
03:36:98:f6
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZQi+wYE9242MJHwMdFG97lGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5ZDc0NjliZTBkOWM0YmE4ODlkM2UyMDI2YWQ4YWRjNDJj
M2NmNTMwHhcNMjUwMTAxMTc0NzQzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NTI0MjdiNmY3N2RiZjczMGU1ODhiMmMxMjAxOWIyYzFkNTI1YmJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA39Oq0p4tcxX/he5Q5AQkWy9U+E0M
xxnS1Q6SYvHP/O/z97kx0BzygXtJ9BsNdfLcKdoVRfYecOalt5ii9aJmt1MYVlhs
/wrxbEKQLc1WADARrnMsLAV0/M7loZpOCgt6kQIpMmu51/zFkB3n5vkT/yanWEcd
zw0r7G0ybzo0oUET9Bq0S8c1iqgjeYCzsqXSVqJlAGKoFah+SGyi71fkMHAImyYR
Li+BNurw/DNp4RzdLrcRmv1SeNcgVxCdc8y3GPV55XDxYF9d4d7gkUm557+jW92g
7dhO4PuuePpU1tV10c/EJeVyxHcq8iW63Xq03btDO1JRYR++gNKsuarQxwIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFIUkJ7b3fb9zDliLLBIBmywdUlu8MB8GA1UdIwQY
MBaAFPnXRpvg2cS6iJ0+ICatitxCw89TMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1kZEdtLURaeExxSW5UNGdKcTJLM0VMRHoxTS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODUvOTk1ZTRmLWNkNDItNGRjOS1hZTI0
LTBlYzEyY2ZjZTQyMS8xL2hTUW50dmQ5djNNT1dJc3NFZ0diTEIxU1c3dy5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvODUvOTk1ZTRmLWNkNDItNGRjOS1hZTI0LTBlYzEyY2ZjZTQy
MS8xLzEtZGRHbS1EWnhMcUluVDRnSnEySzNFTER6MU0uY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABb1Gkw
DQYJKoZIhvcNAQELBQADggEBAB63DGaeYVMmfoKRevkMZ1xAYjGwNuX/gKe5tE+/
EDt+xUG2pV6JJSZwCSmRpmSY4Z5Rt23MFF+lPbt+Fcj3xAa8VSLFtEQPHkVVqatn
tamRjogNiD9aQRsbCYPcfY5CgOhlgvkw13Bt09bnRZZjojpKKN9jQSwCquHsdb2C
F6Fdm1m/SXegvPacUHvDvQu+xDQtQS3xJqowoJD1JTkHNb6KqOe7vtuJgIB0/ezn
Zb0PmVXCZfoZGUgWHEo3gKK6c/+6mlAO1HlegZ8z9ZVXGlYMo/ry8ssyx4KInkjO
amqi3ay35L8eXiMTP6ANXZg+r59Onf+VvVQxuqxkRwM2mPY=
-----END CERTIFICATE-----
Generated at Fri Feb 21 12:29:27 2025 by rpki-client