Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/b361cb-e610-4e8c-9b22-dd61b7e44baf/1/pHVWgJuGe-4SCUP5TXdZ2HWcQDo.roa
File: pHVWgJuGe-4SCUP5TXdZ2HWcQDo.roa (raw, json)
Hash identifier: gAsEJftS+Uf8/0GhnyryHodqA1ekHyKsg54eRC3EHGg=
Subject key identifier: A4:75:56:80:9B:86:7B:EE:12:09:43:F9:4D:77:59:D8:75:9C:40:3A
Certificate issuer: /CN=5811ab97aac984b7524effad5fac68eb1e19cdce
Certificate serial: 019425221595059F65065E2F6BA6B2F49E03
Authority key identifier: 58:11:AB:97:AA:C9:84:B7:52:4E:FF:AD:5F:AC:68:EB:1E:19:CD:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WBGrl6rJhLdSTv-tX6xo6x4Zzc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/b361cb-e610-4e8c-9b22-dd61b7e44baf/1/pHVWgJuGe-4SCUP5TXdZ2HWcQDo.roa
Signing time: Thu 02 Jan 2025 03:49:38 +0000
ROA not before: Thu 02 Jan 2025 03:49:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197611
IP address blocks: 91.224.188.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/b361cb-e610-4e8c-9b22-dd61b7e44baf/1/WBGrl6rJhLdSTv-tX6xo6x4Zzc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/b361cb-e610-4e8c-9b22-dd61b7e44baf/1/WBGrl6rJhLdSTv-tX6xo6x4Zzc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WBGrl6rJhLdSTv-tX6xo6x4Zzc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 21:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:15:95:05:9f:65:06:5e:2f:6b:a6:b2:f4:9e:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5811ab97aac984b7524effad5fac68eb1e19cdce
Validity
Not Before: Jan 2 03:49:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a47556809b867bee120943f94d7759d8759c403a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:28:3c:25:31:d0:c4:12:54:24:52:69:02:63:
65:b5:21:1e:f9:60:fc:c6:f8:b1:b4:88:0d:d9:9e:
f4:31:69:6f:d4:8a:74:5e:70:7c:34:9e:dc:de:46:
47:a2:0d:e5:f5:5e:1d:ba:9a:e7:e0:28:46:3e:ea:
06:ef:1a:31:47:9a:30:54:73:8c:81:77:6a:b0:a3:
15:cc:99:08:ab:6a:ee:f8:98:3b:f7:f4:64:0e:d6:
3f:8a:70:e8:fb:99:71:eb:bd:b7:e1:4c:6c:fe:4f:
1a:f2:b1:ef:c3:47:34:76:21:50:86:b0:e8:09:3e:
83:fb:81:6d:86:76:fc:1e:1e:2b:a4:e6:94:04:ef:
29:32:a1:b3:b1:29:83:26:53:3c:d3:1a:b4:2d:fc:
bf:c5:45:c6:bf:9a:e7:d6:ab:9f:af:fe:fd:ce:2b:
6c:c2:99:c6:f7:6c:20:3a:ab:4f:a2:81:e6:3c:ad:
85:14:4f:15:fb:b7:9c:7b:14:5b:fa:5d:e5:d5:dc:
4b:8d:c4:2f:14:a9:d3:1d:97:a2:a4:54:52:b3:1b:
c9:d5:9c:15:58:5c:fd:1c:0a:84:83:8c:b9:e5:9c:
7a:26:89:f9:7a:58:67:ba:04:c6:4e:fa:9b:b9:3d:
c0:47:7c:37:ad:5e:c4:0b:75:c2:93:91:1f:1e:af:
d7:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:75:56:80:9B:86:7B:EE:12:09:43:F9:4D:77:59:D8:75:9C:40:3A
X509v3 Authority Key Identifier:
keyid:58:11:AB:97:AA:C9:84:B7:52:4E:FF:AD:5F:AC:68:EB:1E:19:CD:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WBGrl6rJhLdSTv-tX6xo6x4Zzc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b361cb-e610-4e8c-9b22-dd61b7e44baf/1/pHVWgJuGe-4SCUP5TXdZ2HWcQDo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b361cb-e610-4e8c-9b22-dd61b7e44baf/1/WBGrl6rJhLdSTv-tX6xo6x4Zzc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.224.188.0/23
Signature Algorithm: sha256WithRSAEncryption
63:a2:bd:80:f4:48:b4:55:3f:6c:f6:d5:da:3a:1e:0f:71:cb:
3c:ad:bd:1f:4d:0a:43:4e:ec:28:de:dc:52:54:2a:cc:87:7b:
91:ac:8d:6a:0e:bb:f4:4f:4e:4c:ce:36:31:f7:60:b0:6a:3e:
e9:3b:c1:d4:38:f1:e5:8a:a9:16:72:f5:98:e5:a6:60:4c:c1:
d4:58:68:c3:6c:70:63:aa:3c:12:7c:a9:c0:97:86:d9:a9:59:
42:79:4a:ca:35:8a:2d:eb:58:c8:7f:60:25:02:2f:93:c5:fb:
78:94:0f:9f:a7:67:21:29:a0:8e:08:1b:ea:d9:8c:6d:e6:1e:
eb:92:d3:e4:73:c3:08:1f:3d:a0:e2:7e:f9:41:16:a5:55:0a:
0c:66:4d:cd:30:75:a7:17:fc:b7:4a:7c:39:7d:fc:77:6e:e8:
0d:da:c2:04:f3:25:44:6f:01:ac:12:44:6a:28:16:e6:90:9d:
31:4f:38:8c:b0:ec:95:f9:09:d4:5e:68:99:85:aa:7f:0f:1f:
2e:c7:ab:71:06:3f:61:0b:eb:9e:4b:35:e6:34:91:3d:93:87:
c8:9f:28:0f:aa:e1:34:f6:5a:c7:20:82:1a:ea:92:b8:42:29:
c3:8c:bd:87:90:fd:bc:87:c1:12:03:0a:01:2c:c3:6f:5d:87:
2b:55:f4:e9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlIhWVBZ9lBl4va6ay9J4DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4MTFhYjk3YWFjOTg0Yjc1MjRlZmZhZDVmYWM2OGViMWUx
OWNkY2UwHhcNMjUwMTAyMDM0OTM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNDc1NTY4MDliODY3YmVlMTIwOTQzZjk0ZDc3NTlkODc1OWM0MDNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCg8JTHQxBJUJFJpAmNltSEe+WD8
xvixtIgN2Z70MWlv1Ip0XnB8NJ7c3kZHog3l9V4duprn4ChGPuoG7xoxR5owVHOM
gXdqsKMVzJkIq2ru+Jg79/RkDtY/inDo+5lx67234Uxs/k8a8rHvw0c0diFQhrDo
CT6D+4Fthnb8Hh4rpOaUBO8pMqGzsSmDJlM80xq0Lfy/xUXGv5rn1qufr/79zits
wpnG92wgOqtPooHmPK2FFE8V+7ecexRb+l3l1dxLjcQvFKnTHZeipFRSsxvJ1ZwV
WFz9HAqEg4y55Zx6Jon5elhnugTGTvqbuT3AR3w3rV7EC3XCk5EfHq/XGQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKR1VoCbhnvuEglD+U13Wdh1nEA6MB8GA1UdIwQY
MBaAFFgRq5eqyYS3Uk7/rV+saOseGc3OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0JHcmw2ckpoTGRTVHYtdFg2eG82eDRaemM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9iMzYxY2ItZTYxMC00ZThjLTliMjIt
ZGQ2MWI3ZTQ0YmFmLzEvcEhWV2dKdUdlLTRTQ1VQNVRYZFoySFdjUURvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9iMzYxY2ItZTYxMC00ZThjLTliMjItZGQ2MWI3ZTQ0YmFm
LzEvV0JHcmw2ckpoTGRTVHYtdFg2eG82eDRaemM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW+C8MA0G
CSqGSIb3DQEBCwUAA4IBAQBjor2A9Ei0VT9s9tXaOh4Pccs8rb0fTQpDTuwo3txS
VCrMh3uRrI1qDrv0T05MzjYx92Cwaj7pO8HUOPHliqkWcvWY5aZgTMHUWGjDbHBj
qjwSfKnAl4bZqVlCeUrKNYot61jIf2AlAi+Txft4lA+fp2chKaCOCBvq2Yxt5h7r
ktPkc8MIHz2g4n75QRalVQoMZk3NMHWnF/y3Snw5ffx3bugN2sIE8yVEbwGsEkRq
KBbmkJ0xTziMsOyV+QnUXmiZhap/Dx8ux6txBj9hC+ueSzXmNJE9k4fInygPquE0
9lrHIIIa6pK4QinDjL2HkP28h8ESAwoBLMNvXYcrVfTp
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:44:59 2025 by rpki-client