Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/aB6sxL1ZlKSQNpa4jL29xIkPi_I.roa
File: aB6sxL1ZlKSQNpa4jL29xIkPi_I.roa (raw, json)
Hash identifier: zA0AFONbK9br9fZoJVU4SW6cugn1tuIJBYSB1Nl3/G8=
Subject key identifier: 68:1E:AC:C4:BD:59:94:A4:90:36:96:B8:8C:BD:BD:C4:89:0F:8B:F2
Certificate issuer: /CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Certificate serial: 01942825356A3A4C44EBC35923B04A491EE7
Authority key identifier: 6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/aB6sxL1ZlKSQNpa4jL29xIkPi_I.roa
Signing time: Thu 02 Jan 2025 17:51:54 +0000
ROA not before: Thu 02 Jan 2025 17:51:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211462
IP address blocks: 188.119.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:35:6a:3a:4c:44:eb:c3:59:23:b0:4a:49:1e:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Validity
Not Before: Jan 2 17:51:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=681eacc4bd5994a4903696b88cbdbdc4890f8bf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:62:be:30:55:d6:ac:3e:d3:99:96:93:2a:b1:
48:26:c4:40:4c:53:5c:c9:a4:76:40:6e:86:49:19:
28:fb:cc:0f:92:2f:2e:0e:bf:d0:7b:65:01:86:00:
e2:32:24:4d:d7:f1:0d:08:3f:d2:3c:2f:e8:14:25:
b1:7c:cc:51:dd:18:be:1e:80:0a:f0:d5:d4:0e:1a:
bb:39:22:29:e4:92:47:fb:60:c0:25:0b:45:8f:52:
80:e3:af:3e:c9:e1:12:7f:58:42:80:1e:69:be:78:
b6:fb:d2:d1:3b:2f:36:39:dc:8b:a0:3a:ae:50:b2:
0c:5e:5e:02:66:1e:54:10:f5:94:8d:c8:02:ee:06:
0c:fc:bb:f9:7e:4f:b7:62:e9:b2:74:57:7f:5c:48:
ba:9a:ac:e3:bf:4e:29:dd:6a:ad:b5:37:86:ce:87:
87:bc:fd:cb:05:5f:6a:77:82:4f:f6:ba:56:01:06:
6a:11:22:8a:a4:d9:d7:17:bd:44:6c:ee:0b:96:ec:
cc:07:7f:f8:bc:40:0f:2b:e2:b7:b9:c7:2f:33:dc:
80:5c:db:56:8e:de:80:d0:2f:d0:b0:d3:a1:71:53:
d7:89:cf:19:39:75:b1:8a:e1:1c:30:05:6d:f8:69:
64:5d:18:3f:ee:68:79:52:e3:83:35:7a:02:1f:97:
72:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:1E:AC:C4:BD:59:94:A4:90:36:96:B8:8C:BD:BD:C4:89:0F:8B:F2
X509v3 Authority Key Identifier:
keyid:6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/aB6sxL1ZlKSQNpa4jL29xIkPi_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.119.191.0/24
Signature Algorithm: sha256WithRSAEncryption
48:90:02:d3:5f:69:f5:93:02:d2:95:ef:b1:24:09:24:cf:46:
d6:9c:0a:37:ad:f7:ea:5f:c3:5e:f1:02:1a:53:09:1b:64:ee:
7e:07:85:bb:ac:84:9d:d1:62:d0:39:55:8d:dc:fa:58:40:5f:
a2:2f:aa:ba:dd:43:b7:a6:44:69:31:30:de:8c:b5:87:e9:d5:
a7:91:36:66:8f:5a:7c:14:d7:8c:05:75:d3:01:85:b5:bb:55:
3b:c8:b9:09:bb:a0:1b:33:14:05:59:8d:19:f0:29:19:b9:b9:
f8:a2:b1:0c:be:e7:11:ad:26:98:bc:03:79:95:d1:63:18:21:
1c:f5:26:9a:ec:5c:ba:e9:49:26:75:36:6c:e3:00:51:de:a3:
5d:5b:0b:2a:31:84:0e:bb:31:82:f9:fe:86:5c:c3:93:f5:49:
78:8e:9b:32:6e:8f:37:29:6e:17:e0:77:27:42:08:fa:29:93:
91:93:04:5f:e8:41:30:4f:d6:e0:11:d7:80:f6:20:c7:b2:d9:
eb:0c:e5:96:7c:b4:94:88:be:b6:ae:ba:20:f8:cf:62:f1:ed:
b0:11:8b:67:62:d7:34:87:da:3a:b1:b2:83:5e:e8:0d:4a:ee:
c6:7b:63:37:e5:a9:ef:75:de:1b:f9:e3:19:fa:52:22:e3:f7:
fb:1a:05:53
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQoJTVqOkxE68NZI7BKSR7nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiMjMzZDc1NTA4YjRlODVjY2NmNDQzNDlhN2NiNzAzMTk4
ZDFkMjYwHhcNMjUwMTAyMTc1MTU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ODFlYWNjNGJkNTk5NGE0OTAzNjk2Yjg4Y2JkYmRjNDg5MGY4YmYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1WK+MFXWrD7TmZaTKrFIJsRATFNc
yaR2QG6GSRko+8wPki8uDr/Qe2UBhgDiMiRN1/ENCD/SPC/oFCWxfMxR3Ri+HoAK
8NXUDhq7OSIp5JJH+2DAJQtFj1KA468+yeESf1hCgB5pvni2+9LROy82OdyLoDqu
ULIMXl4CZh5UEPWUjcgC7gYM/Lv5fk+3YumydFd/XEi6mqzjv04p3WqttTeGzoeH
vP3LBV9qd4JP9rpWAQZqESKKpNnXF71EbO4LluzMB3/4vEAPK+K3uccvM9yAXNtW
jt6A0C/QsNOhcVPXic8ZOXWxiuEcMAVt+GlkXRg/7mh5UuODNXoCH5dyZQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGgerMS9WZSkkDaWuIy9vcSJD4vyMB8GA1UdIwQY
MBaAFGsjPXVQi06FzM9ENJp8twMZjR0mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXlNOWRWQ0xUb1hNejBRMG1ueTNBeG1OSFNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC85ZDkxOTItMjczYy00Y2E5LWIyYmEt
ZmE5Y2I1MWNkMGYxLzEvYUI2c3hMMVpsS1NRTnBhNGpMMjl4SWtQaV9JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC85ZDkxOTItMjczYy00Y2E5LWIyYmEtZmE5Y2I1MWNkMGYx
LzEvYXlNOWRWQ0xUb1hNejBRMG1ueTNBeG1OSFNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvHe/MA0G
CSqGSIb3DQEBCwUAA4IBAQBIkALTX2n1kwLSle+xJAkkz0bWnAo3rffqX8Ne8QIa
UwkbZO5+B4W7rISd0WLQOVWN3PpYQF+iL6q63UO3pkRpMTDejLWH6dWnkTZmj1p8
FNeMBXXTAYW1u1U7yLkJu6AbMxQFWY0Z8CkZubn4orEMvucRrSaYvAN5ldFjGCEc
9Saa7Fy66UkmdTZs4wBR3qNdWwsqMYQOuzGC+f6GXMOT9Ul4jpsybo83KW4X4Hcn
Qgj6KZORkwRf6EEwT9bgEdeA9iDHstnrDOWWfLSUiL62rrog+M9i8e2wEYtnYtc0
h9o6sbKDXugNSu7Ge2M35anvdd4b+eMZ+lIi4/f7GgVT
-----END CERTIFICATE-----
Generated at Mon Apr 7 02:17:27 2025 by rpki-client