Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/ba3b2f-a289-404e-aef8-4e737e06d290/1/E0nL2r6tA4Kip6utbHVTl2QsGcA.roa
File: E0nL2r6tA4Kip6utbHVTl2QsGcA.roa (raw, json)
Hash identifier: aen5+JQjIiPGZfLBCbBcX/i0rEODfLs98wUB0AIvd0A=
Subject key identifier: 13:49:CB:DA:BE:AD:03:82:A2:A7:AB:AD:6C:75:53:97:64:2C:19:C0
Certificate issuer: /CN=a9a073b31d888e4439e272e007c9532fc305c80d
Certificate serial: 019421B22608436990FEB3A47878B6FC7D73
Authority key identifier: A9:A0:73:B3:1D:88:8E:44:39:E2:72:E0:07:C9:53:2F:C3:05:C8:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qaBzsx2IjkQ54nLgB8lTL8MFyA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/ba3b2f-a289-404e-aef8-4e737e06d290/1/E0nL2r6tA4Kip6utbHVTl2QsGcA.roa
Signing time: Wed 01 Jan 2025 11:48:30 +0000
ROA not before: Wed 01 Jan 2025 11:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 40975
IP address blocks: 91.197.244.0/22 maxlen: 22
195.138.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/ba3b2f-a289-404e-aef8-4e737e06d290/1/qaBzsx2IjkQ54nLgB8lTL8MFyA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/ba3b2f-a289-404e-aef8-4e737e06d290/1/qaBzsx2IjkQ54nLgB8lTL8MFyA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qaBzsx2IjkQ54nLgB8lTL8MFyA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:26:08:43:69:90:fe:b3:a4:78:78:b6:fc:7d:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9a073b31d888e4439e272e007c9532fc305c80d
Validity
Not Before: Jan 1 11:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1349cbdabead0382a2a7abad6c755397642c19c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a0:89:4f:f8:e5:39:a6:82:d6:af:e2:2d:e2:
7e:b4:75:2e:f2:09:de:9a:b9:1b:a2:29:c3:fb:ee:
d3:cb:b6:ce:0c:9a:8d:ec:87:51:df:ba:75:84:a2:
65:f8:1c:7d:40:28:15:f2:84:ba:8b:d2:aa:ad:40:
bd:95:51:b6:07:5a:89:2c:60:25:97:b7:fa:cd:a0:
24:b8:1e:0c:30:ed:f6:e6:96:8f:56:81:4a:85:ac:
9e:45:b3:50:b8:83:a8:19:8f:f0:1d:52:d1:54:50:
80:3a:49:4b:90:4c:6e:81:cb:18:9b:27:f4:ac:e0:
6a:4e:12:58:b8:11:0f:da:38:b9:2c:9a:84:21:42:
aa:79:dc:f0:6f:e9:db:1a:a8:f3:46:74:a9:72:fb:
5a:ab:aa:f2:84:e8:b7:d5:0f:4b:a3:b9:91:e1:ce:
e3:f4:3f:c6:f8:47:98:c4:ba:b8:f5:a4:63:b1:a4:
be:3a:5a:af:68:72:14:d2:3f:fa:5f:be:35:47:c7:
4f:09:fb:6d:f2:d8:a5:30:c6:ca:08:f6:82:77:0d:
0d:f8:1f:95:60:eb:5a:e7:ac:f5:5d:b4:9a:ad:8a:
e5:7e:98:0c:45:19:80:f7:36:e1:58:dd:93:b1:ea:
7d:d3:94:3c:2b:9f:0b:ce:2b:f4:d8:7b:15:af:ac:
ae:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:49:CB:DA:BE:AD:03:82:A2:A7:AB:AD:6C:75:53:97:64:2C:19:C0
X509v3 Authority Key Identifier:
keyid:A9:A0:73:B3:1D:88:8E:44:39:E2:72:E0:07:C9:53:2F:C3:05:C8:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qaBzsx2IjkQ54nLgB8lTL8MFyA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ba3b2f-a289-404e-aef8-4e737e06d290/1/E0nL2r6tA4Kip6utbHVTl2QsGcA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ba3b2f-a289-404e-aef8-4e737e06d290/1/qaBzsx2IjkQ54nLgB8lTL8MFyA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.197.244.0/22
195.138.214.0/24
Signature Algorithm: sha256WithRSAEncryption
34:7b:03:11:42:7e:2c:4e:35:3a:8d:55:92:c5:51:a5:15:d7:
a0:43:c0:77:85:85:0d:0b:c3:9a:d7:a2:d5:14:cf:fb:a2:ed:
f2:71:80:2b:4a:05:ff:57:ec:af:d2:e5:34:2d:c5:43:42:8a:
1a:43:bd:76:d0:67:ff:6c:4e:01:bc:ef:5f:20:29:28:6f:a3:
7d:21:4a:e5:95:a7:f2:09:cc:58:7c:b5:2b:23:b5:25:b5:82:
16:7b:36:84:46:6d:2c:d5:b3:33:f4:66:14:68:b4:21:4b:05:
c1:94:c3:52:00:ab:01:34:cf:e6:a1:8f:06:90:b5:28:11:75:
5a:05:fb:77:2c:62:77:7d:53:0e:2f:49:63:05:a3:db:dc:20:
f7:47:e3:ec:75:94:a8:e1:b2:ce:8f:31:13:49:1e:ae:cc:69:
32:58:92:6d:2a:a6:32:2c:32:3b:3c:9c:76:bb:7e:62:c7:df:
2e:01:14:1f:a0:be:01:4a:45:33:bb:10:44:28:32:c6:5d:f4:
96:4d:eb:fc:c2:90:e5:a7:f5:b3:1c:ad:6f:1c:a2:2b:dc:66:
58:0d:fc:55:27:fe:ea:4a:db:5a:d7:b3:31:4a:c5:b4:6b:a8:
3b:50:30:b7:15:73:11:23:92:63:37:fd:23:8a:9c:b0:1c:6d:
94:fa:00:c5
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQhsiYIQ2mQ/rOkeHi2/H1zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5YTA3M2IzMWQ4ODhlNDQzOWUyNzJlMDA3Yzk1MzJmYzMw
NWM4MGQwHhcNMjUwMTAxMTE0ODMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMzQ5Y2JkYWJlYWQwMzgyYTJhN2FiYWQ2Yzc1NTM5NzY0MmMxOWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKCJT/jlOaaC1q/iLeJ+tHUu8gne
mrkboinD++7Ty7bODJqN7IdR37p1hKJl+Bx9QCgV8oS6i9KqrUC9lVG2B1qJLGAl
l7f6zaAkuB4MMO325paPVoFKhayeRbNQuIOoGY/wHVLRVFCAOklLkExugcsYmyf0
rOBqThJYuBEP2ji5LJqEIUKqedzwb+nbGqjzRnSpcvtaq6ryhOi31Q9Lo7mR4c7j
9D/G+EeYxLq49aRjsaS+OlqvaHIU0j/6X741R8dPCftt8tilMMbKCPaCdw0N+B+V
YOta56z1XbSarYrlfpgMRRmA9zbhWN2Tsep905Q8K58Lziv02HsVr6yuiwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBNJy9q+rQOCoqerrWx1U5dkLBnAMB8GA1UdIwQY
MBaAFKmgc7MdiI5EOeJy4AfJUy/DBcgNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWFCenN4Mklqa1E1NG5MZ0I4bFRMOE1GeUEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9iYTNiMmYtYTI4OS00MDRlLWFlZjgt
NGU3MzdlMDZkMjkwLzEvRTBuTDJyNnRBNEtpcDZ1dGJIVlRsMlFzR2NBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS9iYTNiMmYtYTI4OS00MDRlLWFlZjgtNGU3MzdlMDZkMjkw
LzEvcWFCenN4Mklqa1E1NG5MZ0I4bFRMOE1GeUEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCW8X0AwQA
w4rWMA0GCSqGSIb3DQEBCwUAA4IBAQA0ewMRQn4sTjU6jVWSxVGlFdegQ8B3hYUN
C8Oa16LVFM/7ou3ycYArSgX/V+yv0uU0LcVDQooaQ7120Gf/bE4BvO9fICkob6N9
IUrllafyCcxYfLUrI7UltYIWezaERm0s1bMz9GYUaLQhSwXBlMNSAKsBNM/moY8G
kLUoEXVaBft3LGJ3fVMOL0ljBaPb3CD3R+PsdZSo4bLOjzETSR6uzGkyWJJtKqYy
LDI7PJx2u35ix98uARQfoL4BSkUzuxBEKDLGXfSWTev8wpDlp/WzHK1vHKIr3GZY
DfxVJ/7qStta17MxSsW0a6g7UDC3FXMRI5JjN/0jipywHG2U+gDF
-----END CERTIFICATE-----
Generated at Sun Apr 6 14:36:53 2025 by rpki-client