Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/58e8f8-1b27-41a4-92ab-fe8484f7079d/1/fjriIHG0K5ESLdXlGMzPccy1eWc.roa
File: fjriIHG0K5ESLdXlGMzPccy1eWc.roa (raw, json)
Hash identifier: 8Yi5eFrLfWuilXieuc7JFFDe1Ore62ncPRyz11+p5yU=
Subject key identifier: 7E:3A:E2:20:71:B4:2B:91:12:2D:D5:E5:18:CC:CF:71:CC:B5:79:67
Certificate issuer: /CN=0d32172261c9509e57352137ba0192a8486b6fdd
Certificate serial: 01941FFA7AB52878CC71D564146C870BECA8
Authority key identifier: 0D:32:17:22:61:C9:50:9E:57:35:21:37:BA:01:92:A8:48:6B:6F:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTIXImHJUJ5XNSE3ugGSqEhrb90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/58e8f8-1b27-41a4-92ab-fe8484f7079d/1/fjriIHG0K5ESLdXlGMzPccy1eWc.roa
Signing time: Wed 01 Jan 2025 03:48:16 +0000
ROA not before: Wed 01 Jan 2025 03:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212552
IP address blocks: 91.216.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/58e8f8-1b27-41a4-92ab-fe8484f7079d/1/DTIXImHJUJ5XNSE3ugGSqEhrb90.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/58e8f8-1b27-41a4-92ab-fe8484f7079d/1/DTIXImHJUJ5XNSE3ugGSqEhrb90.mft
rsync://rpki.ripe.net/repository/DEFAULT/DTIXImHJUJ5XNSE3ugGSqEhrb90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:7a:b5:28:78:cc:71:d5:64:14:6c:87:0b:ec:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d32172261c9509e57352137ba0192a8486b6fdd
Validity
Not Before: Jan 1 03:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7e3ae22071b42b91122dd5e518cccf71ccb57967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:83:62:16:8c:22:fb:e9:52:5a:66:6b:ab:c4:
7c:68:1c:ec:26:4e:a3:7a:33:53:52:ec:5d:9d:8b:
b7:4f:26:2b:60:65:0b:b8:f9:d5:0e:6d:0a:4e:92:
0f:94:7f:2b:5d:64:f1:c4:ec:80:d8:20:8f:e0:20:
8a:50:42:c0:c8:92:94:26:47:07:0e:70:19:f0:21:
73:b8:83:6a:f2:d2:32:1e:b3:7a:2f:c1:f6:09:01:
e6:ef:66:92:4c:9a:23:dc:9e:11:75:23:97:80:8f:
1b:54:c5:41:00:6c:11:82:2a:0c:b1:37:f4:c2:b4:
0b:cd:a8:72:51:af:0a:c0:66:c1:f9:41:78:08:fc:
bc:e2:e3:06:73:f6:6e:f2:f0:e0:60:81:cd:de:d9:
e2:19:27:01:8b:fd:cb:e4:98:55:33:8b:81:ac:de:
43:ab:00:f3:22:7b:16:b0:e0:f3:f2:2f:41:ca:29:
30:61:93:c1:cb:a3:d8:31:a4:26:98:53:f1:17:e8:
45:d1:bb:06:58:cf:2f:88:7c:55:6e:ad:a3:8e:0e:
dd:c8:f3:7e:85:f9:be:e1:48:cb:a5:93:b7:63:2c:
d5:be:23:f8:48:4f:e5:f2:dc:64:f5:23:5f:61:84:
10:b6:e6:eb:15:d9:33:42:77:92:ae:59:00:44:f6:
da:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:3A:E2:20:71:B4:2B:91:12:2D:D5:E5:18:CC:CF:71:CC:B5:79:67
X509v3 Authority Key Identifier:
keyid:0D:32:17:22:61:C9:50:9E:57:35:21:37:BA:01:92:A8:48:6B:6F:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTIXImHJUJ5XNSE3ugGSqEhrb90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/58e8f8-1b27-41a4-92ab-fe8484f7079d/1/fjriIHG0K5ESLdXlGMzPccy1eWc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/58e8f8-1b27-41a4-92ab-fe8484f7079d/1/DTIXImHJUJ5XNSE3ugGSqEhrb90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.104.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:4b:d6:da:10:1c:2f:d1:e8:76:36:17:d5:a0:e5:8f:b2:61:
5d:70:41:86:ba:af:c0:e4:c6:35:e0:46:df:9e:43:a5:4b:5e:
b8:ca:70:35:ec:0a:63:3e:d9:93:96:6d:66:19:bc:bd:98:e0:
11:34:8a:fc:cb:ea:89:82:e9:9f:4b:84:1c:11:1e:e8:22:a3:
a0:e1:64:40:85:1e:13:6e:c8:45:ce:e4:9d:24:76:cf:b4:cb:
7d:24:ee:2b:7c:7a:67:78:9e:ec:f3:77:da:a5:42:ea:4f:23:
9e:66:43:2b:ba:f9:ab:f3:22:cc:cd:d4:a9:c0:b8:fc:12:ec:
80:cb:0a:78:6e:4a:b2:ac:66:42:d2:57:c0:44:0e:e7:0f:c6:
c7:39:bf:4f:e3:63:bc:e7:86:62:48:60:a7:7b:ef:2c:55:31:
a4:62:d3:c5:c5:2e:3f:ab:59:48:52:4d:38:38:b0:15:de:64:
76:eb:6a:46:69:7d:e3:b6:f2:8b:05:89:8d:fc:75:c0:e1:7e:
05:2d:02:c5:a3:d4:b6:e3:13:f1:7e:3f:8c:5f:cb:27:53:b7:
a0:a3:67:99:74:2c:e6:bd:ba:9d:d1:cb:2d:97:73:66:2c:4d:
b2:f9:e8:ef:23:48:dd:72:dd:48:28:21:d6:0b:30:34:db:42:
3a:05:73:53
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQf+nq1KHjMcdVkFGyHC+yoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkMzIxNzIyNjFjOTUwOWU1NzM1MjEzN2JhMDE5MmE4NDg2
YjZmZGQwHhcNMjUwMTAxMDM0ODE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZTNhZTIyMDcxYjQyYjkxMTIyZGQ1ZTUxOGNjY2Y3MWNjYjU3OTY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyINiFowi++lSWmZrq8R8aBzsJk6j
ejNTUuxdnYu3TyYrYGULuPnVDm0KTpIPlH8rXWTxxOyA2CCP4CCKUELAyJKUJkcH
DnAZ8CFzuINq8tIyHrN6L8H2CQHm72aSTJoj3J4RdSOXgI8bVMVBAGwRgioMsTf0
wrQLzahyUa8KwGbB+UF4CPy84uMGc/Zu8vDgYIHN3tniGScBi/3L5JhVM4uBrN5D
qwDzInsWsODz8i9ByikwYZPBy6PYMaQmmFPxF+hF0bsGWM8viHxVbq2jjg7dyPN+
hfm+4UjLpZO3YyzVviP4SE/l8txk9SNfYYQQtubrFdkzQneSrlkARPbatQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH464iBxtCuREi3V5RjMz3HMtXlnMB8GA1UdIwQY
MBaAFA0yFyJhyVCeVzUhN7oBkqhIa2/dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFRJWEltSEpVSjVYTlNFM3VnR1NxRWhyYjkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi81OGU4ZjgtMWIyNy00MWE0LTkyYWIt
ZmU4NDg0ZjcwNzlkLzEvZmpyaUlIRzBLNUVTTGRYbEdNelBjY3kxZVdjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi81OGU4ZjgtMWIyNy00MWE0LTkyYWItZmU4NDg0ZjcwNzlk
LzEvRFRJWEltSEpVSjVYTlNFM3VnR1NxRWhyYjkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9hoMA0G
CSqGSIb3DQEBCwUAA4IBAQAbS9baEBwv0eh2NhfVoOWPsmFdcEGGuq/A5MY14Ebf
nkOlS164ynA17ApjPtmTlm1mGby9mOARNIr8y+qJgumfS4QcER7oIqOg4WRAhR4T
bshFzuSdJHbPtMt9JO4rfHpneJ7s83fapULqTyOeZkMruvmr8yLMzdSpwLj8EuyA
ywp4bkqyrGZC0lfARA7nD8bHOb9P42O854ZiSGCne+8sVTGkYtPFxS4/q1lIUk04
OLAV3mR262pGaX3jtvKLBYmN/HXA4X4FLQLFo9S24xPxfj+MX8snU7ego2eZdCzm
vbqd0cstl3NmLE2y+ejvI0jdct1IKCHWCzA020I6BXNT
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:10:00 2025 by rpki-client