Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/1-CZEw8pGGdh9Gwph40yHsdoq1ag.roa
File: 1-CZEw8pGGdh9Gwph40yHsdoq1ag.roa (raw, json)
Hash identifier: C4R2UwFpzsqxbaKGdNIAuHg0NhGWKQyDYz9JMjta9y4=
Subject key identifier: F8:26:44:C3:CA:46:19:D8:7D:1B:0A:61:E3:4C:87:B1:DA:2A:D5:A8
Certificate issuer: /CN=a9ec57bc8464fec2e9a1b098ffce34c21aaf9ca6
Certificate serial: 01942746508868D74FB105913FDA698ABFEB
Authority key identifier: A9:EC:57:BC:84:64:FE:C2:E9:A1:B0:98:FF:CE:34:C2:1A:AF:9C:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qexXvIRk_sLpobCY_840whqvnKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/1-CZEw8pGGdh9Gwph40yHsdoq1ag.roa
Signing time: Thu 02 Jan 2025 13:48:27 +0000
ROA not before: Thu 02 Jan 2025 13:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210850
IP address blocks: 91.223.53.0/24 maxlen: 32
185.229.108.0/22 maxlen: 32
185.229.111.0/24 maxlen: 32
213.108.134.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/qexXvIRk_sLpobCY_840whqvnKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/qexXvIRk_sLpobCY_840whqvnKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/qexXvIRk_sLpobCY_840whqvnKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 19:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:50:88:68:d7:4f:b1:05:91:3f:da:69:8a:bf:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9ec57bc8464fec2e9a1b098ffce34c21aaf9ca6
Validity
Not Before: Jan 2 13:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f82644c3ca4619d87d1b0a61e34c87b1da2ad5a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:dd:13:2d:27:cd:d3:98:41:f4:23:a5:03:dd:
02:0d:af:b5:10:66:78:d3:88:ab:17:a7:dc:9d:2a:
c7:13:a8:07:93:98:dd:7f:b0:31:23:4d:2b:91:42:
e7:4b:fb:6d:ec:d7:4f:71:04:24:78:2c:3e:8f:e9:
63:c4:1d:67:7a:9c:85:be:54:8b:8d:34:e4:83:cc:
d9:4f:fb:60:57:ab:be:0f:63:36:0f:53:7e:86:05:
ff:aa:ce:18:6a:3a:41:75:a8:27:89:da:9f:da:57:
8e:6f:f5:ac:54:b0:71:b5:17:a9:e5:2a:fc:ad:c9:
4d:e8:b5:67:de:34:86:8b:63:3c:74:e1:e6:ca:3e:
e3:9c:25:0a:61:d0:bd:57:a1:a9:2b:37:66:16:69:
70:7d:19:82:a3:68:31:de:72:5e:c1:71:ff:c9:39:
ec:8d:be:c6:69:d8:e5:4d:66:6a:8f:18:b9:45:97:
9d:da:2e:67:dd:42:6b:2b:28:a5:3e:58:2d:47:84:
38:86:57:e7:89:a9:87:82:a0:64:17:cb:d4:51:99:
8b:fd:c5:12:8c:f2:9b:b0:ff:61:ec:9e:8c:a0:73:
0d:b2:a5:9e:1b:69:a1:7a:0f:61:98:de:ae:a2:e8:
2d:26:f4:74:7c:e0:b3:1e:32:b6:ae:c1:48:c2:be:
bd:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:26:44:C3:CA:46:19:D8:7D:1B:0A:61:E3:4C:87:B1:DA:2A:D5:A8
X509v3 Authority Key Identifier:
keyid:A9:EC:57:BC:84:64:FE:C2:E9:A1:B0:98:FF:CE:34:C2:1A:AF:9C:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qexXvIRk_sLpobCY_840whqvnKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/1-CZEw8pGGdh9Gwph40yHsdoq1ag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/qexXvIRk_sLpobCY_840whqvnKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.53.0/24
185.229.108.0/22
213.108.134.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:bd:76:4f:a6:0a:66:30:de:70:b0:ec:4b:92:e2:e3:f7:c2:
e6:9d:48:88:d7:f2:0a:cb:2d:26:ba:38:f1:22:5c:7b:20:c6:
0a:a2:70:df:af:ef:56:10:74:ba:72:4a:a8:e7:8a:c0:99:8d:
82:e4:9d:b3:16:c5:16:98:99:d0:2b:8e:a1:14:ec:52:23:df:
ad:6e:79:36:ca:e8:5c:ed:39:49:2b:93:a9:bc:8b:4e:3e:18:
5e:89:96:1f:b5:78:b5:4f:a7:87:58:dc:2a:10:8a:1f:da:8f:
fc:5c:4c:43:e3:bd:a4:85:68:33:e8:3c:ef:2f:ff:37:54:ba:
c0:da:7c:76:52:2b:d6:6f:5a:a4:9a:31:d8:d5:f9:8e:dd:dc:
80:3f:47:cf:4a:5d:f3:0b:ed:2b:6b:c4:30:42:ad:06:0a:8a:
35:40:fc:f9:bf:2b:cd:8d:af:cd:15:4a:48:92:eb:5d:6f:91:
f2:1a:01:a9:f9:fb:e2:e3:be:79:77:2b:92:ce:b2:97:15:8a:
e9:ee:8e:f6:80:33:19:38:92:3c:d9:60:0f:91:8d:74:0d:a3:
e3:68:98:3c:c3:a4:c8:25:1d:a3:6a:f6:87:73:29:a1:f9:19:
fd:e8:bd:19:83:9d:97:af:36:e5:75:5e:8d:42:d2:ce:dd:94:
9c:60:77:01
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZQnRlCIaNdPsQWRP9ppir/rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5ZWM1N2JjODQ2NGZlYzJlOWExYjA5OGZmY2UzNGMyMWFh
ZjljYTYwHhcNMjUwMTAyMTM0ODI3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmODI2NDRjM2NhNDYxOWQ4N2QxYjBhNjFlMzRjODdiMWRhMmFkNWE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjt0TLSfN05hB9COlA90CDa+1EGZ4
04irF6fcnSrHE6gHk5jdf7AxI00rkULnS/tt7NdPcQQkeCw+j+ljxB1nepyFvlSL
jTTkg8zZT/tgV6u+D2M2D1N+hgX/qs4YajpBdagnidqf2leOb/WsVLBxtRep5Sr8
rclN6LVn3jSGi2M8dOHmyj7jnCUKYdC9V6GpKzdmFmlwfRmCo2gx3nJewXH/yTns
jb7GadjlTWZqjxi5RZed2i5n3UJrKyilPlgtR4Q4hlfniamHgqBkF8vUUZmL/cUS
jPKbsP9h7J6MoHMNsqWeG2mheg9hmN6uougtJvR0fOCzHjK2rsFIwr69DwIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFPgmRMPKRhnYfRsKYeNMh7HaKtWoMB8GA1UdIwQY
MBaAFKnsV7yEZP7C6aGwmP/ONMIar5ymMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWV4WHZJUmtfc0xwb2JDWV84NDB3aHF2bktZLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy80MWI0MGMtZjNiNi00MGI4LTg0MGMt
MTlhM2M1NjQ5YjU3LzEvMS1DWkV3OHBHR2RoOUd3cGg0MHlIc2RvcTFhZy5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvOWMvNDFiNDBjLWYzYjYtNDBiOC04NDBjLTE5YTNjNTY0OWI1
Ny8xL3FleFh2SVJrX3NMcG9iQ1lfODQwd2hxdm5LWS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAFvfNQME
ArnlbAMEANVshjANBgkqhkiG9w0BAQsFAAOCAQEAfr12T6YKZjDecLDsS5Li4/fC
5p1IiNfyCsstJro48SJceyDGCqJw36/vVhB0unJKqOeKwJmNguSdsxbFFpiZ0CuO
oRTsUiPfrW55NsroXO05SSuTqbyLTj4YXomWH7V4tU+nh1jcKhCKH9qP/FxMQ+O9
pIVoM+g87y//N1S6wNp8dlIr1m9apJox2NX5jt3cgD9Hz0pd8wvtK2vEMEKtBgqK
NUD8+b8rzY2vzRVKSJLrXW+R8hoBqfn74uO+eXcrks6ylxWK6e6O9oAzGTiSPNlg
D5GNdA2j42iYPMOkyCUdo2r2h3MpofkZ/ei9GYOdl6825XVejULSzt2UnGB3AQ==
-----END CERTIFICATE-----
Generated at Tue Apr 8 03:29:29 2025 by rpki-client