Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/c4c32c-322e-4ed7-8a29-45d542d5f55f/1/rmFmeiHNGZqQIM8I3hQZlTQLSPU.roa
File: rmFmeiHNGZqQIM8I3hQZlTQLSPU.roa (raw, json)
Hash identifier: +4TH3iY83i5mgX2X206BcOV0PV0agK4VaBkhFLKmwRA=
Subject key identifier: AE:61:66:7A:21:CD:19:9A:90:20:CF:08:DE:14:19:95:34:0B:48:F5
Certificate issuer: /CN=c8531ae2ce57c95f5a398930ea45503542801ba1
Certificate serial: 019420686149ABE0E16C1AEE336C7E6205F5
Authority key identifier: C8:53:1A:E2:CE:57:C9:5F:5A:39:89:30:EA:45:50:35:42:80:1B:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yFMa4s5XyV9aOYkw6kVQNUKAG6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/c4c32c-322e-4ed7-8a29-45d542d5f55f/1/rmFmeiHNGZqQIM8I3hQZlTQLSPU.roa
Signing time: Wed 01 Jan 2025 05:48:19 +0000
ROA not before: Wed 01 Jan 2025 05:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31713
IP address blocks: 217.113.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/c4c32c-322e-4ed7-8a29-45d542d5f55f/1/yFMa4s5XyV9aOYkw6kVQNUKAG6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/c4c32c-322e-4ed7-8a29-45d542d5f55f/1/yFMa4s5XyV9aOYkw6kVQNUKAG6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/yFMa4s5XyV9aOYkw6kVQNUKAG6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 20:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:61:49:ab:e0:e1:6c:1a:ee:33:6c:7e:62:05:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8531ae2ce57c95f5a398930ea45503542801ba1
Validity
Not Before: Jan 1 05:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ae61667a21cd199a9020cf08de141995340b48f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e2:44:9f:aa:87:36:a3:91:eb:29:07:75:34:
18:c0:58:33:98:6d:9c:75:26:3e:b5:a3:57:21:4c:
c6:39:9c:6d:3a:73:ea:c2:7f:f9:0d:1e:6d:89:de:
79:91:c8:0a:da:d8:20:ae:10:39:18:43:21:da:48:
d6:f9:bf:ca:98:6d:fe:4d:59:93:ef:6b:9e:1d:0d:
49:6d:ff:d4:61:ee:1b:c4:0d:55:f0:9c:c1:31:11:
f5:05:db:ab:0f:71:6f:4d:f3:2d:51:d9:1e:01:19:
85:eb:1f:8b:9f:34:dc:3d:c7:54:f0:9d:27:10:37:
0a:80:71:4b:5b:27:af:00:e4:f4:50:cd:c7:22:36:
45:9f:4f:e0:b1:af:70:df:0b:45:8d:69:fd:65:68:
52:fe:ae:88:3a:2c:be:c0:0b:c1:a1:4c:91:9e:24:
21:09:86:80:71:04:25:8d:db:da:c5:0d:1b:0d:16:
8d:8b:ed:09:87:db:8e:50:8f:21:95:94:dc:e6:56:
ae:75:c3:43:8b:b0:36:fc:18:bd:64:53:ad:d9:38:
fa:9f:00:8a:c3:94:bf:12:e4:88:31:c9:45:5a:48:
f7:76:a7:2d:9e:68:d9:53:6e:6b:f8:2e:e6:32:4e:
8e:b2:a3:8d:35:80:72:f5:e0:ad:aa:af:d1:b8:6f:
3b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:61:66:7A:21:CD:19:9A:90:20:CF:08:DE:14:19:95:34:0B:48:F5
X509v3 Authority Key Identifier:
keyid:C8:53:1A:E2:CE:57:C9:5F:5A:39:89:30:EA:45:50:35:42:80:1B:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFMa4s5XyV9aOYkw6kVQNUKAG6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c4c32c-322e-4ed7-8a29-45d542d5f55f/1/rmFmeiHNGZqQIM8I3hQZlTQLSPU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c4c32c-322e-4ed7-8a29-45d542d5f55f/1/yFMa4s5XyV9aOYkw6kVQNUKAG6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.113.92.0/24
Signature Algorithm: sha256WithRSAEncryption
47:76:a8:c8:0a:74:56:08:25:f6:b7:51:84:3d:ce:b7:f9:25:
c9:d2:86:61:05:a6:ab:7c:11:cb:f7:f0:f8:09:77:c2:cc:2b:
fc:45:8b:4c:d0:19:12:0d:fb:97:8a:0f:05:1f:ee:3e:92:b8:
d6:c8:68:29:eb:1c:ea:ac:eb:6e:c4:1b:c6:04:24:34:2d:d4:
bb:41:c9:6d:92:ac:c6:0f:f5:70:c4:d6:21:25:c1:82:8a:e9:
5d:99:c5:98:bd:2f:36:91:ce:8d:21:c4:8f:f5:02:58:1b:59:
8f:f0:21:75:88:79:a8:93:1f:f1:33:ba:12:c9:ef:17:91:24:
05:43:e2:f3:57:48:a6:e6:96:d2:fa:54:1c:cc:1f:3f:58:8f:
3f:82:4c:89:aa:3e:af:4e:58:89:31:06:20:59:aa:04:a9:96:
97:29:94:01:a4:18:be:5d:9e:60:94:dc:c2:4a:98:16:a8:ff:
86:14:e9:8e:6d:88:c6:8d:8f:39:2c:9b:d9:a3:67:0a:cf:83:
00:15:03:69:ca:41:59:34:3d:77:22:86:15:8e:69:de:3d:f3:
08:8e:96:33:ec:53:85:e1:fd:9e:8b:24:c5:a5:b5:8c:82:5e:
03:f9:2b:5f:71:93:16:7b:43:ce:8a:64:d2:5f:e9:42:b6:bc:
ea:78:8a:ab
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQgaGFJq+DhbBruM2x+YgX1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4NTMxYWUyY2U1N2M5NWY1YTM5ODkzMGVhNDU1MDM1NDI4
MDFiYTEwHhcNMjUwMTAxMDU0ODE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZTYxNjY3YTIxY2QxOTlhOTAyMGNmMDhkZTE0MTk5NTM0MGI0OGY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuJEn6qHNqOR6ykHdTQYwFgzmG2c
dSY+taNXIUzGOZxtOnPqwn/5DR5tid55kcgK2tggrhA5GEMh2kjW+b/KmG3+TVmT
72ueHQ1Jbf/UYe4bxA1V8JzBMRH1BdurD3FvTfMtUdkeARmF6x+LnzTcPcdU8J0n
EDcKgHFLWyevAOT0UM3HIjZFn0/gsa9w3wtFjWn9ZWhS/q6IOiy+wAvBoUyRniQh
CYaAcQQljdvaxQ0bDRaNi+0Jh9uOUI8hlZTc5laudcNDi7A2/Bi9ZFOt2Tj6nwCK
w5S/EuSIMclFWkj3dqctnmjZU25r+C7mMk6OsqONNYBy9eCtqq/RuG87YQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK5hZnohzRmakCDPCN4UGZU0C0j1MB8GA1UdIwQY
MBaAFMhTGuLOV8lfWjmJMOpFUDVCgBuhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUZNYTRzNVh5VjlhT1lrdzZrVlFOVUtBRzZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9jNGMzMmMtMzIyZS00ZWQ3LThhMjkt
NDVkNTQyZDVmNTVmLzEvcm1GbWVpSE5HWnFRSU04STNoUVpsVFFMU1BVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy9jNGMzMmMtMzIyZS00ZWQ3LThhMjktNDVkNTQyZDVmNTVm
LzEveUZNYTRzNVh5VjlhT1lrdzZrVlFOVUtBRzZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2XFcMA0G
CSqGSIb3DQEBCwUAA4IBAQBHdqjICnRWCCX2t1GEPc63+SXJ0oZhBaarfBHL9/D4
CXfCzCv8RYtM0BkSDfuXig8FH+4+krjWyGgp6xzqrOtuxBvGBCQ0LdS7QcltkqzG
D/VwxNYhJcGCiuldmcWYvS82kc6NIcSP9QJYG1mP8CF1iHmokx/xM7oSye8XkSQF
Q+LzV0im5pbS+lQczB8/WI8/gkyJqj6vTliJMQYgWaoEqZaXKZQBpBi+XZ5glNzC
SpgWqP+GFOmObYjGjY85LJvZo2cKz4MAFQNpykFZND13IoYVjmnePfMIjpYz7FOF
4f2eiyTFpbWMgl4D+StfcZMWe0POimTSX+lCtrzqeIqr
-----END CERTIFICATE-----
Generated at Mon Apr 7 05:47:16 2025 by rpki-client