Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/92352f-4051-450e-b3a6-2e0078cee182/1/187N4PB5lNzYnkhVyKxTgG2ufTQ.roa
File: 187N4PB5lNzYnkhVyKxTgG2ufTQ.roa (raw, json)
Hash identifier: nnFT2Pv1VSMMW5/AFw9H17xWytd4IEI7JaypDZR0hFg=
Subject key identifier: D7:CE:CD:E0:F0:79:94:DC:D8:9E:48:55:C8:AC:53:80:6D:AE:7D:34
Certificate issuer: /CN=290cc4d0ad5dafc27aa4e342fa80e34814e845c3
Certificate serial: 019422FBF0B4EFCEEA11597D99A81A5BDE0F
Authority key identifier: 29:0C:C4:D0:AD:5D:AF:C2:7A:A4:E3:42:FA:80:E3:48:14:E8:45:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQzE0K1dr8J6pONC-oDjSBToRcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/92352f-4051-450e-b3a6-2e0078cee182/1/187N4PB5lNzYnkhVyKxTgG2ufTQ.roa
Signing time: Wed 01 Jan 2025 17:48:43 +0000
ROA not before: Wed 01 Jan 2025 17:48:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210579
IP address blocks: 91.227.138.0/23 maxlen: 23
217.13.104.0/23 maxlen: 23
217.13.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/92352f-4051-450e-b3a6-2e0078cee182/1/KQzE0K1dr8J6pONC-oDjSBToRcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/92352f-4051-450e-b3a6-2e0078cee182/1/KQzE0K1dr8J6pONC-oDjSBToRcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQzE0K1dr8J6pONC-oDjSBToRcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:f0:b4:ef:ce:ea:11:59:7d:99:a8:1a:5b:de:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=290cc4d0ad5dafc27aa4e342fa80e34814e845c3
Validity
Not Before: Jan 1 17:48:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d7cecde0f07994dcd89e4855c8ac53806dae7d34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:03:96:18:b1:7c:e0:ed:e6:ef:cb:04:6c:7f:
8f:81:ae:26:fa:67:24:70:69:08:d0:07:76:ea:cc:
48:33:8f:76:71:64:ce:8e:91:a7:a5:e2:8b:01:d2:
8e:b9:66:97:d6:4f:2b:08:fe:a6:6c:37:9d:01:30:
5e:a2:e4:e3:69:4f:93:3b:10:84:ad:4f:2b:0d:aa:
4f:64:43:37:55:d2:fb:fc:09:fb:76:75:a6:58:a8:
f1:7d:35:ee:e2:da:14:48:45:bc:26:96:c4:a9:aa:
64:bc:b4:62:69:2b:0d:00:c2:14:fd:64:00:3d:98:
69:11:58:bc:ba:2a:98:88:c6:d2:0d:bf:d5:cd:7f:
30:62:d6:2a:58:e9:cb:c5:20:f9:4e:fa:1c:ef:3e:
46:d9:a4:99:64:d7:36:9c:0e:d0:19:43:0b:62:41:
8c:78:eb:7e:af:36:9c:17:8c:e1:38:2a:36:80:c4:
c3:ed:58:3e:64:b7:2f:8f:0a:e1:89:c8:51:e8:3e:
d8:30:4f:e2:cd:85:89:58:22:18:6b:88:05:fe:49:
22:74:b2:80:73:bc:22:f2:dd:88:5c:db:ff:09:23:
cb:b7:f1:ac:3c:9f:75:db:69:37:d4:41:13:04:91:
14:ec:f4:d8:0b:46:a4:47:5a:08:2b:61:47:ac:a7:
e8:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:CE:CD:E0:F0:79:94:DC:D8:9E:48:55:C8:AC:53:80:6D:AE:7D:34
X509v3 Authority Key Identifier:
keyid:29:0C:C4:D0:AD:5D:AF:C2:7A:A4:E3:42:FA:80:E3:48:14:E8:45:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQzE0K1dr8J6pONC-oDjSBToRcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/92352f-4051-450e-b3a6-2e0078cee182/1/187N4PB5lNzYnkhVyKxTgG2ufTQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/92352f-4051-450e-b3a6-2e0078cee182/1/KQzE0K1dr8J6pONC-oDjSBToRcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.227.138.0/23
217.13.104.0/23
217.13.111.0/24
Signature Algorithm: sha256WithRSAEncryption
86:f8:64:6d:f3:57:01:8f:5e:9a:b2:e1:da:48:39:31:f8:f9:
db:7b:2e:83:31:04:08:69:dc:4c:29:9a:27:ee:f2:f4:bd:dc:
b1:b9:a7:9a:87:da:cc:f3:34:5e:81:e8:80:0b:7a:b7:38:d5:
57:59:6c:94:e8:d0:b6:7e:f0:d2:30:9a:0f:e0:b5:ea:7c:28:
37:4e:f6:5b:a7:27:2b:9f:1f:82:2a:85:9d:9f:9e:c7:8a:2f:
e9:ba:7f:29:7b:9e:e0:8c:f9:fe:95:f8:db:87:72:04:ae:7d:
2b:98:50:20:a4:9c:c9:4f:44:ac:88:e2:01:04:01:5b:2c:0e:
72:20:a4:1a:c1:fe:e4:4e:cf:bb:4e:5a:fe:18:7d:0c:11:9c:
39:58:fa:a7:99:84:c7:68:3a:ba:e4:89:79:a1:c3:0f:51:fd:
18:86:61:a8:61:2a:4a:c1:e8:f3:75:c0:29:9f:b6:6e:9a:7a:
4e:54:52:07:d5:15:2d:c2:87:5c:09:d5:77:14:57:a7:70:47:
81:d9:8a:b9:6a:20:3b:d2:a2:cd:d3:37:20:dd:1c:e9:8a:7f:
dd:67:f4:34:b8:29:66:1d:d0:fa:74:e0:44:0f:e0:20:9d:28:
c2:8b:bf:a9:b7:30:18:92:6f:6e:48:a9:db:67:a3:a5:7c:87:
0f:2e:5a:7f
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQi+/C0787qEVl9magaW94PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5MGNjNGQwYWQ1ZGFmYzI3YWE0ZTM0MmZhODBlMzQ4MTRl
ODQ1YzMwHhcNMjUwMTAxMTc0ODQzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkN2NlY2RlMGYwNzk5NGRjZDg5ZTQ4NTVjOGFjNTM4MDZkYWU3ZDM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0wOWGLF84O3m78sEbH+Pga4m+mck
cGkI0Ad26sxIM492cWTOjpGnpeKLAdKOuWaX1k8rCP6mbDedATBeouTjaU+TOxCE
rU8rDapPZEM3VdL7/An7dnWmWKjxfTXu4toUSEW8JpbEqapkvLRiaSsNAMIU/WQA
PZhpEVi8uiqYiMbSDb/VzX8wYtYqWOnLxSD5Tvoc7z5G2aSZZNc2nA7QGUMLYkGM
eOt+rzacF4zhOCo2gMTD7Vg+ZLcvjwrhichR6D7YME/izYWJWCIYa4gF/kkidLKA
c7wi8t2IXNv/CSPLt/GsPJ9122k31EETBJEU7PTYC0akR1oIK2FHrKfonwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFNfOzeDweZTc2J5IVcisU4Btrn00MB8GA1UdIwQY
MBaAFCkMxNCtXa/CeqTjQvqA40gU6EXDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1F6RTBLMWRyOEo2cE9OQy1vRGpTQlRvUmNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS85MjM1MmYtNDA1MS00NTBlLWIzYTYt
MmUwMDc4Y2VlMTgyLzEvMTg3TjRQQjVsTnpZbmtoVnlLeFRnRzJ1ZlRRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS85MjM1MmYtNDA1MS00NTBlLWIzYTYtMmUwMDc4Y2VlMTgy
LzEvS1F6RTBLMWRyOEo2cE9OQy1vRGpTQlRvUmNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBW+OKAwQB
2Q1oAwQA2Q1vMA0GCSqGSIb3DQEBCwUAA4IBAQCG+GRt81cBj16asuHaSDkx+Pnb
ey6DMQQIadxMKZon7vL0vdyxuaeah9rM8zRegeiAC3q3ONVXWWyU6NC2fvDSMJoP
4LXqfCg3TvZbpycrnx+CKoWdn57Hii/pun8pe57gjPn+lfjbh3IErn0rmFAgpJzJ
T0SsiOIBBAFbLA5yIKQawf7kTs+7Tlr+GH0MEZw5WPqnmYTHaDq65Il5ocMPUf0Y
hmGoYSpKwejzdcApn7ZumnpOVFIH1RUtwodcCdV3FFencEeB2Yq5aiA70qLN0zcg
3Rzpin/dZ/Q0uClmHdD6dOBED+AgnSjCi7+ptzAYkm9uSKnbZ6OlfIcPLlp/
-----END CERTIFICATE-----
Generated at Wed Apr 16 22:14:08 2025 by rpki-client