Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/Ka96-7xmUJHL1P83ddZSPTnIito.roa
File: Ka96-7xmUJHL1P83ddZSPTnIito.roa (raw, json)
Hash identifier: A3j4nr1SyHQHtFJaNRlAwCyTXlwC3Gmo5Vos/lZDRjc=
Subject key identifier: 29:AF:7A:FB:BC:66:50:91:CB:D4:FF:37:75:D6:52:3D:39:C8:8A:DA
Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Certificate serial: 019420D63092AB007D0749305E88E0AA0CFD
Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/Ka96-7xmUJHL1P83ddZSPTnIito.roa
Signing time: Wed 01 Jan 2025 07:48:15 +0000
ROA not before: Wed 01 Jan 2025 07:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212442
IP address blocks: 91.236.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 12:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:30:92:ab:00:7d:07:49:30:5e:88:e0:aa:0c:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Validity
Not Before: Jan 1 07:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=29af7afbbc665091cbd4ff3775d6523d39c88ada
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:98:0a:06:6b:8c:17:0a:78:1a:bd:87:f5:0b:
08:1b:ad:e0:80:b9:5c:f9:66:72:49:8f:3e:88:34:
ce:45:31:5e:97:43:58:d9:fa:ad:8b:ac:90:b2:51:
91:9f:31:42:b3:fd:c6:f5:3c:61:41:8e:52:bd:8d:
95:c5:30:17:6d:c9:5c:6f:00:37:a0:35:4a:2e:0b:
54:46:01:ad:1e:16:83:b0:ab:eb:6e:ff:56:4e:93:
b9:ed:c7:a8:bf:d0:0c:92:c1:bc:72:89:1c:3a:0b:
53:31:4c:3b:47:c0:e8:46:b7:2e:33:2b:12:1e:c4:
4e:32:a2:f3:db:ed:c6:ea:90:24:51:c5:68:61:6e:
a7:f9:e2:60:cb:a8:38:4d:f1:1e:51:13:f5:f7:93:
a9:4a:94:ac:b8:2a:f1:22:41:1e:76:24:41:ba:fa:
f4:3f:bb:bd:7a:9e:bb:ea:c5:99:c3:f5:fa:94:b0:
00:ba:95:ef:2c:66:30:80:89:6f:50:20:be:42:94:
02:d8:cf:72:92:20:6b:82:1a:8c:e0:cb:3d:e8:24:
0a:6c:67:45:5b:64:75:94:e6:73:a2:1c:32:03:b7:
61:8f:a6:8f:4b:6e:b9:c0:38:11:82:40:9d:e8:81:
1d:10:3f:d1:0a:bb:09:66:d9:1f:cf:26:5a:81:9e:
56:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:AF:7A:FB:BC:66:50:91:CB:D4:FF:37:75:D6:52:3D:39:C8:8A:DA
X509v3 Authority Key Identifier:
keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/Ka96-7xmUJHL1P83ddZSPTnIito.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.74.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:d4:8a:78:55:09:ee:f0:15:bf:a2:06:89:2a:c9:e1:db:a6:
9a:c8:58:5b:48:8c:33:6e:ff:f6:23:22:95:46:20:1b:ff:4c:
ba:de:a9:e4:64:bb:7a:85:a1:56:d7:be:e1:c3:d1:03:80:ea:
dd:b8:8e:a8:0b:c8:de:e9:84:8a:d2:31:90:33:39:93:32:a7:
24:db:b0:07:4b:92:38:3e:7d:3f:1c:54:a3:4e:aa:22:f6:b2:
07:ee:b8:31:e3:57:d3:8a:cf:ab:58:56:0e:6a:4a:10:b5:0c:
63:dd:7d:e8:35:3a:98:26:55:91:7f:98:19:1c:2b:7e:99:7d:
c4:67:a7:16:b8:4b:ee:92:7c:8c:31:53:99:59:95:c2:d5:51:
c9:a1:23:02:aa:f0:85:42:29:34:0a:6b:2b:d7:e6:a6:e1:10:
c3:fd:6d:e8:f4:21:1b:55:0c:2b:0b:e3:28:84:1a:2e:f2:bb:
97:59:b5:0a:33:49:e7:24:8c:27:20:76:d7:b8:2b:b3:9c:06:
de:a1:e9:4b:e9:c3:f3:62:e6:f8:01:b5:0f:18:5b:5b:f3:d4:
3c:bf:9e:94:56:b0:c9:3c:65:7c:68:2f:51:ad:bd:b0:ef:c5:
7b:fa:1f:c9:4b:cd:e9:32:dd:21:de:ac:db:cd:2e:a6:0e:ef:
e9:10:4f:5d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQg1jCSqwB9B0kwXojgqgz9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NmQ5ZDUwYjNiODlkNTFjOGFhMjQ5M2U3ZWY0NzAxZDYy
NTFkYWQwHhcNMjUwMTAxMDc0ODE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyOWFmN2FmYmJjNjY1MDkxY2JkNGZmMzc3NWQ2NTIzZDM5Yzg4YWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJgKBmuMFwp4Gr2H9QsIG63ggLlc
+WZySY8+iDTORTFel0NY2fqti6yQslGRnzFCs/3G9TxhQY5SvY2VxTAXbclcbwA3
oDVKLgtURgGtHhaDsKvrbv9WTpO57ceov9AMksG8cokcOgtTMUw7R8DoRrcuMysS
HsROMqLz2+3G6pAkUcVoYW6n+eJgy6g4TfEeURP195OpSpSsuCrxIkEediRBuvr0
P7u9ep676sWZw/X6lLAAupXvLGYwgIlvUCC+QpQC2M9ykiBrghqM4Ms96CQKbGdF
W2R1lOZzohwyA7dhj6aPS265wDgRgkCd6IEdED/RCrsJZtkfzyZagZ5WpQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCmvevu8ZlCRy9T/N3XWUj05yIraMB8GA1UdIwQY
MBaAFMZtnVCzuJ1RyKokk+fvRwHWJR2tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMt
YjdjNTc4Yjc0ZTM1LzEvS2E5Ni03eG1VSkhMMVA4M2RkWlNQVG5JaXRvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMtYjdjNTc4Yjc0ZTM1
LzEveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+xKMA0G
CSqGSIb3DQEBCwUAA4IBAQCz1Ip4VQnu8BW/ogaJKsnh26aayFhbSIwzbv/2IyKV
RiAb/0y63qnkZLt6haFW177hw9EDgOrduI6oC8je6YSK0jGQMzmTMqck27AHS5I4
Pn0/HFSjTqoi9rIH7rgx41fTis+rWFYOakoQtQxj3X3oNTqYJlWRf5gZHCt+mX3E
Z6cWuEvuknyMMVOZWZXC1VHJoSMCqvCFQik0Cmsr1+am4RDD/W3o9CEbVQwrC+Mo
hBou8ruXWbUKM0nnJIwnIHbXuCuznAbeoelL6cPzYub4AbUPGFtb89Q8v56UVrDJ
PGV8aC9Rrb2w78V7+h/JS83pMt0h3qzbzS6mDu/pEE9d
-----END CERTIFICATE-----
Generated at Sat Apr 5 18:07:50 2025 by rpki-client