Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/q-Co2Fge0yCMSGAUZ61yCAp-agg.roa
File: q-Co2Fge0yCMSGAUZ61yCAp-agg.roa (raw, json)
Hash identifier: Kkd9tz/x2Ysb/9fgNXffDi1aqzj4oQgrCbFcbQdhMNI=
Subject key identifier: AB:E0:A8:D8:58:1E:D3:20:8C:48:60:14:67:AD:72:08:0A:7E:6A:08
Certificate issuer: /CN=f0f3f049f3f28451e3e1bf68b974ffdbc8c414c7
Certificate serial: 0194266B397C5F4D2AE1FED4970BD39FBCA5
Authority key identifier: F0:F3:F0:49:F3:F2:84:51:E3:E1:BF:68:B9:74:FF:DB:C8:C4:14:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8PPwSfPyhFHj4b9ouXT_28jEFMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/q-Co2Fge0yCMSGAUZ61yCAp-agg.roa
Signing time: Thu 02 Jan 2025 09:49:08 +0000
ROA not before: Thu 02 Jan 2025 09:49:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197052
IP address blocks: 91.216.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8PPwSfPyhFHj4b9ouXT_28jEFMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 06:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:39:7c:5f:4d:2a:e1:fe:d4:97:0b:d3:9f:bc:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0f3f049f3f28451e3e1bf68b974ffdbc8c414c7
Validity
Not Before: Jan 2 09:49:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=abe0a8d8581ed3208c48601467ad72080a7e6a08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ee:47:af:ac:3b:03:25:9f:f6:0c:cf:60:84:
71:7f:89:aa:2b:5f:30:0b:98:5f:bf:28:ef:f9:a9:
80:60:67:09:d3:bd:2d:d3:c3:ef:67:8d:ad:f7:7d:
f6:82:66:a0:68:73:75:0c:6d:d2:4b:a4:5c:07:e8:
fc:ec:b1:c8:c2:65:94:ff:82:6f:6a:b1:0d:74:3e:
11:ec:9a:91:da:8a:7d:b7:97:4d:6d:34:63:2a:3e:
37:43:fb:bd:0d:6f:10:4a:e8:09:73:17:d8:57:8d:
aa:ac:b2:6e:d9:da:c7:77:32:2e:2a:5d:c5:4e:ae:
32:14:33:1e:7c:33:0d:2d:ea:5c:c6:5b:dd:01:d3:
1b:6e:f4:62:3e:70:39:e2:51:9f:4f:05:cb:f4:d2:
5b:6d:0f:06:e5:6d:57:32:4d:e1:90:dd:be:03:c5:
1d:6b:6e:11:1a:5f:46:83:a5:92:fa:81:b9:76:72:
0f:7a:f3:de:09:83:c3:0d:db:6f:66:9f:e2:09:89:
6d:01:b0:80:df:7e:59:52:7b:6a:ca:f3:65:cf:35:
ae:7c:22:16:5d:83:9d:d2:71:82:4b:20:1b:2a:81:
f4:4d:30:ea:4a:eb:6f:b4:e9:b3:35:ef:d4:10:29:
59:85:86:3c:7e:03:97:23:7c:89:7f:50:d0:8d:4d:
5a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:E0:A8:D8:58:1E:D3:20:8C:48:60:14:67:AD:72:08:0A:7E:6A:08
X509v3 Authority Key Identifier:
keyid:F0:F3:F0:49:F3:F2:84:51:E3:E1:BF:68:B9:74:FF:DB:C8:C4:14:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PPwSfPyhFHj4b9ouXT_28jEFMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/q-Co2Fge0yCMSGAUZ61yCAp-agg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.66.0/24
Signature Algorithm: sha256WithRSAEncryption
71:aa:0b:b9:73:59:84:9c:aa:c6:e6:31:be:f7:00:e8:8b:ef:
b9:81:a5:3c:17:b1:5f:f0:a2:56:86:7e:86:b3:ba:f2:f4:c6:
14:d5:26:ad:13:2b:af:71:12:3a:9b:25:bd:09:d2:9e:2e:92:
2f:01:48:4f:e7:c0:d1:1d:13:1f:f4:a3:dd:1b:a4:3b:6e:74:
35:5b:20:80:be:53:aa:47:0e:58:0b:3d:15:e1:51:6d:5a:b9:
2c:f2:14:6f:05:de:85:0d:22:7d:c5:cd:3d:d7:ae:43:c5:48:
a7:47:86:a8:5a:20:75:d5:f0:38:4c:c6:f7:4f:65:02:dd:9f:
5a:a7:45:b6:9b:31:58:30:bc:a2:b6:c5:bb:4e:06:f4:99:36:
5b:5d:15:1b:4f:a0:32:d3:b9:ee:6d:6a:5d:1f:f7:fd:59:0c:
e1:0a:77:e0:d2:fa:bb:0f:59:f8:f9:c1:0a:e2:68:5d:d6:86:
eb:9e:07:be:35:a6:36:11:8d:b4:8d:a2:6c:f6:e0:c5:d8:59:
b7:7c:32:62:07:31:8a:ba:c2:66:6a:67:d3:4b:30:78:b4:37:
fe:65:19:d1:2d:4e:c4:18:aa:4e:8a:2b:33:49:7d:d4:96:ed:
b3:4c:e1:0c:ca:ed:be:fa:7c:d2:77:63:ce:5c:0e:1c:28:56:
5d:fa:70:1b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQmazl8X00q4f7UlwvTn7ylMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwZjNmMDQ5ZjNmMjg0NTFlM2UxYmY2OGI5NzRmZmRiYzhj
NDE0YzcwHhcNMjUwMTAyMDk0OTA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYmUwYThkODU4MWVkMzIwOGM0ODYwMTQ2N2FkNzIwODBhN2U2YTA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApe5Hr6w7AyWf9gzPYIRxf4mqK18w
C5hfvyjv+amAYGcJ070t08PvZ42t9332gmagaHN1DG3SS6RcB+j87LHIwmWU/4Jv
arENdD4R7JqR2op9t5dNbTRjKj43Q/u9DW8QSugJcxfYV42qrLJu2drHdzIuKl3F
Tq4yFDMefDMNLepcxlvdAdMbbvRiPnA54lGfTwXL9NJbbQ8G5W1XMk3hkN2+A8Ud
a24RGl9Gg6WS+oG5dnIPevPeCYPDDdtvZp/iCYltAbCA335ZUntqyvNlzzWufCIW
XYOd0nGCSyAbKoH0TTDqSutvtOmzNe/UEClZhYY8fgOXI3yJf1DQjU1axwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKvgqNhYHtMgjEhgFGetcggKfmoIMB8GA1UdIwQY
MBaAFPDz8Enz8oRR4+G/aLl0/9vIxBTHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFBQd1NmUHloRkhqNGI5b3VYVF8yOGpFRk1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy85MDhlOTEtMjdhNi00MTRhLTgyZTgt
NWU1MjNiYThjOWQ3LzEvcS1DbzJGZ2UweUNNU0dBVVo2MXlDQXAtYWdnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy85MDhlOTEtMjdhNi00MTRhLTgyZTgtNWU1MjNiYThjOWQ3
LzEvOFBQd1NmUHloRkhqNGI5b3VYVF8yOGpFRk1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9hCMA0G
CSqGSIb3DQEBCwUAA4IBAQBxqgu5c1mEnKrG5jG+9wDoi++5gaU8F7Ff8KJWhn6G
s7ry9MYU1SatEyuvcRI6myW9CdKeLpIvAUhP58DRHRMf9KPdG6Q7bnQ1WyCAvlOq
Rw5YCz0V4VFtWrks8hRvBd6FDSJ9xc09165DxUinR4aoWiB11fA4TMb3T2UC3Z9a
p0W2mzFYMLyitsW7Tgb0mTZbXRUbT6Ay07nubWpdH/f9WQzhCnfg0vq7D1n4+cEK
4mhd1obrnge+NaY2EY20jaJs9uDF2Fm3fDJiBzGKusJmamfTSzB4tDf+ZRnRLU7E
GKpOiiszSX3Ulu2zTOEMyu2++nzSd2POXA4cKFZd+nAb
-----END CERTIFICATE-----
Generated at Fri Feb 21 12:33:06 2025 by rpki-client