Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/7b67fb-c8ba-462c-b064-7c65aec6f2bd/1/0giOT2-cspinjb0AYnQ0xR7oe3s.roa
File: 0giOT2-cspinjb0AYnQ0xR7oe3s.roa (raw, json)
Hash identifier: JsKfvRyfvFNiFnymkkC31pksnK2WhZYhTKOkR+nS9d4=
Subject key identifier: D2:08:8E:4F:6F:9C:B2:98:A7:8D:BD:00:62:74:34:C5:1E:E8:7B:7B
Certificate issuer: /CN=4aa5e35c05c2ab54be758b6c867186cee159bd63
Certificate serial: 019425FDB5522686245767FC3BC70E679EB6
Authority key identifier: 4A:A5:E3:5C:05:C2:AB:54:BE:75:8B:6C:86:71:86:CE:E1:59:BD:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SqXjXAXCq1S-dYtshnGGzuFZvWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/7b67fb-c8ba-462c-b064-7c65aec6f2bd/1/0giOT2-cspinjb0AYnQ0xR7oe3s.roa
Signing time: Thu 02 Jan 2025 07:49:31 +0000
ROA not before: Thu 02 Jan 2025 07:49:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60973
IP address blocks: 91.223.238.0/24 maxlen: 24
91.237.33.0/24 maxlen: 24
2001:67c:1124::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/7b67fb-c8ba-462c-b064-7c65aec6f2bd/1/SqXjXAXCq1S-dYtshnGGzuFZvWM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/7b67fb-c8ba-462c-b064-7c65aec6f2bd/1/SqXjXAXCq1S-dYtshnGGzuFZvWM.mft
rsync://rpki.ripe.net/repository/DEFAULT/SqXjXAXCq1S-dYtshnGGzuFZvWM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:b5:52:26:86:24:57:67:fc:3b:c7:0e:67:9e:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aa5e35c05c2ab54be758b6c867186cee159bd63
Validity
Not Before: Jan 2 07:49:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d2088e4f6f9cb298a78dbd00627434c51ee87b7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:08:f8:3b:6e:bf:3a:dc:40:16:ce:3a:06:c0:
f6:c8:32:ff:a6:a7:22:e0:88:32:ba:07:28:cb:f2:
d6:40:55:16:0a:d5:44:ef:eb:17:b9:60:19:28:e3:
2f:a2:a1:bc:3c:44:b4:a9:51:3c:a2:79:04:28:24:
9c:93:e9:57:1a:24:d3:9f:4a:a4:fc:c0:fc:2a:44:
4f:81:38:db:6d:a3:29:bb:d6:5b:5a:81:14:2c:ee:
14:d7:68:3e:9a:36:08:92:10:f1:ae:79:60:20:ff:
91:be:f6:13:c5:a4:06:0f:09:83:07:f0:ff:b8:45:
11:f7:6c:2b:4f:ea:32:63:42:ec:fb:67:0b:e0:dc:
75:e8:b1:af:6c:0c:38:f7:37:c6:ee:96:2c:5d:8d:
d6:33:a8:d8:af:c2:d5:bc:a9:83:b8:5d:a1:a8:5e:
da:e9:4e:48:2d:36:37:f1:cd:0a:21:25:0c:d9:43:
74:67:5a:47:ab:26:f0:e4:08:7b:7d:c9:a2:40:7e:
1c:a3:f1:75:1e:01:fa:ea:d4:ef:7b:e5:ff:44:8c:
95:2e:7f:27:88:6d:c9:19:68:2c:1f:5a:1f:0c:5f:
2a:8e:1b:0a:f8:5c:93:86:27:6d:ab:1a:d9:40:4e:
91:d7:47:01:ff:e5:d3:7f:4f:93:3e:32:24:6a:6e:
4c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:08:8E:4F:6F:9C:B2:98:A7:8D:BD:00:62:74:34:C5:1E:E8:7B:7B
X509v3 Authority Key Identifier:
keyid:4A:A5:E3:5C:05:C2:AB:54:BE:75:8B:6C:86:71:86:CE:E1:59:BD:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SqXjXAXCq1S-dYtshnGGzuFZvWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7b67fb-c8ba-462c-b064-7c65aec6f2bd/1/0giOT2-cspinjb0AYnQ0xR7oe3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7b67fb-c8ba-462c-b064-7c65aec6f2bd/1/SqXjXAXCq1S-dYtshnGGzuFZvWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.238.0/24
91.237.33.0/24
IPv6:
2001:67c:1124::/48
Signature Algorithm: sha256WithRSAEncryption
98:fe:cf:31:18:0d:25:d8:34:2b:ff:c7:8e:c2:4d:80:9d:7f:
7d:58:a1:05:0d:ee:a7:90:03:67:47:21:d9:16:9f:c2:6f:ab:
89:ed:cb:2b:73:e4:c9:5f:05:7c:0d:f0:61:6f:12:de:ae:b9:
24:ad:73:a0:3a:5a:11:bd:b6:38:57:6b:7a:d1:18:a0:b1:d2:
69:d9:b0:99:3c:d3:b9:d3:dc:80:3f:6e:dc:ab:f4:76:f6:c4:
dc:14:c7:72:f6:77:a9:4e:94:17:46:aa:ee:67:db:8d:00:7f:
d2:45:8e:4f:3a:6d:de:2f:97:da:fa:6b:07:29:e8:27:cc:82:
f4:84:ee:b7:b4:66:a9:33:e5:b7:ef:50:f4:87:8d:6a:31:7f:
03:6d:37:93:cc:90:a7:ed:39:85:b3:a9:6c:af:b3:04:40:a2:
e9:cd:2e:af:78:6b:e4:2c:f4:c0:7d:71:14:35:68:ec:18:01:
55:60:ab:ee:78:14:1c:a5:02:84:0c:65:d0:81:b5:69:82:7d:
6e:54:be:12:9c:39:9a:c7:90:10:f8:61:d0:1c:d5:29:9f:e1:
6a:92:b4:52:70:80:77:9e:eb:38:79:1b:f8:b9:c7:8a:56:8e:
62:82:92:2a:ef:e2:ec:3e:ed:03:62:2a:3d:ea:c6:f9:9c:1e:
3f:3d:38:17
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAZQl/bVSJoYkV2f8O8cOZ562MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhYTVlMzVjMDVjMmFiNTRiZTc1OGI2Yzg2NzE4NmNlZTE1
OWJkNjMwHhcNMjUwMTAyMDc0OTMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMjA4OGU0ZjZmOWNiMjk4YTc4ZGJkMDA2Mjc0MzRjNTFlZTg3YjdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugj4O26/OtxAFs46BsD2yDL/pqci
4Igyugcoy/LWQFUWCtVE7+sXuWAZKOMvoqG8PES0qVE8onkEKCSck+lXGiTTn0qk
/MD8KkRPgTjbbaMpu9ZbWoEULO4U12g+mjYIkhDxrnlgIP+RvvYTxaQGDwmDB/D/
uEUR92wrT+oyY0Ls+2cL4Nx16LGvbAw49zfG7pYsXY3WM6jYr8LVvKmDuF2hqF7a
6U5ILTY38c0KISUM2UN0Z1pHqybw5Ah7fcmiQH4co/F1HgH66tTve+X/RIyVLn8n
iG3JGWgsH1ofDF8qjhsK+FyThidtqxrZQE6R10cB/+XTf0+TPjIkam5MUwIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFNIIjk9vnLKYp429AGJ0NMUe6Ht7MB8GA1UdIwQY
MBaAFEql41wFwqtUvnWLbIZxhs7hWb1jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3FYalhBWENxMVMtZFl0c2huR0d6dUZadldNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy83YjY3ZmItYzhiYS00NjJjLWIwNjQt
N2M2NWFlYzZmMmJkLzEvMGdpT1QyLWNzcGluamIwQVluUTB4UjdvZTNzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy83YjY3ZmItYzhiYS00NjJjLWIwNjQtN2M2NWFlYzZmMmJk
LzEvU3FYalhBWENxMVMtZFl0c2huR0d6dUZadldNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAW9/uAwQA
W+0hMA8EAgACMAkDBwAgAQZ8ESQwDQYJKoZIhvcNAQELBQADggEBAJj+zzEYDSXY
NCv/x47CTYCdf31YoQUN7qeQA2dHIdkWn8Jvq4ntyytz5MlfBXwN8GFvEt6uuSSt
c6A6WhG9tjhXa3rRGKCx0mnZsJk807nT3IA/btyr9Hb2xNwUx3L2d6lOlBdGqu5n
240Af9JFjk86bd4vl9r6awcp6CfMgvSE7re0Zqkz5bfvUPSHjWoxfwNtN5PMkKft
OYWzqWyvswRAounNLq94a+Qs9MB9cRQ1aOwYAVVgq+54FBylAoQMZdCBtWmCfW5U
vhKcOZrHkBD4YdAc1Smf4WqStFJwgHee6zh5G/i5x4pWjmKCkirv4uw+7QNiKj3q
xvmcHj89OBc=
-----END CERTIFICATE-----
Generated at Sun Feb 2 10:06:25 2025 by rpki-client