Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/u-9y-LM7GouEYwc1w_OBFzaWlkU.roa
File: u-9y-LM7GouEYwc1w_OBFzaWlkU.roa (raw, json)
Hash identifier: TFxIXc3wdG9by6im/gP7SNpYZHKPr5Ng6frLoi+SwRo=
Subject key identifier: BB:EF:72:F8:B3:3B:1A:8B:84:63:07:35:C3:F3:81:17:36:96:96:45
Certificate issuer: /CN=0b5f8c9447d614b86182763d9333250e2d9412e2
Certificate serial: 01942747A43999FA1BB2C7DC04D04B8335AD
Authority key identifier: 0B:5F:8C:94:47:D6:14:B8:61:82:76:3D:93:33:25:0E:2D:94:12:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1-MlEfWFLhhgnY9kzMlDi2UEuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/u-9y-LM7GouEYwc1w_OBFzaWlkU.roa
Signing time: Thu 02 Jan 2025 13:49:54 +0000
ROA not before: Thu 02 Jan 2025 13:49:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5650
IP address blocks: 91.231.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/C1-MlEfWFLhhgnY9kzMlDi2UEuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/C1-MlEfWFLhhgnY9kzMlDi2UEuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/C1-MlEfWFLhhgnY9kzMlDi2UEuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 01:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:a4:39:99:fa:1b:b2:c7:dc:04:d0:4b:83:35:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b5f8c9447d614b86182763d9333250e2d9412e2
Validity
Not Before: Jan 2 13:49:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bbef72f8b33b1a8b84630735c3f3811736969645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:78:b2:ee:b8:3f:ca:3a:06:46:b0:30:41:df:
b2:96:c5:35:3f:0c:ae:b0:89:cb:87:5b:c2:b6:24:
34:cc:0e:14:5c:e3:08:7a:c8:98:86:c3:58:3d:ac:
c0:b7:53:66:d7:6f:09:cb:0a:e0:05:02:e5:03:02:
69:fa:4d:76:50:16:ed:40:ad:47:66:ef:1e:74:37:
84:27:6f:42:9e:ab:25:94:7e:a4:54:0a:75:bd:b4:
75:1d:36:a8:64:12:51:98:ef:31:4e:ad:eb:28:f7:
1e:61:8c:03:7f:ed:57:7b:43:bc:7b:b5:27:9f:48:
d0:c0:8b:22:fe:5c:ba:9c:be:b9:5c:0d:b4:c3:e9:
e0:5b:1b:4d:51:55:8e:e0:c5:46:aa:49:41:f0:ec:
a1:25:22:2e:4d:16:3c:b1:e1:27:43:97:32:90:20:
b2:97:a8:eb:b3:e5:d4:98:58:5e:a4:e2:ac:d7:aa:
ca:93:ac:ef:bc:c7:e4:b0:18:71:bd:2a:51:50:5a:
7c:f2:64:14:7f:e0:cf:e5:19:83:25:23:6f:c2:61:
b5:7a:a7:96:ca:c6:a3:03:a2:9a:d7:2a:2c:0c:82:
c4:5a:a5:8d:ff:35:f3:95:57:c3:4a:df:1f:82:84:
88:73:23:2b:7e:68:3a:cf:58:d8:05:8d:90:92:24:
80:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:EF:72:F8:B3:3B:1A:8B:84:63:07:35:C3:F3:81:17:36:96:96:45
X509v3 Authority Key Identifier:
keyid:0B:5F:8C:94:47:D6:14:B8:61:82:76:3D:93:33:25:0E:2D:94:12:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1-MlEfWFLhhgnY9kzMlDi2UEuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/u-9y-LM7GouEYwc1w_OBFzaWlkU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/C1-MlEfWFLhhgnY9kzMlDi2UEuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.231.126.0/24
Signature Algorithm: sha256WithRSAEncryption
68:de:3c:b6:de:4f:c1:db:8a:21:cc:5c:4d:a3:5c:62:a3:ab:
2f:a0:94:a3:0c:9b:65:cd:33:d3:ca:bd:38:d6:8c:4a:f6:66:
e7:7b:d2:7f:3a:32:f0:ca:23:1b:1f:68:f2:4f:ef:a6:87:c9:
ab:31:9a:7a:c8:fd:1e:6c:b5:75:80:c3:c4:b9:6b:0a:ba:1b:
a8:80:c0:dc:cb:77:8f:89:d2:3b:a9:e4:02:08:9b:f7:e3:04:
63:cf:74:12:01:f0:96:01:d2:dd:09:99:0b:b0:3e:28:84:de:
85:3a:a0:cc:b6:5a:3e:ec:eb:5c:cc:d8:0b:3e:8b:e8:33:28:
79:a6:75:cd:e2:a5:f3:3a:87:74:54:22:5f:8b:85:a9:59:ab:
99:ac:b4:ab:20:d3:74:ed:14:62:4a:11:12:67:c0:15:98:77:
eb:0a:7e:aa:f0:b9:ab:1d:85:42:88:3f:35:57:c5:86:ac:cd:
b0:83:cc:d7:48:17:72:75:76:e2:b6:79:1b:dd:82:cb:df:56:
0c:84:b9:df:77:c2:8d:3c:77:d2:6d:7f:ee:35:b5:97:41:7c:
3c:50:fe:5b:02:1a:97:07:3d:5b:2b:4a:3c:6f:3d:f1:72:ed:
1d:68:28:8e:f2:9c:3a:38:bd:78:36:91:f2:52:58:1c:ae:bd:
74:86:cd:81
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnR6Q5mfobssfcBNBLgzWtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNWY4Yzk0NDdkNjE0Yjg2MTgyNzYzZDkzMzMyNTBlMmQ5
NDEyZTIwHhcNMjUwMTAyMTM0OTU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYmVmNzJmOGIzM2IxYThiODQ2MzA3MzVjM2YzODExNzM2OTY5NjQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXiy7rg/yjoGRrAwQd+ylsU1Pwyu
sInLh1vCtiQ0zA4UXOMIesiYhsNYPazAt1Nm128JywrgBQLlAwJp+k12UBbtQK1H
Zu8edDeEJ29CnqsllH6kVAp1vbR1HTaoZBJRmO8xTq3rKPceYYwDf+1Xe0O8e7Un
n0jQwIsi/ly6nL65XA20w+ngWxtNUVWO4MVGqklB8OyhJSIuTRY8seEnQ5cykCCy
l6jrs+XUmFhepOKs16rKk6zvvMfksBhxvSpRUFp88mQUf+DP5RmDJSNvwmG1eqeW
ysajA6Ka1yosDILEWqWN/zXzlVfDSt8fgoSIcyMrfmg6z1jYBY2QkiSAYQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLvvcvizOxqLhGMHNcPzgRc2lpZFMB8GA1UdIwQY
MBaAFAtfjJRH1hS4YYJ2PZMzJQ4tlBLiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzEtTWxFZldGTGhoZ25ZOWt6TWxEaTJVRXVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9mN2Y2YzAtMDlkMC00OTJjLTkyZTYt
OGE5NWU2Mzc3MzMyLzEvdS05eS1MTTdHb3VFWXdjMXdfT0JGemFXbGtVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy9mN2Y2YzAtMDlkMC00OTJjLTkyZTYtOGE5NWU2Mzc3MzMy
LzEvQzEtTWxFZldGTGhoZ25ZOWt6TWxEaTJVRXVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+d+MA0G
CSqGSIb3DQEBCwUAA4IBAQBo3jy23k/B24ohzFxNo1xio6svoJSjDJtlzTPTyr04
1oxK9mbne9J/OjLwyiMbH2jyT++mh8mrMZp6yP0ebLV1gMPEuWsKuhuogMDcy3eP
idI7qeQCCJv34wRjz3QSAfCWAdLdCZkLsD4ohN6FOqDMtlo+7OtczNgLPovoMyh5
pnXN4qXzOod0VCJfi4WpWauZrLSrINN07RRiShESZ8AVmHfrCn6q8LmrHYVCiD81
V8WGrM2wg8zXSBdydXbitnkb3YLL31YMhLnfd8KNPHfSbX/uNbWXQXw8UP5bAhqX
Bz1bK0o8bz3xcu0daCiO8pw6OL14NpHyUlgcrr10hs2B
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:04:07 2025 by rpki-client