Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/25daa4-f7fa-40fa-9250-996326ca7dd6/1/mbYI3-hNPDwmapQzW6ANq2gKpA4.roa
File: mbYI3-hNPDwmapQzW6ANq2gKpA4.roa (raw, json)
Hash identifier: lOLT23JUefetUmb19vAU2x5VH7+ec+ZaMiJuuVxV7Oc=
Subject key identifier: 99:B6:08:DF:E8:4D:3C:3C:26:6A:94:33:5B:A0:0D:AB:68:0A:A4:0E
Certificate issuer: /CN=46f3f9b41f45a0f97b2a6a811ca67a0402a0477f
Certificate serial: 01942068225D7621E316E1F7A95212EFA036
Authority key identifier: 46:F3:F9:B4:1F:45:A0:F9:7B:2A:6A:81:1C:A6:7A:04:02:A0:47:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RvP5tB9FoPl7KmqBHKZ6BAKgR38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/25daa4-f7fa-40fa-9250-996326ca7dd6/1/mbYI3-hNPDwmapQzW6ANq2gKpA4.roa
Signing time: Wed 01 Jan 2025 05:48:02 +0000
ROA not before: Wed 01 Jan 2025 05:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43663
IP address blocks: 91.198.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/25daa4-f7fa-40fa-9250-996326ca7dd6/1/RvP5tB9FoPl7KmqBHKZ6BAKgR38.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/25daa4-f7fa-40fa-9250-996326ca7dd6/1/RvP5tB9FoPl7KmqBHKZ6BAKgR38.mft
rsync://rpki.ripe.net/repository/DEFAULT/RvP5tB9FoPl7KmqBHKZ6BAKgR38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:22:5d:76:21:e3:16:e1:f7:a9:52:12:ef:a0:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46f3f9b41f45a0f97b2a6a811ca67a0402a0477f
Validity
Not Before: Jan 1 05:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=99b608dfe84d3c3c266a94335ba00dab680aa40e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ec:d4:dc:ee:d3:e8:bb:c4:c8:8a:98:33:4f:
12:c8:5a:8e:46:cb:0d:c7:22:42:e1:2b:5a:16:45:
1c:51:58:5a:bb:d7:2b:49:58:64:03:09:7c:7f:40:
4b:10:37:d7:34:d8:ad:26:54:48:a9:61:f9:50:46:
2a:7f:41:17:2d:eb:f1:2c:14:95:86:2a:05:4f:53:
6a:ec:a5:13:78:0e:32:45:5c:8b:a8:75:f7:53:41:
68:8d:bb:15:c1:cc:29:84:16:cd:f9:94:96:71:c2:
4c:e2:20:78:c4:ce:27:d2:2e:71:e5:c0:f1:5d:21:
49:63:38:61:06:c7:41:64:ae:82:be:48:d2:68:c3:
dd:d8:a0:05:e4:04:ba:28:c8:62:bf:4c:0e:05:a2:
17:33:3e:54:18:98:4e:ea:27:ee:9b:42:8f:38:e2:
c0:d5:8a:47:52:e6:b0:00:8e:8f:4b:90:f4:f2:e8:
e6:c0:ba:40:67:dd:f2:e9:15:45:67:fb:ba:00:88:
9f:0f:4f:dd:77:5e:21:2e:d4:42:db:e2:ed:62:0a:
69:12:00:77:49:aa:dd:8d:22:5c:37:e7:b7:dc:15:
6b:1d:80:61:9e:9e:af:61:07:0c:8e:34:0e:a4:bc:
ac:ed:fd:8b:1c:73:44:d8:0b:7b:d8:64:67:51:84:
0a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:B6:08:DF:E8:4D:3C:3C:26:6A:94:33:5B:A0:0D:AB:68:0A:A4:0E
X509v3 Authority Key Identifier:
keyid:46:F3:F9:B4:1F:45:A0:F9:7B:2A:6A:81:1C:A6:7A:04:02:A0:47:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RvP5tB9FoPl7KmqBHKZ6BAKgR38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/25daa4-f7fa-40fa-9250-996326ca7dd6/1/mbYI3-hNPDwmapQzW6ANq2gKpA4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/25daa4-f7fa-40fa-9250-996326ca7dd6/1/RvP5tB9FoPl7KmqBHKZ6BAKgR38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.96.0/24
Signature Algorithm: sha256WithRSAEncryption
56:16:e2:7c:2a:ec:7f:fb:07:c8:c2:a1:8a:24:4b:4c:f8:60:
93:52:fa:86:b0:62:53:e0:12:e5:39:7c:bd:30:c6:aa:83:7c:
f9:50:93:7b:47:a3:32:3d:04:c4:61:25:d6:14:82:68:0a:2a:
b1:27:60:ac:43:69:fa:f9:f1:64:7d:3f:eb:95:ed:cc:a1:f2:
a2:9c:fe:88:8b:1f:ae:51:b8:52:18:2a:0d:4b:85:56:47:61:
d7:f4:91:e7:5a:e7:96:1a:7a:f7:f2:35:58:ea:86:49:cc:f2:
07:d0:77:03:4b:5d:24:57:c9:14:27:64:c2:b3:d0:dc:c2:77:
25:56:29:db:f7:bb:28:59:e1:52:c1:fe:2f:fb:da:6c:bd:41:
12:5b:f7:e4:b5:da:81:ee:89:ed:58:19:53:ae:b9:6d:67:13:
5c:e0:97:3a:c9:da:61:21:e8:a0:74:95:db:7c:c3:22:00:dd:
0e:e0:11:01:15:71:ed:74:da:20:58:29:ee:08:6b:bf:63:05:
45:eb:4f:0b:35:ca:5a:c3:c7:55:f0:ef:a4:27:99:64:52:79:
3d:3b:6e:eb:87:0e:34:7b:07:63:1c:f7:c8:9a:07:2d:b8:cd:
7b:b3:77:da:d6:ca:a9:de:53:1a:04:da:4e:ff:4b:de:6c:0b:
c8:c5:53:07
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQgaCJddiHjFuH3qVIS76A2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2ZjNmOWI0MWY0NWEwZjk3YjJhNmE4MTFjYTY3YTA0MDJh
MDQ3N2YwHhcNMjUwMTAxMDU0ODAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OWI2MDhkZmU4NGQzYzNjMjY2YTk0MzM1YmEwMGRhYjY4MGFhNDBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuzU3O7T6LvEyIqYM08SyFqORssN
xyJC4StaFkUcUVhau9crSVhkAwl8f0BLEDfXNNitJlRIqWH5UEYqf0EXLevxLBSV
hioFT1Nq7KUTeA4yRVyLqHX3U0FojbsVwcwphBbN+ZSWccJM4iB4xM4n0i5x5cDx
XSFJYzhhBsdBZK6CvkjSaMPd2KAF5AS6KMhiv0wOBaIXMz5UGJhO6ifum0KPOOLA
1YpHUuawAI6PS5D08ujmwLpAZ93y6RVFZ/u6AIifD0/dd14hLtRC2+LtYgppEgB3
SardjSJcN+e33BVrHYBhnp6vYQcMjjQOpLys7f2LHHNE2At72GRnUYQKcQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJm2CN/oTTw8JmqUM1ugDatoCqQOMB8GA1UdIwQY
MBaAFEbz+bQfRaD5eypqgRymegQCoEd/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnZQNXRCOUZvUGw3S21xQkhLWjZCQUtnUjM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8yNWRhYTQtZjdmYS00MGZhLTkyNTAt
OTk2MzI2Y2E3ZGQ2LzEvbWJZSTMtaE5QRHdtYXBRelc2QU5xMmdLcEE0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS8yNWRhYTQtZjdmYS00MGZhLTkyNTAtOTk2MzI2Y2E3ZGQ2
LzEvUnZQNXRCOUZvUGw3S21xQkhLWjZCQUtnUjM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8ZgMA0G
CSqGSIb3DQEBCwUAA4IBAQBWFuJ8Kux/+wfIwqGKJEtM+GCTUvqGsGJT4BLlOXy9
MMaqg3z5UJN7R6MyPQTEYSXWFIJoCiqxJ2CsQ2n6+fFkfT/rle3MofKinP6Iix+u
UbhSGCoNS4VWR2HX9JHnWueWGnr38jVY6oZJzPIH0HcDS10kV8kUJ2TCs9Dcwncl
Vinb97soWeFSwf4v+9psvUESW/fktdqB7ontWBlTrrltZxNc4Jc6ydphIeigdJXb
fMMiAN0O4BEBFXHtdNogWCnuCGu/YwVF608LNcpaw8dV8O+kJ5lkUnk9O27rhw40
ewdjHPfImgctuM17s3fa1sqp3lMaBNpO/0vebAvIxVMH
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:54:58 2025 by rpki-client