Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7729e4-6a6d-4bc5-88e1-66f8b6e16b8a/1/mqack1zg1aDbcOyT4cRxSwy3UDQ.roa
File: mqack1zg1aDbcOyT4cRxSwy3UDQ.roa (raw, json)
Hash identifier: ZwWlDd1N6JTl2qCwygwMAx3Ukou4tkcRR0CWTPfDGaw=
Subject key identifier: 9A:A6:9C:93:5C:E0:D5:A0:DB:70:EC:93:E1:C4:71:4B:0C:B7:50:34
Certificate issuer: /CN=e8d1d15f5911d48d1c59eef374f7b37f71d4ebbf
Certificate serial: 019421B1CF99C8F6F5D2F215AD7E45D57706
Authority key identifier: E8:D1:D1:5F:59:11:D4:8D:1C:59:EE:F3:74:F7:B3:7F:71:D4:EB:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6NHRX1kR1I0cWe7zdPezf3HU678.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7729e4-6a6d-4bc5-88e1-66f8b6e16b8a/1/mqack1zg1aDbcOyT4cRxSwy3UDQ.roa
Signing time: Wed 01 Jan 2025 11:48:08 +0000
ROA not before: Wed 01 Jan 2025 11:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39923
IP address blocks: 91.216.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/7729e4-6a6d-4bc5-88e1-66f8b6e16b8a/1/6NHRX1kR1I0cWe7zdPezf3HU678.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/7729e4-6a6d-4bc5-88e1-66f8b6e16b8a/1/6NHRX1kR1I0cWe7zdPezf3HU678.mft
rsync://rpki.ripe.net/repository/DEFAULT/6NHRX1kR1I0cWe7zdPezf3HU678.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:cf:99:c8:f6:f5:d2:f2:15:ad:7e:45:d5:77:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8d1d15f5911d48d1c59eef374f7b37f71d4ebbf
Validity
Not Before: Jan 1 11:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9aa69c935ce0d5a0db70ec93e1c4714b0cb75034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c3:5f:ec:c1:9f:c5:6c:4d:80:39:80:cd:f5:
00:cb:c6:a0:c1:b1:b1:ee:fa:42:ff:69:de:97:82:
f6:90:b7:0b:f1:63:73:64:2b:1c:8b:65:05:d7:cd:
e6:ba:ad:c3:8a:b0:dd:1d:61:5c:aa:63:e6:d4:f4:
17:92:74:15:dd:88:41:01:5f:2d:38:cb:70:a0:55:
2e:7c:c9:4f:4c:4f:e9:2d:fe:2b:fb:2b:52:7a:6a:
9d:a9:b8:eb:08:e1:ce:64:0b:54:7a:cb:be:c6:81:
10:ee:03:ad:37:92:30:40:c5:4b:5f:7a:ae:06:3f:
a1:46:74:62:14:72:7b:d7:e1:eb:d3:17:01:cf:f0:
ee:ce:ab:c2:1a:8f:86:4b:d2:85:9e:c3:65:16:4f:
f8:3e:f3:47:e9:4e:fb:3d:2a:c9:7a:2c:81:b2:ca:
4c:83:79:1a:1b:d7:ec:68:68:c4:8c:b1:d2:fc:a6:
f0:e2:33:24:db:05:3e:88:c7:f6:88:4a:54:56:9f:
fd:0d:60:f2:da:dd:ea:80:be:2e:3c:9d:77:98:7b:
d9:cb:5f:ac:87:9f:e2:9e:9e:4a:7b:e3:9e:93:59:
88:3d:ec:22:83:6b:2f:42:c9:80:c5:9e:c6:e7:6f:
fa:07:e1:71:6c:ac:d1:dc:77:94:4f:2b:a9:b5:9b:
74:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:A6:9C:93:5C:E0:D5:A0:DB:70:EC:93:E1:C4:71:4B:0C:B7:50:34
X509v3 Authority Key Identifier:
keyid:E8:D1:D1:5F:59:11:D4:8D:1C:59:EE:F3:74:F7:B3:7F:71:D4:EB:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6NHRX1kR1I0cWe7zdPezf3HU678.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7729e4-6a6d-4bc5-88e1-66f8b6e16b8a/1/mqack1zg1aDbcOyT4cRxSwy3UDQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7729e4-6a6d-4bc5-88e1-66f8b6e16b8a/1/6NHRX1kR1I0cWe7zdPezf3HU678.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.10.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:34:5c:19:32:00:a8:73:67:f7:29:bd:ff:b8:c2:40:3b:5d:
3b:dd:9d:5c:ca:37:92:a9:75:85:20:3b:d7:88:79:38:2f:e6:
ed:c4:6e:ff:59:ab:4f:8e:99:4c:fe:ee:7a:ac:73:1f:d1:dc:
43:fa:79:80:5e:2d:d5:31:83:76:00:9d:bf:fa:5a:94:07:cc:
1d:44:97:58:13:d0:ed:3a:45:bf:98:d0:bc:fc:c0:97:16:ae:
7e:8d:3b:c9:b8:7c:42:9a:2d:2b:83:88:ec:6f:0f:af:94:17:
bd:1b:8c:9e:f1:7a:ca:24:09:83:2b:23:66:73:7e:5f:03:08:
29:40:17:f6:94:05:97:c0:37:dc:d8:a8:b1:87:4f:94:b8:65:
23:86:96:f9:35:13:37:03:81:65:61:1c:ef:7c:82:1c:4e:ca:
76:e9:b9:22:a0:0e:96:91:ee:5d:2c:aa:9a:8a:f3:9f:ac:65:
63:50:63:c6:95:c9:01:55:7c:c9:38:e0:d1:56:03:e3:31:1c:
ab:7a:e2:13:fc:2a:24:a8:3e:6a:8b:88:e4:9c:33:af:ff:ba:
ee:cd:cf:d8:d4:a6:16:8a:3a:3c:01:d0:72:cc:0f:5c:12:e9:
58:de:3c:8a:ac:76:56:f4:da:92:bc:1d:b7:27:a3:03:ee:a4:
12:e2:47:d1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhsc+ZyPb10vIVrX5F1XcGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4ZDFkMTVmNTkxMWQ0OGQxYzU5ZWVmMzc0ZjdiMzdmNzFk
NGViYmYwHhcNMjUwMTAxMTE0ODA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YWE2OWM5MzVjZTBkNWEwZGI3MGVjOTNlMWM0NzE0YjBjYjc1MDM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusNf7MGfxWxNgDmAzfUAy8agwbGx
7vpC/2nel4L2kLcL8WNzZCsci2UF183muq3DirDdHWFcqmPm1PQXknQV3YhBAV8t
OMtwoFUufMlPTE/pLf4r+ytSemqdqbjrCOHOZAtUesu+xoEQ7gOtN5IwQMVLX3qu
Bj+hRnRiFHJ71+Hr0xcBz/DuzqvCGo+GS9KFnsNlFk/4PvNH6U77PSrJeiyBsspM
g3kaG9fsaGjEjLHS/Kbw4jMk2wU+iMf2iEpUVp/9DWDy2t3qgL4uPJ13mHvZy1+s
h5/inp5Ke+Oek1mIPewig2svQsmAxZ7G52/6B+FxbKzR3HeUTyuptZt0owIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJqmnJNc4NWg23Dsk+HEcUsMt1A0MB8GA1UdIwQY
MBaAFOjR0V9ZEdSNHFnu83T3s39x1Ou/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNk5IUlgxa1IxSTBjV2U3emRQZXpmM0hVNjc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC83NzI5ZTQtNmE2ZC00YmM1LTg4ZTEt
NjZmOGI2ZTE2YjhhLzEvbXFhY2sxemcxYURiY095VDRjUnhTd3kzVURRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC83NzI5ZTQtNmE2ZC00YmM1LTg4ZTEtNjZmOGI2ZTE2Yjhh
LzEvNk5IUlgxa1IxSTBjV2U3emRQZXpmM0hVNjc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9gKMA0G
CSqGSIb3DQEBCwUAA4IBAQC6NFwZMgCoc2f3Kb3/uMJAO1073Z1cyjeSqXWFIDvX
iHk4L+btxG7/WatPjplM/u56rHMf0dxD+nmAXi3VMYN2AJ2/+lqUB8wdRJdYE9Dt
OkW/mNC8/MCXFq5+jTvJuHxCmi0rg4jsbw+vlBe9G4ye8XrKJAmDKyNmc35fAwgp
QBf2lAWXwDfc2Kixh0+UuGUjhpb5NRM3A4FlYRzvfIIcTsp26bkioA6Wke5dLKqa
ivOfrGVjUGPGlckBVXzJOODRVgPjMRyreuIT/CokqD5qi4jknDOv/7ruzc/Y1KYW
ijo8AdByzA9cEulY3jyKrHZW9NqSvB23J6MD7qQS4kfR
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:18:53 2025 by rpki-client