Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/5f53a3-2260-41b0-a341-500432501743/1/3-rv1v1yCPrdYumYMOu8WdUJkO8.roa
File: 3-rv1v1yCPrdYumYMOu8WdUJkO8.roa (raw, json)
Hash identifier: l7PMWmjBkZja+Bzzk9qkIiGKk5+PfjMuS142zfz0fP8=
Subject key identifier: DF:EA:EF:D6:FD:72:08:FA:DD:62:E9:98:30:EB:BC:59:D5:09:90:EF
Certificate issuer: /CN=fedae68910398c9d8ee756e168201dd9e8989b52
Certificate serial: 0194282842F6B3D63D535F2B63BF172987DF
Authority key identifier: FE:DA:E6:89:10:39:8C:9D:8E:E7:56:E1:68:20:1D:D9:E8:98:9B:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_trmiRA5jJ2O51bhaCAd2eiYm1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/5f53a3-2260-41b0-a341-500432501743/1/3-rv1v1yCPrdYumYMOu8WdUJkO8.roa
Signing time: Thu 02 Jan 2025 17:55:14 +0000
ROA not before: Thu 02 Jan 2025 17:55:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198133
IP address blocks: 91.246.208.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/5f53a3-2260-41b0-a341-500432501743/1/_trmiRA5jJ2O51bhaCAd2eiYm1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/5f53a3-2260-41b0-a341-500432501743/1/_trmiRA5jJ2O51bhaCAd2eiYm1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/_trmiRA5jJ2O51bhaCAd2eiYm1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:28:42:f6:b3:d6:3d:53:5f:2b:63:bf:17:29:87:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fedae68910398c9d8ee756e168201dd9e8989b52
Validity
Not Before: Jan 2 17:55:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dfeaefd6fd7208fadd62e99830ebbc59d50990ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:54:22:c9:ca:9c:c0:25:cc:65:b0:40:6c:18:
8c:f3:d7:6a:50:85:45:40:ef:97:2b:d6:66:b1:a4:
d9:98:e5:61:61:cb:f3:8c:3c:7d:e8:11:a4:cb:f7:
07:66:1f:3e:22:20:11:bd:36:96:81:cb:e9:33:fc:
87:46:4d:ec:c5:02:b1:94:2e:98:e7:b7:30:3d:0c:
5a:60:16:f1:90:a2:c0:a1:24:60:da:39:ff:33:a6:
4a:21:1f:76:93:3f:58:33:c0:75:e3:97:a2:1c:f3:
fa:ce:55:7a:74:16:81:a9:18:da:6c:46:98:f9:18:
c7:cf:d8:d5:40:ef:5a:1d:76:3d:8c:a6:81:40:d0:
33:b1:90:f8:9e:89:11:b6:06:62:f2:ea:95:61:b2:
3a:72:e0:e4:00:26:70:5e:62:33:aa:0c:50:00:d0:
1e:3b:89:42:17:1d:fe:f7:56:51:e9:dd:27:e9:14:
af:22:3d:95:ff:40:c1:f4:9c:cd:a2:13:48:67:1a:
20:d3:54:8a:dc:e3:d9:f0:ad:9e:b8:0a:d2:82:6c:
96:e4:d2:8d:50:98:46:c7:53:e6:90:46:b4:ad:26:
c4:39:23:d0:e9:f8:2c:30:26:dc:df:ec:1d:5f:45:
55:f0:1b:bb:62:f2:e1:ef:0c:fd:38:16:65:05:fc:
74:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:EA:EF:D6:FD:72:08:FA:DD:62:E9:98:30:EB:BC:59:D5:09:90:EF
X509v3 Authority Key Identifier:
keyid:FE:DA:E6:89:10:39:8C:9D:8E:E7:56:E1:68:20:1D:D9:E8:98:9B:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_trmiRA5jJ2O51bhaCAd2eiYm1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/5f53a3-2260-41b0-a341-500432501743/1/3-rv1v1yCPrdYumYMOu8WdUJkO8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/5f53a3-2260-41b0-a341-500432501743/1/_trmiRA5jJ2O51bhaCAd2eiYm1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.246.208.0/21
Signature Algorithm: sha256WithRSAEncryption
bb:03:40:71:51:64:9c:cd:8e:57:5b:7b:90:d3:21:06:03:ca:
bf:67:c9:e3:8a:30:cf:ce:c8:05:ce:f0:f6:6b:23:29:60:fc:
45:85:30:43:79:2a:42:f5:f6:0f:16:d7:4f:c3:cd:e2:ef:be:
52:c8:b2:1f:04:84:07:d9:f1:d1:c2:e1:d4:c7:45:ad:09:f6:
aa:c3:ab:62:8a:50:eb:e6:09:1a:6a:05:25:7b:fe:d9:e5:96:
a8:62:12:65:da:9c:76:6e:39:2a:c0:ee:85:9c:70:2d:78:08:
7d:5a:42:06:f5:12:d7:37:29:c6:fd:7f:92:c7:37:8d:94:69:
01:53:c2:ca:9e:eb:6d:b2:0c:6c:03:75:d1:a4:8c:d6:26:49:
e5:c9:ff:41:a8:9f:3c:31:d0:08:77:05:2e:b0:f2:a0:ae:59:
b8:02:5b:08:2d:ca:6d:8b:e6:8a:39:f1:55:5d:a3:70:ca:05:
18:22:29:7e:c9:12:63:b8:0b:bd:82:3b:a2:59:29:c7:de:5d:
24:98:95:99:a0:10:93:bc:89:8f:c0:aa:52:08:18:e1:87:0c:
5d:a0:1e:5e:68:c7:b6:e2:da:b4:df:c4:62:cc:01:48:03:22:
44:99:88:57:76:4b:67:47:29:e0:96:ff:97:10:86:7a:89:4c:
ec:f0:2a:39
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQoKEL2s9Y9U18rY78XKYffMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlZGFlNjg5MTAzOThjOWQ4ZWU3NTZlMTY4MjAxZGQ5ZTg5
ODliNTIwHhcNMjUwMTAyMTc1NTE0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZmVhZWZkNmZkNzIwOGZhZGQ2MmU5OTgzMGViYmM1OWQ1MDk5MGVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFQiycqcwCXMZbBAbBiM89dqUIVF
QO+XK9ZmsaTZmOVhYcvzjDx96BGky/cHZh8+IiARvTaWgcvpM/yHRk3sxQKxlC6Y
57cwPQxaYBbxkKLAoSRg2jn/M6ZKIR92kz9YM8B145eiHPP6zlV6dBaBqRjabEaY
+RjHz9jVQO9aHXY9jKaBQNAzsZD4nokRtgZi8uqVYbI6cuDkACZwXmIzqgxQANAe
O4lCFx3+91ZR6d0n6RSvIj2V/0DB9JzNohNIZxog01SK3OPZ8K2euArSgmyW5NKN
UJhGx1PmkEa0rSbEOSPQ6fgsMCbc3+wdX0VV8Bu7YvLh7wz9OBZlBfx0QQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFN/q79b9cgj63WLpmDDrvFnVCZDvMB8GA1UdIwQY
MBaAFP7a5okQOYydjudW4WggHdnomJtSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3RybWlSQTVqSjJPNTFiaGFDQWQyZWlZbTFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS81ZjUzYTMtMjI2MC00MWIwLWEzNDEt
NTAwNDMyNTAxNzQzLzEvMy1ydjF2MXlDUHJkWXVtWU1PdThXZFVKa084LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS81ZjUzYTMtMjI2MC00MWIwLWEzNDEtNTAwNDMyNTAxNzQz
LzEvX3RybWlSQTVqSjJPNTFiaGFDQWQyZWlZbTFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDW/bQMA0G
CSqGSIb3DQEBCwUAA4IBAQC7A0BxUWSczY5XW3uQ0yEGA8q/Z8njijDPzsgFzvD2
ayMpYPxFhTBDeSpC9fYPFtdPw83i775SyLIfBIQH2fHRwuHUx0WtCfaqw6tiilDr
5gkaagUle/7Z5ZaoYhJl2px2bjkqwO6FnHAteAh9WkIG9RLXNynG/X+SxzeNlGkB
U8LKnuttsgxsA3XRpIzWJknlyf9BqJ88MdAIdwUusPKgrlm4AlsILcpti+aKOfFV
XaNwygUYIil+yRJjuAu9gjuiWSnH3l0kmJWZoBCTvImPwKpSCBjhhwxdoB5eaMe2
4tq038RizAFIAyJEmYhXdktnRynglv+XEIZ6iUzs8Co5
-----END CERTIFICATE-----
Generated at Sun Feb 2 10:03:06 2025 by rpki-client