Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/psQBUc0pobHwdrhlOUZzj_GPEto.roa
File: psQBUc0pobHwdrhlOUZzj_GPEto.roa (raw, json)
Hash identifier: qru8ysHHH3C4jCMlszx1z613KVN+O1eNTXPzB5PAv+w=
Subject key identifier: A6:C4:01:51:CD:29:A1:B1:F0:76:B8:65:39:46:73:8F:F1:8F:12:DA
Certificate issuer: /CN=798e0da4f91007b224768acb4d131f12517d2b7a
Certificate serial: 01942521B99F47F44C750457192811893976
Authority key identifier: 79:8E:0D:A4:F9:10:07:B2:24:76:8A:CB:4D:13:1F:12:51:7D:2B:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eY4NpPkQB7IkdorLTRMfElF9K3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/psQBUc0pobHwdrhlOUZzj_GPEto.roa
Signing time: Thu 02 Jan 2025 03:49:14 +0000
ROA not before: Thu 02 Jan 2025 03:49:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200909
IP address blocks: 91.202.100.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/eY4NpPkQB7IkdorLTRMfElF9K3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/eY4NpPkQB7IkdorLTRMfElF9K3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/eY4NpPkQB7IkdorLTRMfElF9K3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 21:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:b9:9f:47:f4:4c:75:04:57:19:28:11:89:39:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=798e0da4f91007b224768acb4d131f12517d2b7a
Validity
Not Before: Jan 2 03:49:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a6c40151cd29a1b1f076b8653946738ff18f12da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d1:58:bf:a0:9f:7a:d1:65:2a:71:e1:57:7a:
af:a4:95:f8:f0:e5:3a:2a:91:77:fd:ad:d7:7d:c3:
9b:92:0d:be:d8:80:87:c5:47:d8:cc:72:0a:f7:96:
f8:ac:df:4a:b3:eb:14:86:cc:f7:f9:2f:ed:81:b0:
c4:9c:b6:3a:74:8f:19:78:0e:b3:96:c9:6b:1d:f3:
3d:7b:7b:76:12:cb:53:04:9b:44:81:64:33:a8:c7:
ae:cc:ae:d6:d5:87:85:8b:2d:90:da:3b:33:99:35:
c1:a7:99:28:08:9e:18:40:7c:ca:8d:e4:11:92:b1:
9e:50:dc:94:b0:c5:18:bc:64:79:e4:17:21:49:9b:
6a:e2:e1:34:a3:69:2a:53:0a:92:3f:cf:d0:cc:e1:
48:05:d4:46:5d:9d:ba:33:d5:d4:78:21:a1:f8:92:
98:0e:b4:27:0d:6f:ad:b0:91:72:25:47:c5:75:03:
1d:2f:2c:c6:45:48:3d:b4:16:18:09:9f:91:0d:fe:
61:8d:1a:02:d4:98:c7:87:5d:7d:61:af:20:4f:e7:
47:ba:73:19:32:fd:a6:c9:91:d3:a3:74:65:c9:bc:
25:e0:a6:f7:c4:bc:70:32:00:ab:fb:20:7b:6a:be:
73:06:13:b0:5a:9a:38:3c:66:71:63:fd:da:5a:4d:
ee:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:C4:01:51:CD:29:A1:B1:F0:76:B8:65:39:46:73:8F:F1:8F:12:DA
X509v3 Authority Key Identifier:
keyid:79:8E:0D:A4:F9:10:07:B2:24:76:8A:CB:4D:13:1F:12:51:7D:2B:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eY4NpPkQB7IkdorLTRMfElF9K3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/psQBUc0pobHwdrhlOUZzj_GPEto.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/eY4NpPkQB7IkdorLTRMfElF9K3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.202.100.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:dc:c2:00:73:88:49:6e:0e:8b:96:37:4e:5f:47:64:0d:e4:
ff:bf:fd:c1:64:de:7e:2c:4c:87:86:b4:a3:36:f7:0e:81:20:
1e:f9:65:98:96:18:47:19:8d:4a:d9:3d:39:f1:f2:be:90:5a:
c1:70:ef:9d:b5:60:0b:61:20:e7:31:db:d4:29:2d:ae:3d:93:
88:b9:08:5c:69:5e:b7:97:1d:6c:6b:99:38:61:11:d9:89:bd:
bf:0e:5a:20:eb:ef:d3:c7:1d:ed:87:2a:a8:23:9a:65:1a:ba:
5a:ab:5e:09:69:56:64:90:e5:07:4b:f7:9e:e6:08:b1:d4:c9:
4f:04:5b:b3:0e:ce:51:1e:15:7e:52:c7:b9:ca:9b:b1:5e:8b:
df:e9:33:d9:a2:32:c8:5f:c0:6f:d4:9c:a8:76:25:dd:82:ac:
70:0e:9c:7b:a1:62:2f:fe:64:5e:b0:41:30:21:2b:d0:08:cc:
02:7b:49:33:62:8c:c4:21:52:46:0b:26:4a:1b:10:b5:84:df:
a8:3f:5f:f4:69:c9:09:ff:54:11:67:8a:41:fc:66:e8:b4:8e:
20:09:de:55:14:71:03:c8:83:ca:d1:dd:c5:ab:a4:1a:c1:55:
50:7a:a5:9b:bd:ed:f1:96:bc:30:31:37:2f:b1:e0:6b:6b:8e:
95:9b:3a:46
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlIbmfR/RMdQRXGSgRiTl2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5OGUwZGE0ZjkxMDA3YjIyNDc2OGFjYjRkMTMxZjEyNTE3
ZDJiN2EwHhcNMjUwMTAyMDM0OTE0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNmM0MDE1MWNkMjlhMWIxZjA3NmI4NjUzOTQ2NzM4ZmYxOGYxMmRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9FYv6CfetFlKnHhV3qvpJX48OU6
KpF3/a3XfcObkg2+2ICHxUfYzHIK95b4rN9Ks+sUhsz3+S/tgbDEnLY6dI8ZeA6z
lslrHfM9e3t2EstTBJtEgWQzqMeuzK7W1YeFiy2Q2jszmTXBp5koCJ4YQHzKjeQR
krGeUNyUsMUYvGR55BchSZtq4uE0o2kqUwqSP8/QzOFIBdRGXZ26M9XUeCGh+JKY
DrQnDW+tsJFyJUfFdQMdLyzGRUg9tBYYCZ+RDf5hjRoC1JjHh119Ya8gT+dHunMZ
Mv2myZHTo3Rlybwl4Kb3xLxwMgCr+yB7ar5zBhOwWpo4PGZxY/3aWk3unQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKbEAVHNKaGx8Ha4ZTlGc4/xjxLaMB8GA1UdIwQY
MBaAFHmODaT5EAeyJHaKy00THxJRfSt6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVk0TnBQa1FCN0lrZG9yTFRSTWZFbEY5SzNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80MDRlNjQtZjk4MS00NWI1LTljYWUt
NGZiNGVmOTFhODJmLzEvcHNRQlVjMHBvYkh3ZHJobE9VWnpqX0dQRXRvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC80MDRlNjQtZjk4MS00NWI1LTljYWUtNGZiNGVmOTFhODJm
LzEvZVk0TnBQa1FCN0lrZG9yTFRSTWZFbEY5SzNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW8pkMA0G
CSqGSIb3DQEBCwUAA4IBAQA/3MIAc4hJbg6LljdOX0dkDeT/v/3BZN5+LEyHhrSj
NvcOgSAe+WWYlhhHGY1K2T058fK+kFrBcO+dtWALYSDnMdvUKS2uPZOIuQhcaV63
lx1sa5k4YRHZib2/Dlog6+/Txx3thyqoI5plGrpaq14JaVZkkOUHS/ee5gix1MlP
BFuzDs5RHhV+Use5ypuxXovf6TPZojLIX8Bv1JyodiXdgqxwDpx7oWIv/mResEEw
ISvQCMwCe0kzYozEIVJGCyZKGxC1hN+oP1/0ackJ/1QRZ4pB/GbotI4gCd5VFHED
yIPK0d3Fq6QawVVQeqWbve3xlrwwMTcvseBra46VmzpG
-----END CERTIFICATE-----
Generated at Sun Apr 6 05:09:11 2025 by rpki-client