Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/8GuN-54fOOWK-SbVRHbvHD1t258.roa
File: 8GuN-54fOOWK-SbVRHbvHD1t258.roa (raw, json)
Hash identifier: +JAgmZYVHbTg/tn7L+SSKAVcpZBlqMe4rbmvvs3DmTY=
Subject key identifier: F0:6B:8D:FB:9E:1F:38:E5:8A:F9:26:D5:44:76:EF:1C:3D:6D:DB:9F
Certificate issuer: /CN=361adf57c8dcb7bfd34e9aecd83e36342ec3a3c9
Certificate serial: 019428262582C166AC484DA860E30D3227CA
Authority key identifier: 36:1A:DF:57:C8:DC:B7:BF:D3:4E:9A:EC:D8:3E:36:34:2E:C3:A3:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NhrfV8jct7_TTprs2D42NC7Do8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/8GuN-54fOOWK-SbVRHbvHD1t258.roa
Signing time: Thu 02 Jan 2025 17:52:56 +0000
ROA not before: Thu 02 Jan 2025 17:52:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 91.239.147.0/24 maxlen: 24
2001:67c:1240::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/NhrfV8jct7_TTprs2D42NC7Do8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/NhrfV8jct7_TTprs2D42NC7Do8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/NhrfV8jct7_TTprs2D42NC7Do8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 14:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:25:82:c1:66:ac:48:4d:a8:60:e3:0d:32:27:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=361adf57c8dcb7bfd34e9aecd83e36342ec3a3c9
Validity
Not Before: Jan 2 17:52:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f06b8dfb9e1f38e58af926d54476ef1c3d6ddb9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b5:4e:5a:59:34:59:47:c0:4e:f7:b4:4d:d3:
ba:0c:86:e0:be:30:e7:de:1c:29:21:e6:f2:3d:0f:
23:a8:be:83:53:21:11:20:f6:93:9f:76:b7:dd:02:
cf:e3:f3:5b:54:06:ef:dc:60:dc:41:87:09:e9:7f:
fe:a9:e3:99:22:65:79:70:d2:ee:bd:0a:0e:6a:13:
7a:d9:12:0d:28:b0:07:88:2b:de:85:db:2a:02:61:
7d:1e:3d:1e:bb:0d:ae:1b:39:3c:ea:b6:b2:5b:97:
88:76:96:51:5f:c8:89:69:4a:8c:56:14:c9:1f:3c:
60:fb:2a:08:22:fd:ed:f7:b5:5b:5c:b9:60:a5:29:
7c:be:e0:81:60:5b:f7:7f:a3:31:33:4a:0f:ac:ff:
38:e1:aa:9e:0f:ff:cd:41:93:57:7b:d0:97:f5:45:
54:1f:00:a1:5f:a7:5b:22:18:4e:2e:77:75:66:77:
02:f2:b0:46:25:78:d8:36:90:6d:f7:b0:ce:65:8c:
00:0c:89:d8:51:89:18:fa:c3:12:42:e9:09:4d:88:
ae:4a:b9:1e:b3:df:59:51:17:2a:ef:48:44:c8:b8:
09:b2:f0:6d:cf:5d:c6:cc:de:a8:97:92:60:50:54:
8c:bd:63:06:ec:c6:1f:d3:48:f7:dc:e7:df:72:11:
7d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:6B:8D:FB:9E:1F:38:E5:8A:F9:26:D5:44:76:EF:1C:3D:6D:DB:9F
X509v3 Authority Key Identifier:
keyid:36:1A:DF:57:C8:DC:B7:BF:D3:4E:9A:EC:D8:3E:36:34:2E:C3:A3:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhrfV8jct7_TTprs2D42NC7Do8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/8GuN-54fOOWK-SbVRHbvHD1t258.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/NhrfV8jct7_TTprs2D42NC7Do8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.147.0/24
IPv6:
2001:67c:1240::/48
Signature Algorithm: sha256WithRSAEncryption
64:ed:b4:68:dd:45:04:0f:f4:b1:c3:d9:96:ac:14:b8:de:e2:
aa:18:07:cc:45:87:5e:93:15:a1:2b:07:44:6c:13:f1:bc:e7:
f1:08:8e:ff:ec:06:71:f1:64:82:95:52:2e:6c:3b:1b:f9:eb:
db:76:65:6f:ea:0b:38:71:55:93:d8:aa:5b:d5:1e:64:6b:d3:
f5:cd:28:2d:dc:8a:e8:87:eb:f3:20:93:27:42:01:52:92:9b:
01:c3:aa:2d:ee:bc:c3:76:80:dc:8f:9f:9c:cc:09:fa:62:23:
b8:36:1a:09:1b:46:3b:50:f0:76:1e:07:75:13:07:41:67:a2:
f2:49:b1:a8:7d:f7:00:1e:99:16:a3:69:eb:93:ba:4a:a2:8a:
94:a3:d9:62:71:4a:ae:52:45:e6:c1:4b:b3:0b:bb:0f:1e:6c:
b1:84:f8:5d:36:75:11:7b:7c:cf:9c:0b:6d:7a:77:06:89:2f:
87:0c:10:a8:e9:2c:28:a2:2f:0c:37:23:fc:cc:40:8a:c2:57:
72:c4:83:f0:19:36:d1:2c:e4:fb:96:20:b2:8a:5a:90:58:bc:
b9:23:aa:63:28:2a:26:8b:6d:d5:f1:94:cb:04:b8:9d:bc:24:
1d:d7:96:9b:22:58:9b:c6:29:52:48:e4:41:2a:e4:07:41:27:
64:85:7e:f5
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZQoJiWCwWasSE2oYOMNMifKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2MWFkZjU3YzhkY2I3YmZkMzRlOWFlY2Q4M2UzNjM0MmVj
M2EzYzkwHhcNMjUwMTAyMTc1MjU2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMDZiOGRmYjllMWYzOGU1OGFmOTI2ZDU0NDc2ZWYxYzNkNmRkYjlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLVOWlk0WUfATve0TdO6DIbgvjDn
3hwpIebyPQ8jqL6DUyERIPaTn3a33QLP4/NbVAbv3GDcQYcJ6X/+qeOZImV5cNLu
vQoOahN62RINKLAHiCvehdsqAmF9Hj0euw2uGzk86rayW5eIdpZRX8iJaUqMVhTJ
Hzxg+yoIIv3t97VbXLlgpSl8vuCBYFv3f6MxM0oPrP844aqeD//NQZNXe9CX9UVU
HwChX6dbIhhOLnd1ZncC8rBGJXjYNpBt97DOZYwADInYUYkY+sMSQukJTYiuSrke
s99ZURcq70hEyLgJsvBtz13GzN6ol5JgUFSMvWMG7MYf00j33OffchF9kwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFPBrjfueHzjlivkm1UR27xw9bdufMB8GA1UdIwQY
MBaAFDYa31fI3Le/006a7Ng+NjQuw6PJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmhyZlY4amN0N19UVHByczJENDJOQzdEbzhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9lMGY4YzYtYWFkYy00YzMxLWI5MmIt
MWExODczOGI0NzQxLzEvOEd1Ti01NGZPT1dLLVNiVlJIYnZIRDF0MjU4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi9lMGY4YzYtYWFkYy00YzMxLWI5MmItMWExODczOGI0NzQx
LzEvTmhyZlY4amN0N19UVHByczJENDJOQzdEbzhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAW++TMA8E
AgACMAkDBwAgAQZ8EkAwDQYJKoZIhvcNAQELBQADggEBAGTttGjdRQQP9LHD2Zas
FLje4qoYB8xFh16TFaErB0RsE/G85/EIjv/sBnHxZIKVUi5sOxv569t2ZW/qCzhx
VZPYqlvVHmRr0/XNKC3ciuiH6/MgkydCAVKSmwHDqi3uvMN2gNyPn5zMCfpiI7g2
GgkbRjtQ8HYeB3UTB0FnovJJsah99wAemRajaeuTukqiipSj2WJxSq5SRebBS7ML
uw8ebLGE+F02dRF7fM+cC216dwaJL4cMEKjpLCiiLww3I/zMQIrCV3LEg/AZNtEs
5PuWILKKWpBYvLkjqmMoKiaLbdXxlMsEuJ28JB3XlpsiWJvGKVJI5EEq5AdBJ2SF
fvU=
-----END CERTIFICATE-----
Generated at Fri Apr 4 23:44:11 2025 by rpki-client