Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/HxAtI9yKZCbpxH862uX_45QQRAI.roa
File: HxAtI9yKZCbpxH862uX_45QQRAI.roa (raw, json)
Hash identifier: 3h+38XAT5SiIVpNs8Lk+14nxc9RTgj1HBur0gfSR11E=
Subject key identifier: 1F:10:2D:23:DC:8A:64:26:E9:C4:7F:3A:DA:E5:FF:E3:94:10:44:02
Certificate issuer: /CN=974e35ec2180daebd1bf3dd44403a9e0bfcb56ca
Certificate serial: 01942143EFE06FC059C43F3B15F02A27032D
Authority key identifier: 97:4E:35:EC:21:80:DA:EB:D1:BF:3D:D4:44:03:A9:E0:BF:CB:56:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0417CGA2uvRvz3URAOp4L_LVso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/HxAtI9yKZCbpxH862uX_45QQRAI.roa
Signing time: Wed 01 Jan 2025 09:48:07 +0000
ROA not before: Wed 01 Jan 2025 09:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202914
IP address blocks: 91.229.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.mft
rsync://rpki.ripe.net/repository/DEFAULT/l0417CGA2uvRvz3URAOp4L_LVso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 09:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:ef:e0:6f:c0:59:c4:3f:3b:15:f0:2a:27:03:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=974e35ec2180daebd1bf3dd44403a9e0bfcb56ca
Validity
Not Before: Jan 1 09:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1f102d23dc8a6426e9c47f3adae5ffe394104402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:25:ab:62:4f:c0:d8:fc:b1:f3:4e:3a:72:6d:
4e:72:2f:a8:44:94:bc:7a:87:f0:15:4e:6e:cb:b7:
2f:b2:31:d2:bc:ac:e3:68:a5:57:a2:25:be:cf:5a:
6b:64:5f:2e:55:d0:9d:4d:24:f5:0f:d7:9e:60:94:
a0:80:c5:1b:fc:9d:56:f2:b2:35:d4:43:18:f9:3c:
46:22:7a:70:5d:a1:7d:c1:f0:71:77:e5:b6:3d:06:
19:0a:c0:4a:14:f2:20:ee:da:d6:e5:4f:1b:24:c6:
b6:d0:d9:3e:a8:34:71:99:33:ea:37:62:a0:c4:34:
7b:29:dd:c6:94:2b:58:eb:79:ab:7a:80:0f:e4:cd:
53:0a:b7:51:81:c4:99:29:2e:87:c7:e5:f9:e8:c2:
26:7d:2c:1c:8e:66:d0:49:8d:6f:4b:cf:e4:9f:1a:
c1:9b:fc:9e:23:89:83:5a:06:63:6c:04:e8:1c:b5:
bb:16:78:2f:14:ac:ad:f4:4b:d2:2c:33:44:c4:e0:
c3:b7:4d:af:29:58:fb:58:7d:b8:e6:f6:51:ef:10:
e2:99:85:4d:98:d5:63:8d:bd:ef:ad:dd:55:7a:27:
58:8f:cd:23:bd:ae:4c:a0:5a:4f:b0:ff:6d:7f:81:
5f:25:b9:2d:5a:92:1f:77:d3:88:16:e7:57:ed:e8:
6f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:10:2D:23:DC:8A:64:26:E9:C4:7F:3A:DA:E5:FF:E3:94:10:44:02
X509v3 Authority Key Identifier:
keyid:97:4E:35:EC:21:80:DA:EB:D1:BF:3D:D4:44:03:A9:E0:BF:CB:56:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0417CGA2uvRvz3URAOp4L_LVso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/HxAtI9yKZCbpxH862uX_45QQRAI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.229.236.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:97:5e:6d:ad:22:37:ee:db:8c:f0:bd:d6:14:84:c2:53:a0:
2e:b6:04:73:11:d8:d2:1d:f7:39:58:40:30:24:de:25:7e:de:
7c:6e:13:75:fa:7c:35:7c:ab:5b:64:c8:2d:6a:42:d4:54:62:
66:0a:df:4b:39:ff:d3:3c:7c:10:b4:7a:fe:f4:d7:6b:0c:b3:
f4:8a:88:db:09:54:dc:ef:ce:9a:06:69:83:92:cd:80:f1:a9:
32:59:dd:49:b5:c5:d3:7c:39:a5:75:8a:6d:cc:6a:7a:bf:f4:
24:b0:d7:62:24:68:bd:e3:3d:e4:96:05:61:67:36:a6:47:e0:
07:ac:49:fe:f1:2b:3b:6f:a9:f4:36:7d:18:41:e4:97:c4:a8:
cc:20:55:ca:e3:07:ad:37:36:aa:b7:b4:d7:66:25:52:72:b4:
57:58:66:9b:71:f4:4d:22:18:fd:88:e9:72:fa:30:fe:52:0a:
bb:62:a3:47:7d:0f:e5:58:ca:0c:41:cd:48:d2:50:33:7e:39:
4b:8b:f5:6a:2b:27:d9:de:7e:18:2f:81:3e:4e:a7:a9:34:b1:
c9:82:90:b3:f2:2e:4b:fc:db:cc:fc:ad:b7:31:02:1a:2d:fe:
a0:77:62:c6:9a:c7:05:c1:eb:60:87:59:f9:8d:c8:c9:d3:d0:
67:cc:53:1a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhQ+/gb8BZxD87FfAqJwMtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3NGUzNWVjMjE4MGRhZWJkMWJmM2RkNDQ0MDNhOWUwYmZj
YjU2Y2EwHhcNMjUwMTAxMDk0ODA3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZjEwMmQyM2RjOGE2NDI2ZTljNDdmM2FkYWU1ZmZlMzk0MTA0NDAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiWrYk/A2Pyx8046cm1Oci+oRJS8
eofwFU5uy7cvsjHSvKzjaKVXoiW+z1prZF8uVdCdTST1D9eeYJSggMUb/J1W8rI1
1EMY+TxGInpwXaF9wfBxd+W2PQYZCsBKFPIg7trW5U8bJMa20Nk+qDRxmTPqN2Kg
xDR7Kd3GlCtY63mreoAP5M1TCrdRgcSZKS6Hx+X56MImfSwcjmbQSY1vS8/knxrB
m/yeI4mDWgZjbAToHLW7FngvFKyt9EvSLDNExODDt02vKVj7WH245vZR7xDimYVN
mNVjjb3vrd1VeidYj80jva5MoFpPsP9tf4FfJbktWpIfd9OIFudX7ehvywIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFB8QLSPcimQm6cR/Otrl/+OUEEQCMB8GA1UdIwQY
MBaAFJdONewhgNrr0b891EQDqeC/y1bKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDA0MTdDR0EydXZSdnozVVJBT3A0TF9MVnNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9kZjRhMGEtYzMzZC00ZTBlLWIxNWUt
Y2RmNGM2YjQyNGUxLzEvSHhBdEk5eUtaQ2JweEg4NjJ1WF80NVFRUkFJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9kZjRhMGEtYzMzZC00ZTBlLWIxNWUtY2RmNGM2YjQyNGUx
LzEvbDA0MTdDR0EydXZSdnozVVJBT3A0TF9MVnNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+XsMA0G
CSqGSIb3DQEBCwUAA4IBAQAql15trSI37tuM8L3WFITCU6AutgRzEdjSHfc5WEAw
JN4lft58bhN1+nw1fKtbZMgtakLUVGJmCt9LOf/TPHwQtHr+9NdrDLP0iojbCVTc
786aBmmDks2A8akyWd1JtcXTfDmldYptzGp6v/QksNdiJGi94z3klgVhZzamR+AH
rEn+8Ss7b6n0Nn0YQeSXxKjMIFXK4wetNzaqt7TXZiVScrRXWGabcfRNIhj9iOly
+jD+Ugq7YqNHfQ/lWMoMQc1I0lAzfjlLi/VqKyfZ3n4YL4E+TqepNLHJgpCz8i5L
/NvM/K23MQIaLf6gd2LGmscFwetgh1n5jcjJ09BnzFMa
-----END CERTIFICATE-----
Generated at Fri Feb 21 12:56:48 2025 by rpki-client