Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/C4xNioZG6sw9oTylgaCy9Fw6wDE.roa
File: C4xNioZG6sw9oTylgaCy9Fw6wDE.roa (raw, json)
Hash identifier: 8MEInVkrsQHyoYmClylsTPTDNu+7LUwTAdkiR2EqqJU=
Subject key identifier: 0B:8C:4D:8A:86:46:EA:CC:3D:A1:3C:A5:81:A0:B2:F4:5C:3A:C0:31
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 0194258F0E7E068D00DE597285AA5D1E05A2
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/C4xNioZG6sw9oTylgaCy9Fw6wDE.roa
Signing time: Thu 02 Jan 2025 05:48:39 +0000
ROA not before: Thu 02 Jan 2025 05:48:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 263759
IP address blocks: 91.229.134.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:0e:7e:06:8d:00:de:59:72:85:aa:5d:1e:05:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 2 05:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0b8c4d8a8646eacc3da13ca581a0b2f45c3ac031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a4:7e:2d:26:27:63:50:d7:b3:6d:b4:8f:5c:
80:ee:9c:fd:98:1c:99:4d:4e:c7:cf:87:e8:14:ea:
d3:ab:0e:a9:a2:a6:93:bf:ed:64:8c:e1:2a:63:1f:
25:ec:7b:35:aa:cb:a0:cb:c5:d1:f7:29:cd:14:c1:
5d:e5:1d:aa:f1:de:7e:7d:9c:83:85:a4:50:01:c5:
a0:ce:d8:3e:5b:3c:54:21:23:b0:f6:95:e5:85:b1:
be:b3:7e:89:05:0e:25:52:aa:94:ed:f6:97:b3:b8:
46:d0:fa:41:8e:51:56:5f:3c:fc:4d:fd:19:02:d2:
3a:d6:fc:52:dd:2b:32:ab:a6:f7:36:9a:10:5d:12:
b6:1e:1f:2d:23:c8:b7:c9:89:ed:cb:3a:dd:dc:1a:
2c:5d:b0:33:68:87:ec:75:9e:d6:8e:5f:22:72:92:
de:0d:39:a7:6e:9d:5e:5a:c4:aa:f0:dd:2b:12:e6:
51:e9:49:3b:57:74:2f:8c:51:f9:8d:6f:4c:59:62:
f8:27:19:2d:2c:99:bb:fe:3d:4d:ba:d4:81:e7:02:
92:e4:ac:30:c1:69:27:08:31:29:c1:1c:b6:d2:cb:
08:b5:bb:70:e5:65:37:7b:20:12:04:79:ad:ff:b6:
9a:19:45:4a:06:c1:8b:91:93:a8:cb:25:8b:de:4c:
72:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:8C:4D:8A:86:46:EA:CC:3D:A1:3C:A5:81:A0:B2:F4:5C:3A:C0:31
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/C4xNioZG6sw9oTylgaCy9Fw6wDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.229.134.0/23
Signature Algorithm: sha256WithRSAEncryption
d9:f9:52:0f:ad:57:de:57:9c:0e:07:67:41:40:29:49:46:93:
41:9f:65:01:e4:35:62:0f:c3:30:4e:cc:3a:cb:c1:e8:55:bd:
ab:ac:99:e3:98:86:75:2c:ae:80:4b:cb:f9:7d:86:21:14:ea:
df:47:9f:4c:4e:90:c6:8a:94:bd:45:5c:49:5b:a4:8e:12:65:
7c:54:a3:4c:30:e1:d1:99:3e:7e:2e:5e:f4:96:e0:82:0d:65:
d2:90:89:c5:c2:b7:de:53:11:9c:d1:15:89:17:cb:e0:88:ed:
21:1d:c6:1a:cb:18:eb:be:28:61:82:f2:6c:78:20:c4:24:45:
01:42:53:ce:a7:80:87:b6:15:1d:7b:3b:bd:8a:2c:d4:54:f8:
a7:f4:1e:5f:1d:c2:5a:3f:0d:9b:3d:f2:81:a6:4a:9d:ac:b8:
3a:87:4b:89:56:f2:10:5e:18:6c:3b:95:95:07:40:93:61:bd:
a8:c6:45:b8:72:b0:3c:77:6f:d9:b3:3a:b4:6d:5a:f4:85:ae:
fe:47:5f:9d:c6:d2:5f:58:70:08:70:16:8f:c0:fd:73:65:19:
44:6a:a9:30:41:7a:d7:17:6e:76:38:02:11:16:ab:07:d7:81:
07:10:a8:f2:3a:74:18:29:14:d4:db:7a:5b:ee:bf:8d:ce:d9:
11:87:c1:76
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQljw5+Bo0A3llyhapdHgWiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlYmYzMDIwMWYxMmEwNDBkMzg2ZDJiNGVlZDQ0ODQ2MjNl
NGQxMWIwHhcNMjUwMTAyMDU0ODM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYjhjNGQ4YTg2NDZlYWNjM2RhMTNjYTU4MWEwYjJmNDVjM2FjMDMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2aR+LSYnY1DXs220j1yA7pz9mByZ
TU7Hz4foFOrTqw6poqaTv+1kjOEqYx8l7Hs1qsugy8XR9ynNFMFd5R2q8d5+fZyD
haRQAcWgztg+WzxUISOw9pXlhbG+s36JBQ4lUqqU7faXs7hG0PpBjlFWXzz8Tf0Z
AtI61vxS3Ssyq6b3NpoQXRK2Hh8tI8i3yYntyzrd3BosXbAzaIfsdZ7Wjl8icpLe
DTmnbp1eWsSq8N0rEuZR6Uk7V3QvjFH5jW9MWWL4JxktLJm7/j1NutSB5wKS5Kww
wWknCDEpwRy20ssItbtw5WU3eyASBHmt/7aaGUVKBsGLkZOoyyWL3kxy6wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAuMTYqGRurMPaE8pYGgsvRcOsAxMB8GA1UdIwQY
MBaAFP6/MCAfEqBA04bStO7USEYj5NEbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUt
YTk3YzBkYzBhNzQ5LzEvQzR4TmlvWkc2c3c5b1R5bGdhQ3k5Rnc2d0RFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUtYTk3YzBkYzBhNzQ5
LzEvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW+WGMA0G
CSqGSIb3DQEBCwUAA4IBAQDZ+VIPrVfeV5wOB2dBQClJRpNBn2UB5DViD8MwTsw6
y8HoVb2rrJnjmIZ1LK6AS8v5fYYhFOrfR59MTpDGipS9RVxJW6SOEmV8VKNMMOHR
mT5+Ll70luCCDWXSkInFwrfeUxGc0RWJF8vgiO0hHcYayxjrvihhgvJseCDEJEUB
QlPOp4CHthUdezu9iizUVPin9B5fHcJaPw2bPfKBpkqdrLg6h0uJVvIQXhhsO5WV
B0CTYb2oxkW4crA8d2/Zszq0bVr0ha7+R1+dxtJfWHAIcBaPwP1zZRlEaqkwQXrX
F252OAIRFqsH14EHEKjyOnQYKRTU23pb7r+NztkRh8F2
-----END CERTIFICATE-----
Generated at Tue Apr 8 12:13:18 2025 by rpki-client