Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/e9a0a1-1135-495c-869a-70bbc7c0a9a5/1/AcPmWwo94r8m4Vj4-gToYDvTsGU.roa
File: AcPmWwo94r8m4Vj4-gToYDvTsGU.roa (raw, json)
Hash identifier: +evKtbSFjpYA6xBirW2To9jZahtd3cCQYx8e8YIZ/g8=
Subject key identifier: 01:C3:E6:5B:0A:3D:E2:BF:26:E1:58:F8:FA:04:E8:60:3B:D3:B0:65
Certificate issuer: /CN=163d2572180f4b784fb4f2a5ed50e9fe5e6be6a7
Certificate serial: 019425FD74A7D79A68D4291C6EE0578EEFEF
Authority key identifier: 16:3D:25:72:18:0F:4B:78:4F:B4:F2:A5:ED:50:E9:FE:5E:6B:E6:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fj0lchgPS3hPtPKl7VDp_l5r5qc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/e9a0a1-1135-495c-869a-70bbc7c0a9a5/1/AcPmWwo94r8m4Vj4-gToYDvTsGU.roa
Signing time: Thu 02 Jan 2025 07:49:14 +0000
ROA not before: Thu 02 Jan 2025 07:49:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48637
IP address blocks: 91.209.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/e9a0a1-1135-495c-869a-70bbc7c0a9a5/1/Fj0lchgPS3hPtPKl7VDp_l5r5qc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/e9a0a1-1135-495c-869a-70bbc7c0a9a5/1/Fj0lchgPS3hPtPKl7VDp_l5r5qc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fj0lchgPS3hPtPKl7VDp_l5r5qc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:74:a7:d7:9a:68:d4:29:1c:6e:e0:57:8e:ef:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=163d2572180f4b784fb4f2a5ed50e9fe5e6be6a7
Validity
Not Before: Jan 2 07:49:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=01c3e65b0a3de2bf26e158f8fa04e8603bd3b065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c8:8c:e2:21:23:0e:ec:e2:33:07:f0:ed:cb:
0b:ee:be:f7:e0:69:75:10:63:e5:82:c4:91:fe:04:
12:6c:fc:dc:ae:4d:90:7d:dc:c8:8b:08:ee:54:f3:
b5:b0:46:49:cc:f1:22:92:15:36:ce:c9:bb:16:9d:
e9:37:12:42:f1:24:e3:fd:7d:1a:09:e4:c0:32:39:
10:a6:56:5a:4c:dd:41:91:c7:78:5f:94:82:15:c9:
bb:52:7f:59:60:92:72:b7:4a:26:12:82:61:c6:5d:
2e:c6:33:9f:99:e9:f5:6f:25:24:e1:eb:c6:01:7e:
d3:f4:65:4c:f3:84:fb:ec:a9:7b:8b:3b:b4:96:df:
9c:1a:53:4d:14:84:d9:ef:2f:e0:be:6a:ec:a2:fb:
bb:53:f9:98:7d:6d:9b:23:ff:7d:bf:91:f5:ac:3e:
e5:1d:3a:5c:98:e9:99:71:da:9b:06:93:c1:ba:b4:
6a:19:d9:55:10:89:04:f0:c5:e7:2b:1b:46:ca:f9:
55:50:f6:1a:4d:fa:98:eb:07:ac:f1:3a:04:77:5f:
c8:06:43:57:d3:d7:9c:b8:f5:7b:75:81:18:06:42:
43:bc:66:56:16:77:3c:15:7d:f4:2f:1b:fa:76:f8:
98:ff:a1:90:3d:ff:f2:dc:8d:05:7f:09:af:8f:98:
e7:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:C3:E6:5B:0A:3D:E2:BF:26:E1:58:F8:FA:04:E8:60:3B:D3:B0:65
X509v3 Authority Key Identifier:
keyid:16:3D:25:72:18:0F:4B:78:4F:B4:F2:A5:ED:50:E9:FE:5E:6B:E6:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fj0lchgPS3hPtPKl7VDp_l5r5qc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/e9a0a1-1135-495c-869a-70bbc7c0a9a5/1/AcPmWwo94r8m4Vj4-gToYDvTsGU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/e9a0a1-1135-495c-869a-70bbc7c0a9a5/1/Fj0lchgPS3hPtPKl7VDp_l5r5qc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.214.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:6d:91:d3:81:c7:74:5f:9f:55:bf:59:21:48:ce:36:fa:9e:
24:66:62:f5:cc:5c:f6:3d:6a:87:6d:78:4c:f3:85:65:85:3f:
90:31:6e:95:d7:70:bf:4b:37:be:35:1d:26:72:56:36:88:91:
86:7b:53:62:46:2b:cf:70:58:27:08:99:02:da:b3:8e:cc:54:
50:38:bf:d0:47:07:37:d4:4c:ba:45:0a:f0:35:43:60:66:dd:
c6:58:08:b0:8b:05:28:48:08:ee:88:59:ff:bc:44:81:2c:fb:
3d:c8:6d:43:c1:be:32:24:df:28:3a:c3:1c:d9:1b:12:66:8a:
2f:51:04:da:84:18:e9:1a:80:d2:d1:2c:c4:d1:42:ee:6c:d5:
6f:8e:81:d1:d0:e7:e5:d5:02:6b:e6:b1:d8:23:11:29:b4:c8:
2f:e7:2c:b4:a7:b4:93:96:47:8d:de:7a:a0:66:83:0f:be:4d:
95:3a:d3:69:2b:2b:80:f8:f5:4e:02:77:19:5c:06:c3:34:8b:
fc:6c:dd:8e:2a:9e:87:50:78:47:fc:9f:70:17:90:c6:f1:38:
32:5a:87:57:4c:d3:51:19:70:ee:70:04:eb:50:e3:dc:43:30:
ef:0f:de:96:8a:ff:9a:e1:1b:34:c9:6c:1c:1c:f2:8d:34:f8:
fc:85:a8:58
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQl/XSn15po1CkcbuBXju/vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2M2QyNTcyMTgwZjRiNzg0ZmI0ZjJhNWVkNTBlOWZlNWU2
YmU2YTcwHhcNMjUwMTAyMDc0OTE0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMWMzZTY1YjBhM2RlMmJmMjZlMTU4ZjhmYTA0ZTg2MDNiZDNiMDY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA28iM4iEjDuziMwfw7csL7r734Gl1
EGPlgsSR/gQSbPzcrk2QfdzIiwjuVPO1sEZJzPEikhU2zsm7Fp3pNxJC8STj/X0a
CeTAMjkQplZaTN1Bkcd4X5SCFcm7Un9ZYJJyt0omEoJhxl0uxjOfmen1byUk4evG
AX7T9GVM84T77Kl7izu0lt+cGlNNFITZ7y/gvmrsovu7U/mYfW2bI/99v5H1rD7l
HTpcmOmZcdqbBpPBurRqGdlVEIkE8MXnKxtGyvlVUPYaTfqY6wes8ToEd1/IBkNX
09ecuPV7dYEYBkJDvGZWFnc8FX30Lxv6dviY/6GQPf/y3I0Ffwmvj5jnoQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAHD5lsKPeK/JuFY+PoE6GA707BlMB8GA1UdIwQY
MBaAFBY9JXIYD0t4T7Type1Q6f5ea+anMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmowbGNoZ1BTM2hQdFBLbDdWRHBfbDVyNXFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9lOWEwYTEtMTEzNS00OTVjLTg2OWEt
NzBiYmM3YzBhOWE1LzEvQWNQbVd3bzk0cjhtNFZqNC1nVG9ZRHZUc0dVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS9lOWEwYTEtMTEzNS00OTVjLTg2OWEtNzBiYmM3YzBhOWE1
LzEvRmowbGNoZ1BTM2hQdFBLbDdWRHBfbDVyNXFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9HWMA0G
CSqGSIb3DQEBCwUAA4IBAQALbZHTgcd0X59Vv1khSM42+p4kZmL1zFz2PWqHbXhM
84VlhT+QMW6V13C/Sze+NR0mclY2iJGGe1NiRivPcFgnCJkC2rOOzFRQOL/QRwc3
1Ey6RQrwNUNgZt3GWAiwiwUoSAjuiFn/vESBLPs9yG1Dwb4yJN8oOsMc2RsSZoov
UQTahBjpGoDS0SzE0ULubNVvjoHR0Ofl1QJr5rHYIxEptMgv5yy0p7STlkeN3nqg
ZoMPvk2VOtNpKyuA+PVOAncZXAbDNIv8bN2OKp6HUHhH/J9wF5DG8TgyWodXTNNR
GXDucATrUOPcQzDvD96Wiv+a4Rs0yWwcHPKNNPj8hahY
-----END CERTIFICATE-----
Generated at Thu Apr 17 03:26:08 2025 by rpki-client