Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/c72abe-32dc-4f18-905f-c1ff056fc76f/1/k_nIf6wVx1Xdxat4zYtnBqTL13Y.roa
File: k_nIf6wVx1Xdxat4zYtnBqTL13Y.roa (raw, json)
Hash identifier: HaoM7rJ6dUREUsX3C7dLkVUY9dcgJCaHV1PnH/ISMtE=
Subject key identifier: 93:F9:C8:7F:AC:15:C7:55:DD:C5:AB:78:CD:8B:67:06:A4:CB:D7:76
Certificate issuer: /CN=4c33c0e14d57eabc3b65e38a7736bebe49092e9e
Certificate serial: 01941FFAA6AC290395533161104CF65798E0
Authority key identifier: 4C:33:C0:E1:4D:57:EA:BC:3B:65:E3:8A:77:36:BE:BE:49:09:2E:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDPA4U1X6rw7ZeOKdza-vkkJLp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/c72abe-32dc-4f18-905f-c1ff056fc76f/1/k_nIf6wVx1Xdxat4zYtnBqTL13Y.roa
Signing time: Wed 01 Jan 2025 03:48:27 +0000
ROA not before: Wed 01 Jan 2025 03:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49581
IP address blocks: 91.212.121.0/24 maxlen: 24
2a12:89c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/c72abe-32dc-4f18-905f-c1ff056fc76f/1/TDPA4U1X6rw7ZeOKdza-vkkJLp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/c72abe-32dc-4f18-905f-c1ff056fc76f/1/TDPA4U1X6rw7ZeOKdza-vkkJLp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDPA4U1X6rw7ZeOKdza-vkkJLp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 00:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:a6:ac:29:03:95:53:31:61:10:4c:f6:57:98:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c33c0e14d57eabc3b65e38a7736bebe49092e9e
Validity
Not Before: Jan 1 03:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=93f9c87fac15c755ddc5ab78cd8b6706a4cbd776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:72:8c:a7:7f:7e:2a:cd:ae:5a:e7:4f:a1:c9:
2f:c4:b7:11:f6:23:5a:b9:3c:f6:5c:6a:d6:cf:a2:
28:8d:f5:0d:9e:7e:cc:94:3c:b9:c8:a8:6d:ac:b2:
35:7d:15:95:c1:fb:1a:44:a9:24:cd:f0:0f:4e:6c:
ea:50:3b:91:ea:54:49:1c:8b:cb:b2:c5:42:c8:72:
9a:47:70:94:ed:f1:ca:92:e9:e0:d4:19:97:a7:8c:
fe:3b:96:2d:41:1d:3a:d7:5b:50:d1:6e:7e:6a:2f:
35:38:4a:84:db:f0:7c:c3:54:06:70:8c:63:cd:38:
66:59:7e:2a:3e:35:b1:d6:0e:ce:38:95:b6:3f:ae:
f0:75:24:cb:d3:7b:35:cd:31:9b:f0:b6:c7:98:c7:
cd:a7:c5:b8:77:1a:58:a7:3e:be:c9:cc:b1:7b:c9:
57:80:37:0c:81:74:82:0f:5f:c8:80:57:ef:4c:fd:
c8:3d:aa:2c:40:9f:2c:87:d7:f7:5a:f8:46:86:04:
a7:92:fb:c6:ac:c6:c6:4f:89:d8:25:f7:9d:1c:b1:
ad:7a:56:5e:68:ea:45:7b:6f:99:67:c0:f6:3c:ed:
eb:bd:65:3c:21:b5:ef:0d:10:58:06:59:bc:1d:ff:
67:e0:a9:e4:f6:d6:b7:03:51:c0:e5:b8:f3:dc:a3:
1d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:F9:C8:7F:AC:15:C7:55:DD:C5:AB:78:CD:8B:67:06:A4:CB:D7:76
X509v3 Authority Key Identifier:
keyid:4C:33:C0:E1:4D:57:EA:BC:3B:65:E3:8A:77:36:BE:BE:49:09:2E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDPA4U1X6rw7ZeOKdza-vkkJLp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/c72abe-32dc-4f18-905f-c1ff056fc76f/1/k_nIf6wVx1Xdxat4zYtnBqTL13Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/c72abe-32dc-4f18-905f-c1ff056fc76f/1/TDPA4U1X6rw7ZeOKdza-vkkJLp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.121.0/24
IPv6:
2a12:89c0::/29
Signature Algorithm: sha256WithRSAEncryption
8f:0b:0b:c9:34:ab:5a:d9:3c:f0:8e:93:ac:70:d8:06:1c:da:
d7:03:61:d1:5b:f3:8d:f8:0b:ae:13:7f:64:55:34:82:1f:b0:
fe:52:9d:8a:cd:08:e8:12:86:82:a4:a0:a0:16:d6:f9:3f:b5:
86:65:2c:21:19:8f:94:b1:9a:21:ef:b8:c1:e5:a1:6c:e7:b9:
43:8a:b0:76:58:1e:65:c2:b9:48:e9:23:0d:2f:4b:c2:4d:09:
d0:ca:85:ad:3d:51:20:68:62:23:41:24:e0:ca:75:75:fc:94:
85:3d:d6:ed:ef:b5:0b:2d:18:06:91:df:e6:3e:75:e7:9b:a7:
a8:4b:30:97:31:ba:da:8c:83:aa:e4:1f:0e:04:7d:bb:2e:41:
14:40:3c:2e:ab:08:60:de:cc:a5:ac:6e:14:63:b6:8e:f7:e9:
60:09:9a:1a:b8:d4:8c:9e:77:ea:17:03:3c:8d:5b:bb:4d:c5:
05:f6:b2:13:18:ed:41:47:0c:0b:cb:54:7b:4b:be:51:f1:20:
75:6c:3e:d3:7e:94:1d:49:e2:29:2e:20:4b:49:eb:62:2c:35:
b6:79:56:da:99:a5:c2:cb:aa:04:93:06:d7:53:be:7f:91:38:
16:95:d3:df:c2:08:c1:e4:38:45:66:ef:48:a0:84:04:2a:0c:
db:fa:eb:7d
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQf+qasKQOVUzFhEEz2V5jgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjMzNjMGUxNGQ1N2VhYmMzYjY1ZTM4YTc3MzZiZWJlNDkw
OTJlOWUwHhcNMjUwMTAxMDM0ODI3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5M2Y5Yzg3ZmFjMTVjNzU1ZGRjNWFiNzhjZDhiNjcwNmE0Y2JkNzc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnKMp39+Ks2uWudPockvxLcR9iNa
uTz2XGrWz6IojfUNnn7MlDy5yKhtrLI1fRWVwfsaRKkkzfAPTmzqUDuR6lRJHIvL
ssVCyHKaR3CU7fHKkung1BmXp4z+O5YtQR0611tQ0W5+ai81OEqE2/B8w1QGcIxj
zThmWX4qPjWx1g7OOJW2P67wdSTL03s1zTGb8LbHmMfNp8W4dxpYpz6+ycyxe8lX
gDcMgXSCD1/IgFfvTP3IPaosQJ8sh9f3WvhGhgSnkvvGrMbGT4nYJfedHLGtelZe
aOpFe2+ZZ8D2PO3rvWU8IbXvDRBYBlm8Hf9n4Knk9ta3A1HA5bjz3KMdAQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFJP5yH+sFcdV3cWreM2LZwaky9d2MB8GA1UdIwQY
MBaAFEwzwOFNV+q8O2Xjinc2vr5JCS6eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVERQQTRVMVg2cnc3WmVPS2R6YS12a2tKTHA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9jNzJhYmUtMzJkYy00ZjE4LTkwNWYt
YzFmZjA1NmZjNzZmLzEva19uSWY2d1Z4MVhkeGF0NHpZdG5CcVRMMTNZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi9jNzJhYmUtMzJkYy00ZjE4LTkwNWYtYzFmZjA1NmZjNzZm
LzEvVERQQTRVMVg2cnc3WmVPS2R6YS12a2tKTHA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAW9R5MA0E
AgACMAcDBQMqEonAMA0GCSqGSIb3DQEBCwUAA4IBAQCPCwvJNKta2TzwjpOscNgG
HNrXA2HRW/ON+AuuE39kVTSCH7D+Up2KzQjoEoaCpKCgFtb5P7WGZSwhGY+UsZoh
77jB5aFs57lDirB2WB5lwrlI6SMNL0vCTQnQyoWtPVEgaGIjQSTgynV1/JSFPdbt
77ULLRgGkd/mPnXnm6eoSzCXMbrajIOq5B8OBH27LkEUQDwuqwhg3sylrG4UY7aO
9+lgCZoauNSMnnfqFwM8jVu7TcUF9rITGO1BRwwLy1R7S75R8SB1bD7TfpQdSeIp
LiBLSetiLDW2eVbamaXCy6oEkwbXU75/kTgWldPfwgjB5DhFZu9IoIQEKgzb+ut9
-----END CERTIFICATE-----
Generated at Fri Apr 18 06:42:31 2025 by rpki-client