Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/VI_yXBKCcQZ2HPTs7KXkzb8eyy8.roa
File: VI_yXBKCcQZ2HPTs7KXkzb8eyy8.roa (raw, json)
Hash identifier: 5gpnejyQdAOLLFdOMcZBk6foM7YXWK1/HQYZe4Jc7bs=
Subject key identifier: 54:8F:F2:5C:12:82:71:06:76:1C:F4:EC:EC:A5:E4:CD:BF:1E:CB:2F
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 01944A64C6EF01A259BAD72129FAFA0EDA08
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/VI_yXBKCcQZ2HPTs7KXkzb8eyy8.roa
Signing time: Thu 09 Jan 2025 09:28:25 +0000
ROA not before: Thu 09 Jan 2025 09:28:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212363
IP address blocks: 91.148.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 05:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:4a:64:c6:ef:01:a2:59:ba:d7:21:29:fa:fa:0e:da:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Jan 9 09:28:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=548ff25c12827106761cf4ececa5e4cdbf1ecb2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d6:cd:8d:51:5b:fe:76:a5:a5:60:4a:49:3e:
81:e6:7d:8f:4c:cc:07:02:9c:70:67:15:21:9d:a6:
20:77:02:90:93:59:93:62:18:38:18:f8:20:50:f2:
8f:21:33:cd:8e:85:b3:c5:5c:ee:c1:59:62:fb:42:
4a:3d:69:d4:1e:15:cf:3e:f0:3a:eb:e7:8f:f1:41:
77:01:82:e9:98:3d:75:a2:6d:c2:a7:02:40:06:21:
86:17:a2:ba:8b:05:49:1e:e7:26:1e:ee:11:29:a1:
89:9d:3f:c7:3d:e7:1d:15:79:b7:9c:68:7a:bc:d6:
46:0f:95:72:83:aa:25:5a:23:6a:75:33:4c:87:b1:
28:ac:a2:6e:89:92:bd:ae:bd:15:f8:25:ca:d6:ba:
17:e1:6d:69:55:1f:9f:21:12:1b:8a:81:b6:8c:f1:
85:45:d2:fe:d7:2c:4a:99:40:e9:d1:c4:7d:1b:f9:
31:45:fb:b6:45:d2:6c:f4:4a:da:48:41:d3:12:89:
28:16:07:49:8c:89:ab:6a:4a:0a:0c:fe:b4:59:78:
62:f5:27:67:8c:27:da:0f:15:d2:e5:6e:22:50:96:
4a:ae:ef:39:ae:be:4c:fc:c6:0a:af:35:76:cd:64:
4d:a5:9d:99:83:87:fd:80:03:ca:f9:a1:b2:5d:d7:
26:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:8F:F2:5C:12:82:71:06:76:1C:F4:EC:EC:A5:E4:CD:BF:1E:CB:2F
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/VI_yXBKCcQZ2HPTs7KXkzb8eyy8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.148.184.0/24
Signature Algorithm: sha256WithRSAEncryption
17:c3:d8:ed:93:76:51:90:33:58:d1:e7:5f:af:36:a2:1d:8b:
bf:28:6d:c4:6d:a0:62:ca:47:d9:1f:3b:e5:c7:80:2d:78:42:
75:0a:73:1b:e6:a9:c6:0c:42:2a:28:64:df:5e:36:b3:43:30:
7a:e3:f8:2b:da:6c:2f:86:d5:41:96:65:2d:fe:ee:98:61:e1:
6d:c1:0f:97:a2:16:ae:c1:66:f0:f4:84:56:8a:5f:47:4b:08:
5b:4c:da:14:6c:b5:db:93:aa:58:ef:3f:06:cb:b9:9c:6a:29:
aa:3e:44:4c:5d:ac:68:53:1f:b2:73:26:a9:a4:38:b4:0e:33:
9f:f5:0e:a0:64:86:8d:2f:5b:b0:ba:93:a1:fd:5b:b1:2f:7b:
c2:99:90:a8:09:80:ef:ab:bf:55:46:a7:17:1c:07:8a:04:06:
56:79:0c:1d:56:f9:86:b4:20:43:4a:74:9a:8d:02:40:46:53:
05:8c:f2:35:b3:f4:42:86:ea:60:c1:c9:64:07:e8:c5:68:90:
b5:37:cd:28:ac:13:a8:60:aa:af:fe:34:41:d1:ac:94:de:3f:
29:27:82:92:74:8d:eb:cb:ab:b4:2b:cf:8a:70:82:45:cf:01:
77:0f:02:55:a7:eb:c8:f2:f1:f7:43:55:26:58:94:0c:7b:84:
32:ec:a6:b5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZRKZMbvAaJZutchKfr6DtoIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzNWVhYzY0ZWE0ODAyZTY4MjQ2ODZmN2MwZDIwMWYyYzg1
Y2IyYWEwHhcNMjUwMTA5MDkyODI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NDhmZjI1YzEyODI3MTA2NzYxY2Y0ZWNlY2E1ZTRjZGJmMWVjYjJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodbNjVFb/nalpWBKST6B5n2PTMwH
ApxwZxUhnaYgdwKQk1mTYhg4GPggUPKPITPNjoWzxVzuwVli+0JKPWnUHhXPPvA6
6+eP8UF3AYLpmD11om3CpwJABiGGF6K6iwVJHucmHu4RKaGJnT/HPecdFXm3nGh6
vNZGD5Vyg6olWiNqdTNMh7EorKJuiZK9rr0V+CXK1roX4W1pVR+fIRIbioG2jPGF
RdL+1yxKmUDp0cR9G/kxRfu2RdJs9EraSEHTEokoFgdJjImrakoKDP60WXhi9Sdn
jCfaDxXS5W4iUJZKru85rr5M/MYKrzV2zWRNpZ2Zg4f9gAPK+aGyXdcmDQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFSP8lwSgnEGdhz07Oyl5M2/HssvMB8GA1UdIwQY
MBaAFMNerGTqSALmgkaG98DSAfLIXLKqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMt
ZGFjYjVmMzU2ZWEzLzEvVklfeVhCS0NjUVoySFBUczdLWGt6YjhleXk4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMtZGFjYjVmMzU2ZWEz
LzEvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW5S4MA0G
CSqGSIb3DQEBCwUAA4IBAQAXw9jtk3ZRkDNY0edfrzaiHYu/KG3EbaBiykfZHzvl
x4AteEJ1CnMb5qnGDEIqKGTfXjazQzB64/gr2mwvhtVBlmUt/u6YYeFtwQ+Xohau
wWbw9IRWil9HSwhbTNoUbLXbk6pY7z8Gy7mcaimqPkRMXaxoUx+ycyappDi0DjOf
9Q6gZIaNL1uwupOh/VuxL3vCmZCoCYDvq79VRqcXHAeKBAZWeQwdVvmGtCBDSnSa
jQJARlMFjPI1s/RChupgwclkB+jFaJC1N80orBOoYKqv/jRB0ayU3j8pJ4KSdI3r
y6u0K8+KcIJFzwF3DwJVp+vI8vH3Q1UmWJQMe4Qy7Ka1
-----END CERTIFICATE-----
Generated at Mon Apr 7 13:20:53 2025 by rpki-client