Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/4b8cc4-5fc2-4f26-8045-50ef726a9136/1/hiFOlTDCg2a8NEVG384am3Bu0NI.roa
File: hiFOlTDCg2a8NEVG384am3Bu0NI.roa (raw, json)
Hash identifier: QsAcrNKEK47Yz8Letal9hjURM1pVKMmWpzSetDZsOkE=
Subject key identifier: 86:21:4E:95:30:C2:83:66:BC:34:45:46:DF:CE:1A:9B:70:6E:D0:D2
Certificate issuer: /CN=e9fc6c81663cf6fce92e83e5d6628bc0eb6a94d2
Certificate serial: 019426D95FCB0473F6A284C2F15BA41C7A1E
Authority key identifier: E9:FC:6C:81:66:3C:F6:FC:E9:2E:83:E5:D6:62:8B:C0:EB:6A:94:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6fxsgWY89vzpLoPl1mKLwOtqlNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/4b8cc4-5fc2-4f26-8045-50ef726a9136/1/hiFOlTDCg2a8NEVG384am3Bu0NI.roa
Signing time: Thu 02 Jan 2025 11:49:27 +0000
ROA not before: Thu 02 Jan 2025 11:49:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57988
IP address blocks: 91.237.54.0/23 maxlen: 23
91.237.54.0/24 maxlen: 24
91.237.55.0/24 maxlen: 24
176.111.248.0/21 maxlen: 21
176.111.248.0/24 maxlen: 24
176.111.249.0/24 maxlen: 24
176.111.250.0/24 maxlen: 24
176.111.251.0/24 maxlen: 24
176.111.252.0/24 maxlen: 24
176.111.253.0/24 maxlen: 24
176.111.254.0/24 maxlen: 24
176.111.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/4b8cc4-5fc2-4f26-8045-50ef726a9136/1/6fxsgWY89vzpLoPl1mKLwOtqlNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/4b8cc4-5fc2-4f26-8045-50ef726a9136/1/6fxsgWY89vzpLoPl1mKLwOtqlNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/6fxsgWY89vzpLoPl1mKLwOtqlNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 08:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:5f:cb:04:73:f6:a2:84:c2:f1:5b:a4:1c:7a:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9fc6c81663cf6fce92e83e5d6628bc0eb6a94d2
Validity
Not Before: Jan 2 11:49:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=86214e9530c28366bc344546dfce1a9b706ed0d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:6c:bb:1a:57:2d:44:50:be:dd:ca:dd:a0:fc:
06:5a:23:8e:a4:4c:3f:4e:4e:1f:3f:fd:58:45:6e:
d3:7d:f6:6d:ec:46:61:4d:1b:f7:44:27:9e:20:b1:
4f:26:5c:51:60:79:a9:08:52:39:d8:bb:5c:a9:0c:
a2:21:97:7b:d4:ca:bf:3d:2b:3a:66:dd:5e:2d:38:
89:f9:52:7b:0c:1b:24:7b:e6:14:b6:09:63:76:a5:
90:f0:84:fe:79:82:69:b8:c2:35:23:85:56:a5:a3:
6e:37:5b:4f:cb:5f:9a:58:28:3e:06:e0:7b:51:9c:
79:15:ef:12:2d:76:4c:9d:9e:e6:5d:ff:d9:13:28:
e7:d5:a2:3f:f4:26:0e:0c:99:f3:79:e3:a8:5b:a0:
e8:55:16:ef:74:54:9a:fb:d5:97:b2:85:d6:46:ff:
7f:1a:71:80:85:43:be:84:c5:1a:1a:6b:42:1a:12:
35:1d:e1:8a:83:e3:4d:b1:19:03:18:6e:a9:3c:8c:
73:cc:0c:e2:e9:3f:64:5a:b0:ea:8e:06:a9:0c:26:
0d:3a:ca:4a:d4:89:47:8e:60:27:72:d9:82:e3:0c:
ca:a6:26:bd:56:6d:41:50:91:bd:c6:c1:08:4b:13:
71:14:9d:3d:91:a3:cb:7e:12:05:eb:66:05:56:04:
22:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:21:4E:95:30:C2:83:66:BC:34:45:46:DF:CE:1A:9B:70:6E:D0:D2
X509v3 Authority Key Identifier:
keyid:E9:FC:6C:81:66:3C:F6:FC:E9:2E:83:E5:D6:62:8B:C0:EB:6A:94:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6fxsgWY89vzpLoPl1mKLwOtqlNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/4b8cc4-5fc2-4f26-8045-50ef726a9136/1/hiFOlTDCg2a8NEVG384am3Bu0NI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/4b8cc4-5fc2-4f26-8045-50ef726a9136/1/6fxsgWY89vzpLoPl1mKLwOtqlNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.237.54.0/23
176.111.248.0/21
Signature Algorithm: sha256WithRSAEncryption
6d:d0:bf:79:af:13:ef:dc:26:1c:88:66:da:79:74:95:f7:55:
e7:65:e9:ec:00:df:da:42:be:0c:60:6f:de:6f:6c:6c:aa:7b:
ed:23:9b:3a:cd:5e:49:c8:d5:76:0e:9d:9a:d7:b9:29:b2:d1:
3c:83:38:6d:90:99:1a:ae:d4:cf:f4:af:f1:da:8d:01:16:cf:
c7:e8:f9:51:c3:4e:26:91:aa:d8:6a:a6:d6:75:48:51:d7:1a:
e9:b4:df:3b:0f:94:2b:ea:3d:8b:33:28:d6:2d:a2:0d:ad:5b:
d0:96:59:e4:f1:4c:19:7c:42:40:b4:b3:1c:5a:a1:98:a5:ef:
11:1d:48:5c:c8:3a:2e:bf:b6:d0:3e:4a:a0:00:fe:2c:14:6d:
d5:36:7c:65:64:cb:8e:3b:69:7f:7d:0d:39:fb:35:b2:c2:8f:
8c:a4:85:07:b0:5d:53:18:35:91:96:04:39:16:ae:ca:a5:2c:
a3:56:ad:e6:12:36:ce:ba:10:4b:fb:e7:29:51:94:ea:22:fd:
18:ba:bd:99:0f:d3:2a:0e:bb:0f:78:bf:63:30:23:ef:c8:92:
c5:26:51:5a:4d:a7:30:9f:e2:ae:5d:e9:43:d5:8e:67:d3:be:
58:db:31:be:3a:5c:fb:0e:da:63:cf:49:29:c9:43:22:da:25:
4c:4e:ca:fa
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQm2V/LBHP2ooTC8VukHHoeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5ZmM2YzgxNjYzY2Y2ZmNlOTJlODNlNWQ2NjI4YmMwZWI2
YTk0ZDIwHhcNMjUwMTAyMTE0OTI3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NjIxNGU5NTMwYzI4MzY2YmMzNDQ1NDZkZmNlMWE5YjcwNmVkMGQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Wy7GlctRFC+3crdoPwGWiOOpEw/
Tk4fP/1YRW7TffZt7EZhTRv3RCeeILFPJlxRYHmpCFI52LtcqQyiIZd71Mq/PSs6
Zt1eLTiJ+VJ7DBske+YUtgljdqWQ8IT+eYJpuMI1I4VWpaNuN1tPy1+aWCg+BuB7
UZx5Fe8SLXZMnZ7mXf/ZEyjn1aI/9CYODJnzeeOoW6DoVRbvdFSa+9WXsoXWRv9/
GnGAhUO+hMUaGmtCGhI1HeGKg+NNsRkDGG6pPIxzzAzi6T9kWrDqjgapDCYNOspK
1IlHjmAnctmC4wzKpia9Vm1BUJG9xsEISxNxFJ09kaPLfhIF62YFVgQi0QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFIYhTpUwwoNmvDRFRt/OGptwbtDSMB8GA1UdIwQY
MBaAFOn8bIFmPPb86S6D5dZii8DrapTSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmZ4c2dXWTg5dnpwTG9QbDFtS0x3T3RxbE5JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC80YjhjYzQtNWZjMi00ZjI2LTgwNDUt
NTBlZjcyNmE5MTM2LzEvaGlGT2xURENnMmE4TkVWRzM4NGFtM0J1ME5JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC80YjhjYzQtNWZjMi00ZjI2LTgwNDUtNTBlZjcyNmE5MTM2
LzEvNmZ4c2dXWTg5dnpwTG9QbDFtS0x3T3RxbE5JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBW+02AwQD
sG/4MA0GCSqGSIb3DQEBCwUAA4IBAQBt0L95rxPv3CYciGbaeXSV91XnZensAN/a
Qr4MYG/eb2xsqnvtI5s6zV5JyNV2Dp2a17kpstE8gzhtkJkartTP9K/x2o0BFs/H
6PlRw04mkarYaqbWdUhR1xrptN87D5Qr6j2LMyjWLaINrVvQllnk8UwZfEJAtLMc
WqGYpe8RHUhcyDouv7bQPkqgAP4sFG3VNnxlZMuOO2l/fQ05+zWywo+MpIUHsF1T
GDWRlgQ5Fq7KpSyjVq3mEjbOuhBL++cpUZTqIv0Yur2ZD9MqDrsPeL9jMCPvyJLF
JlFaTacwn+KuXelD1Y5n075Y2zG+Olz7Dtpjz0kpyUMi2iVMTsr6
-----END CERTIFICATE-----
Generated at Fri Feb 21 13:05:09 2025 by rpki-client