Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/XeZQQFPaAVx8eeHiyQp0jhcQ3-8.roa
File: XeZQQFPaAVx8eeHiyQp0jhcQ3-8.roa (raw, json)
Hash identifier: GgYc4/AqiQ4ojsWG84jmNOTNa4VwnLbXC2ehzQkBqW4=
Subject key identifier: 5D:E6:50:40:53:DA:01:5C:7C:79:E1:E2:C9:0A:74:8E:17:10:DF:EF
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 0194258FA1143CFDEF27973A35D3AF6A8A93
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/XeZQQFPaAVx8eeHiyQp0jhcQ3-8.roa
Signing time: Thu 02 Jan 2025 05:49:17 +0000
ROA not before: Thu 02 Jan 2025 05:49:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 196695
IP address blocks: 91.229.116.0/24 maxlen: 24
91.229.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 13:02:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:a1:14:3c:fd:ef:27:97:3a:35:d3:af:6a:8a:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Jan 2 05:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5de6504053da015c7c79e1e2c90a748e1710dfef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:59:f8:96:41:2f:f0:fb:ee:db:7f:bd:d0:cf:
22:38:3e:55:7a:ba:72:62:71:61:9a:46:78:ba:e3:
e2:97:29:f1:7a:0b:07:29:8e:2d:99:d6:a4:2a:33:
50:55:81:5e:c3:fa:c2:69:e2:bc:39:e3:b7:97:cb:
ad:77:ea:4b:9c:cc:85:66:6b:5f:da:8b:ee:8b:49:
0f:d9:92:fb:5b:04:3b:71:28:d8:45:1e:60:28:cc:
92:6c:83:cf:dc:00:c8:d1:2c:6e:06:9d:82:95:dc:
c4:e5:c2:b2:c3:a5:56:4d:48:82:f6:22:30:a3:22:
e2:94:a4:c1:e2:e8:ef:da:14:a5:ba:fe:6a:66:f1:
af:38:df:49:9e:9c:86:00:64:27:a0:bb:ae:e0:dd:
22:ea:78:96:c4:9c:30:22:b8:02:93:fe:c8:de:d8:
b0:67:41:c3:1b:c9:3d:fa:ad:c0:0c:fb:29:b5:98:
07:81:c6:00:58:3b:76:fe:e3:0f:58:c4:d1:6e:41:
31:6e:ca:ef:56:ef:a5:64:fd:c3:2e:93:f5:f0:c0:
1b:bc:a9:ae:35:26:d0:e6:de:e9:19:e0:27:8f:e5:
e1:ac:10:0a:20:89:dd:98:2e:af:5f:41:82:bd:fd:
63:c4:ca:50:8e:99:ed:a4:bf:8b:15:12:f6:b2:a0:
5b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:E6:50:40:53:DA:01:5C:7C:79:E1:E2:C9:0A:74:8E:17:10:DF:EF
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/XeZQQFPaAVx8eeHiyQp0jhcQ3-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.229.116.0/23
Signature Algorithm: sha256WithRSAEncryption
46:f4:fa:13:f4:00:0a:ab:51:c0:2a:46:bb:bd:b6:28:2e:f4:
46:f3:76:8b:4f:d9:d0:04:09:6b:2c:73:1b:83:97:18:fa:b0:
6c:80:ed:55:3b:79:c8:07:4e:cd:84:72:25:7e:24:38:bd:b2:
ae:15:50:f5:6c:a1:7d:de:80:d3:80:cc:64:1d:81:07:c1:4e:
87:07:9d:8c:73:c9:b2:6b:65:2e:ba:07:ab:6a:c2:c0:77:ff:
90:70:8a:53:71:2b:f8:72:7f:28:3e:bf:ac:57:ec:ce:9c:0e:
24:20:56:1f:9e:27:0e:64:00:ab:34:ac:51:a4:b2:28:ec:1a:
7a:e8:3f:d5:7d:e5:f1:5a:92:c8:ab:de:00:0c:4c:5f:7d:60:
10:9c:9a:fd:1f:04:c1:90:f4:33:6d:8e:2b:ab:c0:a9:e7:70:
54:36:2b:d8:44:bd:cd:9b:9b:58:17:76:c7:76:76:7b:e7:1f:
c5:7c:4d:ae:d8:24:5e:ee:40:0f:77:77:88:1d:18:1b:9e:26:
ef:47:2c:48:e2:22:82:ea:ec:0e:f0:34:92:1d:44:65:e3:d6:
24:54:23:f9:6d:69:1b:57:8e:17:11:7c:59:b1:47:99:43:10:
83:82:ef:43:47:2d:20:24:b6:06:50:d2:40:39:a2:02:98:55:
c4:16:7a:37
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlj6EUPP3vJ5c6NdOvaoqTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxODQ3OGYxOThmZTU2OTAxMGMzZGY2MjE5MTQyZjUzMGM0
ZjVlNTYwHhcNMjUwMTAyMDU0OTE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZGU2NTA0MDUzZGEwMTVjN2M3OWUxZTJjOTBhNzQ4ZTE3MTBkZmVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVn4lkEv8Pvu23+90M8iOD5Verpy
YnFhmkZ4uuPilynxegsHKY4tmdakKjNQVYFew/rCaeK8OeO3l8utd+pLnMyFZmtf
2ovui0kP2ZL7WwQ7cSjYRR5gKMySbIPP3ADI0SxuBp2CldzE5cKyw6VWTUiC9iIw
oyLilKTB4ujv2hSluv5qZvGvON9JnpyGAGQnoLuu4N0i6niWxJwwIrgCk/7I3tiw
Z0HDG8k9+q3ADPsptZgHgcYAWDt2/uMPWMTRbkExbsrvVu+lZP3DLpP18MAbvKmu
NSbQ5t7pGeAnj+XhrBAKIIndmC6vX0GCvf1jxMpQjpntpL+LFRL2sqBbiwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFF3mUEBT2gFcfHnh4skKdI4XEN/vMB8GA1UdIwQY
MBaAFGGEePGY/laQEMPfYhkUL1MMT15WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEt
YmE5OGYxMTIyMTIxLzEvWGVaUVFGUGFBVng4ZWVIaXlRcDBqaGNRMy04LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEtYmE5OGYxMTIyMTIx
LzEvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW+V0MA0G
CSqGSIb3DQEBCwUAA4IBAQBG9PoT9AAKq1HAKka7vbYoLvRG83aLT9nQBAlrLHMb
g5cY+rBsgO1VO3nIB07NhHIlfiQ4vbKuFVD1bKF93oDTgMxkHYEHwU6HB52Mc8my
a2UuugerasLAd/+QcIpTcSv4cn8oPr+sV+zOnA4kIFYfnicOZACrNKxRpLIo7Bp6
6D/VfeXxWpLIq94ADExffWAQnJr9HwTBkPQzbY4rq8Cp53BUNivYRL3Nm5tYF3bH
dnZ75x/FfE2u2CRe7kAPd3eIHRgbnibvRyxI4iKC6uwO8DSSHURl49YkVCP5bWkb
V44XEXxZsUeZQxCDgu9DRy0gJLYGUNJAOaICmFXEFno3
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:34:45 2025 by rpki-client