Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/91cbce-ac9c-4eec-b861-26c3fdc5e717/1/KXg-dytuO8ex4tQ85yTQffHt_6c.roa
File: KXg-dytuO8ex4tQ85yTQffHt_6c.roa (raw, json)
Hash identifier: WwN13tE0jgxoqC/QBhiOlmTcyL6rkhAHTngBOmvCXpE=
Subject key identifier: 29:78:3E:77:2B:6E:3B:C7:B1:E2:D4:3C:E7:24:D0:7D:F1:ED:FF:A7
Certificate issuer: /CN=6baf725e719244041964a09370e17fbefbbbaaf6
Certificate serial: 0194258F6AFBF6975149ECB4202F4FA33C67
Authority key identifier: 6B:AF:72:5E:71:92:44:04:19:64:A0:93:70:E1:7F:BE:FB:BB:AA:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a69yXnGSRAQZZKCTcOF_vvu7qvY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/91cbce-ac9c-4eec-b861-26c3fdc5e717/1/KXg-dytuO8ex4tQ85yTQffHt_6c.roa
Signing time: Thu 02 Jan 2025 05:49:03 +0000
ROA not before: Thu 02 Jan 2025 05:49:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47766
IP address blocks: 91.208.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/91cbce-ac9c-4eec-b861-26c3fdc5e717/1/a69yXnGSRAQZZKCTcOF_vvu7qvY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/91cbce-ac9c-4eec-b861-26c3fdc5e717/1/a69yXnGSRAQZZKCTcOF_vvu7qvY.mft
rsync://rpki.ripe.net/repository/DEFAULT/a69yXnGSRAQZZKCTcOF_vvu7qvY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:6a:fb:f6:97:51:49:ec:b4:20:2f:4f:a3:3c:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6baf725e719244041964a09370e17fbefbbbaaf6
Validity
Not Before: Jan 2 05:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=29783e772b6e3bc7b1e2d43ce724d07df1edffa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4c:43:e0:10:03:dd:94:12:bb:92:6a:4d:af:
69:fa:79:22:cb:d6:dc:37:5b:e3:f8:9d:1f:46:7f:
e0:5f:da:bf:6b:16:62:71:66:33:c7:ab:84:b9:3b:
90:4a:14:8d:0a:09:28:ff:9f:4a:78:2e:0b:ae:80:
6b:b2:c0:35:94:cd:9c:d1:48:6a:b0:38:58:5d:30:
ca:93:32:34:e9:fa:9f:93:11:08:d0:3a:91:26:97:
a9:35:a5:d9:06:8e:d7:3c:52:d7:27:bb:58:e4:e9:
97:d5:95:39:a8:59:f9:77:7f:4e:54:fb:f6:f4:52:
4a:76:4f:88:ba:11:eb:2b:9c:60:9c:0d:b5:7e:ac:
2b:c0:03:c2:7a:25:55:09:b6:f8:b0:5c:30:c1:db:
57:b8:e3:da:db:05:4c:bf:d7:04:8a:5f:a0:b2:9c:
28:9d:16:6e:76:96:1c:1c:87:c9:e5:7c:8e:3b:fb:
ad:4a:aa:2f:a4:a7:b3:63:bd:85:9d:da:ab:11:1a:
12:ab:7c:57:27:ea:59:02:85:8b:d6:ef:f4:53:12:
35:8c:6d:b7:31:0a:cc:22:a2:48:df:38:f6:4b:f4:
7f:28:87:0f:16:8a:e1:48:59:24:57:9c:83:28:5c:
32:50:0f:b2:b4:8a:c9:5b:6d:3d:a4:2b:ba:30:da:
46:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:78:3E:77:2B:6E:3B:C7:B1:E2:D4:3C:E7:24:D0:7D:F1:ED:FF:A7
X509v3 Authority Key Identifier:
keyid:6B:AF:72:5E:71:92:44:04:19:64:A0:93:70:E1:7F:BE:FB:BB:AA:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a69yXnGSRAQZZKCTcOF_vvu7qvY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/91cbce-ac9c-4eec-b861-26c3fdc5e717/1/KXg-dytuO8ex4tQ85yTQffHt_6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/91cbce-ac9c-4eec-b861-26c3fdc5e717/1/a69yXnGSRAQZZKCTcOF_vvu7qvY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.139.0/24
Signature Algorithm: sha256WithRSAEncryption
32:ec:dd:42:ed:9a:81:0f:fa:70:b6:02:42:a5:1b:94:61:91:
5f:cb:f7:cd:d8:e0:6f:fc:88:6f:dd:90:9a:3c:b0:f3:c2:f3:
8e:7c:22:9b:99:51:13:fe:b7:75:2a:5a:21:bc:e0:98:00:1d:
4d:88:56:00:c3:95:e6:06:b1:ff:9d:c4:ac:8c:7c:57:cc:32:
42:99:be:f0:b7:6c:22:13:f3:74:92:94:a5:35:ea:9c:fc:fc:
9a:0b:2c:d5:61:33:45:10:9a:78:0b:1f:d6:4c:3c:ae:22:62:
36:b4:09:e2:f7:f5:bb:87:fc:94:bf:da:83:4f:9f:b3:57:82:
20:4d:00:ec:3d:17:c3:d4:3f:06:bd:25:59:a4:b2:4b:19:00:
57:1c:41:8f:e5:7d:26:8d:0b:48:39:a7:36:89:b2:0b:a7:86:
24:fd:60:e2:b6:1c:34:1d:55:e9:bf:35:8a:7b:14:a5:3d:40:
ce:a6:eb:5f:af:7e:c6:06:bc:c6:ea:ef:a8:67:b8:a0:8b:27:
be:17:14:44:97:d0:f1:b7:69:25:80:dd:48:67:70:bd:7b:3a:
b1:58:f2:01:84:e2:7e:6e:31:53:fb:b0:ee:63:9c:ea:54:72:
fe:6b:3b:d8:f4:29:91:eb:2f:c7:a5:02:70:60:2a:da:07:76:
2c:40:41:85
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlj2r79pdRSey0IC9PozxnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiYWY3MjVlNzE5MjQ0MDQxOTY0YTA5MzcwZTE3ZmJlZmJi
YmFhZjYwHhcNMjUwMTAyMDU0OTAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyOTc4M2U3NzJiNmUzYmM3YjFlMmQ0M2NlNzI0ZDA3ZGYxZWRmZmE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0xD4BAD3ZQSu5JqTa9p+nkiy9bc
N1vj+J0fRn/gX9q/axZicWYzx6uEuTuQShSNCgko/59KeC4LroBrssA1lM2c0Uhq
sDhYXTDKkzI06fqfkxEI0DqRJpepNaXZBo7XPFLXJ7tY5OmX1ZU5qFn5d39OVPv2
9FJKdk+IuhHrK5xgnA21fqwrwAPCeiVVCbb4sFwwwdtXuOPa2wVMv9cEil+gspwo
nRZudpYcHIfJ5XyOO/utSqovpKezY72FndqrERoSq3xXJ+pZAoWL1u/0UxI1jG23
MQrMIqJI3zj2S/R/KIcPForhSFkkV5yDKFwyUA+ytIrJW209pCu6MNpGjwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCl4PncrbjvHseLUPOck0H3x7f+nMB8GA1UdIwQY
MBaAFGuvcl5xkkQEGWSgk3Dhf777u6r2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTY5eVhuR1NSQVFaWktDVGNPRl92dnU3cXZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC85MWNiY2UtYWM5Yy00ZWVjLWI4NjEt
MjZjM2ZkYzVlNzE3LzEvS1hnLWR5dHVPOGV4NHRRODV5VFFmZkh0XzZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC85MWNiY2UtYWM5Yy00ZWVjLWI4NjEtMjZjM2ZkYzVlNzE3
LzEvYTY5eVhuR1NSQVFaWktDVGNPRl92dnU3cXZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9CLMA0G
CSqGSIb3DQEBCwUAA4IBAQAy7N1C7ZqBD/pwtgJCpRuUYZFfy/fN2OBv/Ihv3ZCa
PLDzwvOOfCKbmVET/rd1KlohvOCYAB1NiFYAw5XmBrH/ncSsjHxXzDJCmb7wt2wi
E/N0kpSlNeqc/PyaCyzVYTNFEJp4Cx/WTDyuImI2tAni9/W7h/yUv9qDT5+zV4Ig
TQDsPRfD1D8GvSVZpLJLGQBXHEGP5X0mjQtIOac2ibILp4Yk/WDithw0HVXpvzWK
exSlPUDOputfr37GBrzG6u+oZ7igiye+FxREl9Dxt2klgN1IZ3C9ezqxWPIBhOJ+
bjFT+7DuY5zqVHL+azvY9CmR6y/HpQJwYCraB3YsQEGF
-----END CERTIFICATE-----
Generated at Sun Feb 2 10:04:36 2025 by rpki-client