Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/CgkoHi9RsjYjtbh7r--tHry08fQ.roa
File: CgkoHi9RsjYjtbh7r--tHry08fQ.roa (raw, json)
Hash identifier: 9zVo3gN7fK+I6ZtoEWyk2DDHUy2shoezHq0ybpjSZPI=
Subject key identifier: 0A:09:28:1E:2F:51:B2:36:23:B5:B8:7B:AF:EF:AD:1E:BC:B4:F1:F4
Certificate issuer: /CN=9611264bb9e4e6fa99449ee456c5d053f3ad01c5
Certificate serial: 019420D5C2D1D175B0AD0608CAE6A189A6E1
Authority key identifier: 96:11:26:4B:B9:E4:E6:FA:99:44:9E:E4:56:C5:D0:53:F3:AD:01:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/CgkoHi9RsjYjtbh7r--tHry08fQ.roa
Signing time: Wed 01 Jan 2025 07:47:47 +0000
ROA not before: Wed 01 Jan 2025 07:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29075
IP address blocks: 91.226.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:c2:d1:d1:75:b0:ad:06:08:ca:e6:a1:89:a6:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9611264bb9e4e6fa99449ee456c5d053f3ad01c5
Validity
Not Before: Jan 1 07:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0a09281e2f51b23623b5b87bafefad1ebcb4f1f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:fa:68:e7:bc:d0:7f:38:45:bc:7b:ac:b6:88:
d3:a0:49:49:8d:45:0b:8b:ab:7d:94:ee:25:bb:f6:
b5:bd:a5:4e:33:44:fc:49:41:11:fe:1e:d6:f6:9c:
f7:76:e4:79:7b:a5:8c:de:8a:fa:26:83:83:40:18:
ef:e0:4f:a1:3f:bc:35:aa:e7:a1:1c:3e:8f:bc:eb:
8a:ee:82:15:c9:a9:7a:8b:1c:e4:17:af:92:77:7b:
f2:68:74:53:d6:e6:c9:73:3e:de:57:44:1d:45:e1:
69:47:75:8e:6f:ed:59:19:2a:be:d8:f5:49:85:22:
e0:74:9c:c4:a8:d4:3e:95:ef:6f:f1:18:fb:c0:fc:
c9:58:a8:c0:b0:aa:5f:8e:39:8e:89:5d:a5:a2:d0:
33:35:de:a7:c5:1f:c3:9f:a1:bd:ef:32:39:3a:d9:
9b:08:f6:eb:65:27:3d:82:42:ab:3a:b1:fa:a3:24:
7a:d4:2f:72:de:43:67:4a:4d:a0:0e:7c:e8:13:ea:
d8:5a:c3:f2:93:24:ed:14:0e:1e:89:1e:f2:a3:43:
f6:b1:6d:80:82:86:da:78:70:a9:0a:f3:a0:84:ce:
38:35:23:3c:6d:69:dd:d4:f2:52:15:41:06:61:39:
14:b9:50:8f:a4:1f:a5:df:44:1c:f8:4c:ec:9b:84:
2e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:09:28:1E:2F:51:B2:36:23:B5:B8:7B:AF:EF:AD:1E:BC:B4:F1:F4
X509v3 Authority Key Identifier:
keyid:96:11:26:4B:B9:E4:E6:FA:99:44:9E:E4:56:C5:D0:53:F3:AD:01:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/CgkoHi9RsjYjtbh7r--tHry08fQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.98.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:31:c0:0a:e3:ca:60:86:23:79:ab:3a:52:d6:b9:b5:23:05:
42:72:0d:99:c0:9d:9b:91:3f:5d:79:60:07:3b:9a:e5:8b:7d:
bf:df:82:65:28:2d:39:59:c0:18:a0:e9:76:55:4c:7e:36:a1:
c1:4f:a9:09:ab:a2:1a:6d:30:e9:ba:e2:dd:6a:04:e3:12:8a:
34:96:89:7d:da:d5:b5:a8:63:a9:e9:d8:77:4e:86:db:e1:ef:
97:ff:56:d9:9e:07:4f:db:14:16:06:ae:60:d4:bd:16:14:70:
a9:d4:6a:a0:0d:35:4c:36:c6:44:98:94:b0:9b:29:57:a0:ad:
f0:e9:d7:28:c1:eb:0a:c8:4e:e0:3a:46:e3:ea:1c:05:b5:20:
b6:18:ba:2a:6c:9f:60:56:8a:13:80:8b:cb:03:56:7c:bb:15:
08:8c:3e:3d:1e:a8:80:27:24:fd:b9:d6:c8:58:3b:6e:7f:84:
55:eb:57:a1:e9:fe:b5:c0:ae:f5:9e:68:76:66:7e:ec:8e:51:
e0:d9:bc:8f:bd:8f:8c:ae:e8:15:46:16:d8:57:96:c5:9c:68:
0e:8d:76:bf:49:4e:11:bd:1a:d4:76:e4:85:c1:ee:6a:0e:64:
21:87:5a:a8:7f:76:50:c3:02:cc:79:c0:43:dd:0e:7a:b0:a7:
da:a5:94:38
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQg1cLR0XWwrQYIyuahiabhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2MTEyNjRiYjllNGU2ZmE5OTQ0OWVlNDU2YzVkMDUzZjNh
ZDAxYzUwHhcNMjUwMTAxMDc0NzQ3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYTA5MjgxZTJmNTFiMjM2MjNiNWI4N2JhZmVmYWQxZWJjYjRmMWY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvpo57zQfzhFvHustojToElJjUUL
i6t9lO4lu/a1vaVOM0T8SUER/h7W9pz3duR5e6WM3or6JoODQBjv4E+hP7w1queh
HD6PvOuK7oIVyal6ixzkF6+Sd3vyaHRT1ubJcz7eV0QdReFpR3WOb+1ZGSq+2PVJ
hSLgdJzEqNQ+le9v8Rj7wPzJWKjAsKpfjjmOiV2lotAzNd6nxR/Dn6G97zI5Otmb
CPbrZSc9gkKrOrH6oyR61C9y3kNnSk2gDnzoE+rYWsPykyTtFA4eiR7yo0P2sW2A
gobaeHCpCvOghM44NSM8bWnd1PJSFUEGYTkUuVCPpB+l30Qc+Ezsm4QuhQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAoJKB4vUbI2I7W4e6/vrR68tPH0MB8GA1UdIwQY
MBaAFJYRJku55Ob6mUSe5FbF0FPzrQHFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGhFbVM3bms1dnFaUko3a1ZzWFFVX090QWNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS82MGU5YTAtYzljMS00MWU5LTg5ZmMt
MjRiNjc2YjU2NzgzLzEvQ2drb0hpOVJzallqdGJoN3ItLXRIcnkwOGZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS82MGU5YTAtYzljMS00MWU5LTg5ZmMtMjRiNjc2YjU2Nzgz
LzEvbGhFbVM3bms1dnFaUko3a1ZzWFFVX090QWNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+JiMA0G
CSqGSIb3DQEBCwUAA4IBAQBbMcAK48pghiN5qzpS1rm1IwVCcg2ZwJ2bkT9deWAH
O5rli32/34JlKC05WcAYoOl2VUx+NqHBT6kJq6IabTDpuuLdagTjEoo0lol92tW1
qGOp6dh3Tobb4e+X/1bZngdP2xQWBq5g1L0WFHCp1GqgDTVMNsZEmJSwmylXoK3w
6dcowesKyE7gOkbj6hwFtSC2GLoqbJ9gVooTgIvLA1Z8uxUIjD49HqiAJyT9udbI
WDtuf4RV61eh6f61wK71nmh2Zn7sjlHg2byPvY+MrugVRhbYV5bFnGgOjXa/SU4R
vRrUduSFwe5qDmQhh1qof3ZQwwLMecBD3Q56sKfapZQ4
-----END CERTIFICATE-----
Generated at Sun Apr 20 03:28:36 2025 by rpki-client