Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/GbAw3F7MjNJ95C6AZRHjgy4C_8E.roa
File: GbAw3F7MjNJ95C6AZRHjgy4C_8E.roa (raw, json)
Hash identifier: hsZPGboOEmxaS9pP8M6WQo5xOeBG/GIeZlXu45Z680A=
Subject key identifier: 19:B0:30:DC:5E:CC:8C:D2:7D:E4:2E:80:65:11:E3:83:2E:02:FF:C1
Certificate issuer: /CN=975c9ffa65c3c9b57c549e72cd6dc703005b2e0e
Certificate serial: 019421442CD7C740D09610148F1696A75F88
Authority key identifier: 97:5C:9F:FA:65:C3:C9:B5:7C:54:9E:72:CD:6D:C7:03:00:5B:2E:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l1yf-mXDybV8VJ5yzW3HAwBbLg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/GbAw3F7MjNJ95C6AZRHjgy4C_8E.roa
Signing time: Wed 01 Jan 2025 09:48:23 +0000
ROA not before: Wed 01 Jan 2025 09:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198826
IP address blocks: 91.239.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/l1yf-mXDybV8VJ5yzW3HAwBbLg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 22:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:2c:d7:c7:40:d0:96:10:14:8f:16:96:a7:5f:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=975c9ffa65c3c9b57c549e72cd6dc703005b2e0e
Validity
Not Before: Jan 1 09:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=19b030dc5ecc8cd27de42e806511e3832e02ffc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c2:e9:8f:1b:6e:44:80:ab:b5:27:b4:4c:a5:
90:c0:ce:2b:a8:c2:1d:8d:db:5b:d0:91:cd:3d:52:
ab:c2:5e:0f:56:53:a8:c5:78:ee:58:3e:a0:a8:a0:
b6:29:19:b7:f1:15:b9:7d:07:5a:fc:55:3b:88:b1:
61:5f:62:57:9c:65:42:00:70:9a:c5:b8:f1:d1:a4:
2b:e5:81:a8:16:53:00:85:09:56:13:88:40:1f:25:
18:61:4e:30:4e:82:9c:a3:f8:93:64:20:9a:79:bf:
f0:81:32:6e:6b:59:fe:d1:e3:f1:1a:c3:9b:b4:9f:
30:bb:b3:a0:db:85:e4:93:58:79:76:ac:2d:eb:1d:
10:5a:21:ba:0b:5b:aa:20:56:57:1e:0f:72:05:90:
c7:36:8a:bf:09:83:0b:0b:fd:18:96:dd:64:e8:af:
f9:46:a7:d5:12:b4:b7:da:ce:e2:80:a1:96:76:f1:
72:86:bc:c4:e0:62:20:5f:0e:27:23:66:dc:f6:07:
58:ac:52:c6:07:df:c5:c6:bb:39:20:05:63:20:b7:
a5:a3:7a:bc:b5:06:15:03:07:2a:73:89:2e:b7:1b:
64:25:8f:cd:40:79:2e:3a:1b:39:30:14:75:04:ba:
30:e0:15:ba:82:a3:a2:46:52:c6:51:2b:8e:c7:14:
69:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:B0:30:DC:5E:CC:8C:D2:7D:E4:2E:80:65:11:E3:83:2E:02:FF:C1
X509v3 Authority Key Identifier:
keyid:97:5C:9F:FA:65:C3:C9:B5:7C:54:9E:72:CD:6D:C7:03:00:5B:2E:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l1yf-mXDybV8VJ5yzW3HAwBbLg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/GbAw3F7MjNJ95C6AZRHjgy4C_8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.112.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:09:3a:dc:7d:1e:97:1e:e4:34:29:71:a6:1b:6c:b7:77:c3:
b1:49:72:17:1c:20:ee:d1:21:5f:e2:cc:d2:36:00:da:e8:77:
fb:4d:7c:c7:69:9d:1d:93:bd:bd:45:51:30:83:6c:29:ad:0e:
2b:71:3c:47:88:db:43:17:89:bc:7b:45:8a:e8:19:72:85:79:
a1:4a:7e:49:13:ba:da:3d:d6:8c:61:7b:70:b7:9c:d5:ee:05:
de:b9:4b:fa:ea:aa:d2:c8:bf:4d:23:4f:88:2b:3c:fd:d4:87:
75:a9:0e:30:ff:2c:aa:5b:9f:25:ea:8f:6a:f5:95:ff:20:2c:
30:c2:50:db:22:05:65:93:3c:0c:14:35:38:04:87:90:5e:d6:
b5:ff:a6:d8:eb:cc:35:10:90:e8:bc:72:07:9f:b8:ad:e6:9a:
bf:c1:48:d0:ce:39:36:07:b2:0c:9f:78:f7:43:05:b4:0d:6a:
9f:d8:a9:1f:50:a6:a5:d5:75:35:43:2b:04:07:41:cd:e9:7a:
12:46:e3:25:2b:76:4f:e9:36:a5:1a:ee:4e:c2:b7:ae:37:76:
22:e4:ab:fb:ee:05:de:38:bf:ef:10:3b:d8:c3:52:78:36:80:
d8:69:ab:2f:3d:28:8f:0d:90:50:c3:e4:2d:e8:52:75:e2:25:
dd:85:55:d0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhRCzXx0DQlhAUjxaWp1+IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3NWM5ZmZhNjVjM2M5YjU3YzU0OWU3MmNkNmRjNzAzMDA1
YjJlMGUwHhcNMjUwMTAxMDk0ODIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOWIwMzBkYzVlY2M4Y2QyN2RlNDJlODA2NTExZTM4MzJlMDJmZmMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcLpjxtuRICrtSe0TKWQwM4rqMId
jdtb0JHNPVKrwl4PVlOoxXjuWD6gqKC2KRm38RW5fQda/FU7iLFhX2JXnGVCAHCa
xbjx0aQr5YGoFlMAhQlWE4hAHyUYYU4wToKco/iTZCCaeb/wgTJua1n+0ePxGsOb
tJ8wu7Og24Xkk1h5dqwt6x0QWiG6C1uqIFZXHg9yBZDHNoq/CYMLC/0Ylt1k6K/5
RqfVErS32s7igKGWdvFyhrzE4GIgXw4nI2bc9gdYrFLGB9/Fxrs5IAVjILelo3q8
tQYVAwcqc4kutxtkJY/NQHkuOhs5MBR1BLow4BW6gqOiRlLGUSuOxxRpSwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBmwMNxezIzSfeQugGUR44MuAv/BMB8GA1UdIwQY
MBaAFJdcn/plw8m1fFSecs1txwMAWy4OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDF5Zi1tWER5YlY4Vko1eXpXM0hBd0JiTGc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC85MmVjZWEtM2YzYy00YmFhLTgzNGIt
MTI2YzdiNDhiODQ3LzEvR2JBdzNGN01qTko5NUM2QVpSSGpneTRDXzhFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC85MmVjZWEtM2YzYy00YmFhLTgzNGItMTI2YzdiNDhiODQ3
LzEvbDF5Zi1tWER5YlY4Vko1eXpXM0hBd0JiTGc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+9wMA0G
CSqGSIb3DQEBCwUAA4IBAQCLCTrcfR6XHuQ0KXGmG2y3d8OxSXIXHCDu0SFf4szS
NgDa6Hf7TXzHaZ0dk729RVEwg2wprQ4rcTxHiNtDF4m8e0WK6BlyhXmhSn5JE7ra
PdaMYXtwt5zV7gXeuUv66qrSyL9NI0+IKzz91Id1qQ4w/yyqW58l6o9q9ZX/ICww
wlDbIgVlkzwMFDU4BIeQXta1/6bY68w1EJDovHIHn7it5pq/wUjQzjk2B7IMn3j3
QwW0DWqf2KkfUKal1XU1QysEB0HN6XoSRuMlK3ZP6TalGu5OwreuN3Yi5Kv77gXe
OL/vEDvYw1J4NoDYaasvPSiPDZBQw+Qt6FJ14iXdhVXQ
-----END CERTIFICATE-----
Generated at Thu Mar 13 07:17:02 2025 by rpki-client