Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/058435-a1c6-4436-95a2-b7114b69f84c/1/HeJAD4YHm_sJaYZYcU9XbBvO2ZQ.roa
File: HeJAD4YHm_sJaYZYcU9XbBvO2ZQ.roa (raw, json)
Hash identifier: X87UHvfB+nlPvI0ZCTJdcn/R8oWH+T+ddbzxZs7Ye8A=
Subject key identifier: 1D:E2:40:0F:86:07:9B:FB:09:69:86:58:71:4F:57:6C:1B:CE:D9:94
Certificate issuer: /CN=7af1a7bf74285db2e82091fbf463a2eef6e3a578
Certificate serial: 019421442D8681476604DFF7B8DF49F953AD
Authority key identifier: 7A:F1:A7:BF:74:28:5D:B2:E8:20:91:FB:F4:63:A2:EE:F6:E3:A5:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/evGnv3QoXbLoIJH79GOi7vbjpXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/058435-a1c6-4436-95a2-b7114b69f84c/1/HeJAD4YHm_sJaYZYcU9XbBvO2ZQ.roa
Signing time: Wed 01 Jan 2025 09:48:23 +0000
ROA not before: Wed 01 Jan 2025 09:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29119
IP address blocks: 91.90.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/058435-a1c6-4436-95a2-b7114b69f84c/1/evGnv3QoXbLoIJH79GOi7vbjpXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/058435-a1c6-4436-95a2-b7114b69f84c/1/evGnv3QoXbLoIJH79GOi7vbjpXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/evGnv3QoXbLoIJH79GOi7vbjpXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:2d:86:81:47:66:04:df:f7:b8:df:49:f9:53:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7af1a7bf74285db2e82091fbf463a2eef6e3a578
Validity
Not Before: Jan 1 09:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1de2400f86079bfb09698658714f576c1bced994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3f:fb:d0:8b:db:e7:e9:ad:b3:ff:22:cd:fc:
b7:8b:a4:05:b9:7a:7a:34:10:91:ec:2f:89:95:69:
7e:8f:2c:e8:61:34:b8:18:60:00:b3:6d:75:c7:7b:
b8:f6:82:78:2c:75:f3:a1:55:b1:ad:63:50:02:9f:
45:ca:6e:df:4f:57:eb:2e:34:67:d3:0c:53:71:cf:
0c:6f:72:e1:7a:03:2b:c8:40:af:5b:6c:67:cd:72:
c3:70:56:01:f5:a9:17:65:5c:9a:09:b6:e2:cb:45:
43:24:5e:b8:9f:1f:83:01:ae:48:d3:48:6e:7c:49:
8f:78:bf:54:e9:6d:bd:42:ab:df:9d:e0:d5:8a:c7:
54:a4:9a:14:7c:54:c3:e9:ae:80:12:9a:fa:6a:f0:
2c:12:b9:20:30:3a:db:60:3a:92:2e:6d:1d:9a:a8:
dd:30:9e:3b:bc:0c:84:98:7f:23:c4:f2:aa:ee:1e:
8e:84:62:ca:05:e1:1c:07:71:7d:c0:85:0f:b0:5c:
51:c6:6c:a0:71:2d:72:9f:88:4c:b6:a1:06:ef:d7:
ae:ac:46:34:07:3d:64:ed:f1:99:ad:5b:5e:a1:86:
f5:a9:23:b2:eb:b7:71:11:74:d0:02:46:85:f3:43:
62:6c:7b:c0:4a:cb:9d:be:d1:bc:40:48:a6:f5:a9:
18:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:E2:40:0F:86:07:9B:FB:09:69:86:58:71:4F:57:6C:1B:CE:D9:94
X509v3 Authority Key Identifier:
keyid:7A:F1:A7:BF:74:28:5D:B2:E8:20:91:FB:F4:63:A2:EE:F6:E3:A5:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evGnv3QoXbLoIJH79GOi7vbjpXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/058435-a1c6-4436-95a2-b7114b69f84c/1/HeJAD4YHm_sJaYZYcU9XbBvO2ZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/058435-a1c6-4436-95a2-b7114b69f84c/1/evGnv3QoXbLoIJH79GOi7vbjpXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.90.161.0/24
Signature Algorithm: sha256WithRSAEncryption
39:e5:79:00:68:5f:a9:90:a8:c5:11:41:42:81:6f:1a:11:2c:
0d:cc:63:71:c7:f2:17:fd:58:f7:ca:ed:17:bd:0f:3a:04:52:
4a:0a:92:80:f9:cc:e6:83:80:05:f6:41:be:7f:c3:8e:51:88:
07:e0:3f:55:f3:0d:ec:57:d6:2b:89:71:9b:ff:e5:61:68:92:
9a:f7:6d:c5:c8:43:05:12:1d:bf:d9:d4:22:60:cf:80:13:14:
fe:2d:42:04:ca:8c:30:8d:9b:8b:eb:df:9f:4e:25:51:c7:e4:
d6:9f:4e:42:85:54:97:0d:43:5c:f7:89:33:d9:51:dd:18:88:
dc:a0:7d:6d:bf:ea:91:38:6d:68:fd:3a:52:03:2c:48:00:0e:
18:2d:79:29:53:eb:ef:19:e7:8e:ee:ce:4a:7e:99:f4:91:d2:
0f:23:cb:e6:2e:3c:4a:da:18:a0:df:41:09:a9:5c:4f:f7:5e:
eb:4a:04:58:22:e7:33:db:c1:ec:1d:87:a3:a8:13:65:b2:0f:
8a:7a:1c:25:cb:b7:18:f5:29:32:62:fe:92:d6:c7:ab:fa:30:
e7:57:05:85:cd:70:11:ed:02:f6:e8:21:6c:af:90:cc:3f:33:
67:90:a6:4e:77:b8:38:44:ad:39:62:ea:13:5f:ae:b1:be:15:
41:ce:80:1b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhRC2GgUdmBN/3uN9J+VOtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhZjFhN2JmNzQyODVkYjJlODIwOTFmYmY0NjNhMmVlZjZl
M2E1NzgwHhcNMjUwMTAxMDk0ODIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZGUyNDAwZjg2MDc5YmZiMDk2OTg2NTg3MTRmNTc2YzFiY2VkOTk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvD/70Ivb5+mts/8izfy3i6QFuXp6
NBCR7C+JlWl+jyzoYTS4GGAAs211x3u49oJ4LHXzoVWxrWNQAp9Fym7fT1frLjRn
0wxTcc8Mb3LhegMryECvW2xnzXLDcFYB9akXZVyaCbbiy0VDJF64nx+DAa5I00hu
fEmPeL9U6W29QqvfneDVisdUpJoUfFTD6a6AEpr6avAsErkgMDrbYDqSLm0dmqjd
MJ47vAyEmH8jxPKq7h6OhGLKBeEcB3F9wIUPsFxRxmygcS1yn4hMtqEG79eurEY0
Bz1k7fGZrVteoYb1qSOy67dxEXTQAkaF80NibHvASsudvtG8QEim9akY8wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFB3iQA+GB5v7CWmGWHFPV2wbztmUMB8GA1UdIwQY
MBaAFHrxp790KF2y6CCR+/Rjou7246V4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXZHbnYzUW9YYkxvSUpINzlHT2k3dmJqcFhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8wNTg0MzUtYTFjNi00NDM2LTk1YTIt
YjcxMTRiNjlmODRjLzEvSGVKQUQ0WUhtX3NKYVlaWWNVOVhiQnZPMlpRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy8wNTg0MzUtYTFjNi00NDM2LTk1YTItYjcxMTRiNjlmODRj
LzEvZXZHbnYzUW9YYkxvSUpINzlHT2k3dmJqcFhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW1qhMA0G
CSqGSIb3DQEBCwUAA4IBAQA55XkAaF+pkKjFEUFCgW8aESwNzGNxx/IX/Vj3yu0X
vQ86BFJKCpKA+czmg4AF9kG+f8OOUYgH4D9V8w3sV9YriXGb/+VhaJKa923FyEMF
Eh2/2dQiYM+AExT+LUIEyowwjZuL69+fTiVRx+TWn05ChVSXDUNc94kz2VHdGIjc
oH1tv+qROG1o/TpSAyxIAA4YLXkpU+vvGeeO7s5Kfpn0kdIPI8vmLjxK2hig30EJ
qVxP917rSgRYIucz28HsHYejqBNlsg+Kehwly7cY9SkyYv6S1ser+jDnVwWFzXAR
7QL26CFsr5DMPzNnkKZOd7g4RK05YuoTX66xvhVBzoAb
-----END CERTIFICATE-----
Generated at Sun Apr 6 17:52:49 2025 by rpki-client