Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/Kk55CxMuRoABHPQT4nyNv0rGWGc.roa
File: Kk55CxMuRoABHPQT4nyNv0rGWGc.roa (raw, json)
Hash identifier: lvAnBMqzmoB6sfauO06Jjpq1kAnKY/291ymOUVXS2fc=
Subject key identifier: 2A:4E:79:0B:13:2E:46:80:01:1C:F4:13:E2:7C:8D:BF:4A:C6:58:67
Certificate issuer: /CN=0e2e4fd219f5b77ce80cdfaf9e3a6441dec50042
Certificate serial: 01942143D5A778DD1941B7C60A11E49615EA
Authority key identifier: 0E:2E:4F:D2:19:F5:B7:7C:E8:0C:DF:AF:9E:3A:64:41:DE:C5:00:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Di5P0hn1t3zoDN-vnjpkQd7FAEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/Kk55CxMuRoABHPQT4nyNv0rGWGc.roa
Signing time: Wed 01 Jan 2025 09:48:01 +0000
ROA not before: Wed 01 Jan 2025 09:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44574
IP address blocks: 91.230.181.0/24 maxlen: 24
95.215.174.0/24 maxlen: 24
193.104.113.0/24 maxlen: 24
193.150.34.0/24 maxlen: 24
193.238.80.0/22 maxlen: 22
2001:678:498::/48 maxlen: 48
2001:678:49c::/48 maxlen: 48
2001:678:4a0::/48 maxlen: 48
2001:678:4a4::/48 maxlen: 48
2001:67c:16d0::/48 maxlen: 48
2001:67c:16d1::/48 maxlen: 48
2001:67c:1954::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/Di5P0hn1t3zoDN-vnjpkQd7FAEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/Di5P0hn1t3zoDN-vnjpkQd7FAEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Di5P0hn1t3zoDN-vnjpkQd7FAEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 12:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:d5:a7:78:dd:19:41:b7:c6:0a:11:e4:96:15:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e2e4fd219f5b77ce80cdfaf9e3a6441dec50042
Validity
Not Before: Jan 1 09:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2a4e790b132e4680011cf413e27c8dbf4ac65867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:aa:41:e3:ed:1d:14:47:21:86:8f:f6:f0:ae:
9c:50:7e:69:98:d0:17:5b:8e:fd:30:a3:92:30:f2:
f0:fd:9d:8b:7b:68:8f:7c:51:9f:07:52:88:3b:df:
ac:08:b7:66:ed:ad:12:7b:70:1f:24:ed:ae:3b:fc:
6f:e6:5e:4d:a7:8f:d6:9a:97:07:44:9e:5c:df:33:
21:da:e9:5f:ce:cc:9f:a1:b0:79:34:d0:a1:f6:44:
5f:58:bf:65:ad:4d:6a:2b:80:40:de:a0:73:9a:f9:
ad:f3:b9:28:63:26:66:f0:7c:e0:69:f4:a3:53:7f:
bb:5e:ee:9c:f7:d4:72:b2:ea:45:ba:21:e3:e8:75:
22:85:e3:e0:3b:aa:b6:be:1b:54:df:26:c7:c6:9f:
df:4e:fa:49:e3:9c:82:e6:90:46:61:95:2e:70:b6:
af:1e:fc:41:09:e7:c9:da:16:ce:93:2d:87:48:fe:
df:d8:bd:95:cb:e6:30:15:38:6e:c3:f4:ae:e7:7b:
b1:50:55:62:76:1f:61:68:34:33:f7:e0:a9:ca:03:
70:28:f4:2c:ce:f5:56:b8:e5:76:d1:cb:d4:60:75:
4f:20:fb:99:a7:44:e3:03:10:1b:4b:e4:fe:7e:ce:
ba:7f:20:ee:35:c0:b4:60:88:20:23:d8:94:ff:af:
c4:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:4E:79:0B:13:2E:46:80:01:1C:F4:13:E2:7C:8D:BF:4A:C6:58:67
X509v3 Authority Key Identifier:
keyid:0E:2E:4F:D2:19:F5:B7:7C:E8:0C:DF:AF:9E:3A:64:41:DE:C5:00:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Di5P0hn1t3zoDN-vnjpkQd7FAEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/Kk55CxMuRoABHPQT4nyNv0rGWGc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/Di5P0hn1t3zoDN-vnjpkQd7FAEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.230.181.0/24
95.215.174.0/24
193.104.113.0/24
193.150.34.0/24
193.238.80.0/22
IPv6:
2001:678:498::/48
2001:678:49c::/48
2001:678:4a0::/48
2001:678:4a4::/48
2001:67c:16d0::/47
2001:67c:1954::/48
Signature Algorithm: sha256WithRSAEncryption
2a:62:65:79:2e:e1:1c:42:ed:a7:f3:15:0b:23:82:19:94:f5:
0b:2d:96:20:61:20:01:a5:38:c3:95:8a:2b:74:35:31:7e:49:
22:8b:69:6f:6c:84:2a:74:2a:d1:6b:c9:dd:e5:9e:96:85:e6:
7d:de:34:e9:36:73:d2:5a:90:b5:4c:06:c3:49:10:d1:fa:3a:
d3:be:9c:d7:7e:d3:32:94:9f:27:f7:25:3b:6a:fc:73:29:86:
d4:9d:c6:52:55:f0:c4:c3:12:13:21:15:53:12:44:92:8f:02:
79:ef:3f:73:ed:e9:96:ea:1e:ce:28:71:da:6e:e4:72:6a:f2:
70:3a:00:d9:12:61:d2:7e:cb:bb:11:dc:a5:2c:25:2e:0d:07:
00:bb:01:b2:e8:29:81:2c:12:e4:5f:10:a1:2f:b8:3e:4e:89:
e5:ff:8c:87:00:96:74:2f:50:05:21:e3:0d:a8:9d:a7:e9:9a:
b5:a4:57:6d:55:ed:82:2b:77:38:9b:44:a4:63:81:44:c0:93:
1c:eb:f9:e0:66:f2:a2:e9:cb:95:a7:ce:e3:61:75:12:81:b3:
68:b9:58:f5:18:e2:a2:16:94:c4:ec:7b:8c:d7:f9:84:bb:3a:
41:31:45:9d:88:21:88:5f:6c:d1:d5:8b:3d:e8:63:f7:f4:82:
70:0e:1d:ce
-----BEGIN CERTIFICATE-----
MIIFUzCCBDugAwIBAgISAZQhQ9WneN0ZQbfGChHklhXqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlMmU0ZmQyMTlmNWI3N2NlODBjZGZhZjllM2E2NDQxZGVj
NTAwNDIwHhcNMjUwMTAxMDk0ODAxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYTRlNzkwYjEzMmU0NjgwMDExY2Y0MTNlMjdjOGRiZjRhYzY1ODY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqpB4+0dFEchho/28K6cUH5pmNAX
W479MKOSMPLw/Z2Le2iPfFGfB1KIO9+sCLdm7a0Se3AfJO2uO/xv5l5Np4/WmpcH
RJ5c3zMh2ulfzsyfobB5NNCh9kRfWL9lrU1qK4BA3qBzmvmt87koYyZm8HzgafSj
U3+7Xu6c99RysupFuiHj6HUihePgO6q2vhtU3ybHxp/fTvpJ45yC5pBGYZUucLav
HvxBCefJ2hbOky2HSP7f2L2Vy+YwFThuw/Su53uxUFVidh9haDQz9+CpygNwKPQs
zvVWuOV20cvUYHVPIPuZp0TjAxAbS+T+fs66fyDuNcC0YIggI9iU/6/EPwIDAQAB
o4ICXzCCAlswHQYDVR0OBBYEFCpOeQsTLkaAARz0E+J8jb9KxlhnMB8GA1UdIwQY
MBaAFA4uT9IZ9bd86Azfr546ZEHexQBCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGk1UDBobjF0M3pvRE4tdm5qcGtRZDdGQUVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9lMTEyMjQtNjFjNy00Nzg2LTg2ZTkt
MjM4ZmVlNjkyNDMwLzEvS2s1NUN4TXVSb0FCSFBRVDRueU52MHJHV0djLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS9lMTEyMjQtNjFjNy00Nzg2LTg2ZTktMjM4ZmVlNjkyNDMw
LzEvRGk1UDBobjF0M3pvRE4tdm5qcGtRZDdGQUVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHUGCCsGAQUFBwEHAQH/BGYwZDAkBAIAATAeAwQAW+a1AwQA
X9euAwQAwWhxAwQAwZYiAwQCwe5QMDwEAgACMDYDBwAgAQZ4BJgDBwAgAQZ4BJwD
BwAgAQZ4BKADBwAgAQZ4BKQDBwEgAQZ8FtADBwAgAQZ8GVQwDQYJKoZIhvcNAQEL
BQADggEBACpiZXku4RxC7afzFQsjghmU9QstliBhIAGlOMOViit0NTF+SSKLaW9s
hCp0KtFryd3lnpaF5n3eNOk2c9JakLVMBsNJENH6OtO+nNd+0zKUnyf3JTtq/HMp
htSdxlJV8MTDEhMhFVMSRJKPAnnvP3Pt6ZbqHs4ocdpu5HJq8nA6ANkSYdJ+y7sR
3KUsJS4NBwC7AbLoKYEsEuRfEKEvuD5OieX/jIcAlnQvUAUh4w2onafpmrWkV21V
7YIrdzibRKRjgUTAkxzr+eBm8qLpy5WnzuNhdRKBs2i5WPUY4qIWlMTse4zX+YS7
OkExRZ2IIYhfbNHViz3oY/f0gnAOHc4=
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:45:18 2025 by rpki-client