Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/e3b6fc-ef63-4c06-a304-f3b5e80250dd/1/9ZU6x_6PrSPT_uW6sJ6cuQkOSmo.roa
File: 9ZU6x_6PrSPT_uW6sJ6cuQkOSmo.roa (raw, json)
Hash identifier: bC7IXHx63H7lpbQ+lP0qMuIBLR6TNwS7YJHQvmLzCRc=
Subject key identifier: F5:95:3A:C7:FE:8F:AD:23:D3:FE:E5:BA:B0:9E:9C:B9:09:0E:4A:6A
Certificate issuer: /CN=7c590b733c56e14ebac69f7b44d4bc954e9370e3
Certificate serial: 019427479104714675731751A5A3BCF76E1C
Authority key identifier: 7C:59:0B:73:3C:56:E1:4E:BA:C6:9F:7B:44:D4:BC:95:4E:93:70:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fFkLczxW4U66xp97RNS8lU6TcOM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/e3b6fc-ef63-4c06-a304-f3b5e80250dd/1/9ZU6x_6PrSPT_uW6sJ6cuQkOSmo.roa
Signing time: Thu 02 Jan 2025 13:49:49 +0000
ROA not before: Thu 02 Jan 2025 13:49:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197602
IP address blocks: 91.224.178.0/23 maxlen: 24
91.224.178.0/24 maxlen: 24
91.224.179.0/24 maxlen: 24
2001:678:f58::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/e3b6fc-ef63-4c06-a304-f3b5e80250dd/1/fFkLczxW4U66xp97RNS8lU6TcOM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/e3b6fc-ef63-4c06-a304-f3b5e80250dd/1/fFkLczxW4U66xp97RNS8lU6TcOM.mft
rsync://rpki.ripe.net/repository/DEFAULT/fFkLczxW4U66xp97RNS8lU6TcOM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 16:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:91:04:71:46:75:73:17:51:a5:a3:bc:f7:6e:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c590b733c56e14ebac69f7b44d4bc954e9370e3
Validity
Not Before: Jan 2 13:49:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f5953ac7fe8fad23d3fee5bab09e9cb9090e4a6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:24:b9:09:be:ce:28:d8:a3:69:fa:74:cb:d1:
38:28:da:b7:fd:bf:b5:95:89:a0:cc:7c:a1:36:24:
24:20:4a:b1:f1:a3:48:ca:2a:66:3c:e7:fc:7c:0f:
9f:82:3c:c9:d9:34:15:e9:e8:05:9e:ea:12:41:08:
38:a6:63:89:ec:fc:c1:56:b5:4b:14:a0:4b:f2:8c:
57:d2:55:af:93:15:19:c5:cb:e1:72:89:0a:f2:ea:
1f:25:9b:b8:86:de:39:7a:d2:5d:c0:9c:2c:c2:4d:
ee:e7:89:03:d6:99:61:d9:74:79:8a:64:76:11:69:
ed:f0:b2:03:de:59:ac:98:da:b8:e8:49:e8:88:4d:
a6:66:94:4d:d7:83:cd:97:9b:da:f9:00:72:fe:61:
6c:af:51:0e:19:49:28:c7:56:3e:f9:8c:88:31:b4:
66:a8:4a:71:81:b1:ab:d1:f0:59:35:9c:b1:86:92:
33:fe:53:f9:6a:91:54:a7:00:18:34:b7:0b:20:c8:
4d:18:47:c5:6f:a9:ff:ad:78:f4:bf:8e:c9:35:b5:
56:b5:9a:f7:46:34:d3:d6:0b:91:50:5c:17:51:99:
2f:96:26:5a:3d:6e:d4:30:4d:06:86:bf:fe:85:cf:
e6:09:40:1d:95:a6:44:11:8c:cc:b7:47:54:78:5f:
ec:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:95:3A:C7:FE:8F:AD:23:D3:FE:E5:BA:B0:9E:9C:B9:09:0E:4A:6A
X509v3 Authority Key Identifier:
keyid:7C:59:0B:73:3C:56:E1:4E:BA:C6:9F:7B:44:D4:BC:95:4E:93:70:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fFkLczxW4U66xp97RNS8lU6TcOM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e3b6fc-ef63-4c06-a304-f3b5e80250dd/1/9ZU6x_6PrSPT_uW6sJ6cuQkOSmo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e3b6fc-ef63-4c06-a304-f3b5e80250dd/1/fFkLczxW4U66xp97RNS8lU6TcOM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.224.178.0/23
IPv6:
2001:678:f58::/48
Signature Algorithm: sha256WithRSAEncryption
24:69:0d:38:99:44:23:79:79:1f:c0:c2:c8:31:d9:57:58:dd:
a5:84:db:be:8a:c6:23:7a:79:f8:4f:45:91:82:82:04:8a:d1:
1e:ac:85:d0:1e:42:ce:12:62:ea:ae:8d:53:a6:f7:f9:d9:19:
06:d1:28:6e:79:b2:00:cd:59:19:dd:47:05:15:33:91:6e:00:
dc:78:fd:69:fe:b9:d7:7d:78:30:d4:3e:0e:ff:1f:b1:b5:80:
22:f1:cc:a7:65:23:41:08:cc:3d:b3:7e:f4:db:88:4b:d5:34:
90:aa:64:ad:fb:04:5c:cb:bc:39:e7:bb:ab:a9:00:ce:9b:35:
43:ee:90:81:1b:5a:b5:a7:93:dc:16:58:e5:6e:ba:2d:d8:23:
4c:c1:15:e1:5d:c4:aa:3c:95:ea:75:04:1a:de:ae:8b:bb:aa:
42:42:a9:71:a6:21:6e:8e:c9:ec:4d:c6:e8:39:d2:09:04:52:
88:00:75:82:fd:aa:9a:e4:f5:75:ae:84:1e:bf:a5:d0:03:a3:
d9:f9:06:42:7c:21:17:d3:b8:7b:f4:c8:ed:5c:22:ca:52:4b:
50:a6:ff:42:66:d6:52:0e:ff:0b:f6:7b:57:f3:27:47:f8:8a:
dd:a4:fc:c6:8a:35:e1:5d:95:8f:d1:1e:27:21:96:2e:45:1a:
1f:ee:21:2f
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZQnR5EEcUZ1cxdRpaO8924cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjNTkwYjczM2M1NmUxNGViYWM2OWY3YjQ0ZDRiYzk1NGU5
MzcwZTMwHhcNMjUwMTAyMTM0OTQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNTk1M2FjN2ZlOGZhZDIzZDNmZWU1YmFiMDllOWNiOTA5MGU0YTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1SS5Cb7OKNijafp0y9E4KNq3/b+1
lYmgzHyhNiQkIEqx8aNIyipmPOf8fA+fgjzJ2TQV6egFnuoSQQg4pmOJ7PzBVrVL
FKBL8oxX0lWvkxUZxcvhcokK8uofJZu4ht45etJdwJwswk3u54kD1plh2XR5imR2
EWnt8LID3lmsmNq46EnoiE2mZpRN14PNl5va+QBy/mFsr1EOGUkox1Y++YyIMbRm
qEpxgbGr0fBZNZyxhpIz/lP5apFUpwAYNLcLIMhNGEfFb6n/rXj0v47JNbVWtZr3
RjTT1guRUFwXUZkvliZaPW7UME0Ghr/+hc/mCUAdlaZEEYzMt0dUeF/slwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFPWVOsf+j60j0/7lurCenLkJDkpqMB8GA1UdIwQY
MBaAFHxZC3M8VuFOusafe0TUvJVOk3DjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkZrTGN6eFc0VTY2eHA5N1JOUzhsVTZUY09NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9lM2I2ZmMtZWY2My00YzA2LWEzMDQt
ZjNiNWU4MDI1MGRkLzEvOVpVNnhfNlByU1BUX3VXNnNKNmN1UWtPU21vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9lM2I2ZmMtZWY2My00YzA2LWEzMDQtZjNiNWU4MDI1MGRk
LzEvZkZrTGN6eFc0VTY2eHA5N1JOUzhsVTZUY09NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBW+CyMA8E
AgACMAkDBwAgAQZ4D1gwDQYJKoZIhvcNAQELBQADggEBACRpDTiZRCN5eR/Awsgx
2VdY3aWE276KxiN6efhPRZGCggSK0R6shdAeQs4SYuqujVOm9/nZGQbRKG55sgDN
WRndRwUVM5FuANx4/Wn+udd9eDDUPg7/H7G1gCLxzKdlI0EIzD2zfvTbiEvVNJCq
ZK37BFzLvDnnu6upAM6bNUPukIEbWrWnk9wWWOVuui3YI0zBFeFdxKo8lep1BBre
rou7qkJCqXGmIW6OyexNxug50gkEUogAdYL9qprk9XWuhB6/pdADo9n5BkJ8IRfT
uHv0yO1cIspSS1Cm/0Jm1lIO/wv2e1fzJ0f4it2k/MaKNeFdlY/RHichli5FGh/u
IS8=
-----END CERTIFICATE-----
Generated at Sun Apr 13 03:00:21 2025 by rpki-client