Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e2c33a-2143-43ff-8fd6-e6f3ecbf6743/1/O93JDHLkYyTPbBWqOf_Tjm6Csj4.roa
File: O93JDHLkYyTPbBWqOf_Tjm6Csj4.roa (raw, json)
Hash identifier: +gEwwbOSwfP86nIPB3Wi8wpxpGPoq4z6Qo3YWsrmtuQ=
Subject key identifier: 3B:DD:C9:0C:72:E4:63:24:CF:6C:15:AA:39:FF:D3:8E:6E:82:B2:3E
Certificate issuer: /CN=620dd5186de65a646dda4b89dd48ed44873af149
Certificate serial: 01942445A7E5DA044FF9CD2AB3F5509D05A8
Authority key identifier: 62:0D:D5:18:6D:E6:5A:64:6D:DA:4B:89:DD:48:ED:44:87:3A:F1:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/e2c33a-2143-43ff-8fd6-e6f3ecbf6743/1/O93JDHLkYyTPbBWqOf_Tjm6Csj4.roa
Signing time: Wed 01 Jan 2025 23:48:52 +0000
ROA not before: Wed 01 Jan 2025 23:48:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44664
IP address blocks: 91.202.144.0/22 maxlen: 22
91.202.144.0/24 maxlen: 24
91.202.145.0/24 maxlen: 24
91.202.146.0/24 maxlen: 24
91.202.147.0/24 maxlen: 24
91.225.56.0/22 maxlen: 22
91.225.56.0/24 maxlen: 24
91.225.57.0/24 maxlen: 24
91.225.58.0/24 maxlen: 24
91.225.59.0/24 maxlen: 24
91.247.224.0/22 maxlen: 22
91.247.224.0/24 maxlen: 24
91.247.225.0/24 maxlen: 24
91.247.226.0/24 maxlen: 24
91.247.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/e2c33a-2143-43ff-8fd6-e6f3ecbf6743/1/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/e2c33a-2143-43ff-8fd6-e6f3ecbf6743/1/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:a7:e5:da:04:4f:f9:cd:2a:b3:f5:50:9d:05:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=620dd5186de65a646dda4b89dd48ed44873af149
Validity
Not Before: Jan 1 23:48:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3bddc90c72e46324cf6c15aa39ffd38e6e82b23e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:2b:2e:08:0e:33:49:92:7d:9c:2a:78:74:4e:
1e:1a:de:f2:88:dd:f4:c9:b5:3b:45:7c:fb:4b:9e:
53:eb:dc:1c:1b:ce:1f:dd:e1:d1:b8:01:aa:3e:48:
01:07:11:44:0d:e7:d3:5f:c2:19:95:84:84:5c:12:
1f:6f:db:16:dd:39:ce:b6:3e:49:7e:5b:e6:d8:fb:
15:ac:1d:e2:19:0f:2d:b9:9e:4b:f2:b6:2c:13:ba:
3b:3b:9c:b8:f6:c4:e7:a8:2f:f8:26:08:cd:31:18:
76:f1:80:52:59:94:30:23:27:5f:58:a4:c6:8b:f8:
fe:17:1b:d0:dd:1d:e4:43:61:5a:0a:3a:45:26:43:
1a:49:41:b5:06:12:83:c4:25:49:73:de:02:c5:10:
dc:f0:1f:eb:f7:24:3e:3f:b0:c2:f8:7c:94:a8:aa:
22:a6:c6:4b:d1:48:72:9c:c4:a3:13:ec:4e:db:46:
ac:25:18:26:04:27:48:bb:b9:aa:29:fc:73:fa:f5:
5e:05:73:b9:ad:b2:b0:7f:2c:4b:53:f6:20:33:aa:
f2:68:cc:e5:33:64:52:89:09:20:87:9d:79:8f:84:
8f:06:c5:4d:08:ab:be:1b:28:11:c0:ae:c3:74:cc:
4a:33:66:e6:39:dd:b9:1f:c6:58:9f:93:56:5a:41:
bc:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:DD:C9:0C:72:E4:63:24:CF:6C:15:AA:39:FF:D3:8E:6E:82:B2:3E
X509v3 Authority Key Identifier:
keyid:62:0D:D5:18:6D:E6:5A:64:6D:DA:4B:89:DD:48:ED:44:87:3A:F1:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e2c33a-2143-43ff-8fd6-e6f3ecbf6743/1/O93JDHLkYyTPbBWqOf_Tjm6Csj4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e2c33a-2143-43ff-8fd6-e6f3ecbf6743/1/Yg3VGG3mWmRt2kuJ3UjtRIc68Uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.202.144.0/22
91.225.56.0/22
91.247.224.0/22
Signature Algorithm: sha256WithRSAEncryption
28:77:80:16:64:2d:ec:0f:8a:af:8c:21:ba:00:8a:79:80:07:
39:4a:25:d3:75:93:61:24:f4:e9:56:5a:15:01:1f:df:99:f0:
b7:dd:4e:b6:18:3f:fd:51:1d:d9:89:f7:85:43:fc:73:b1:f7:
85:9c:47:3f:b7:7b:21:bf:a9:fe:cc:8a:3d:13:4d:fc:89:83:
2c:01:63:53:5f:fb:8a:50:40:58:e3:be:0c:df:c0:4e:0f:05:
8c:19:35:0f:c1:e9:a8:f0:f1:ec:93:a1:5a:1e:3f:12:a6:9e:
74:cc:e7:d7:93:a5:8d:34:63:28:68:11:3e:e8:22:fa:af:91:
2d:84:b9:ad:84:75:0d:03:cb:29:5d:21:cb:38:ae:93:ac:a4:
90:b6:88:8f:5a:ab:9d:ce:4a:8c:82:fb:b9:59:cc:6b:75:6c:
a6:55:d0:88:c4:ad:c8:64:99:70:f5:77:d8:71:37:d9:76:92:
51:f6:5d:c4:e3:17:6e:d1:1b:66:17:b8:44:81:a3:7d:9e:79:
5e:1b:31:55:3d:3f:18:ad:b0:77:d4:95:1b:e1:a4:2d:28:e1:
d0:07:df:b4:8f:2b:68:b1:4b:1c:29:8b:f3:80:db:3f:28:cc:
4e:15:04:7b:7d:f5:46:c4:35:db:c6:45:a3:1c:79:06:03:36:
2f:bd:06:2c
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQkRafl2gRP+c0qs/VQnQWoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyMGRkNTE4NmRlNjVhNjQ2ZGRhNGI4OWRkNDhlZDQ0ODcz
YWYxNDkwHhcNMjUwMTAxMjM0ODUyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYmRkYzkwYzcyZTQ2MzI0Y2Y2YzE1YWEzOWZmZDM4ZTZlODJiMjNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmisuCA4zSZJ9nCp4dE4eGt7yiN30
ybU7RXz7S55T69wcG84f3eHRuAGqPkgBBxFEDefTX8IZlYSEXBIfb9sW3TnOtj5J
flvm2PsVrB3iGQ8tuZ5L8rYsE7o7O5y49sTnqC/4JgjNMRh28YBSWZQwIydfWKTG
i/j+FxvQ3R3kQ2FaCjpFJkMaSUG1BhKDxCVJc94CxRDc8B/r9yQ+P7DC+HyUqKoi
psZL0UhynMSjE+xO20asJRgmBCdIu7mqKfxz+vVeBXO5rbKwfyxLU/YgM6ryaMzl
M2RSiQkgh515j4SPBsVNCKu+GygRwK7DdMxKM2bmOd25H8ZYn5NWWkG8gQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFDvdyQxy5GMkz2wVqjn/045ugrI+MB8GA1UdIwQY
MBaAFGIN1Rht5lpkbdpLid1I7USHOvFJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWczVkdHM21XbVJ0Mmt1SjNVanRSSWM2OFVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9lMmMzM2EtMjE0My00M2ZmLThmZDYt
ZTZmM2VjYmY2NzQzLzEvTzkzSkRITGtZeVRQYkJXcU9mX1RqbTZDc2o0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9lMmMzM2EtMjE0My00M2ZmLThmZDYtZTZmM2VjYmY2NzQz
LzEvWWczVkdHM21XbVJ0Mmt1SjNVanRSSWM2OFVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCW8qQAwQC
W+E4AwQCW/fgMA0GCSqGSIb3DQEBCwUAA4IBAQAod4AWZC3sD4qvjCG6AIp5gAc5
SiXTdZNhJPTpVloVAR/fmfC33U62GD/9UR3ZifeFQ/xzsfeFnEc/t3shv6n+zIo9
E038iYMsAWNTX/uKUEBY474M38BODwWMGTUPwemo8PHsk6FaHj8Spp50zOfXk6WN
NGMoaBE+6CL6r5EthLmthHUNA8spXSHLOK6TrKSQtoiPWqudzkqMgvu5WcxrdWym
VdCIxK3IZJlw9XfYcTfZdpJR9l3E4xdu0RtmF7hEgaN9nnleGzFVPT8YrbB31JUb
4aQtKOHQB9+0jytosUscKYvzgNs/KMxOFQR7ffVGxDXbxkWjHHkGAzYvvQYs
-----END CERTIFICATE-----
Generated at Sun Feb 2 10:08:29 2025 by rpki-client