Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/d3953b-b942-4b75-9c9d-985c64fe27ee/1/LzFXYdQCjAwuxvkHOYgtwse77OA.roa
File: LzFXYdQCjAwuxvkHOYgtwse77OA.roa (raw, json)
Hash identifier: mZphFwkdwTLagYOCmsfTIvyvpWa3QboinjiRqvkQOZQ=
Subject key identifier: 2F:31:57:61:D4:02:8C:0C:2E:C6:F9:07:39:88:2D:C2:C7:BB:EC:E0
Certificate issuer: /CN=9bbae6e3ed766de47aba6693bb5af8a648974310
Certificate serial: 019667A5066356A81A6390138479A862DE32
Authority key identifier: 9B:BA:E6:E3:ED:76:6D:E4:7A:BA:66:93:BB:5A:F8:A6:48:97:43:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7rm4-12beR6umaTu1r4pkiXQxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/d3953b-b942-4b75-9c9d-985c64fe27ee/1/LzFXYdQCjAwuxvkHOYgtwse77OA.roa
Signing time: Thu 24 Apr 2025 11:53:10 +0000
ROA not before: Thu 24 Apr 2025 11:53:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35236
IP address blocks: 45.91.28.0/22 maxlen: 24
188.92.96.0/21 maxlen: 24
2a0e:25c0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/d3953b-b942-4b75-9c9d-985c64fe27ee/1/m7rm4-12beR6umaTu1r4pkiXQxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/d3953b-b942-4b75-9c9d-985c64fe27ee/1/m7rm4-12beR6umaTu1r4pkiXQxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/m7rm4-12beR6umaTu1r4pkiXQxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:67:a5:06:63:56:a8:1a:63:90:13:84:79:a8:62:de:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bbae6e3ed766de47aba6693bb5af8a648974310
Validity
Not Before: Apr 24 11:53:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2f315761d4028c0c2ec6f90739882dc2c7bbece0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:f4:dc:b3:96:de:dd:ca:96:22:de:17:99:d5:
2e:73:df:2f:2e:6c:89:00:d2:50:1b:17:d6:b5:37:
81:e2:8d:ec:bb:d1:5d:bf:6d:27:46:3a:31:5c:ca:
2c:cc:c7:9c:af:e7:f5:d7:0c:e5:39:7f:ba:bb:08:
09:ed:45:be:ff:fa:98:00:9e:52:da:ae:9d:bc:a2:
fa:0f:4e:69:6f:90:cc:27:7c:31:4c:ab:46:53:e9:
95:3d:de:86:83:aa:8a:38:72:fd:9f:95:90:f4:ea:
3f:8c:19:d8:6f:85:db:0a:61:a2:3a:8b:1d:2f:ad:
70:ec:e3:00:8b:2e:48:34:48:aa:93:47:7b:b5:1e:
d3:de:7a:43:2b:ba:f3:fe:3e:4f:3c:ac:e9:09:f1:
4b:45:3a:c8:aa:9d:13:24:1e:42:01:40:04:9e:fc:
ee:1d:23:73:fa:5c:34:e0:e9:be:01:4b:e2:44:02:
46:78:51:e2:e4:10:73:b0:09:d1:89:93:52:ec:84:
f5:2f:42:40:5a:a1:bd:3e:60:5b:d1:2a:46:2d:8e:
75:44:d9:49:f2:9d:fd:39:6d:f7:76:8e:55:19:80:
f7:9a:db:50:f1:38:a4:3f:c4:e0:7b:13:6f:03:0d:
f3:8b:c9:1f:38:32:5d:f1:2f:7e:ec:02:75:bd:88:
57:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:31:57:61:D4:02:8C:0C:2E:C6:F9:07:39:88:2D:C2:C7:BB:EC:E0
X509v3 Authority Key Identifier:
keyid:9B:BA:E6:E3:ED:76:6D:E4:7A:BA:66:93:BB:5A:F8:A6:48:97:43:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7rm4-12beR6umaTu1r4pkiXQxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d3953b-b942-4b75-9c9d-985c64fe27ee/1/LzFXYdQCjAwuxvkHOYgtwse77OA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d3953b-b942-4b75-9c9d-985c64fe27ee/1/m7rm4-12beR6umaTu1r4pkiXQxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.28.0/22
188.92.96.0/21
IPv6:
2a0e:25c0::/29
Signature Algorithm: sha256WithRSAEncryption
70:8e:d5:9e:f8:7f:7a:15:ed:74:0b:01:bc:3c:a1:f2:fb:00:
41:dc:b7:6c:55:69:7c:96:fe:46:ec:0a:ef:95:7a:10:53:b4:
fa:c0:b3:9d:1a:fa:18:b7:36:f1:b5:8a:3a:a0:00:e2:07:0f:
2a:53:49:b8:ef:63:0f:e1:ab:d0:63:5c:cc:d9:aa:8e:dc:93:
40:86:fe:19:53:30:74:8c:d5:4e:de:44:a8:bb:25:37:72:25:
15:cf:f8:cf:02:7c:d9:8e:8a:b0:20:53:85:72:3b:1e:9b:aa:
c9:dd:0d:a1:92:f3:dc:20:ff:63:30:ec:0b:fd:49:27:7e:05:
da:ac:dd:8d:90:18:18:88:2e:9c:03:65:2b:4d:fe:91:71:bd:
70:77:20:58:e3:35:97:64:3b:17:38:2d:b6:0c:fb:af:85:b2:
b2:3f:d4:03:aa:4b:23:af:a7:8c:d2:2d:01:1a:0b:9d:fb:c0:
15:ec:bd:d3:7a:46:62:f2:78:ad:36:98:a5:7a:da:c6:39:ec:
ab:0e:5f:63:b0:25:b7:60:05:f8:7f:09:73:39:ae:16:31:73:
4e:6f:5a:ef:91:fa:2e:f9:93:fb:71:a6:2a:68:5d:33:26:14:
f6:ce:04:5c:88:82:1f:68:43:b3:a0:04:1f:bc:74:41:50:01:
64:af:e3:5f
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZZnpQZjVqgaY5AThHmoYt4yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliYmFlNmUzZWQ3NjZkZTQ3YWJhNjY5M2JiNWFmOGE2NDg5
NzQzMTAwHhcNMjUwNDI0MTE1MzEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZjMxNTc2MWQ0MDI4YzBjMmVjNmY5MDczOTg4MmRjMmM3YmJlY2UwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7vTcs5be3cqWIt4XmdUuc98vLmyJ
ANJQGxfWtTeB4o3su9Fdv20nRjoxXMoszMecr+f11wzlOX+6uwgJ7UW+//qYAJ5S
2q6dvKL6D05pb5DMJ3wxTKtGU+mVPd6Gg6qKOHL9n5WQ9Oo/jBnYb4XbCmGiOosd
L61w7OMAiy5INEiqk0d7tR7T3npDK7rz/j5PPKzpCfFLRTrIqp0TJB5CAUAEnvzu
HSNz+lw04Om+AUviRAJGeFHi5BBzsAnRiZNS7IT1L0JAWqG9PmBb0SpGLY51RNlJ
8p39OW33do5VGYD3mttQ8TikP8TgexNvAw3zi8kfODJd8S9+7AJ1vYhXkQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFC8xV2HUAowMLsb5BzmILcLHu+zgMB8GA1UdIwQY
MBaAFJu65uPtdm3kerpmk7ta+KZIl0MQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTdybTQtMTJiZVI2dW1hVHUxcjRwa2lYUXhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9kMzk1M2ItYjk0Mi00Yjc1LTljOWQt
OTg1YzY0ZmUyN2VlLzEvTHpGWFlkUUNqQXd1eHZrSE9ZZ3R3c2U3N09BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS9kMzk1M2ItYjk0Mi00Yjc1LTljOWQtOTg1YzY0ZmUyN2Vl
LzEvbTdybTQtMTJiZVI2dW1hVHUxcjRwa2lYUXhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCLVscAwQD
vFxgMA0EAgACMAcDBQMqDiXAMA0GCSqGSIb3DQEBCwUAA4IBAQBwjtWe+H96Fe10
CwG8PKHy+wBB3LdsVWl8lv5G7ArvlXoQU7T6wLOdGvoYtzbxtYo6oADiBw8qU0m4
72MP4avQY1zM2aqO3JNAhv4ZUzB0jNVO3kSouyU3ciUVz/jPAnzZjoqwIFOFcjse
m6rJ3Q2hkvPcIP9jMOwL/UknfgXarN2NkBgYiC6cA2UrTf6Rcb1wdyBY4zWXZDsX
OC22DPuvhbKyP9QDqksjr6eM0i0BGgud+8AV7L3TekZi8nitNpiletrGOeyrDl9j
sCW3YAX4fwlzOa4WMXNOb1rvkfou+ZP7caYqaF0zJhT2zgRciIIfaEOzoAQfvHRB
UAFkr+Nf
-----END CERTIFICATE-----
Generated at Tue Apr 29 12:10:25 2025 by rpki-client