Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/CvcmVd2qiQMCtgnMEuQp7Q5S4Vg.roa
File: CvcmVd2qiQMCtgnMEuQp7Q5S4Vg.roa (raw, json)
Hash identifier: 6oEqjna8oaHJiSK9+x9VxezwWYrKn62GKKSEaLSxdDU=
Subject key identifier: 0A:F7:26:55:DD:AA:89:03:02:B6:09:CC:12:E4:29:ED:0E:52:E1:58
Certificate issuer: /CN=b498c97b14c374a52833db6a4007b54b4662c5a9
Certificate serial: 0196469E2113C3F3C5F5049102D503729BAF
Authority key identifier: B4:98:C9:7B:14:C3:74:A5:28:33:DB:6A:40:07:B5:4B:46:62:C5:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tJjJexTDdKUoM9tqQAe1S0Zixak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/CvcmVd2qiQMCtgnMEuQp7Q5S4Vg.roa
Signing time: Fri 18 Apr 2025 01:58:10 +0000
ROA not before: Fri 18 Apr 2025 01:58:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213893
IP address blocks: 91.196.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.mft
rsync://rpki.ripe.net/repository/DEFAULT/tJjJexTDdKUoM9tqQAe1S0Zixak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 19:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:46:9e:21:13:c3:f3:c5:f5:04:91:02:d5:03:72:9b:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b498c97b14c374a52833db6a4007b54b4662c5a9
Validity
Not Before: Apr 18 01:58:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0af72655ddaa890302b609cc12e429ed0e52e158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:84:09:4c:10:93:68:96:9b:ad:34:a8:c1:d6:
1f:3b:7e:b3:b1:25:08:e9:5d:1f:4d:cb:0e:e1:e1:
fd:b7:fc:f6:63:51:79:20:ab:55:72:e5:e6:6a:21:
e8:be:50:95:f8:41:57:5d:f8:70:1d:65:31:4d:cf:
78:83:46:16:f8:e2:97:46:dc:69:b2:d4:6c:8d:37:
cf:61:fb:1e:27:44:83:31:de:dd:9d:e4:0b:0b:91:
2c:80:e1:70:51:d5:7a:4c:7e:89:31:2f:5b:65:66:
4b:1f:d9:8b:ea:cb:97:7d:eb:59:b6:60:0f:e1:76:
c2:0e:43:dc:3b:3c:ff:db:17:92:bf:b9:d8:36:37:
a7:ab:43:26:36:78:5e:b6:34:08:7f:da:76:79:8b:
44:18:c4:08:26:9e:1b:e4:7e:a4:c6:4e:bb:9c:36:
16:7b:06:e2:82:c8:4c:78:71:99:5f:12:f0:33:21:
6b:53:7b:99:46:20:12:f1:2e:f0:e5:56:6a:2d:77:
02:6b:44:ca:36:bc:fa:18:01:02:c4:dd:0b:e5:19:
c6:e3:e8:d4:18:dc:17:a9:43:6f:92:7b:fd:95:e4:
95:eb:58:42:51:db:ad:c8:01:d0:c4:23:f6:1c:37:
22:8d:27:de:fa:5a:27:a8:26:5b:ab:7a:0b:52:1d:
c4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:F7:26:55:DD:AA:89:03:02:B6:09:CC:12:E4:29:ED:0E:52:E1:58
X509v3 Authority Key Identifier:
keyid:B4:98:C9:7B:14:C3:74:A5:28:33:DB:6A:40:07:B5:4B:46:62:C5:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tJjJexTDdKUoM9tqQAe1S0Zixak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/CvcmVd2qiQMCtgnMEuQp7Q5S4Vg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.196.160.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:2e:83:f6:db:94:fe:8c:83:e0:53:62:6f:7f:6c:14:42:fe:
ff:e8:b6:a2:e7:c6:70:86:46:eb:07:51:1f:f3:b8:32:9c:36:
58:64:99:2a:69:45:76:52:f7:37:2d:c4:55:6c:0a:86:26:34:
3a:1c:53:5b:58:58:1a:78:42:98:7d:24:92:c8:d2:9d:b7:c2:
c1:4a:b6:a0:f3:df:c0:33:2a:98:1b:07:78:9e:bf:b8:80:58:
76:9e:ec:31:77:d2:ad:4b:e4:47:a2:f6:1a:88:d0:4d:e8:22:
c7:db:e1:9d:74:4a:06:a5:af:35:6c:f0:96:7e:e0:10:fa:ac:
56:62:31:5c:d5:35:41:3d:68:30:97:8f:cb:a1:94:eb:c4:b8:
b8:3f:20:c5:35:41:83:76:3f:f7:f5:6e:a5:44:12:b7:0e:61:
78:d1:c3:73:ce:df:5f:37:cb:fe:c0:94:d4:e9:3f:6f:65:62:
bf:7a:e3:14:c8:82:aa:53:13:a7:5d:cc:09:71:16:65:4e:64:
11:26:4b:88:70:f8:56:cc:92:6e:68:2e:70:d7:af:90:a9:1f:
8d:ab:ae:de:e8:73:f1:92:74:d2:a9:c1:9d:e2:24:73:fa:57:
68:1d:64:8f:aa:de:dd:69:3c:01:84:fa:39:aa:ee:cf:6c:1d:
42:5f:56:bc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZZGniETw/PF9QSRAtUDcpuvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0OThjOTdiMTRjMzc0YTUyODMzZGI2YTQwMDdiNTRiNDY2
MmM1YTkwHhcNMjUwNDE4MDE1ODEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYWY3MjY1NWRkYWE4OTAzMDJiNjA5Y2MxMmU0MjllZDBlNTJlMTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7IQJTBCTaJabrTSowdYfO36zsSUI
6V0fTcsO4eH9t/z2Y1F5IKtVcuXmaiHovlCV+EFXXfhwHWUxTc94g0YW+OKXRtxp
stRsjTfPYfseJ0SDMd7dneQLC5EsgOFwUdV6TH6JMS9bZWZLH9mL6suXfetZtmAP
4XbCDkPcOzz/2xeSv7nYNjenq0MmNnhetjQIf9p2eYtEGMQIJp4b5H6kxk67nDYW
ewbigshMeHGZXxLwMyFrU3uZRiAS8S7w5VZqLXcCa0TKNrz6GAECxN0L5RnG4+jU
GNwXqUNvknv9leSV61hCUdutyAHQxCP2HDcijSfe+lonqCZbq3oLUh3EZwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAr3JlXdqokDArYJzBLkKe0OUuFYMB8GA1UdIwQY
MBaAFLSYyXsUw3SlKDPbakAHtUtGYsWpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEpqSmV4VERkS1VvTTl0cVFBZTFTMFppeGFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC8xNDcwZjUtYzMxNi00ZmZmLTljMzct
ODY1NDI2NjQ1N2M2LzEvQ3ZjbVZkMnFpUU1DdGduTUV1UXA3UTVTNFZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC8xNDcwZjUtYzMxNi00ZmZmLTljMzctODY1NDI2NjQ1N2M2
LzEvdEpqSmV4VERkS1VvTTl0cVFBZTFTMFppeGFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8SgMA0G
CSqGSIb3DQEBCwUAA4IBAQDJLoP225T+jIPgU2Jvf2wUQv7/6Lai58ZwhkbrB1Ef
87gynDZYZJkqaUV2Uvc3LcRVbAqGJjQ6HFNbWFgaeEKYfSSSyNKdt8LBSrag89/A
MyqYGwd4nr+4gFh2nuwxd9KtS+RHovYaiNBN6CLH2+GddEoGpa81bPCWfuAQ+qxW
YjFc1TVBPWgwl4/LoZTrxLi4PyDFNUGDdj/39W6lRBK3DmF40cNzzt9fN8v+wJTU
6T9vZWK/euMUyIKqUxOnXcwJcRZlTmQRJkuIcPhWzJJuaC5w16+QqR+Nq67e6HPx
knTSqcGd4iRz+ldoHWSPqt7daTwBhPo5qu7PbB1CX1a8
-----END CERTIFICATE-----
Generated at Mon Apr 28 03:26:00 2025 by rpki-client