Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/914najeFw9-UHcgU2zuz8hxXvzw.roa
File: 914najeFw9-UHcgU2zuz8hxXvzw.roa (raw, json)
Hash identifier: XcAH93yInDABeE/YsrSA7EHUGS+0kkO/T2YPFwxTz7w=
Subject key identifier: F7:5E:27:6A:37:85:C3:DF:94:1D:C8:14:DB:3B:B3:F2:1C:57:BF:3C
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01963536187C98D2BCE2E14C026B7FF4794E
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/914najeFw9-UHcgU2zuz8hxXvzw.roa
Signing time: Mon 14 Apr 2025 16:50:59 +0000
ROA not before: Mon 14 Apr 2025 16:50:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19318
IP address blocks: 89.106.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 02:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:35:36:18:7c:98:d2:bc:e2:e1:4c:02:6b:7f:f4:79:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Apr 14 16:50:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f75e276a3785c3df941dc814db3bb3f21c57bf3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:fc:70:f7:38:f4:c6:f3:e3:5d:87:ff:55:d0:
4b:cd:89:a2:ac:7a:06:69:45:c0:fe:5c:b6:0e:59:
28:a5:89:03:2c:eb:8a:fb:38:5a:bb:87:6c:fb:df:
1e:3a:bb:70:fc:e9:e3:69:ee:c8:b7:af:07:f5:3a:
58:9a:0a:7b:8e:7e:c9:5a:2f:b1:00:24:03:3d:68:
07:a9:23:ed:e2:1e:2c:fb:45:42:32:13:b9:8c:25:
19:27:2a:05:c4:21:2c:bf:ae:af:16:19:ac:96:11:
32:74:8d:cd:a1:5f:c6:61:38:d0:c8:1a:97:1a:e4:
63:9d:a8:bf:13:29:db:72:1c:26:75:e4:bc:30:32:
c8:94:8c:0b:f3:3c:3f:c6:8e:22:19:09:8a:ed:dc:
e8:9f:89:e7:5a:24:2b:f9:98:0c:7b:50:6f:f0:08:
b3:a7:9a:9c:8f:a3:25:45:da:5a:b7:f3:d3:cc:22:
75:95:a0:cb:b2:6e:bb:95:b8:5b:5f:28:45:8a:c6:
14:08:5d:28:6f:d1:80:f9:f2:fd:b8:d5:7e:e9:66:
f9:87:d5:7d:a8:2b:46:23:0e:dd:1b:c5:52:81:81:
1b:66:81:06:1b:46:11:2e:1d:15:af:d9:6d:ab:b4:
d5:dd:e8:cf:00:94:3b:1a:d3:cb:2a:3f:77:b1:b4:
08:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:5E:27:6A:37:85:C3:DF:94:1D:C8:14:DB:3B:B3:F2:1C:57:BF:3C
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/914najeFw9-UHcgU2zuz8hxXvzw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.106.1.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:a4:99:06:14:ab:a6:9e:fe:ba:21:5e:cf:ea:ae:e8:6b:4a:
d9:8b:4a:b9:c2:10:32:fc:b8:e7:6c:0c:2a:1f:25:b1:e7:92:
86:a1:af:28:ca:70:cc:b1:e0:fa:86:83:4b:90:a3:69:43:87:
05:55:b6:75:4f:cc:d1:ee:b7:27:51:f0:29:df:2b:75:12:fb:
af:0b:f7:91:44:2f:6c:46:3a:c8:c3:2b:b2:82:40:5f:ed:65:
d3:93:17:23:1c:fa:fd:82:25:c5:3b:66:1d:f7:ca:fd:02:8a:
30:cc:84:06:a9:45:08:94:96:ef:80:b6:f3:eb:15:69:30:10:
22:d7:6e:dc:2e:f0:f5:cb:6f:07:53:16:d5:1d:02:3e:86:48:
bd:f0:d9:22:0f:0d:b4:81:32:37:0a:fd:6d:13:43:47:a5:f4:
b8:af:57:e1:93:64:a4:80:05:b2:83:5a:bc:26:91:c5:1e:e4:
f1:60:2b:16:19:8b:3b:3c:56:41:3f:25:b5:77:d8:4e:22:96:
06:9f:3c:a3:7e:b7:96:82:b8:53:03:dc:3d:a1:10:45:06:3b:
25:e2:9c:0f:5d:0c:d6:d7:c1:ad:03:91:7b:cf:c9:e2:64:26:
2d:4b:31:ed:46:42:46:ab:7a:7e:5b:aa:49:97:19:f9:f6:bc:
85:56:4c:53
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZY1Nhh8mNK84uFMAmt/9HlOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz
MGNiNjMwHhcNMjUwNDE0MTY1MDU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNzVlMjc2YTM3ODVjM2RmOTQxZGM4MTRkYjNiYjNmMjFjNTdiZjNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfxw9zj0xvPjXYf/VdBLzYmirHoG
aUXA/ly2DlkopYkDLOuK+zhau4ds+98eOrtw/Onjae7It68H9TpYmgp7jn7JWi+x
ACQDPWgHqSPt4h4s+0VCMhO5jCUZJyoFxCEsv66vFhmslhEydI3NoV/GYTjQyBqX
GuRjnai/EynbchwmdeS8MDLIlIwL8zw/xo4iGQmK7dzon4nnWiQr+ZgMe1Bv8Aiz
p5qcj6MlRdpat/PTzCJ1laDLsm67lbhbXyhFisYUCF0ob9GA+fL9uNV+6Wb5h9V9
qCtGIw7dG8VSgYEbZoEGG0YRLh0Vr9ltq7TV3ejPAJQ7GtPLKj93sbQIVwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPdeJ2o3hcPflB3IFNs7s/IcV788MB8GA1UdIwQY
MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt
YjRiOGRiMjBiMWZiLzEvOTE0bmFqZUZ3OS1VSGNnVTJ6dXo4aHhYdnp3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi
LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWWoBMA0G
CSqGSIb3DQEBCwUAA4IBAQCOpJkGFKumnv66IV7P6q7oa0rZi0q5whAy/LjnbAwq
HyWx55KGoa8oynDMseD6hoNLkKNpQ4cFVbZ1T8zR7rcnUfAp3yt1EvuvC/eRRC9s
RjrIwyuygkBf7WXTkxcjHPr9giXFO2Yd98r9AoowzIQGqUUIlJbvgLbz6xVpMBAi
127cLvD1y28HUxbVHQI+hki98NkiDw20gTI3Cv1tE0NHpfS4r1fhk2SkgAWyg1q8
JpHFHuTxYCsWGYs7PFZBPyW1d9hOIpYGnzyjfreWgrhTA9w9oRBFBjsl4pwPXQzW
18GtA5F7z8niZCYtSzHtRkJGq3p+W6pJlxn59ryFVkxT
-----END CERTIFICATE-----
Generated at Tue May 13 12:25:13 2025 by rpki-client