Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/xEUB8ohtFlAsaOyr7vE8oOV2o0c.roa
File: xEUB8ohtFlAsaOyr7vE8oOV2o0c.roa (raw, json)
Hash identifier: +nvKnk5IXRqxRWm6Ex+8ay7coqES5SK3vevz1ZhdX74=
Subject key identifier: C4:45:01:F2:88:6D:16:50:2C:68:EC:AB:EE:F1:3C:A0:E5:76:A3:47
Certificate issuer: /CN=b91464767773f1239b646bb66bdcf4f7fb1206ce
Certificate serial: 01942522188BCFA070309F83D1FC1CA922CF
Authority key identifier: B9:14:64:76:77:73:F1:23:9B:64:6B:B6:6B:DC:F4:F7:FB:12:06:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRRkdndz8SObZGu2a9z09_sSBs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/xEUB8ohtFlAsaOyr7vE8oOV2o0c.roa
Signing time: Thu 02 Jan 2025 03:49:38 +0000
ROA not before: Thu 02 Jan 2025 03:49:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203735
IP address blocks: 91.192.5.0/24 maxlen: 24
91.192.7.0/24 maxlen: 24
2a0c:64c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRRkdndz8SObZGu2a9z09_sSBs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:18:8b:cf:a0:70:30:9f:83:d1:fc:1c:a9:22:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b91464767773f1239b646bb66bdcf4f7fb1206ce
Validity
Not Before: Jan 2 03:49:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c44501f2886d16502c68ecabeef13ca0e576a347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:08:c1:82:96:b3:c4:2e:72:df:7f:17:a7:77:
e0:2f:21:a5:4c:40:aa:72:62:7a:9d:12:9b:b1:99:
01:73:45:d9:9c:10:41:e1:79:4a:27:f0:5c:14:13:
c6:17:7b:d7:dd:9c:a6:cc:4e:a7:51:42:c1:91:ae:
bd:57:f1:98:e7:41:45:94:e4:28:62:a2:07:07:fc:
69:60:a6:51:61:2f:a6:69:13:ef:0d:aa:73:91:51:
0c:5a:6a:07:f5:81:49:ce:62:d5:41:4f:85:40:88:
68:b0:de:b5:cb:b2:19:27:90:d0:9a:b1:19:4b:1b:
5e:93:1c:ee:cd:bd:be:44:3b:fc:3b:a3:67:bb:56:
cf:01:39:db:ef:fd:15:41:d4:82:84:12:7e:c0:a9:
b4:28:b1:e9:37:f3:20:f0:27:e0:79:05:b1:c9:1d:
1d:7f:21:f6:9a:a3:c1:9a:b0:8e:a9:bc:8c:ad:1f:
29:8d:3b:30:94:82:3b:29:a9:b6:96:6a:ac:1e:e5:
a7:14:4a:be:2a:c1:03:6a:f2:6b:e4:49:33:c8:7d:
a5:ae:f9:1c:8b:e9:63:12:19:5f:21:ad:fc:1a:cf:
eb:3e:c8:b6:d3:e8:a6:bc:a5:3a:2d:f2:0f:d2:14:
b8:95:38:c0:98:e3:d6:b1:79:c9:59:ba:bc:d9:e0:
a3:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:45:01:F2:88:6D:16:50:2C:68:EC:AB:EE:F1:3C:A0:E5:76:A3:47
X509v3 Authority Key Identifier:
keyid:B9:14:64:76:77:73:F1:23:9B:64:6B:B6:6B:DC:F4:F7:FB:12:06:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRRkdndz8SObZGu2a9z09_sSBs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/xEUB8ohtFlAsaOyr7vE8oOV2o0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.192.5.0/24
91.192.7.0/24
IPv6:
2a0c:64c0::/29
Signature Algorithm: sha256WithRSAEncryption
6e:c9:bd:da:6c:11:92:33:68:16:9d:ff:12:0c:74:69:e2:03:
22:c1:c3:a4:23:50:ab:be:15:37:d2:89:65:60:6a:4a:20:f1:
43:4a:e2:ff:b6:b1:13:d3:a2:4c:f8:72:00:96:c3:ef:39:a7:
6b:a3:d3:fe:07:53:d4:a1:95:bd:5e:15:4c:1a:3d:e2:f8:1d:
cf:6b:af:73:dd:43:73:1e:9d:68:f4:bb:fa:eb:c1:9f:8c:68:
01:71:0b:ed:e8:8a:69:dd:42:d6:1b:a0:81:b6:9e:d3:39:c4:
bc:9c:c5:82:5a:35:11:1b:3f:b3:8e:9e:a7:65:1a:e1:d5:a1:
c0:70:72:58:59:1c:2c:4d:1b:d9:77:a0:15:fb:40:a7:04:d0:
6f:1c:fe:6a:03:bc:93:6a:ad:a4:1d:00:fb:12:be:f7:bd:d7:
1d:df:85:e0:cc:39:c4:8c:40:48:ee:33:76:82:a2:78:ec:f3:
97:9e:c7:17:e0:99:67:a9:8f:2f:2f:7c:b3:51:0c:70:d8:c7:
4b:44:e1:75:a6:b4:02:9b:98:86:79:d8:cf:a7:3f:1e:25:1a:
11:dd:87:86:02:6a:25:72:29:b9:f3:bd:c7:a2:ca:aa:30:c6:
fd:06:26:95:e1:36:eb:6c:87:0e:67:42:64:2b:31:dd:0b:28:
21:e0:49:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:36:34 2025 by rpki-client