Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/4udGWxGR-js2GEwlomwjvclAxHE.roa
File: 4udGWxGR-js2GEwlomwjvclAxHE.roa (raw, json)
Hash identifier: VNpxs0Ge8Cse1RtzdBng0WTdx7VQU0TgsR0AE0NC3pA=
Subject key identifier: E2:E7:46:5B:11:91:FA:3B:36:18:4C:25:A2:6C:23:BD:C9:40:C4:71
Certificate issuer: /CN=da1a521ec13031527d2f2cacfc85eb99e4841256
Certificate serial: 019422201A472C9BB086C3E1D0430131DC55
Authority key identifier: DA:1A:52:1E:C1:30:31:52:7D:2F:2C:AC:FC:85:EB:99:E4:84:12:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2hpSHsEwMVJ9Lyys_IXrmeSEElY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/4udGWxGR-js2GEwlomwjvclAxHE.roa
Signing time: Wed 01 Jan 2025 13:48:36 +0000
ROA not before: Wed 01 Jan 2025 13:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 91.209.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2hpSHsEwMVJ9Lyys_IXrmeSEElY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:1a:47:2c:9b:b0:86:c3:e1:d0:43:01:31:dc:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da1a521ec13031527d2f2cacfc85eb99e4841256
Validity
Not Before: Jan 1 13:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e2e7465b1191fa3b36184c25a26c23bdc940c471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:92:db:56:92:67:e4:4b:bd:5b:dd:5a:21:76:
5b:66:d7:0f:cb:43:b7:28:c8:a6:52:6e:3a:16:bc:
d9:53:f5:98:8d:fe:f4:53:8d:7d:0d:e2:ea:7e:1f:
5c:0b:f6:b5:f7:58:1c:35:cc:81:7d:c4:65:52:43:
76:c0:b9:ef:a9:e2:10:94:9d:ce:05:aa:22:d8:35:
db:f4:ab:ba:40:82:f5:36:7f:94:2e:0c:55:51:50:
ad:6c:6d:fc:08:2c:c9:d0:bd:b6:0c:2d:f5:b1:86:
6a:6f:4f:f1:87:aa:24:c4:7d:09:59:f0:17:6e:99:
38:fa:4c:4b:84:b0:78:ed:e5:3b:79:79:bd:d2:8b:
40:35:90:22:7a:d4:c3:b1:e9:c6:62:0a:fb:d9:5f:
b4:ab:e9:06:9a:ec:66:d1:63:84:51:56:85:e7:13:
8c:9d:da:14:26:e6:52:e2:15:36:e6:4b:11:03:d2:
a9:f6:e8:d0:bd:ee:c2:ec:b8:c7:ad:8f:67:6f:52:
8d:b8:5c:21:35:a2:fd:2c:f5:66:c5:33:ab:4b:83:
e1:25:e9:cc:82:ab:b1:fe:18:ca:b0:3f:d6:df:49:
1d:5f:cb:61:52:98:5d:95:08:93:7c:ba:6a:1d:8b:
36:d7:de:03:b4:ef:35:7a:02:e2:1e:42:fb:43:99:
15:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:E7:46:5B:11:91:FA:3B:36:18:4C:25:A2:6C:23:BD:C9:40:C4:71
X509v3 Authority Key Identifier:
keyid:DA:1A:52:1E:C1:30:31:52:7D:2F:2C:AC:FC:85:EB:99:E4:84:12:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2hpSHsEwMVJ9Lyys_IXrmeSEElY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/4udGWxGR-js2GEwlomwjvclAxHE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.81.0/24
Signature Algorithm: sha256WithRSAEncryption
95:82:fe:e4:73:57:67:da:e9:e4:02:ed:26:13:a9:15:11:5a:
19:a1:b0:04:ee:16:f4:4d:1b:c0:3b:f8:c4:ab:aa:b6:c5:16:
e7:0c:50:c7:7a:54:c9:00:6b:83:08:56:cd:e9:86:d8:35:c8:
2a:d2:8e:fa:7f:4a:e4:d1:c5:a1:15:ef:a7:54:a3:ae:5a:3e:
48:b0:ba:f9:6c:c5:68:93:a6:f7:64:3c:37:19:91:4a:b1:fc:
fc:14:be:5c:5b:6c:94:99:00:1f:b2:68:c5:4e:8b:ba:86:43:
64:18:f6:45:05:6c:99:dd:9a:25:45:d4:1f:60:03:12:fb:97:
8b:8b:68:c7:ca:4f:2c:38:3c:af:fa:57:6c:6f:e5:f4:4b:2a:
eb:a7:ed:89:7e:7b:b7:7b:ba:8a:42:04:18:b5:1e:ec:b7:aa:
05:98:0f:e1:d8:ef:21:c4:de:73:7d:4c:e0:c9:7e:d3:54:20:
45:02:a0:5d:39:12:7d:82:4f:7b:bf:ca:a6:11:70:8e:90:a6:
6c:8b:22:76:46:12:5f:ce:44:7f:9c:b8:77:d2:68:28:d6:e2:
95:f5:92:c9:1c:42:7a:28:99:49:70:9b:d9:e9:e4:8f:a0:59:
a0:5d:fe:18:65:d1:0f:09:49:40:0c:aa:95:1a:db:e0:74:ae:
2b:7a:dc:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:52:06 2025 by rpki-client