Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/_YRrPXeHgAXgMpc2QmNmEMk3D08.roa
File: _YRrPXeHgAXgMpc2QmNmEMk3D08.roa (raw, json)
Hash identifier: rjz45MaRJ7ZN8GT6YntGrX6BstY+oeOQVYxVS/+RMXk=
Subject key identifier: FD:84:6B:3D:77:87:80:05:E0:32:97:36:42:63:66:10:C9:37:0F:4F
Certificate issuer: /CN=312399b1290cd419a78bd2fb311e3bc7df9f5f1f
Certificate serial: 019642FCDECC9731D1323AD11220CEB43417
Authority key identifier: 31:23:99:B1:29:0C:D4:19:A7:8B:D2:FB:31:1E:3B:C7:DF:9F:5F:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MSOZsSkM1Bmni9L7MR47x9-fXx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/_YRrPXeHgAXgMpc2QmNmEMk3D08.roa
Signing time: Thu 17 Apr 2025 09:03:10 +0000
ROA not before: Thu 17 Apr 2025 09:03:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210311
IP address blocks: 91.233.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MSOZsSkM1Bmni9L7MR47x9-fXx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:42:fc:de:cc:97:31:d1:32:3a:d1:12:20:ce:b4:34:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=312399b1290cd419a78bd2fb311e3bc7df9f5f1f
Validity
Not Before: Apr 17 09:03:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fd846b3d77878005e032973642636610c9370f4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:8a:dc:11:3f:92:91:df:79:a5:1f:10:e2:73:
24:85:0a:da:7e:2e:ec:37:33:80:c2:f5:5a:2d:69:
24:42:18:ec:ce:45:f0:4f:b4:1b:1c:03:46:54:a6:
87:49:00:de:e4:98:d5:60:24:d1:8e:83:17:fe:8b:
d8:45:c9:f8:76:59:ff:27:9b:68:19:1b:1d:fe:fd:
b4:8a:c4:75:b7:38:b2:27:ec:f4:10:09:6f:ca:99:
d9:29:b0:b8:a6:3a:d6:2d:12:4b:a1:74:bf:55:55:
20:49:83:0b:a8:75:64:91:32:1d:0a:84:ca:d0:77:
37:a2:9d:63:a7:8c:b2:4f:91:4d:9a:ec:33:41:49:
c0:2a:70:d9:da:46:a2:a7:5a:56:f5:15:51:43:54:
eb:de:83:a7:32:61:8b:95:15:61:2f:86:93:fa:b3:
96:d5:c5:25:7b:5e:d2:99:a6:c0:71:c8:80:9d:19:
55:ba:91:ac:6b:80:70:1d:7b:72:f6:4d:59:fc:6a:
f4:2b:5e:d3:4e:ef:e0:25:ee:b5:40:e7:7d:bb:a7:
16:45:6e:03:8b:e5:e7:5a:ae:2a:3e:bc:d9:6d:70:
b9:76:a6:1b:ac:b1:d5:9a:00:55:b6:45:e5:1b:e3:
e5:bf:ec:4b:33:f0:d5:f9:1e:54:68:15:2c:02:3e:
3f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:84:6B:3D:77:87:80:05:E0:32:97:36:42:63:66:10:C9:37:0F:4F
X509v3 Authority Key Identifier:
keyid:31:23:99:B1:29:0C:D4:19:A7:8B:D2:FB:31:1E:3B:C7:DF:9F:5F:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MSOZsSkM1Bmni9L7MR47x9-fXx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/_YRrPXeHgAXgMpc2QmNmEMk3D08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.233.180.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:5e:b9:9b:fb:5f:fb:74:60:f3:bc:b9:d3:f0:19:d5:a0:7d:
a7:f2:b5:ea:a0:cc:f1:56:52:15:74:db:cf:01:f4:db:3a:af:
d4:1c:35:3f:d5:b1:fd:4e:f8:45:b2:c6:f3:56:a7:cc:e3:ff:
59:04:bd:3b:66:3c:ce:d4:e8:5b:8c:97:81:42:03:d4:b5:aa:
9b:2f:db:87:23:f8:03:84:14:d8:fa:e8:54:7d:9d:8b:86:79:
28:87:80:77:85:a3:e8:5d:d5:de:a6:e9:f1:cf:8d:bb:b4:38:
25:23:93:d4:35:5a:c9:e0:77:be:e5:f8:56:5e:26:0c:4d:87:
88:0c:b0:52:17:67:16:34:15:24:da:b1:63:d9:38:fb:92:43:
21:cc:75:57:50:42:dc:0e:86:a9:c4:3d:b1:bb:0f:f3:d9:8e:
04:83:d7:67:ab:b8:0a:7f:09:39:31:76:9d:8a:b1:66:25:f4:
ae:da:9c:57:17:80:c0:d6:ab:1a:da:da:54:0e:4b:bd:41:ee:
c9:2b:58:77:e4:a4:7b:cc:e2:85:71:82:7a:f8:d9:94:bd:69:
97:8f:c2:1a:b0:c8:03:fe:90:85:e5:bb:fb:2c:b2:69:49:fc:
96:e4:11:a1:12:e5:6a:bf:1c:7b:8b:01:b5:58:ba:44:ea:9d:
d4:1e:fd:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 19:39:22 2025 by rpki-client