Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/RXaHa7HQXaOor19kJAnyP5kxxU0.roa
File: RXaHa7HQXaOor19kJAnyP5kxxU0.roa (raw, json)
Hash identifier: 1Jda3owwY018JsVQMIcmSKXtEtxhwgl86WeJsxIjRh4=
Subject key identifier: 45:76:87:6B:B1:D0:5D:A3:A8:AF:5F:64:24:09:F2:3F:99:31:C5:4D
Certificate issuer: /CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Certificate serial: 01942823FE44C19B9B2105FB74BF6247E70E
Authority key identifier: 27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/RXaHa7HQXaOor19kJAnyP5kxxU0.roa
Signing time: Thu 02 Jan 2025 17:50:34 +0000
ROA not before: Thu 02 Jan 2025 17:50:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 91.102.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:fe:44:c1:9b:9b:21:05:fb:74:bf:62:47:e7:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Validity
Not Before: Jan 2 17:50:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4576876bb1d05da3a8af5f642409f23f9931c54d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:78:09:ce:e0:a1:37:2d:c9:7a:e1:ea:46:ed:
bf:58:e5:e3:89:fd:24:94:c6:5f:0e:1e:3a:b3:c5:
60:85:dd:a5:6e:b2:3f:7d:3f:25:e0:fc:be:29:9d:
b3:7c:ee:1c:62:11:b6:2b:35:9f:e2:0b:2a:5d:64:
08:5f:b3:2b:b6:90:99:6f:ba:a2:0b:38:61:b0:d5:
60:4d:e3:a4:c2:60:e3:81:ea:e5:aa:ac:ec:98:52:
1b:ff:26:64:63:58:f8:12:12:f7:16:17:bf:86:2a:
ac:40:1f:4e:17:be:02:58:57:fe:03:29:3a:73:5f:
70:11:9c:15:fd:5f:22:e0:98:a4:63:10:ef:d4:f3:
42:e9:5d:8c:98:4f:57:46:d7:2c:f2:68:2e:e5:3d:
dc:d4:b6:66:6d:82:fa:16:f9:6d:7c:b4:6a:3e:31:
f5:56:e3:82:ce:dd:60:52:d4:ae:1d:e3:12:25:09:
4c:0a:7e:e1:e0:02:90:6a:d8:7a:d4:60:65:17:59:
80:94:17:43:f1:c7:97:8b:b3:a0:09:6c:aa:fa:69:
5e:4e:3a:f9:96:82:b8:8b:e6:2a:38:f4:9d:d9:67:
f9:7a:7f:03:5b:03:ce:18:80:19:98:b3:16:e8:8f:
2b:77:8a:9e:b5:bf:fb:ff:a9:05:c1:38:fb:e2:3f:
7f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:76:87:6B:B1:D0:5D:A3:A8:AF:5F:64:24:09:F2:3F:99:31:C5:4D
X509v3 Authority Key Identifier:
keyid:27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/RXaHa7HQXaOor19kJAnyP5kxxU0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.102.165.0/24
Signature Algorithm: sha256WithRSAEncryption
51:47:9a:97:13:d3:8c:61:97:df:11:f3:a2:a3:e9:3c:c7:f4:
3c:c8:c5:b7:bc:fc:5f:c4:ce:07:5f:fc:81:8d:2d:f6:f1:42:
ce:b2:92:58:77:f3:fc:19:2a:d4:46:f5:85:bd:44:87:13:0e:
58:1f:f3:d0:eb:97:a6:57:3b:d4:50:f9:3c:d8:59:8f:42:3d:
d3:5b:3c:d0:7b:e4:6b:d0:5e:00:46:d8:cf:e4:09:45:4a:8d:
29:0a:f8:7e:40:f6:36:ae:8d:86:0d:04:84:80:6d:0a:70:8f:
9e:d4:65:31:3b:9f:8d:af:52:2f:6f:44:79:3b:d3:76:3f:e6:
95:16:1a:06:80:23:90:2e:1a:af:a9:b5:84:ad:f5:25:da:ae:
f1:7f:d5:6d:d8:70:f5:98:35:c6:33:6d:07:a4:a7:16:f3:c3:
a0:d9:8e:63:90:b8:eb:34:ac:60:a0:22:55:b9:82:42:62:11:
c0:e4:e7:06:3a:10:72:ec:57:53:af:9f:9c:66:3a:f5:95:87:
f3:e1:fa:d4:87:39:96:05:9f:24:cb:60:43:46:69:4c:76:93:
ba:4a:ad:93:d4:52:8e:04:5e:98:15:4f:b2:b0:5c:26:86:4d:
25:37:29:91:6b:96:7a:3e:f7:48:9a:73:3f:c7:9f:8d:e7:b3:
20:d5:77:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:19:51 2025 by rpki-client