Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/j-WhBxG3kTQ9qzGT3Um24_lMcSk.roa
File: j-WhBxG3kTQ9qzGT3Um24_lMcSk.roa (raw, json)
Hash identifier: qcMICYRSrbrQRjk9ZR+9VL6T/3wI6mHE1uL2fvOP8p0=
Subject key identifier: 8F:E5:A1:07:11:B7:91:34:3D:AB:31:93:DD:49:B6:E3:F9:4C:71:29
Certificate issuer: /CN=1b420b799c5206a19ef7717ee3c7312fd88330ae
Certificate serial: 019421B1D8A511CD295E2EEAAC2433DDAB6D
Authority key identifier: 1B:42:0B:79:9C:52:06:A1:9E:F7:71:7E:E3:C7:31:2F:D8:83:30:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G0ILeZxSBqGe93F-48cxL9iDMK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/j-WhBxG3kTQ9qzGT3Um24_lMcSk.roa
Signing time: Wed 01 Jan 2025 11:48:10 +0000
ROA not before: Wed 01 Jan 2025 11:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51067
IP address blocks: 91.216.121.0/24 maxlen: 24
2001:67c:23f8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/G0ILeZxSBqGe93F-48cxL9iDMK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/G0ILeZxSBqGe93F-48cxL9iDMK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/G0ILeZxSBqGe93F-48cxL9iDMK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 11:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:d8:a5:11:cd:29:5e:2e:ea:ac:24:33:dd:ab:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b420b799c5206a19ef7717ee3c7312fd88330ae
Validity
Not Before: Jan 1 11:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8fe5a10711b791343dab3193dd49b6e3f94c7129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a0:a8:71:86:53:f0:b7:fc:5e:93:7d:b0:fe:
e9:42:4f:ac:b1:bb:6c:93:a4:ba:f2:f9:23:07:9e:
80:58:01:a1:82:1d:12:95:1a:91:28:7c:62:31:11:
13:2a:03:10:5b:12:cd:cd:a3:6b:9e:ae:26:db:63:
de:c2:be:46:f2:15:0d:07:48:b7:22:8a:35:7d:4a:
69:8d:0e:33:49:bb:41:a0:86:61:8e:5b:4f:85:13:
b3:7b:8f:51:c7:69:a4:6b:19:a7:94:dc:a4:aa:00:
cf:34:bc:e8:31:20:20:4e:ca:60:07:78:0b:cb:15:
cd:9f:fa:5e:6c:c3:a2:6a:3e:f6:23:46:46:20:4f:
c0:79:61:30:2a:22:9e:5f:dc:4b:2a:9c:ae:22:c1:
c2:0f:2f:c9:67:c8:e2:0a:be:aa:d7:8d:4e:16:7d:
47:51:c5:b4:88:60:60:71:19:fc:49:39:62:c6:ef:
e3:09:7d:f8:08:d9:45:ce:f3:26:16:47:cd:31:42:
53:15:2c:dc:07:80:d3:08:ff:6b:d7:05:d7:ad:65:
14:6a:b3:fe:dd:ba:1a:fe:c7:57:97:83:4c:f0:5c:
bf:92:4d:60:28:76:6b:73:97:5e:79:6d:55:a9:af:
28:03:68:08:38:0a:bc:a2:c5:46:db:d6:90:23:ba:
29:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:E5:A1:07:11:B7:91:34:3D:AB:31:93:DD:49:B6:E3:F9:4C:71:29
X509v3 Authority Key Identifier:
keyid:1B:42:0B:79:9C:52:06:A1:9E:F7:71:7E:E3:C7:31:2F:D8:83:30:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G0ILeZxSBqGe93F-48cxL9iDMK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/j-WhBxG3kTQ9qzGT3Um24_lMcSk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/G0ILeZxSBqGe93F-48cxL9iDMK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.121.0/24
IPv6:
2001:67c:23f8::/48
Signature Algorithm: sha256WithRSAEncryption
a7:4b:da:00:fc:e8:e5:7c:97:89:0e:de:86:a6:e0:d4:6f:3b:
7a:68:e0:04:d3:d5:a5:c2:a6:fb:ae:57:5c:5d:d0:1f:e7:93:
5d:d5:c1:6e:f0:92:ec:b7:ab:08:02:b0:dc:45:1d:25:7d:5a:
5b:99:e6:0b:39:78:c3:8f:89:5b:a4:7e:26:73:e4:28:ea:ed:
36:ed:79:a3:c8:76:fb:53:a9:57:73:8a:9f:ff:93:27:64:a7:
31:e8:91:0e:cb:51:ca:40:2d:60:34:b9:e7:97:ef:6e:bb:3c:
d7:0c:1d:2a:33:c5:bc:82:21:95:5b:b6:83:37:7f:68:e7:d0:
44:1b:6d:af:41:55:6c:95:58:b6:3f:1b:10:de:04:ff:29:e7:
c7:ac:3a:6f:8d:a9:79:81:ae:cf:b5:1c:ae:54:b2:39:6a:1d:
64:21:ea:9e:55:89:30:48:81:6f:6d:4b:e2:47:3f:74:df:6c:
39:ce:fa:5f:c2:58:07:d4:f6:a9:7a:84:6c:8e:7a:d5:80:28:
6d:ee:8b:2a:29:63:18:77:e8:d1:cd:5a:23:40:28:f5:2b:d5:
7d:ec:94:cc:5f:30:7e:09:8a:d3:31:68:fc:36:4d:9b:af:1c:
07:14:5d:c8:c6:ba:7e:1b:d2:97:23:34:9c:9d:f2:ef:ae:1f:
f7:5b:85:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 16:48:18 2025 by rpki-client