Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/6555c3-0546-4eef-8648-506a21595cb8/1/326zxIS7flVicYpYeyjZhIJPEQc.roa
File: 326zxIS7flVicYpYeyjZhIJPEQc.roa (raw, json)
Hash identifier: 7OXoJx4K7+k1nQ/ABjRnbXIbMj5YXCBVmfp1DpVjQws=
Subject key identifier: DF:6E:B3:C4:84:BB:7E:55:62:71:8A:58:7B:28:D9:84:82:4F:11:07
Certificate issuer: /CN=87a4e5d7725c5868aabea025b838dcc233c6ffc9
Certificate serial: 019426D9C494AA99638EF158E951BFE37C4C
Authority key identifier: 87:A4:E5:D7:72:5C:58:68:AA:BE:A0:25:B8:38:DC:C2:33:C6:FF:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h6Tl13JcWGiqvqAluDjcwjPG_8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/6555c3-0546-4eef-8648-506a21595cb8/1/326zxIS7flVicYpYeyjZhIJPEQc.roa
Signing time: Thu 02 Jan 2025 11:49:53 +0000
ROA not before: Thu 02 Jan 2025 11:49:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198263
IP address blocks: 91.232.164.0/22 maxlen: 22
193.186.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/6555c3-0546-4eef-8648-506a21595cb8/1/h6Tl13JcWGiqvqAluDjcwjPG_8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/6555c3-0546-4eef-8648-506a21595cb8/1/h6Tl13JcWGiqvqAluDjcwjPG_8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/h6Tl13JcWGiqvqAluDjcwjPG_8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:c4:94:aa:99:63:8e:f1:58:e9:51:bf:e3:7c:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87a4e5d7725c5868aabea025b838dcc233c6ffc9
Validity
Not Before: Jan 2 11:49:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=df6eb3c484bb7e5562718a587b28d984824f1107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5b:bf:7a:4a:af:06:f6:1f:69:f4:16:73:08:
e7:ea:27:4f:2f:b4:03:f6:f9:a3:89:6d:f6:e5:49:
4c:46:34:04:dc:20:a0:86:8a:4c:d7:4e:94:6c:a1:
d4:90:f0:76:6b:43:19:0f:dc:b7:49:b3:c5:c1:e3:
8f:da:6c:9f:3a:1c:9a:e0:ad:9f:56:94:30:be:71:
ae:11:92:e1:bb:41:00:ee:9b:a6:fd:da:28:85:a6:
e8:e0:7f:3e:3c:d9:35:58:89:bf:d4:92:d5:6c:56:
5a:2d:9c:d8:9d:1a:3e:6a:6a:31:21:53:af:c6:b2:
6d:93:0f:44:8f:df:19:5e:69:88:65:5b:4f:5c:64:
61:a9:a9:53:bb:f4:2e:9c:53:89:7a:a6:ac:53:7b:
29:92:2b:16:38:3e:ec:5a:7e:a0:da:ff:ba:20:93:
9e:2c:3f:08:f1:51:95:79:f3:a1:d1:3d:6c:24:b8:
a8:30:04:bb:da:ed:ec:dc:8b:f2:03:3e:f1:64:df:
04:70:e2:d9:79:b7:0c:e2:fe:57:a4:62:98:07:d0:
ce:99:49:68:68:1b:de:39:1d:35:79:12:76:20:fb:
7b:61:d2:43:99:26:2a:a4:ef:39:62:f8:63:35:54:
e1:92:9a:2a:37:7e:ba:cc:ae:0a:4c:9d:6e:e1:ee:
8c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:6E:B3:C4:84:BB:7E:55:62:71:8A:58:7B:28:D9:84:82:4F:11:07
X509v3 Authority Key Identifier:
keyid:87:A4:E5:D7:72:5C:58:68:AA:BE:A0:25:B8:38:DC:C2:33:C6:FF:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h6Tl13JcWGiqvqAluDjcwjPG_8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/6555c3-0546-4eef-8648-506a21595cb8/1/326zxIS7flVicYpYeyjZhIJPEQc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/6555c3-0546-4eef-8648-506a21595cb8/1/h6Tl13JcWGiqvqAluDjcwjPG_8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.232.164.0/22
193.186.39.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:ac:b0:78:dc:fb:8a:13:93:a6:69:b1:2e:fa:ee:05:5a:c9:
4f:c1:c8:48:f3:a6:b6:49:83:0a:0d:de:f6:cb:57:5f:b2:45:
42:30:ef:41:33:82:23:06:25:45:1e:57:c0:b6:80:6a:d8:e5:
17:6b:19:ac:ba:53:11:cd:d4:22:63:54:04:1c:a1:95:8a:fd:
9c:c1:62:45:4b:32:1a:c3:e2:70:89:67:59:5f:79:29:f3:29:
c8:f1:e8:e3:b2:ba:88:1e:98:90:a7:91:18:3a:e5:95:9e:b1:
db:52:08:d3:e1:5b:21:d6:bc:46:1d:91:14:16:d7:a6:bc:0d:
f9:35:da:a1:d2:3c:43:69:4b:94:eb:9a:d3:e4:cb:54:c7:1f:
d6:c0:d5:20:04:d9:25:1e:fe:a9:da:a6:fd:43:2f:6e:20:e0:
91:f6:5b:38:0b:f5:bd:01:e8:8e:3b:ff:70:67:be:2f:8a:f8:
99:ff:3b:ff:bd:5e:f0:82:b7:fe:01:e9:e1:51:e1:71:88:b9:
19:b9:90:d7:ec:75:4d:33:74:bb:24:83:58:34:87:89:44:ee:
11:84:a6:6b:ba:13:7f:46:9d:71:f7:54:6f:10:36:18:fe:f1:
1e:e1:85:f2:b7:05:7e:4b:3d:d2:f0:09:53:e5:ef:0f:a1:83:
47:be:90:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 19:04:09 2025 by rpki-client