Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/ORp5S2gwOdo1fvVCheux3Z-tEqE.roa
File: ORp5S2gwOdo1fvVCheux3Z-tEqE.roa (raw, json)
Hash identifier: 6QCXpLzMvGC+j67Cjb2lewZSHVD5p64YnzlA/zGClIY=
Subject key identifier: 39:1A:79:4B:68:30:39:DA:35:7E:F5:42:85:EB:B1:DD:9F:AD:12:A1
Certificate issuer: /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Certificate serial: 01942521BE98909F02504099CBDC528C2F66
Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/ORp5S2gwOdo1fvVCheux3Z-tEqE.roa
Signing time: Thu 02 Jan 2025 03:49:15 +0000
ROA not before: Thu 02 Jan 2025 03:49:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209043
IP address blocks: 91.208.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 10:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:be:98:90:9f:02:50:40:99:cb:dc:52:8c:2f:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Validity
Not Before: Jan 2 03:49:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=391a794b683039da357ef54285ebb1dd9fad12a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:96:90:0b:9c:fa:36:2a:b3:78:87:b4:b9:d6:
ca:e3:06:3b:d8:98:b0:6d:8e:2d:81:b8:bd:58:c0:
da:40:4e:98:b3:fc:5c:65:a2:39:92:9d:80:3c:ae:
14:58:30:ea:2e:18:40:32:84:8d:c1:07:70:99:ed:
ef:41:77:0f:b1:5f:5a:5e:0b:45:ae:cb:b2:ce:61:
a9:0e:32:d8:37:c7:23:c6:e7:58:ed:88:98:37:9f:
2a:89:9b:9b:6b:ab:6e:da:ff:d6:12:32:7f:ab:04:
be:3c:41:fb:2d:e9:f3:80:c8:40:1b:a9:dd:49:32:
c0:52:d0:77:4e:26:6c:2b:41:da:e3:85:6f:c1:a1:
62:64:47:30:3f:55:36:45:29:20:e3:5b:55:fa:f8:
e9:3b:b5:36:fb:30:47:55:93:dc:85:9b:de:11:c6:
68:b8:3b:d3:a1:93:5d:92:f3:79:b1:12:6b:71:3c:
b7:1c:61:cc:69:73:ce:4d:9e:27:b7:de:a4:44:fd:
ff:07:40:8a:95:b6:02:eb:d5:fa:94:a9:e3:d3:32:
91:0f:4d:8b:9d:9c:23:1e:32:e3:a4:03:ab:5a:eb:
45:c1:4a:e9:a1:13:f9:cf:bf:bc:cc:72:26:5d:11:
bf:c6:fa:f6:a1:a0:1e:04:37:9a:d4:af:04:95:89:
c8:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:1A:79:4B:68:30:39:DA:35:7E:F5:42:85:EB:B1:DD:9F:AD:12:A1
X509v3 Authority Key Identifier:
keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/ORp5S2gwOdo1fvVCheux3Z-tEqE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.69.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:d7:5a:c0:0b:74:9b:4b:2a:db:5e:68:6b:22:05:41:bf:93:
a6:6f:48:e7:49:9d:35:16:19:2f:7d:42:50:20:e6:28:a5:15:
d6:54:52:0d:47:f6:7f:37:cd:2a:38:8b:7a:32:f5:9e:a9:2d:
97:f6:cc:dc:97:41:c3:6a:35:79:30:4b:c5:2a:20:e9:1d:54:
03:42:ae:0f:66:3b:06:74:d5:97:f0:e8:09:e3:b1:02:88:9f:
4a:ff:94:5a:ca:54:3d:f4:23:2d:4d:ae:cd:ba:7f:ab:e4:34:
8e:f2:9f:7e:03:14:26:f3:0a:30:d2:04:7d:ba:2d:be:2a:0d:
7d:bc:61:81:74:eb:89:ca:40:8c:00:94:8b:8e:61:bd:60:c1:
7f:06:87:1f:2b:97:f3:18:4b:56:92:0d:9c:04:d1:51:7b:ed:
7a:24:ff:5c:ef:9e:2a:63:bd:d1:bf:56:56:6b:e6:a4:af:6c:
1f:28:92:c9:0e:0e:bb:ec:05:5a:b0:9f:ab:23:30:a9:78:30:
81:d5:e2:14:d7:ac:b6:d2:4d:14:ca:50:83:44:e5:8f:e1:09:
46:33:23:18:a6:db:fc:a1:a0:bc:50:dd:a4:87:83:97:ba:a5:
55:58:3c:76:00:e1:5a:e1:02:ba:69:23:27:46:9f:d2:73:74:
82:2c:4e:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:09:20 2025 by rpki-client