Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/9W9gYghW6_iCN3HlIGpaoOJHZhk.roa
File: 9W9gYghW6_iCN3HlIGpaoOJHZhk.roa (raw, json)
Hash identifier: /VOahTPt9Fh6RgLRa78P8pgoK/6N4p3sHujeTUCmYBc=
Subject key identifier: F5:6F:60:62:08:56:EB:F8:82:37:71:E5:20:6A:5A:A0:E2:47:66:19
Certificate issuer: /CN=4166c06ff49e0534809e234005baa5cca7e146a8
Certificate serial: 01963E8E87767B12CE775D68CEE7C64823AD
Authority key identifier: 41:66:C0:6F:F4:9E:05:34:80:9E:23:40:05:BA:A5:CC:A7:E1:46:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QWbAb_SeBTSAniNABbqlzKfhRqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/9W9gYghW6_iCN3HlIGpaoOJHZhk.roa
Signing time: Wed 16 Apr 2025 12:24:10 +0000
ROA not before: Wed 16 Apr 2025 12:24:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208570
IP address blocks: 91.217.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QWbAb_SeBTSAniNABbqlzKfhRqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 18:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:8e:87:76:7b:12:ce:77:5d:68:ce:e7:c6:48:23:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4166c06ff49e0534809e234005baa5cca7e146a8
Validity
Not Before: Apr 16 12:24:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f56f60620856ebf8823771e5206a5aa0e2476619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:1d:0d:ce:82:21:b3:60:29:d0:13:9b:7a:4b:
f8:ae:0c:f0:28:69:8d:46:60:f4:9f:ec:f3:bd:c9:
a9:27:e0:71:16:ce:cf:1a:cc:e3:d4:69:27:2f:a8:
e4:bf:f4:2d:c5:3c:57:d6:50:5e:35:ea:29:0f:d5:
90:75:81:72:f8:0c:96:49:1c:6d:fa:fe:76:e8:95:
21:92:23:3c:80:a2:3d:ad:2f:ce:67:80:6e:a5:b2:
ba:49:27:03:80:e4:b8:05:c6:3f:b1:6d:11:9c:bd:
b7:b7:cd:e1:6c:a2:ae:61:2c:21:a2:c2:a0:86:d1:
2e:2f:70:c2:c3:a4:7f:f7:33:7b:84:e7:1e:e3:ca:
e5:f2:a1:be:f6:d4:7e:0d:22:8c:36:1d:fc:25:3c:
60:5a:c7:a5:fa:05:2a:f4:67:e4:cb:1b:01:a9:c1:
ac:13:08:7b:cf:a4:d8:b3:5e:f2:60:b5:3f:a5:9c:
ef:6f:1c:1e:f7:91:8c:ad:ac:be:3b:91:9a:29:cb:
32:e8:06:e7:1c:09:fa:8a:18:55:dd:71:9b:74:6a:
33:6e:c7:cf:80:30:dc:19:a2:23:d7:9e:d2:79:f9:
f4:58:16:22:0f:13:4b:71:b5:f5:ca:3e:69:1e:f7:
da:92:e2:18:cf:cd:92:b1:84:fc:7a:c0:e8:1c:f6:
fb:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:6F:60:62:08:56:EB:F8:82:37:71:E5:20:6A:5A:A0:E2:47:66:19
X509v3 Authority Key Identifier:
keyid:41:66:C0:6F:F4:9E:05:34:80:9E:23:40:05:BA:A5:CC:A7:E1:46:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QWbAb_SeBTSAniNABbqlzKfhRqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/9W9gYghW6_iCN3HlIGpaoOJHZhk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.133.0/24
Signature Algorithm: sha256WithRSAEncryption
47:d7:76:91:b5:7c:74:be:9f:db:47:ba:6b:7f:95:40:61:fe:
ca:57:96:5e:41:10:87:05:5d:f3:41:cc:51:92:4e:a2:d4:74:
88:6a:c8:4c:0b:c4:2a:9d:57:91:bc:a0:c8:b2:14:fe:b2:78:
0f:15:42:4d:c7:cd:c0:0c:c2:04:8f:37:15:46:c2:9b:fc:f0:
3e:ec:c3:27:16:e9:50:41:c6:e6:46:ed:8d:82:14:0b:ea:71:
e0:69:80:53:c2:9f:49:ad:ed:fc:80:d4:ac:50:75:cb:63:d6:
e0:b6:c8:8e:43:4d:43:61:a5:f8:83:5a:bd:df:2e:e9:db:57:
01:5b:2c:73:c5:3c:4e:4d:3c:75:8a:a4:2c:67:6a:41:0e:43:
a2:e0:48:9c:da:ae:db:a5:a8:fa:f4:71:ca:76:a9:76:05:f9:
85:2e:0c:f6:3a:79:de:e0:22:b9:e5:c0:01:e1:6c:1b:64:6e:
c8:06:23:1a:cb:c4:f4:a2:fd:6e:cf:a9:68:f6:e7:e7:aa:6f:
df:f2:aa:bf:92:17:fe:af:d5:1d:32:ef:ab:3e:0f:ec:53:f5:
8d:ad:bc:66:a2:46:f9:af:55:ce:bc:2f:7f:6b:f5:7f:20:72:
ed:d2:f3:41:b1:42:f9:ef:d4:62:17:f7:6e:76:32:00:81:af:
0f:8f:8e:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:25:04 2025 by rpki-client