Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/eKdaY9u7yd9VS291GQM22qgfzCo.roa
File: eKdaY9u7yd9VS291GQM22qgfzCo.roa (raw, json)
Hash identifier: LpBEMBev2akTDLzB/P1Zql8JVSF96+zbvpBVIyg+mMk=
Subject key identifier: 78:A7:5A:63:DB:BB:C9:DF:55:4B:6F:75:19:03:36:DA:A8:1F:CC:2A
Certificate issuer: /CN=d57c7db04e78c221f3df2a2af082b518d962a8f0
Certificate serial: 0195D25AEF6D599A4F375AE2BC9BB6777C90
Authority key identifier: D5:7C:7D:B0:4E:78:C2:21:F3:DF:2A:2A:F0:82:B5:18:D9:62:A8:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Xx9sE54wiHz3yoq8IK1GNliqPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/eKdaY9u7yd9VS291GQM22qgfzCo.roa
Signing time: Wed 26 Mar 2025 12:08:49 +0000
ROA not before: Wed 26 Mar 2025 12:08:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43380
IP address blocks: 91.206.3.0/24 maxlen: 24
2a0f:f4c0::/32 maxlen: 64
2a0f:f4c1::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Xx9sE54wiHz3yoq8IK1GNliqPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d2:5a:ef:6d:59:9a:4f:37:5a:e2:bc:9b:b6:77:7c:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d57c7db04e78c221f3df2a2af082b518d962a8f0
Validity
Not Before: Mar 26 12:08:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=78a75a63dbbbc9df554b6f75190336daa81fcc2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:62:5a:fc:52:1e:ff:c4:c0:b5:8e:46:71:d8:
4d:0c:dc:08:e2:6e:52:9a:c0:46:57:0b:41:6b:7f:
6f:13:ec:4a:6a:d3:34:82:68:fd:75:6b:a6:22:95:
51:e9:86:8d:36:58:07:dd:e6:3e:d4:78:8f:0c:ef:
56:3e:95:33:69:60:41:53:e8:21:7e:ff:3b:b6:f1:
4f:ce:05:0e:98:69:5b:0d:7f:63:05:32:01:f3:11:
d8:62:db:93:bb:34:d7:45:f6:12:fb:fa:3c:84:eb:
c0:2f:38:da:4f:1c:3c:73:af:9b:74:5c:55:94:98:
7d:39:4f:5c:fa:c1:b6:5c:6b:5b:56:6a:93:0b:7b:
c1:2b:72:25:ab:1c:d7:a8:35:35:32:20:a0:33:dc:
4a:91:38:75:06:2f:52:1d:c0:45:20:bf:13:75:9a:
cf:44:76:6c:e3:59:a3:56:96:88:68:ec:a8:70:cc:
dc:a7:cb:0f:ee:db:4c:3b:7d:89:37:d1:2d:c9:e4:
76:ce:ec:ca:8e:56:84:af:3f:ee:29:61:14:01:dd:
1b:f9:b1:d5:d5:74:b7:48:ba:d2:67:19:aa:23:25:
28:40:c0:f7:23:7f:44:d4:7f:d4:d6:b0:c3:75:93:
8b:e5:07:37:27:4f:5c:e7:6b:06:b1:b7:18:d6:3a:
eb:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:A7:5A:63:DB:BB:C9:DF:55:4B:6F:75:19:03:36:DA:A8:1F:CC:2A
X509v3 Authority Key Identifier:
keyid:D5:7C:7D:B0:4E:78:C2:21:F3:DF:2A:2A:F0:82:B5:18:D9:62:A8:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Xx9sE54wiHz3yoq8IK1GNliqPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/eKdaY9u7yd9VS291GQM22qgfzCo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.3.0/24
IPv6:
2a0f:f4c0::/31
Signature Algorithm: sha256WithRSAEncryption
2c:84:83:01:fa:d1:20:9c:9b:d8:19:32:d8:be:e2:8a:69:86:
d8:ad:63:40:d7:a8:29:3a:08:3f:30:15:63:81:e6:63:5d:6c:
51:42:28:53:35:06:7c:87:54:e5:14:a6:94:12:5a:d5:c0:12:
04:ab:30:fb:0e:5a:31:b8:06:3d:85:cc:89:07:ca:c5:90:c3:
f4:c7:f0:c7:2e:77:b2:c2:db:c4:5d:7c:cf:8d:cb:91:27:ef:
96:f2:bf:06:8b:e2:3c:5f:36:21:8b:01:18:a4:1d:bb:b0:dd:
9c:dd:9c:65:a2:32:74:ac:fc:79:ef:4f:0a:16:37:40:a6:59:
89:1d:c4:40:95:59:86:09:74:b5:8a:08:b0:76:9c:d9:27:6e:
23:a1:2d:61:ae:18:2f:24:80:e3:06:88:d6:41:2f:7d:ab:8d:
2d:3d:0a:94:c0:42:09:ac:94:43:c2:93:7e:42:29:25:c3:54:
a0:d6:f2:83:01:70:25:e6:12:ee:34:c2:e8:6f:84:83:e4:25:
83:ed:4f:81:a3:0e:20:73:a5:22:c0:d8:04:ff:f6:50:a5:28:
2d:4f:79:6f:79:1b:57:2c:4b:df:bd:24:a5:f5:da:34:5d:59:
66:6e:74:89:6f:8f:12:41:92:b8:24:62:9a:62:89:22:4c:c7:
3f:06:97:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 04:46:50 2025 by rpki-client