Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/YO9Rv4O7mqZvQ72FaV8J_c91SqM.roa
File: YO9Rv4O7mqZvQ72FaV8J_c91SqM.roa (raw, json)
Hash identifier: 2QIlFXVhcWVwoyEM0B/+slqeXVtc2ygy29IyQzPmBpA=
Subject key identifier: 60:EF:51:BF:83:BB:9A:A6:6F:43:BD:85:69:5F:09:FD:CF:75:4A:A3
Certificate issuer: /CN=0df10c8a580543f92d19fd5f8f564beeaa48ca1e
Certificate serial: 0194221FFD4E88F35B6D3D84D7C25E3331CB
Authority key identifier: 0D:F1:0C:8A:58:05:43:F9:2D:19:FD:5F:8F:56:4B:EE:AA:48:CA:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/YO9Rv4O7mqZvQ72FaV8J_c91SqM.roa
Signing time: Wed 01 Jan 2025 13:48:29 +0000
ROA not before: Wed 01 Jan 2025 13:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208788
IP address blocks: 91.210.212.0/22 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 13:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:fd:4e:88:f3:5b:6d:3d:84:d7:c2:5e:33:31:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0df10c8a580543f92d19fd5f8f564beeaa48ca1e
Validity
Not Before: Jan 1 13:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=60ef51bf83bb9aa66f43bd85695f09fdcf754aa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:44:9a:b9:82:79:80:d6:2b:0e:69:df:60:bb:
ae:5c:d2:fd:52:04:9e:66:9c:f7:3c:6c:25:04:9c:
51:fc:0c:8c:8c:62:aa:5a:b4:81:04:8b:4c:89:ef:
63:4a:45:3d:3d:01:74:51:fd:a6:be:a1:a7:ca:5a:
cc:ae:8c:f5:b6:dc:f3:4c:50:e4:25:73:2f:7c:da:
59:64:67:28:60:de:65:e3:0d:46:9d:e3:be:74:ff:
48:8c:7a:fa:12:b6:52:4e:46:cf:77:1b:ba:aa:f8:
9a:bc:31:33:e9:43:02:32:e3:27:e6:53:2d:1b:23:
86:0b:5b:04:23:83:58:d8:42:fd:b0:20:ed:5f:82:
d1:ec:26:cf:fd:ed:6d:0a:ab:2c:76:e1:20:21:48:
93:4a:bd:45:65:04:6f:0a:df:7e:03:4e:fd:7b:d9:
c7:fb:d3:66:42:82:46:2a:d1:96:55:76:93:3b:7b:
af:de:39:55:ad:74:98:b9:9e:91:2f:41:05:93:d4:
3f:95:1d:29:18:1f:bf:03:1a:9a:0c:f8:d4:4a:6d:
e5:d3:24:26:62:43:3a:50:ab:1b:84:41:01:ae:77:
55:dd:c0:f7:a6:93:ad:aa:1d:7d:3e:a8:bc:f6:2a:
a2:2e:9c:07:73:f1:19:8d:95:04:28:c4:5a:e8:46:
56:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:EF:51:BF:83:BB:9A:A6:6F:43:BD:85:69:5F:09:FD:CF:75:4A:A3
X509v3 Authority Key Identifier:
keyid:0D:F1:0C:8A:58:05:43:F9:2D:19:FD:5F:8F:56:4B:EE:AA:48:CA:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/YO9Rv4O7mqZvQ72FaV8J_c91SqM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.210.212.0/22
Signature Algorithm: sha256WithRSAEncryption
78:ac:64:7d:a6:ee:9d:c8:01:67:70:a7:a0:9f:90:34:9a:23:
79:e5:86:7c:8a:39:9c:73:96:a4:e9:5c:9f:53:0c:3e:30:13:
ab:d5:f4:f2:bf:eb:0d:08:74:e0:50:e0:bc:a6:98:51:b1:36:
64:4d:e5:67:a0:c6:18:31:28:5b:e8:a0:5e:b7:ec:c4:f6:a3:
43:83:63:18:c5:57:ff:d1:a7:dd:1d:1c:6b:44:d7:f0:50:f9:
1d:ed:41:7d:22:69:83:43:83:1e:6c:46:52:7f:ee:39:69:8f:
8d:0e:f0:84:f8:3f:b3:a6:75:22:15:e2:12:40:72:fa:4e:16:
01:e8:41:34:00:dd:ea:8c:ac:01:81:5c:18:33:3e:72:d0:4e:
89:aa:0d:2b:7f:7b:30:1c:7b:00:aa:92:33:fb:b7:5c:62:f8:
d3:19:2f:0e:8f:dd:c9:14:a7:10:4e:6b:b4:98:4c:34:22:9c:
e8:28:c0:7a:c7:18:32:d8:87:5c:d5:ad:99:4f:e4:45:6e:e7:
15:1a:19:e2:e4:db:8b:12:06:f6:0b:14:29:32:21:03:20:92:
42:69:2a:e5:70:48:ff:ac:88:52:6d:8a:26:30:0c:82:a9:38:
b1:34:70:76:3b:3a:43:b7:da:a0:cc:09:14:1b:50:ec:77:dc:
96:99:9a:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:23:31 2025 by rpki-client