Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/b0b6e7-3e23-4426-8c84-fab83d403558/1/DEgfILmdqt9WOK0Ss2u9swrxwIQ.roa
File: DEgfILmdqt9WOK0Ss2u9swrxwIQ.roa (raw, json)
Hash identifier: CPWB4WNXgBrN2XbsNeobPvgMpGNxH4sIm1wHWj5pBrM=
Subject key identifier: 0C:48:1F:20:B9:9D:AA:DF:56:38:AD:12:B3:6B:BD:B3:0A:F1:C0:84
Certificate issuer: /CN=d6dbaa1b52f3a73289ff768acb7baa7f387f955f
Certificate serial: 019425FDBC2DB8CC9DBFA5EF44DC8F0D0E17
Authority key identifier: D6:DB:AA:1B:52:F3:A7:32:89:FF:76:8A:CB:7B:AA:7F:38:7F:95:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/b0b6e7-3e23-4426-8c84-fab83d403558/1/DEgfILmdqt9WOK0Ss2u9swrxwIQ.roa
Signing time: Thu 02 Jan 2025 07:49:33 +0000
ROA not before: Thu 02 Jan 2025 07:49:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 91.208.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/b0b6e7-3e23-4426-8c84-fab83d403558/1/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/b0b6e7-3e23-4426-8c84-fab83d403558/1/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:bc:2d:b8:cc:9d:bf:a5:ef:44:dc:8f:0d:0e:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6dbaa1b52f3a73289ff768acb7baa7f387f955f
Validity
Not Before: Jan 2 07:49:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0c481f20b99daadf5638ad12b36bbdb30af1c084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:4d:65:79:70:de:0e:4c:a4:93:6b:0a:0d:e7:
a8:6f:a7:55:fc:f0:e5:36:b7:f1:8a:04:3b:21:0f:
6b:c9:78:8b:c2:0f:c1:32:f6:4e:b4:0b:53:70:7d:
9b:d1:e1:40:8e:0a:73:3a:95:6b:3f:ba:dd:08:52:
2c:e0:2d:3d:47:7e:31:8a:29:0f:8a:d6:e9:db:13:
23:8c:7d:50:68:5d:fb:50:8e:ce:3e:a9:fd:14:af:
48:b3:7f:d6:85:cd:48:5c:21:f1:a7:ec:1f:81:99:
94:54:de:93:22:94:a3:71:d3:01:d0:14:b7:22:b4:
ba:ca:f7:21:2a:dc:20:af:bc:69:b5:f2:29:0e:c9:
c8:db:37:20:b4:1e:c5:1f:ea:84:f8:59:f9:d5:f5:
40:46:92:db:6f:25:6d:4c:17:c8:c5:3d:ca:6a:f2:
c0:6a:8f:08:80:ce:ea:d6:98:c0:ec:16:02:48:fe:
44:cf:f4:97:94:97:8e:68:82:96:ba:e5:d0:5f:1d:
70:2f:a7:98:7b:2d:7c:be:42:1e:68:d6:72:5a:d1:
54:e0:17:33:34:90:fd:a9:98:0d:5e:79:c4:c3:74:
6c:fc:d7:2d:a6:c9:b7:fb:5d:c0:98:95:a8:fa:9b:
76:b2:bd:cc:e7:a4:2d:1d:eb:6e:78:77:66:b9:2e:
fe:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:48:1F:20:B9:9D:AA:DF:56:38:AD:12:B3:6B:BD:B3:0A:F1:C0:84
X509v3 Authority Key Identifier:
keyid:D6:DB:AA:1B:52:F3:A7:32:89:FF:76:8A:CB:7B:AA:7F:38:7F:95:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b0b6e7-3e23-4426-8c84-fab83d403558/1/DEgfILmdqt9WOK0Ss2u9swrxwIQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b0b6e7-3e23-4426-8c84-fab83d403558/1/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.21.0/24
Signature Algorithm: sha256WithRSAEncryption
20:bc:d8:c7:4f:9c:85:a0:37:6b:b0:bf:df:34:68:dc:92:87:
ad:e6:3e:f5:7a:24:f5:45:61:6d:e6:96:7d:54:9e:4e:06:05:
39:43:40:c4:99:81:68:3d:b4:45:a6:e3:ac:d9:b3:19:b8:4a:
63:7c:1f:19:f8:86:ed:58:7e:01:d2:df:27:e8:2c:db:3b:78:
04:0f:8f:89:3d:de:e4:8f:67:09:8d:68:e3:78:3e:7c:2c:31:
69:e9:26:b8:90:7e:19:d6:44:7f:2a:77:ea:23:2f:34:8e:19:
95:f9:cf:dd:fd:4f:21:3c:cc:18:76:72:dc:22:33:ec:fa:1a:
12:45:28:47:6c:12:a9:b3:c0:3e:1a:00:6f:c7:b4:30:78:dd:
39:ca:62:9d:e3:35:e8:b0:4a:07:32:cd:fe:c2:b4:6b:01:a3:
8a:eb:59:6f:1c:3e:a4:c6:87:21:3b:cd:59:2d:4a:6e:5a:c8:
65:9b:1b:51:95:60:59:92:13:c8:29:bf:e1:22:cf:ed:f2:f5:
65:de:d1:3d:1e:f8:5d:6f:21:22:93:44:26:dc:28:ba:8c:53:
44:54:8f:f0:7e:35:b2:9e:c5:2d:d3:7b:9f:69:dd:54:1f:e4:
af:47:21:1a:29:5f:7d:3d:62:48:37:27:5f:56:e1:12:36:96:
e6:cf:31:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:21:56 2025 by rpki-client