Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/CECuYLKJKay-_DTUpRvjJ6e9Xok.roa
File: CECuYLKJKay-_DTUpRvjJ6e9Xok.roa (raw, json)
Hash identifier: Bww9jwaRvi6o6HabYuvr08y2yEYkanNlup4j1yRDv98=
Subject key identifier: 08:40:AE:60:B2:89:29:AC:BE:FC:34:D4:A5:1B:E3:27:A7:BD:5E:89
Certificate issuer: /CN=0dd441c3ffae829842249e944b03851081f4d9e0
Certificate serial: 01941FFA43826BAEE4776A208B61931B42A7
Authority key identifier: 0D:D4:41:C3:FF:AE:82:98:42:24:9E:94:4B:03:85:10:81:F4:D9:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/CECuYLKJKay-_DTUpRvjJ6e9Xok.roa
Signing time: Wed 01 Jan 2025 03:48:02 +0000
ROA not before: Wed 01 Jan 2025 03:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15020
IP address blocks: 91.235.168.0/24 maxlen: 24
193.23.60.0/24 maxlen: 24
2a09:8400:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:43:82:6b:ae:e4:77:6a:20:8b:61:93:1b:42:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dd441c3ffae829842249e944b03851081f4d9e0
Validity
Not Before: Jan 1 03:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0840ae60b28929acbefc34d4a51be327a7bd5e89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:f6:7a:66:6a:01:0b:27:93:67:02:cc:65:27:
c2:8f:8f:c2:59:0a:37:a3:58:0a:ce:24:e9:0d:3b:
e9:d8:d5:73:40:db:ed:48:5b:ec:e5:73:43:4a:fe:
f7:01:2f:e4:d7:2d:cd:39:69:1b:30:6a:f6:e6:f3:
50:89:a3:f7:ba:b7:e0:a7:8e:c0:1e:96:b6:6d:df:
f6:33:e0:bc:b0:09:75:de:b4:7f:27:ce:84:0c:e2:
d4:fb:ec:1c:79:8c:91:cf:d4:6c:d2:32:23:6c:ff:
d3:cd:99:d7:35:e9:91:1e:fe:8f:32:2e:2e:d6:a7:
32:01:bc:d8:8c:4f:53:09:dd:67:d4:91:46:db:7f:
63:f2:2b:e5:f0:16:c9:08:ae:80:35:cc:12:11:4b:
0b:9d:a3:0a:99:3f:44:44:d0:fc:ae:fc:38:2c:5f:
93:61:93:f7:0e:44:3b:95:d9:58:98:96:fb:0f:03:
78:db:7b:5d:3e:c3:23:3e:73:08:24:71:ee:1a:c0:
b8:a8:56:09:cc:6a:29:d1:d2:be:70:70:41:f4:29:
48:7c:9d:b2:ea:06:ed:52:f3:ea:3f:84:04:cb:59:
6e:6d:7a:58:db:93:8d:60:b7:61:9c:d4:d6:9b:33:
f8:8d:a9:7c:f6:c3:50:8e:76:a3:0a:35:ba:b6:34:
65:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:40:AE:60:B2:89:29:AC:BE:FC:34:D4:A5:1B:E3:27:A7:BD:5E:89
X509v3 Authority Key Identifier:
keyid:0D:D4:41:C3:FF:AE:82:98:42:24:9E:94:4B:03:85:10:81:F4:D9:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/CECuYLKJKay-_DTUpRvjJ6e9Xok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.235.168.0/24
193.23.60.0/24
IPv6:
2a09:8400:3::/48
Signature Algorithm: sha256WithRSAEncryption
53:70:49:30:2d:cc:f3:af:83:1f:c0:84:94:5d:dd:ce:a3:df:
e4:cb:3e:fb:a7:8b:25:db:54:9f:af:9c:d0:4c:96:68:6b:1d:
d9:24:1f:40:bb:8f:3f:7b:da:84:60:4d:2a:be:92:f7:40:96:
c1:1d:27:bb:24:02:6c:c7:1c:d1:5b:a6:21:dc:31:02:5d:29:
29:67:13:61:39:ac:c4:94:9a:16:c2:2d:31:3f:97:6f:8c:52:
5a:bd:18:4d:0a:29:52:60:2c:6b:e1:a4:d0:08:3f:61:83:e9:
1f:0c:82:9b:34:07:bc:a6:24:c1:c5:eb:19:46:f4:fb:75:6c:
36:c6:f4:4a:dc:5b:09:62:cb:14:11:2d:3b:7f:4f:91:8e:61:
0d:2b:7b:f7:a4:63:f5:1d:63:62:cf:a1:12:16:f1:eb:d7:b1:
fa:49:11:3e:5f:ba:a9:4c:b4:66:9e:8f:47:5e:be:5b:66:e1:
a7:25:a4:6d:5b:fa:21:92:e8:58:77:47:ce:02:96:ce:ec:47:
36:1c:2d:38:f9:ae:c4:e3:39:a0:2a:ad:1b:c7:00:fa:6e:7a:
a9:fb:b8:a5:8f:07:7f:f5:2a:ea:d6:e2:9b:12:5e:d5:32:b9:
67:dd:03:1d:8e:bb:ae:d9:3e:c4:20:0b:bf:72:fa:99:41:3e:
11:8e:48:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 05:18:54 2025 by rpki-client