Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/sr7Y9_0vrufLFByKjpTwDpWOODI.roa
File: sr7Y9_0vrufLFByKjpTwDpWOODI.roa (raw, json)
Hash identifier: p+V05XFve48eyskXSquTUKbCo+1z52AfwaKROL12RpE=
Subject key identifier: B2:BE:D8:F7:FD:2F:AE:E7:CB:14:1C:8A:8E:94:F0:0E:95:8E:38:32
Certificate issuer: /CN=11084b7d378b993c5f5e749f6a344de23e45ad00
Certificate serial: 019421B230A11D7674D17E3FFBE76F4F723D
Authority key identifier: 11:08:4B:7D:37:8B:99:3C:5F:5E:74:9F:6A:34:4D:E2:3E:45:AD:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EQhLfTeLmTxfXnSfajRN4j5FrQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/sr7Y9_0vrufLFByKjpTwDpWOODI.roa
Signing time: Wed 01 Jan 2025 11:48:33 +0000
ROA not before: Wed 01 Jan 2025 11:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43418
IP address blocks: 91.197.48.0/24 maxlen: 24
91.197.49.0/24 maxlen: 24
91.197.50.0/24 maxlen: 24
91.197.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/EQhLfTeLmTxfXnSfajRN4j5FrQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:30:a1:1d:76:74:d1:7e:3f:fb:e7:6f:4f:72:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11084b7d378b993c5f5e749f6a344de23e45ad00
Validity
Not Before: Jan 1 11:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b2bed8f7fd2faee7cb141c8a8e94f00e958e3832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:cf:f1:8c:1f:f5:0d:1c:8a:7a:46:fc:1c:3a:
e1:3a:b9:fe:a8:83:bd:8e:28:a8:b0:29:ee:98:3c:
22:a9:54:f1:ef:96:d2:b6:88:75:4c:21:b7:ad:f5:
95:6c:05:08:81:da:b3:51:7b:69:3d:69:77:12:1d:
c4:d0:8a:52:fd:ca:3a:b2:bd:ba:f0:ce:ff:df:1e:
02:13:e8:ba:ce:eb:2b:3a:7b:b1:e6:4a:cb:97:09:
5a:a2:ee:dd:ba:fb:30:bb:e6:36:3b:82:28:f5:99:
a8:de:07:a5:9d:dc:85:3d:6e:8e:4c:7b:7a:77:68:
ba:b4:f5:05:ed:f6:aa:06:fb:3f:a9:04:19:8e:97:
52:dd:1d:54:fe:fa:8b:db:78:68:3b:2a:74:b4:07:
94:ed:01:61:b9:ea:2a:0c:23:7b:8d:2f:a9:e2:65:
fd:c1:23:d1:fa:93:83:14:1c:d7:bf:db:84:66:42:
df:87:90:2d:09:d6:b0:16:06:f9:e8:27:29:e2:73:
6e:39:6c:dd:21:3f:c4:53:e0:4e:5c:62:a7:af:b7:
2a:1c:1c:37:12:85:17:26:97:61:48:d9:3e:df:65:
12:e1:31:07:b5:d3:7e:2c:98:02:49:91:12:bc:9e:
cb:cb:71:9a:1a:c6:46:28:cb:5f:e1:37:f5:7e:16:
d3:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:BE:D8:F7:FD:2F:AE:E7:CB:14:1C:8A:8E:94:F0:0E:95:8E:38:32
X509v3 Authority Key Identifier:
keyid:11:08:4B:7D:37:8B:99:3C:5F:5E:74:9F:6A:34:4D:E2:3E:45:AD:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQhLfTeLmTxfXnSfajRN4j5FrQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/sr7Y9_0vrufLFByKjpTwDpWOODI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.197.48.0/22
Signature Algorithm: sha256WithRSAEncryption
11:c8:ff:11:1c:33:c1:f8:1a:e7:2e:5a:ac:47:04:38:84:51:
78:56:0d:ba:30:05:22:dd:5f:bb:15:0b:2a:47:fb:cb:21:64:
8a:ef:df:45:e1:12:d6:73:81:9c:48:5d:9f:41:a5:f1:ef:c9:
01:59:92:e3:a6:0b:6e:dc:ed:8f:22:05:a2:4b:71:fe:52:13:
87:71:36:fb:4c:d9:b3:69:da:36:6e:cc:90:f5:f0:53:a4:91:
0b:50:22:be:0e:f1:a6:f7:9c:3f:22:03:ca:5c:51:2e:fa:00:
67:76:95:47:b9:5a:01:24:88:14:b3:9a:2a:32:44:81:e2:39:
6a:7e:f5:c0:23:c3:0e:de:aa:7d:5a:fe:81:eb:11:56:13:36:
05:eb:96:31:ec:97:75:a2:99:50:ea:b8:bd:0a:a2:5d:2a:41:
14:8a:68:e9:54:ad:b2:78:31:ad:91:40:71:10:eb:b0:72:48:
ac:df:9d:d2:6d:5b:33:c3:40:0d:b9:37:70:89:b7:86:77:49:
97:71:e0:23:4b:a1:c9:06:5b:55:57:60:28:c6:3b:7d:c2:5b:
52:cb:ba:6a:dc:80:43:40:fc:02:2d:b5:77:e0:fb:17:1a:01:
0a:67:8b:3b:90:4c:be:18:35:27:12:5c:e9:8c:dc:6c:63:95:
89:8d:a1:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 19:03:11 2025 by rpki-client