Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/9a6cf5-1342-4c3b-87af-160c24c66630/1/hIJG4JYkLEhwraYEYvL-fraByuk.roa
File: hIJG4JYkLEhwraYEYvL-fraByuk.roa (raw, json)
Hash identifier: 5YFKdkA5FRK1IPjfHxOUcAbA5SZ2reBZq68WODkSIGA=
Subject key identifier: 84:82:46:E0:96:24:2C:48:70:AD:A6:04:62:F2:FE:7E:B6:81:CA:E9
Certificate issuer: /CN=8898db8cb861bbbdd1fb7562def4d77d8642c324
Certificate serial: 019420684A661F65C21F0EDA014343828B78
Authority key identifier: 88:98:DB:8C:B8:61:BB:BD:D1:FB:75:62:DE:F4:D7:7D:86:42:C3:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/9a6cf5-1342-4c3b-87af-160c24c66630/1/hIJG4JYkLEhwraYEYvL-fraByuk.roa
Signing time: Wed 01 Jan 2025 05:48:13 +0000
ROA not before: Wed 01 Jan 2025 05:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44351
IP address blocks: 91.199.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/9a6cf5-1342-4c3b-87af-160c24c66630/1/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/9a6cf5-1342-4c3b-87af-160c24c66630/1/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Mar 2025 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:4a:66:1f:65:c2:1f:0e:da:01:43:43:82:8b:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8898db8cb861bbbdd1fb7562def4d77d8642c324
Validity
Not Before: Jan 1 05:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=848246e096242c4870ada60462f2fe7eb681cae9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:30:5e:47:1b:aa:56:2e:7e:95:2b:78:9e:7d:
e2:e0:39:ec:f0:c8:0f:de:67:1c:52:9a:a3:13:ee:
15:38:1c:f4:cb:46:74:1f:c5:56:f3:01:6e:88:e2:
94:f9:6f:2f:46:0b:8a:b8:bc:22:9d:b1:b3:e0:1d:
85:87:97:71:de:82:78:7b:db:c1:4d:42:69:70:15:
7a:99:db:7b:29:e6:b2:2d:46:82:b1:8c:ce:eb:80:
5b:03:bb:bc:d3:3c:4f:b3:df:c7:5d:79:d7:29:35:
0d:80:cd:14:22:b8:23:55:6c:f9:47:4b:a5:77:52:
d0:1d:f1:fb:c4:40:90:c9:7a:1c:8a:76:34:44:b2:
6f:39:62:f3:05:2b:f6:25:93:84:3b:60:34:cb:38:
ef:a7:7d:54:0f:71:69:49:09:ef:55:ad:9e:5e:92:
41:d2:59:62:cb:66:f8:db:69:d5:ae:b1:d4:3a:17:
ff:16:2a:9a:53:59:8c:d4:56:16:4e:9e:35:2e:76:
ed:d5:91:e4:ac:53:1a:0e:7d:4b:c1:8b:d1:4b:0a:
b7:58:2a:34:f8:20:01:04:8e:3b:70:da:66:11:bb:
a2:89:3a:fc:77:f4:8e:20:73:fa:d2:ff:40:b6:e4:
89:fd:92:0d:76:fa:1e:ad:5d:53:1a:05:c1:39:7e:
5e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:82:46:E0:96:24:2C:48:70:AD:A6:04:62:F2:FE:7E:B6:81:CA:E9
X509v3 Authority Key Identifier:
keyid:88:98:DB:8C:B8:61:BB:BD:D1:FB:75:62:DE:F4:D7:7D:86:42:C3:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a6cf5-1342-4c3b-87af-160c24c66630/1/hIJG4JYkLEhwraYEYvL-fraByuk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a6cf5-1342-4c3b-87af-160c24c66630/1/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.92.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:5b:10:b0:6c:7e:7b:b1:64:2f:bc:96:46:a9:29:0e:50:b1:
c7:45:86:f0:e8:37:14:23:42:08:04:9d:7c:1f:2a:48:41:0a:
0c:95:c1:e0:77:1e:c2:fd:9d:ea:a8:de:d7:83:e7:d5:30:aa:
c3:bd:ba:a7:c3:90:a6:d7:5f:42:f9:40:86:2b:f3:50:69:d2:
91:3d:b0:63:48:0d:38:8f:c3:ea:64:43:10:7d:0c:b3:5d:ec:
bd:5c:ed:01:50:1c:a6:9c:30:9b:57:c6:3f:17:8b:5c:3f:8d:
f9:4c:80:cb:d6:8f:41:ea:f2:7d:bd:b4:d6:9f:dd:c0:9e:ec:
76:b1:8f:bd:d4:4f:5e:1f:27:f4:be:45:e0:11:33:1d:58:5b:
a2:62:8f:02:b7:90:83:a9:66:9e:cb:a9:65:f3:ef:5e:57:0e:
a6:95:51:9a:60:72:51:25:de:31:95:a2:e0:2e:e5:bb:8b:4a:
4b:98:21:15:b9:6c:54:86:1a:92:f3:c1:42:f4:60:f7:db:bb:
8b:1a:3e:87:67:33:03:1d:cb:49:02:ec:fc:bc:24:9f:8a:57:
71:f8:84:63:f4:62:de:ee:94:a0:c4:02:f2:f7:9e:c0:54:59:
98:2c:d3:55:9f:34:bd:d3:bf:46:c2:fd:1b:a6:8f:d5:90:01:
b0:2b:e2:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:59:43 2025 by rpki-client