Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/6ffb9c-7d44-4cf7-84ed-2f4aa45cb5ec/1/B56y44YODLvIaK63HQtFyfRwg6M.roa
File: B56y44YODLvIaK63HQtFyfRwg6M.roa (raw, json)
Hash identifier: gj5T46CEfqmvf3lZZB8Zxjkv61wJPVASA1iw+kPG+SU=
Subject key identifier: 07:9E:B2:E3:86:0E:0C:BB:C8:68:AE:B7:1D:0B:45:C9:F4:70:83:A3
Certificate issuer: /CN=98f388bfa665bb8467fd5cdcd2c3327ec7f27fec
Certificate serial: 01945FEA337006BCF206362A28B3F8F7FDD6
Authority key identifier: 98:F3:88:BF:A6:65:BB:84:67:FD:5C:DC:D2:C3:32:7E:C7:F2:7F:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mPOIv6Zlu4Rn_Vzc0sMyfsfyf-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/6ffb9c-7d44-4cf7-84ed-2f4aa45cb5ec/1/B56y44YODLvIaK63HQtFyfRwg6M.roa
Signing time: Mon 13 Jan 2025 13:46:11 +0000
ROA not before: Mon 13 Jan 2025 13:46:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43587
IP address blocks: 91.195.62.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/6ffb9c-7d44-4cf7-84ed-2f4aa45cb5ec/1/mPOIv6Zlu4Rn_Vzc0sMyfsfyf-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/6ffb9c-7d44-4cf7-84ed-2f4aa45cb5ec/1/mPOIv6Zlu4Rn_Vzc0sMyfsfyf-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/mPOIv6Zlu4Rn_Vzc0sMyfsfyf-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:5f:ea:33:70:06:bc:f2:06:36:2a:28:b3:f8:f7:fd:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98f388bfa665bb8467fd5cdcd2c3327ec7f27fec
Validity
Not Before: Jan 13 13:46:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=079eb2e3860e0cbbc868aeb71d0b45c9f47083a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6a:8c:48:69:a7:3a:d4:0b:24:8a:5a:70:b9:
8f:27:94:20:b7:ab:ab:26:57:0e:bf:67:51:8c:ff:
72:4c:b1:db:82:92:76:6b:77:1e:a7:93:30:8b:31:
07:8a:a7:0f:bc:36:d1:93:11:9f:12:6b:e1:eb:c1:
39:8f:dc:d5:c1:b5:d4:bf:6e:53:f1:5f:0c:1b:dc:
64:9a:97:0f:01:39:92:51:73:4d:36:3c:67:1f:c0:
95:c7:7e:79:33:1c:bf:70:82:68:7a:15:38:92:f2:
bc:6f:a2:37:fc:d6:27:30:2b:31:70:ad:69:d7:e7:
09:76:dd:fb:c0:8b:23:fe:af:5e:d7:5a:ff:de:69:
7b:1c:a4:51:d6:64:23:aa:f6:12:81:57:68:2f:cd:
ab:51:e3:28:a2:07:3e:f7:34:9d:8e:e1:ea:75:ca:
51:7e:de:b9:67:a6:1b:3b:75:af:df:c1:c8:9f:3b:
60:c5:68:92:c1:49:86:3a:41:0b:fa:b0:f4:2d:fc:
d6:c7:5f:de:cf:61:d8:88:71:45:5f:3e:1a:0f:47:
7e:39:43:9d:71:ce:c1:c1:85:86:7b:db:62:2d:fc:
8f:2e:a5:9a:8c:d7:8b:76:84:9e:92:39:32:fb:2c:
65:d7:7b:db:87:f1:25:cf:c1:3e:c8:be:ca:2a:c0:
c5:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:9E:B2:E3:86:0E:0C:BB:C8:68:AE:B7:1D:0B:45:C9:F4:70:83:A3
X509v3 Authority Key Identifier:
keyid:98:F3:88:BF:A6:65:BB:84:67:FD:5C:DC:D2:C3:32:7E:C7:F2:7F:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mPOIv6Zlu4Rn_Vzc0sMyfsfyf-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/6ffb9c-7d44-4cf7-84ed-2f4aa45cb5ec/1/B56y44YODLvIaK63HQtFyfRwg6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/6ffb9c-7d44-4cf7-84ed-2f4aa45cb5ec/1/mPOIv6Zlu4Rn_Vzc0sMyfsfyf-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.195.62.0/23
Signature Algorithm: sha256WithRSAEncryption
0d:8f:90:ed:a2:d8:b8:ee:c8:de:3e:7b:b1:9a:35:b2:73:30:
07:df:d5:5a:ff:8c:6b:28:d6:89:bc:5a:17:3e:bc:33:4b:99:
11:96:59:90:ef:9e:0b:d2:a8:3e:10:52:e7:f0:2a:c9:a3:dd:
42:73:39:50:5d:d8:5a:bb:b4:e8:19:20:43:01:41:10:23:a3:
40:a8:64:d2:6e:b1:6f:5f:7a:50:b2:a9:6f:18:11:27:4a:b2:
a8:2d:72:7e:f0:f3:d9:fd:a7:d1:47:23:df:b7:9b:f8:0e:6f:
58:3c:71:99:79:7d:2c:b7:0a:d7:e0:d0:d7:1a:c6:11:c4:a4:
6e:25:0f:28:a6:32:17:2e:c6:38:19:ad:62:0f:73:83:af:f0:
f6:05:84:9c:b1:3e:c8:2b:f3:c9:b2:8c:1f:0d:36:1e:a9:da:
19:cc:28:9b:ec:6a:5c:5b:5f:4d:04:36:82:f3:73:f3:98:77:
09:3b:1a:ae:7b:ca:c6:de:fe:9e:88:a8:93:2e:3b:96:15:3f:
b6:49:b6:cb:96:e5:c2:d0:8e:be:37:1e:07:1c:ce:e2:77:3d:
11:7c:99:c2:ae:28:9e:b9:a0:d1:a4:11:da:9b:ef:76:4f:19:
42:79:f2:69:72:1c:a2:e2:46:c1:4c:16:f6:fe:97:7f:ba:ec:
e8:d7:81:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 10:02:52 2025 by rpki-client