Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/XQwbnYGK6jDxeXvCkaSdbKZzaOQ.roa
File: XQwbnYGK6jDxeXvCkaSdbKZzaOQ.roa (raw, json)
Hash identifier: IO3j0G8UIN7fX3xi+MKX4YsNgu93V1b6w5hTqh+nJ+k=
Subject key identifier: 5D:0C:1B:9D:81:8A:EA:30:F1:79:7B:C2:91:A4:9D:6C:A6:73:68:E4
Certificate issuer: /CN=da0aa135e766bc5b27dd2f5014fb63aeb591f8fa
Certificate serial: 0194214439F480E0B0A56E2CBF2A935EE574
Authority key identifier: DA:0A:A1:35:E7:66:BC:5B:27:DD:2F:50:14:FB:63:AE:B5:91:F8:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gqhNedmvFsn3S9QFPtjrrWR-Po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/XQwbnYGK6jDxeXvCkaSdbKZzaOQ.roa
Signing time: Wed 01 Jan 2025 09:48:26 +0000
ROA not before: Wed 01 Jan 2025 09:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8492
IP address blocks: 91.90.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gqhNedmvFsn3S9QFPtjrrWR-Po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:39:f4:80:e0:b0:a5:6e:2c:bf:2a:93:5e:e5:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0aa135e766bc5b27dd2f5014fb63aeb591f8fa
Validity
Not Before: Jan 1 09:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5d0c1b9d818aea30f1797bc291a49d6ca67368e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6b:72:43:a2:08:c5:32:6d:57:3e:90:75:94:
44:fc:42:94:5e:76:77:3f:b5:2d:4b:db:60:29:0e:
f2:a5:f4:81:1e:8c:8c:58:71:47:e3:08:b8:de:00:
4e:dd:00:27:cb:27:e3:90:4d:41:d4:b7:0c:b8:e6:
9d:d0:68:c4:11:cf:0d:f3:d9:4d:91:d3:8b:84:83:
30:a4:b0:4e:8d:a8:35:e4:de:8c:e5:ea:49:29:a9:
5d:01:6f:a3:2d:89:0c:dd:96:bb:00:a1:f3:75:ed:
4b:a9:de:5b:b0:95:65:09:4b:ae:62:33:3c:10:b4:
6c:af:c2:eb:4d:9f:d8:39:fa:c6:dc:bd:cb:31:a5:
83:27:f5:42:d2:7a:b8:48:da:dc:38:ad:a8:a1:16:
30:28:d7:cb:12:be:37:5b:87:df:23:ef:5c:66:7f:
81:15:e1:c4:ee:ec:e9:a9:0f:b9:7d:24:0c:64:9b:
77:eb:22:38:5c:06:fd:6b:a8:a7:9a:0d:73:58:68:
b1:a9:34:d2:78:3b:a6:ba:c4:72:85:90:03:d4:23:
ac:55:76:23:7a:75:6d:bf:68:03:8c:fe:b7:5e:34:
bb:1e:6e:27:a0:81:38:1f:06:52:f2:d9:da:cb:01:
ae:78:57:76:c5:4c:f3:a9:1a:5f:55:f5:f0:ca:2b:
f8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:0C:1B:9D:81:8A:EA:30:F1:79:7B:C2:91:A4:9D:6C:A6:73:68:E4
X509v3 Authority Key Identifier:
keyid:DA:0A:A1:35:E7:66:BC:5B:27:DD:2F:50:14:FB:63:AE:B5:91:F8:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gqhNedmvFsn3S9QFPtjrrWR-Po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/XQwbnYGK6jDxeXvCkaSdbKZzaOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/947302-2a8b-4dce-9f21-af3af082f943/1/2gqhNedmvFsn3S9QFPtjrrWR-Po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.90.211.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:6e:f5:a7:01:11:4f:ae:87:50:fa:db:d3:33:2a:ac:fb:38:
dc:fc:62:8f:66:c5:ff:50:17:55:9d:4b:4c:28:6f:82:17:b3:
8c:77:95:35:08:72:8e:09:8b:c7:60:8e:cf:87:19:be:0d:1d:
6d:1e:ae:ba:9a:e7:1d:fc:f0:3c:a9:6e:98:27:f8:18:04:7d:
91:51:9e:7d:9f:b5:5f:a8:a7:74:c6:03:9a:0d:d3:a1:52:b7:
39:77:82:d7:bc:a6:d9:b4:fc:ba:c5:72:20:17:c2:bf:d5:31:
c9:11:a4:91:64:99:ab:56:09:be:71:4e:b5:6a:5d:93:fb:d4:
d9:a5:04:ac:68:73:01:48:29:20:90:64:c5:2e:42:48:6a:ba:
8e:d7:8c:b5:4e:fb:8b:f6:67:5d:eb:d1:6b:72:59:b9:f2:40:
d0:dc:20:c2:40:ac:9f:d5:d4:a4:dd:67:b9:a8:e1:9b:be:b8:
09:c3:2c:35:b6:ac:04:62:f1:b4:f4:6f:52:49:af:35:c3:27:
41:c3:78:bb:0e:b3:98:40:e1:49:e7:99:7b:c5:45:b8:93:d9:
80:08:77:ad:6c:23:16:07:ef:d2:3d:bb:5d:c4:50:68:8f:cc:
94:a0:4d:53:50:a0:a3:67:23:b5:7b:1f:77:6b:f5:98:97:2a:
f7:22:f8:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 08:44:18 2025 by rpki-client