Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/SV1PBkOmZ6MIfKK9aCw6UnMTAMA.roa
File: SV1PBkOmZ6MIfKK9aCw6UnMTAMA.roa (raw, json)
Hash identifier: IF9hTJNwg+C6sOiJxM0wjia7V2gTMUUf+M1j+KMX6Hk=
Subject key identifier: 49:5D:4F:06:43:A6:67:A3:08:7C:A2:BD:68:2C:3A:52:73:13:00:C0
Certificate issuer: /CN=a26d46212983da71f31ae57e59c39e09b339ca02
Certificate serial: 019426D8EFF423CFB434791D19B494111057
Authority key identifier: A2:6D:46:21:29:83:DA:71:F3:1A:E5:7E:59:C3:9E:09:B3:39:CA:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/om1GISmD2nHzGuV-WcOeCbM5ygI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/SV1PBkOmZ6MIfKK9aCw6UnMTAMA.roa
Signing time: Thu 02 Jan 2025 11:48:58 +0000
ROA not before: Thu 02 Jan 2025 11:48:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47511
IP address blocks: 91.206.82.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.mft
rsync://rpki.ripe.net/repository/DEFAULT/om1GISmD2nHzGuV-WcOeCbM5ygI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d8:ef:f4:23:cf:b4:34:79:1d:19:b4:94:11:10:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a26d46212983da71f31ae57e59c39e09b339ca02
Validity
Not Before: Jan 2 11:48:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=495d4f0643a667a3087ca2bd682c3a52731300c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:87:e3:a4:02:f1:f6:4d:14:26:4f:02:bd:14:
95:d7:ba:53:b0:46:16:5b:02:c3:b4:e0:84:9b:9e:
31:05:67:1b:83:d0:ad:6b:c6:14:11:03:e3:4b:32:
62:76:fb:5f:58:cf:df:56:73:5c:7a:36:b1:e2:29:
2c:39:61:05:0e:4b:58:f8:6c:84:4b:a3:21:99:99:
d0:92:30:c6:2f:43:37:02:26:40:05:03:7f:ae:15:
c0:69:e3:cb:a8:ac:98:2c:5a:c4:e5:f5:0e:c5:f0:
5e:a6:0f:2c:4b:e7:9e:87:39:23:d6:d4:fc:ff:67:
87:98:a2:c4:62:a7:7f:73:c8:19:83:8d:95:eb:4c:
68:48:f9:d2:fe:3e:62:d1:8c:77:80:38:0d:92:ce:
5e:8c:e4:6b:e4:c8:cb:d5:46:73:55:c7:66:c7:60:
33:3c:18:ca:3f:de:48:d6:31:81:8a:43:81:97:d9:
1c:09:5d:d4:f3:0f:4b:78:ac:5b:1a:5b:99:11:ff:
6e:e7:ef:7d:ea:69:62:a8:88:b1:bb:a1:1d:2d:fc:
7e:8b:df:53:b3:26:f9:ed:a2:3d:22:48:90:61:27:
68:c4:7c:d5:57:b4:97:aa:1a:f1:1d:22:35:61:e8:
bd:78:51:53:44:b0:58:f8:37:11:59:6f:50:12:60:
d9:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:5D:4F:06:43:A6:67:A3:08:7C:A2:BD:68:2C:3A:52:73:13:00:C0
X509v3 Authority Key Identifier:
keyid:A2:6D:46:21:29:83:DA:71:F3:1A:E5:7E:59:C3:9E:09:B3:39:CA:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/om1GISmD2nHzGuV-WcOeCbM5ygI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/SV1PBkOmZ6MIfKK9aCw6UnMTAMA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.82.0/23
Signature Algorithm: sha256WithRSAEncryption
37:7c:fe:c4:da:56:e8:e5:9c:1d:f7:82:a3:b1:da:c5:6c:4e:
69:c1:be:53:2b:fe:0e:49:6c:4f:7d:7a:91:07:51:e3:6e:b1:
3f:9e:37:e6:c0:03:f2:09:ee:dd:83:d8:39:ca:0a:c8:b4:b2:
ae:b0:4f:86:dd:30:a9:06:f1:ab:0b:b0:af:de:ca:3a:fb:ab:
1e:b2:81:67:dc:b1:21:1a:7b:77:9a:53:cd:0b:47:55:ec:16:
03:54:9b:15:69:d9:26:b9:eb:8d:3a:dd:a5:ca:22:66:dd:7b:
dc:27:71:ab:8c:19:d0:a5:a9:72:a0:cc:cc:b2:f2:84:c3:db:
0d:96:55:92:02:5b:8e:a9:87:c3:80:d3:48:2f:37:fb:6e:f1:
da:62:d5:36:a9:b1:e4:5c:88:d1:36:c1:b2:4c:41:3a:56:3b:
8c:7e:d7:2d:f4:06:9c:79:41:24:63:14:d5:e9:36:b4:92:5d:
17:68:aa:73:6a:67:36:b3:fe:98:fd:e7:fe:c5:5c:72:c8:70:
e4:e9:27:0b:01:18:73:8a:2a:c3:2f:8a:cf:fe:64:11:fb:0f:
c7:0d:fa:02:97:83:50:33:43:25:1b:1c:81:80:ff:2d:ed:ad:
7f:84:fb:09:ae:f5:f1:7b:91:71:80:d0:a9:b0:e1:44:25:00:
1b:fa:2b:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:43:01 2025 by rpki-client