Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/Se8jY-LoM2MVsZ37wmyygWUdZqw.roa
File: Se8jY-LoM2MVsZ37wmyygWUdZqw.roa (raw, json)
Hash identifier: 460xRSiSARjue5TmuazrIkrxiYolcj28Woj0bWcIVJo=
Subject key identifier: 49:EF:23:63:E2:E8:33:63:15:B1:9D:FB:C2:6C:B2:81:65:1D:66:AC
Certificate issuer: /CN=aae89bc3097768acd67c2dd747d3be1adb72e997
Certificate serial: 019424448252EF318C6E87F1522E91A61159
Authority key identifier: AA:E8:9B:C3:09:77:68:AC:D6:7C:2D:D7:47:D3:BE:1A:DB:72:E9:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/quibwwl3aKzWfC3XR9O-Gtty6Zc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/Se8jY-LoM2MVsZ37wmyygWUdZqw.roa
Signing time: Wed 01 Jan 2025 23:47:37 +0000
ROA not before: Wed 01 Jan 2025 23:47:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41656
IP address blocks: 91.200.73.0/24 maxlen: 24
194.145.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.mft
rsync://rpki.ripe.net/repository/DEFAULT/quibwwl3aKzWfC3XR9O-Gtty6Zc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:82:52:ef:31:8c:6e:87:f1:52:2e:91:a6:11:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aae89bc3097768acd67c2dd747d3be1adb72e997
Validity
Not Before: Jan 1 23:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=49ef2363e2e8336315b19dfbc26cb281651d66ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c2:ab:4c:bb:60:cd:ed:bf:a6:f3:8e:90:af:
c4:43:83:2c:f7:92:59:e6:c8:9f:20:93:5f:da:78:
aa:38:ed:d9:0e:fd:24:6a:7b:8b:8e:12:81:8b:b6:
dd:b7:db:80:c7:e7:d0:c4:1c:dc:34:0a:fb:3a:27:
a3:16:6a:26:d1:c4:fe:9b:15:9b:fe:3a:02:17:67:
9e:8b:36:5a:f3:31:6a:e8:46:12:2f:b5:d9:6f:a4:
b5:6a:4d:ff:f2:58:a4:02:5a:c0:3d:9f:85:7c:36:
8d:ba:5e:2b:2f:dc:c8:eb:a1:97:b6:d4:46:a7:e1:
af:f1:1e:62:d7:3a:fe:00:4c:5d:9b:b3:c6:a9:f2:
03:ae:a7:87:27:e7:a7:0b:7d:8a:c7:5f:8e:b7:2d:
55:11:aa:88:78:30:0f:b1:46:ba:67:48:30:7b:82:
dc:c4:29:21:a1:cf:bc:48:4a:a8:0b:1b:d0:ee:f8:
2d:c5:32:a2:88:65:42:a3:19:4b:67:1e:6b:41:27:
7e:00:17:d2:0c:b0:75:97:1d:14:73:cb:c8:ae:30:
9b:5c:c9:bb:ee:cb:09:ec:31:a6:39:12:d1:e2:52:
9f:1d:9a:30:c6:f1:9d:62:4c:0e:65:f1:79:b2:b7:
42:e9:9b:5d:80:b9:66:81:1f:e8:85:fc:1b:1c:59:
0a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:EF:23:63:E2:E8:33:63:15:B1:9D:FB:C2:6C:B2:81:65:1D:66:AC
X509v3 Authority Key Identifier:
keyid:AA:E8:9B:C3:09:77:68:AC:D6:7C:2D:D7:47:D3:BE:1A:DB:72:E9:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/quibwwl3aKzWfC3XR9O-Gtty6Zc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/Se8jY-LoM2MVsZ37wmyygWUdZqw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.200.73.0/24
194.145.203.0/24
Signature Algorithm: sha256WithRSAEncryption
94:fd:9f:57:e4:43:14:a5:e0:5b:b4:dd:9b:7c:4a:8d:56:43:
6f:5c:04:1f:c2:1d:86:d1:de:ae:62:1b:89:96:7e:bd:12:e6:
ea:46:ac:4a:c3:66:ef:25:84:8a:87:0a:2f:26:b8:70:58:ae:
97:e0:f8:b8:87:a0:2a:8c:d3:78:99:e5:ae:2b:05:45:66:91:
99:b6:3c:36:07:67:2d:24:65:9e:bf:41:7f:ba:1b:ac:78:d7:
df:1c:99:f0:97:1d:a8:02:34:3c:4a:9e:94:6e:f9:f6:e1:24:
e0:51:ca:57:66:d9:57:fb:9e:91:f2:dc:9a:2d:cb:41:52:c9:
ed:a0:57:a7:37:94:79:0e:7e:f6:e0:26:2f:b2:18:94:e0:c6:
d5:97:67:6c:f2:db:3e:b7:af:70:a1:0e:00:70:72:3b:a8:a2:
a0:fd:c3:0a:e4:69:7d:08:1b:46:d0:76:58:62:6b:d7:31:3b:
a5:1d:dd:ad:e1:05:b0:53:5e:42:a0:ae:98:bc:56:ba:cb:7b:
d8:74:7f:ce:2c:4e:e3:23:7a:d2:08:6e:18:22:fc:e5:80:d4:
0f:0a:18:58:cc:47:1c:d3:9b:db:16:d7:d2:41:46:0d:bb:52:
5f:0f:ba:0d:f4:67:0d:fd:19:fa:81:16:11:20:0e:47:60:24:
fc:d6:45:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:55:25 2025 by rpki-client