Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/aQ9TKcMoz5YUQ7Dv119RHqsXoe8.roa
File: aQ9TKcMoz5YUQ7Dv119RHqsXoe8.roa (raw, json)
Hash identifier: kuhGQLKsA1Pu5uUkS6WTtzxq+5UJHPF8akUoFzgsuJ4=
Subject key identifier: 69:0F:53:29:C3:28:CF:96:14:43:B0:EF:D7:5F:51:1E:AB:17:A1:EF
Certificate issuer: /CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
Certificate serial: 019425FDABF588568B42DC6DA8B2D077FDDF
Authority key identifier: 62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/aQ9TKcMoz5YUQ7Dv119RHqsXoe8.roa
Signing time: Thu 02 Jan 2025 07:49:29 +0000
ROA not before: Thu 02 Jan 2025 07:49:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202432
IP address blocks: 91.108.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:ab:f5:88:56:8b:42:dc:6d:a8:b2:d0:77:fd:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
Validity
Not Before: Jan 2 07:49:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=690f5329c328cf961443b0efd75f511eab17a1ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:df:77:0a:4d:44:d4:bb:21:5f:48:89:80:7c:
77:a8:d9:94:87:db:6c:81:d4:f5:b2:af:32:59:71:
11:3f:8f:1e:91:21:b3:3f:de:99:e9:6a:7a:ff:46:
50:c5:49:aa:cb:21:f8:a5:28:d5:17:5a:dd:ff:a6:
03:8e:33:94:61:4e:5f:f6:b9:68:4f:06:a7:09:79:
ef:d2:b5:56:26:64:32:bd:fc:34:e9:80:c8:de:f0:
60:7d:89:4a:74:ca:6d:77:94:d9:05:77:f7:1a:0f:
2e:5a:9c:ad:9f:3e:e2:02:f4:79:b3:49:90:0e:ec:
00:49:20:38:2a:40:ea:35:78:db:6b:52:23:d4:1e:
92:39:f8:61:6c:b5:ef:04:a9:36:9d:9b:eb:ee:d9:
b5:ea:53:ba:2c:41:32:05:f9:1b:25:1d:4a:4d:16:
61:08:e9:eb:fc:96:b6:88:35:c2:9b:d5:f8:35:e6:
b3:b1:53:ff:ef:a3:21:25:37:e5:e2:ac:b4:67:90:
e0:c6:93:7f:46:be:24:ee:a8:43:75:6c:d9:49:d1:
51:9c:b1:5d:f9:ab:90:ee:c0:fa:a0:51:81:8b:c3:
9d:e1:e4:30:9f:83:21:7c:5d:8d:24:81:00:81:c6:
14:41:ac:bc:19:cc:31:06:38:e2:c2:df:2c:e6:17:
6c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:0F:53:29:C3:28:CF:96:14:43:B0:EF:D7:5F:51:1E:AB:17:A1:EF
X509v3 Authority Key Identifier:
keyid:62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/aQ9TKcMoz5YUQ7Dv119RHqsXoe8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.42.0/24
Signature Algorithm: sha256WithRSAEncryption
27:da:35:ba:e6:a1:71:b0:e2:60:95:06:42:bf:22:82:e3:5c:
c2:76:23:9a:17:c6:9d:3b:f8:ff:4b:71:d0:67:7f:39:01:69:
e9:3c:a0:b9:4e:a5:fe:4c:92:70:57:38:b6:c8:63:a5:21:e3:
ee:88:0b:c8:14:24:17:c1:f7:ea:f7:b8:d7:92:e9:5b:71:7a:
cd:ea:8a:fa:60:8f:0a:8b:b3:24:6e:01:76:38:80:08:51:03:
ba:de:ab:b9:2e:42:25:76:29:5b:b7:ab:06:4c:2d:c5:c2:52:
bc:57:ed:41:5a:4e:60:2d:9f:86:5c:55:b1:95:a8:49:50:45:
a0:25:5c:15:b8:13:51:ea:8b:48:38:bf:9d:99:52:69:91:59:
5b:8b:c1:42:72:36:79:ef:8a:38:3e:62:fe:b9:af:10:77:c1:
7b:e1:86:0d:ca:c7:1a:22:8a:01:cd:42:20:0a:31:d4:b4:6e:
04:8f:fd:86:4d:4b:bb:b3:ad:79:f8:30:30:d0:7e:87:fb:82:
30:51:b1:dd:68:84:aa:e7:e5:df:19:3e:0d:9f:59:52:c1:be:
51:8d:c0:83:83:f4:b5:d8:db:31:74:14:ee:af:1c:2a:b9:5a:
54:a4:a9:1d:0d:98:fd:f1:b2:2c:34:cb:88:9b:63:29:07:a5:
9f:e0:1b:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 04:06:19 2025 by rpki-client