Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d10841-7d44-46da-b29c-381f23f183d7/1/6Usb3ratYZ6D0Zaywu3zy7asyBM.roa
File: 6Usb3ratYZ6D0Zaywu3zy7asyBM.roa (raw, json)
Hash identifier: mvJx8LQJM9rCQnMcKS37JkzCfYNP4MvGhPiFvu4e4PM=
Subject key identifier: E9:4B:1B:DE:B6:AD:61:9E:83:D1:96:B2:C2:ED:F3:CB:B6:AC:C8:13
Certificate issuer: /CN=1a14445259732aa6736c248234465947fc2374d0
Certificate serial: 019421B1C4FA72119AF8CEB86361412CE4E9
Authority key identifier: 1A:14:44:52:59:73:2A:A6:73:6C:24:82:34:46:59:47:FC:23:74:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GhREUllzKqZzbCSCNEZZR_wjdNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/d10841-7d44-46da-b29c-381f23f183d7/1/6Usb3ratYZ6D0Zaywu3zy7asyBM.roa
Signing time: Wed 01 Jan 2025 11:48:05 +0000
ROA not before: Wed 01 Jan 2025 11:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20057
IP address blocks: 91.236.118.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/d10841-7d44-46da-b29c-381f23f183d7/1/GhREUllzKqZzbCSCNEZZR_wjdNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/d10841-7d44-46da-b29c-381f23f183d7/1/GhREUllzKqZzbCSCNEZZR_wjdNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GhREUllzKqZzbCSCNEZZR_wjdNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 04:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:c4:fa:72:11:9a:f8:ce:b8:63:61:41:2c:e4:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a14445259732aa6736c248234465947fc2374d0
Validity
Not Before: Jan 1 11:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e94b1bdeb6ad619e83d196b2c2edf3cbb6acc813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:72:74:a8:f2:62:45:22:93:db:cb:73:60:8e:
11:21:82:a3:10:24:d8:f1:db:b4:a9:8e:ab:bc:28:
ef:3c:da:df:5f:83:4f:50:c7:60:21:cd:e7:11:ee:
36:a6:67:ea:71:f2:b7:1b:4b:3c:30:ad:55:13:42:
c6:e5:27:35:0d:d8:ea:46:a7:0c:61:34:59:80:a6:
4f:3e:ca:7b:19:1b:b8:38:82:38:8f:ad:22:4c:a1:
6e:a1:13:42:07:6e:22:3d:c3:b3:5a:10:c2:1c:7d:
00:33:d8:8a:7b:db:66:32:57:7b:6f:e1:e2:ca:1d:
6f:fa:c4:c1:a6:bc:8f:58:c1:14:f5:77:a4:c5:9f:
01:5a:d8:ba:33:f7:f2:0d:ed:0b:2d:53:15:88:c1:
05:f2:2f:2b:ce:20:47:07:da:cc:74:46:83:ab:de:
d7:4b:ee:2c:e7:d8:97:87:c4:55:f6:67:cb:c5:93:
89:68:7a:af:8d:cd:76:17:b6:34:08:38:ae:18:4c:
ed:ac:14:5c:95:f9:51:ea:85:5e:49:c6:85:90:09:
ad:ea:fb:12:01:a4:1d:39:43:e5:ce:97:8e:e2:71:
e2:9c:5d:e9:e6:33:20:65:76:25:60:b5:9a:9f:fe:
49:6a:c7:b3:00:02:94:04:d6:29:1d:aa:9e:51:9d:
89:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:4B:1B:DE:B6:AD:61:9E:83:D1:96:B2:C2:ED:F3:CB:B6:AC:C8:13
X509v3 Authority Key Identifier:
keyid:1A:14:44:52:59:73:2A:A6:73:6C:24:82:34:46:59:47:FC:23:74:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GhREUllzKqZzbCSCNEZZR_wjdNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d10841-7d44-46da-b29c-381f23f183d7/1/6Usb3ratYZ6D0Zaywu3zy7asyBM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d10841-7d44-46da-b29c-381f23f183d7/1/GhREUllzKqZzbCSCNEZZR_wjdNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.118.0/23
Signature Algorithm: sha256WithRSAEncryption
2b:86:64:da:4c:57:2d:ef:40:13:fc:42:d2:fd:98:bd:b1:d6:
ba:e6:2c:f9:30:d7:85:ab:c1:73:79:ac:80:56:49:68:ca:23:
71:b4:24:44:1e:03:bd:ff:c9:a1:6d:0f:f6:3e:38:57:0d:87:
71:72:19:10:16:fb:81:76:12:ca:a3:24:52:cc:3a:e1:41:e7:
f0:d8:64:97:c9:0a:0d:6d:31:57:7f:9c:c9:cf:99:e6:98:4b:
0e:a3:c2:05:d6:29:f3:00:62:cc:6a:8c:c9:bf:bf:3f:80:81:
24:61:b4:42:d0:f0:90:31:c9:89:5d:fb:0d:91:15:22:2c:57:
39:a9:63:cb:25:cb:21:7e:1b:5e:de:a9:d7:fa:1d:a5:38:24:
6f:6c:1a:42:0c:c5:b1:4e:a1:fb:6b:a5:bb:61:cc:1f:c5:63:
45:fb:02:58:62:21:b5:79:18:c9:8d:95:3b:51:74:35:9e:f7:
59:de:55:63:2a:c7:b8:1a:b2:3c:9e:d1:32:98:76:9d:c6:e7:
21:2f:c9:23:28:ea:46:f7:e4:e8:0e:69:f5:31:c0:8b:97:9d:
c2:d6:08:5d:65:3f:f8:24:5b:c2:9c:c1:ed:d1:c9:a8:4e:4c:
c8:ee:e2:fe:a3:b5:a7:65:01:99:bf:28:6a:a7:5a:b9:48:6b:
95:f1:bf:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 12:31:05 2025 by rpki-client