Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d10841-7d44-46da-b29c-381f23f183d7/1/A8mHxLEXrqAFOW8BcAYBSd_XzeI.roa
File: A8mHxLEXrqAFOW8BcAYBSd_XzeI.roa (raw, json)
Hash identifier: I8bAl/t+XgVEF3PHnvvr21l0GKu6zhVZ0Hhxzvtle2M=
Subject key identifier: 03:C9:87:C4:B1:17:AE:A0:05:39:6F:01:70:06:01:49:DF:D7:CD:E2
Certificate issuer: /CN=1a14445259732aa6736c248234465947fc2374d0
Certificate serial: 019421B1C45B378CC54CA15B085D44C2A6EC
Authority key identifier: 1A:14:44:52:59:73:2A:A6:73:6C:24:82:34:46:59:47:FC:23:74:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GhREUllzKqZzbCSCNEZZR_wjdNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/d10841-7d44-46da-b29c-381f23f183d7/1/A8mHxLEXrqAFOW8BcAYBSd_XzeI.roa
Signing time: Wed 01 Jan 2025 11:48:05 +0000
ROA not before: Wed 01 Jan 2025 11:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7029
IP address blocks: 91.214.160.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/d10841-7d44-46da-b29c-381f23f183d7/1/GhREUllzKqZzbCSCNEZZR_wjdNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/d10841-7d44-46da-b29c-381f23f183d7/1/GhREUllzKqZzbCSCNEZZR_wjdNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GhREUllzKqZzbCSCNEZZR_wjdNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:c4:5b:37:8c:c5:4c:a1:5b:08:5d:44:c2:a6:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a14445259732aa6736c248234465947fc2374d0
Validity
Not Before: Jan 1 11:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=03c987c4b117aea005396f0170060149dfd7cde2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ce:d3:1c:53:81:7b:3e:30:5c:50:b8:70:40:
ad:15:ba:c6:5e:3b:bf:62:bb:d8:74:46:71:d1:1d:
21:e4:f5:e9:4a:a6:07:2c:fb:84:2a:30:45:87:93:
67:37:37:89:c4:fd:c3:ef:a5:84:56:82:5a:a8:0c:
6b:2a:ce:5f:90:47:19:49:38:f4:7e:41:2b:0e:1c:
3c:26:7f:75:2b:de:73:91:51:dd:fc:6b:fa:fc:d9:
84:35:65:73:78:bb:d0:ac:af:e4:c3:c8:71:2a:7f:
07:5b:32:e9:2c:30:58:63:ab:7a:04:3f:74:1e:7b:
a3:a7:05:81:02:5f:f9:8c:48:5a:ba:ae:7c:62:1b:
5b:64:ee:7d:eb:39:bb:09:b2:1f:25:df:e5:80:6b:
aa:37:cf:93:3d:1e:24:8d:a7:40:64:c1:58:88:95:
f7:ca:34:6e:12:06:48:e8:83:d9:61:f3:d4:fc:dd:
a9:a2:60:6d:da:ce:c0:12:31:96:c2:62:86:73:29:
5c:72:98:b3:92:c8:26:bd:30:70:01:0b:29:6c:0f:
14:b6:62:1a:43:42:4f:52:38:35:11:53:2a:2e:2b:
39:b4:df:8f:9e:8e:fb:90:c6:5c:4d:7d:bf:ce:2d:
de:46:e0:67:8a:80:30:5d:0f:55:7f:fe:96:1a:4a:
4c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:C9:87:C4:B1:17:AE:A0:05:39:6F:01:70:06:01:49:DF:D7:CD:E2
X509v3 Authority Key Identifier:
keyid:1A:14:44:52:59:73:2A:A6:73:6C:24:82:34:46:59:47:FC:23:74:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GhREUllzKqZzbCSCNEZZR_wjdNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d10841-7d44-46da-b29c-381f23f183d7/1/A8mHxLEXrqAFOW8BcAYBSd_XzeI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d10841-7d44-46da-b29c-381f23f183d7/1/GhREUllzKqZzbCSCNEZZR_wjdNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.214.160.0/22
Signature Algorithm: sha256WithRSAEncryption
64:0b:b8:35:90:de:59:4c:d6:a3:27:b5:15:33:9e:74:0b:e4:
38:5c:cf:51:53:ed:e2:70:99:9c:3c:50:1f:38:2e:40:c8:02:
00:a6:49:0c:ca:ca:17:3e:05:1f:30:91:0a:3e:79:01:b4:c1:
56:89:12:00:e2:df:2b:9a:9b:ba:61:1f:7a:17:4f:21:b9:2e:
ba:de:5d:af:d8:52:91:47:1b:55:54:16:5d:69:1c:65:27:3c:
4c:d7:4b:a6:4c:7c:48:e0:8c:bd:28:db:b5:e5:2d:15:a3:02:
24:62:0a:48:ba:9e:bb:f0:80:91:a4:ae:5b:b9:7e:cd:3f:05:
48:91:4d:ce:b0:d7:d1:ed:be:d2:2f:73:d8:b0:18:79:05:cf:
9a:ce:9c:bc:27:cc:b0:bb:b1:fd:c0:2c:1d:9f:ca:f3:67:db:
22:4f:df:2a:e1:57:fb:82:06:2a:81:3d:69:f7:d9:04:89:5b:
65:ad:e3:e0:b6:69:6b:2a:13:bb:94:20:3a:96:90:8e:62:ef:
70:6b:2e:10:ec:86:a6:95:a7:01:bc:17:44:6e:96:2c:e2:9d:
54:55:84:e3:b5:f0:63:91:39:01:8e:54:44:1b:c1:a1:0d:9c:
8d:b5:66:77:39:27:ca:e2:72:65:9e:91:17:e7:d4:4a:ac:d3:
e2:88:18:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:09:42 2025 by rpki-client