Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/45ad5b-3ce1-48f1-bef7-641cfb6e3d9b/1/z4rUk_E4AGcR7M7P_EXqaAGwIrE.roa
File: z4rUk_E4AGcR7M7P_EXqaAGwIrE.roa (raw, json)
Hash identifier: vdPESCF/t7U31UD2O57fuph7iNy0Hlzj8MYZvwZ4bj4=
Subject key identifier: CF:8A:D4:93:F1:38:00:67:11:EC:CE:CF:FC:45:EA:68:01:B0:22:B1
Certificate issuer: /CN=a4e7777c7afb7d439b46f681c4c7bf6a8252e315
Certificate serial: 01941F8C20CAC53B72BE96E2C5183AC069ED
Authority key identifier: A4:E7:77:7C:7A:FB:7D:43:9B:46:F6:81:C4:C7:BF:6A:82:52:E3:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pOd3fHr7fUObRvaBxMe_aoJS4xU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/45ad5b-3ce1-48f1-bef7-641cfb6e3d9b/1/z4rUk_E4AGcR7M7P_EXqaAGwIrE.roa
Signing time: Wed 01 Jan 2025 01:47:44 +0000
ROA not before: Wed 01 Jan 2025 01:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31424
IP address blocks: 91.202.120.0/22 maxlen: 22
2001:67c:2e38::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/45ad5b-3ce1-48f1-bef7-641cfb6e3d9b/1/pOd3fHr7fUObRvaBxMe_aoJS4xU.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/45ad5b-3ce1-48f1-bef7-641cfb6e3d9b/1/pOd3fHr7fUObRvaBxMe_aoJS4xU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pOd3fHr7fUObRvaBxMe_aoJS4xU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 04:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:20:ca:c5:3b:72:be:96:e2:c5:18:3a:c0:69:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4e7777c7afb7d439b46f681c4c7bf6a8252e315
Validity
Not Before: Jan 1 01:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cf8ad493f138006711eccecffc45ea6801b022b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:af:bf:cb:24:09:fa:53:f2:c0:6e:37:83:42:
c5:00:b4:80:62:99:19:15:c9:45:fb:60:0f:db:24:
a7:18:ac:56:9d:24:31:0d:88:eb:66:d7:e9:16:95:
ee:f6:9a:41:65:71:01:87:00:f8:2b:02:93:b8:e2:
4e:3e:ad:9a:a8:97:d8:83:cc:40:63:1d:2d:e9:4d:
20:83:dd:d3:a2:f0:ac:cd:e2:83:e8:63:96:1e:74:
33:b9:e5:ec:38:f7:b3:c0:71:31:1b:57:17:a4:fa:
01:14:73:96:6c:93:b7:2c:dd:c7:c8:75:63:a4:82:
a6:20:07:ef:79:f4:bc:0e:73:65:97:29:88:19:8f:
7d:5b:73:79:92:f9:a0:de:48:ba:49:f4:1f:9c:5c:
a2:e0:10:7a:6b:52:de:cd:c4:39:a3:9d:44:46:75:
00:fd:ee:1a:05:ed:4d:01:2e:a3:d2:03:0c:fd:da:
81:11:f0:1b:e2:d9:87:11:78:2a:e9:0a:d0:50:3e:
d0:aa:3e:d9:bd:35:97:19:b5:75:87:f2:fc:96:e7:
96:3d:50:55:c7:e8:fc:fa:9f:27:ff:88:ed:72:fb:
8f:b0:81:21:55:44:93:c0:7c:28:e2:6f:9d:65:34:
6e:0a:77:d4:70:3f:49:96:5c:94:d7:98:63:be:d9:
7d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:8A:D4:93:F1:38:00:67:11:EC:CE:CF:FC:45:EA:68:01:B0:22:B1
X509v3 Authority Key Identifier:
keyid:A4:E7:77:7C:7A:FB:7D:43:9B:46:F6:81:C4:C7:BF:6A:82:52:E3:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOd3fHr7fUObRvaBxMe_aoJS4xU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/45ad5b-3ce1-48f1-bef7-641cfb6e3d9b/1/z4rUk_E4AGcR7M7P_EXqaAGwIrE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/45ad5b-3ce1-48f1-bef7-641cfb6e3d9b/1/pOd3fHr7fUObRvaBxMe_aoJS4xU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.202.120.0/22
IPv6:
2001:67c:2e38::/48
Signature Algorithm: sha256WithRSAEncryption
7b:99:aa:38:2e:ac:85:63:bb:92:ee:af:ac:51:79:54:8f:84:
fd:4d:7b:98:1e:47:62:e8:6b:84:c7:c4:f8:24:8e:f7:51:43:
20:b6:f9:79:c4:e4:61:d5:26:7c:3c:f5:a0:00:c7:5c:15:8f:
9a:c4:1e:76:28:29:e9:47:df:79:8a:03:dc:6b:c0:4d:15:e9:
d7:2e:63:91:ad:5b:ec:ec:8f:c5:a3:91:75:95:a1:3e:26:ec:
73:e3:fe:88:de:fd:ed:f8:56:2b:eb:31:ef:f1:41:88:ca:19:
b5:e3:44:9d:a6:68:bb:49:64:f4:e2:43:86:cd:c6:89:58:8d:
4a:2d:fa:34:8a:06:54:a1:c9:b5:71:1f:f8:0b:2d:00:70:4b:
20:19:3d:f6:c9:40:cd:f3:85:90:6f:20:7c:fa:90:e3:7b:e5:
ad:0d:6a:fd:cc:e8:4d:53:b0:2f:68:9f:b0:27:11:3d:cb:15:
05:34:00:84:5f:aa:a2:b9:29:1e:d3:6f:5a:63:c5:92:6c:91:
be:48:91:c5:27:25:fe:00:84:71:43:7b:67:dc:36:95:01:c2:
15:56:e3:8b:61:c8:7a:f8:da:89:b5:7c:61:f0:04:b6:2b:ef:
2e:61:64:ab:39:1b:7e:a6:ee:67:60:cf:22:96:ba:7f:24:0f:
06:2b:84:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 12:37:21 2025 by rpki-client