Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/1-AcXeTA5R7gYGPtZ3gkf2ipBN2M.roa
File: 1-AcXeTA5R7gYGPtZ3gkf2ipBN2M.roa (raw, json)
Hash identifier: syfRSFLN+gZv89g2Ds4rYCyprKu1ku8ZpDXFlN//U/c=
Subject key identifier: F8:07:17:79:30:39:47:B8:18:18:FB:59:DE:09:1F:DA:2A:41:37:63
Certificate issuer: /CN=b91464767773f1239b646bb66bdcf4f7fb1206ce
Certificate serial: 0194252218EB839AD650A4A51D971E8E8CD6
Authority key identifier: B9:14:64:76:77:73:F1:23:9B:64:6B:B6:6B:DC:F4:F7:FB:12:06:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRRkdndz8SObZGu2a9z09_sSBs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/1-AcXeTA5R7gYGPtZ3gkf2ipBN2M.roa
Signing time: Thu 02 Jan 2025 03:49:39 +0000
ROA not before: Thu 02 Jan 2025 03:49:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208324
IP address blocks: 91.192.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRRkdndz8SObZGu2a9z09_sSBs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 03:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:18:eb:83:9a:d6:50:a4:a5:1d:97:1e:8e:8c:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b91464767773f1239b646bb66bdcf4f7fb1206ce
Validity
Not Before: Jan 2 03:49:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f8071779303947b81818fb59de091fda2a413763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d0:0a:0d:5e:11:db:dc:2a:96:82:18:18:2c:
7b:2c:f7:de:bb:48:6d:59:10:7b:fd:6e:3a:63:2c:
40:ad:bd:4f:20:8a:b6:55:fd:e4:58:3f:28:76:b2:
d6:42:01:02:b4:20:cf:45:48:db:80:80:f3:13:08:
08:db:c5:73:48:8e:6d:24:bb:de:4c:cf:49:39:74:
aa:e8:f9:cf:ce:5d:68:d0:26:bf:c5:26:50:a1:5a:
72:42:e9:54:05:e9:28:2e:80:97:4a:b4:24:40:a0:
27:6e:08:7f:e8:e7:eb:8b:7b:d4:7d:29:29:08:8a:
a8:bb:54:6b:09:e8:a7:e9:ac:38:a7:38:e2:cd:33:
bb:f2:9e:2a:5b:4a:b1:6a:1c:3e:70:c7:32:a2:28:
b0:20:ba:3f:67:6b:89:4c:9b:ac:2f:76:54:50:b7:
18:34:97:b3:70:fd:8a:c6:57:60:f6:d4:b8:09:0d:
a8:fd:c7:2b:24:8e:23:6b:39:98:65:86:9c:aa:f0:
dc:28:c9:07:63:98:57:63:ca:92:a5:dd:20:5d:8f:
f9:8e:8a:a7:72:c1:31:43:e2:ec:a3:cd:dd:27:80:
ba:48:48:6e:4f:2b:74:6c:e9:94:57:99:7b:48:af:
0f:5b:c2:1b:5b:b0:24:ef:60:f2:a9:54:e1:f2:e9:
ca:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:07:17:79:30:39:47:B8:18:18:FB:59:DE:09:1F:DA:2A:41:37:63
X509v3 Authority Key Identifier:
keyid:B9:14:64:76:77:73:F1:23:9B:64:6B:B6:6B:DC:F4:F7:FB:12:06:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRRkdndz8SObZGu2a9z09_sSBs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/1-AcXeTA5R7gYGPtZ3gkf2ipBN2M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.192.4.0/24
Signature Algorithm: sha256WithRSAEncryption
02:05:2a:75:ba:77:85:28:4b:14:c7:35:ec:5b:4d:39:40:9b:
07:23:28:73:64:40:4a:99:5d:20:3f:ca:61:dd:d0:6a:a5:78:
4e:5e:c8:0e:e1:42:9a:25:d5:22:a3:db:c0:b0:a0:81:15:94:
d0:b3:76:67:71:13:27:fa:b9:a0:0e:90:f9:38:8f:e6:e8:8d:
d3:ed:87:ba:23:34:0b:8e:45:47:bf:d8:fb:5b:61:c2:76:4c:
61:5b:0c:d2:c6:5d:9c:13:39:3c:29:92:38:cd:af:3a:68:54:
69:a2:58:15:90:8e:ab:7d:41:37:43:ff:7f:b9:69:3e:79:75:
ee:7e:b5:29:1b:91:e5:5a:81:ef:0a:7a:98:91:da:e6:a7:09:
21:67:a3:e4:a1:5b:fa:30:2d:d3:6d:ba:e4:89:d7:c9:9b:f3:
92:d2:9b:c2:15:df:7c:a3:88:8a:eb:74:6b:9f:61:85:e0:67:
60:07:e9:b7:c0:b1:6e:19:f6:26:ca:04:50:41:ab:26:5c:33:
6b:7e:fc:bb:13:8d:c6:93:19:7e:6d:1b:1d:45:6f:bc:85:dd:
75:98:c9:fb:28:16:0a:3a:30:dd:5c:83:34:68:9e:27:f7:92:
cf:42:3b:6f:71:d1:b5:00:88:7b:b1:3d:31:11:67:97:0c:59:
94:92:e6:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 11:11:15 2025 by rpki-client