Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/DFk17XzVK0-2LT-y57eUHLqsGoE.roa
File: DFk17XzVK0-2LT-y57eUHLqsGoE.roa (raw, json)
Hash identifier: dXqY+iE+GyZrGAN3VZSoDHBgCd8KrkAD+zhIs/sw6B0=
Subject key identifier: 0C:59:35:ED:7C:D5:2B:4F:B6:2D:3F:B2:E7:B7:94:1C:BA:AC:1A:81
Certificate issuer: /CN=350cce1b9d06dcce8856659536499c1603391370
Certificate serial: 01941FFA5AF98A495B252F4A4C3F2B1F196F
Authority key identifier: 35:0C:CE:1B:9D:06:DC:CE:88:56:65:95:36:49:9C:16:03:39:13:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NQzOG50G3M6IVmWVNkmcFgM5E3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/DFk17XzVK0-2LT-y57eUHLqsGoE.roa
Signing time: Wed 01 Jan 2025 03:48:08 +0000
ROA not before: Wed 01 Jan 2025 03:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51815
IP address blocks: 91.209.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/NQzOG50G3M6IVmWVNkmcFgM5E3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:5a:f9:8a:49:5b:25:2f:4a:4c:3f:2b:1f:19:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=350cce1b9d06dcce8856659536499c1603391370
Validity
Not Before: Jan 1 03:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0c5935ed7cd52b4fb62d3fb2e7b7941cbaac1a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:70:07:ad:54:95:dd:2f:01:2c:28:55:ff:09:
71:d5:0a:c2:74:40:07:94:c6:9f:59:6b:de:c4:7f:
bb:03:10:06:72:55:81:08:74:8d:2b:eb:7b:2f:5f:
e0:0a:a5:17:45:d3:13:cb:f0:97:b1:64:7d:53:89:
a4:43:48:5d:a4:34:2e:91:d6:95:62:d3:01:4b:52:
88:cd:97:41:76:23:ef:59:ce:76:dd:3f:6a:09:22:
8c:95:83:28:5e:cc:f9:6a:7a:26:71:56:0a:40:39:
22:5a:14:da:31:f3:b3:72:ec:9e:50:bb:af:84:ff:
be:b4:ac:ae:c8:b2:24:91:db:76:d7:f0:7a:44:62:
40:c3:18:3d:ff:fe:79:f6:35:99:90:4d:57:c5:18:
49:c0:24:86:a4:5c:5b:f1:42:1b:84:0b:d6:fe:9d:
6c:cd:94:8f:11:9b:2f:aa:10:62:cb:62:8d:dc:4e:
f5:c9:2b:13:32:0f:dc:dc:62:18:5a:d6:d5:57:9e:
8d:fc:2a:13:9d:a4:db:f3:23:db:0a:61:c8:ad:1d:
b9:e7:28:d0:e3:7b:3b:6f:e3:5c:1c:59:d6:af:4c:
a4:cf:e8:45:18:e1:e0:dd:1c:43:cc:0a:a8:8d:8a:
14:82:13:38:65:68:d1:a4:22:77:bf:fc:df:a3:52:
29:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:59:35:ED:7C:D5:2B:4F:B6:2D:3F:B2:E7:B7:94:1C:BA:AC:1A:81
X509v3 Authority Key Identifier:
keyid:35:0C:CE:1B:9D:06:DC:CE:88:56:65:95:36:49:9C:16:03:39:13:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NQzOG50G3M6IVmWVNkmcFgM5E3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/DFk17XzVK0-2LT-y57eUHLqsGoE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.88.0/24
Signature Algorithm: sha256WithRSAEncryption
03:24:90:e1:bd:f2:5f:88:8e:28:90:51:12:25:8d:86:a4:21:
25:91:7a:8e:93:91:4f:17:55:d6:8e:f2:bf:2f:14:95:71:6b:
be:3d:2d:1e:fd:7a:08:84:36:89:73:65:32:c0:f2:2c:c5:2c:
b5:1a:d8:0f:cc:46:bc:6d:9e:5e:d4:b1:2e:64:f4:4f:b4:53:
ce:77:52:36:dc:19:47:84:00:75:71:d8:37:1e:d1:22:68:7c:
3b:b4:aa:bc:d9:86:2c:5a:e7:5f:94:ef:5e:0f:5a:d6:ca:a3:
4e:9e:77:9f:72:0d:c0:1c:aa:d0:e2:2d:16:45:d2:72:ee:fa:
a0:31:29:ca:a1:d8:c3:27:5b:18:7e:52:47:78:10:0c:56:20:
75:1d:bc:c3:2e:9e:d2:a6:37:e4:1c:4e:2a:c3:35:07:b8:10:
36:fd:c9:9f:c8:d6:61:57:61:9e:0f:b5:cf:17:e9:81:bb:9d:
5e:9e:3d:31:1e:d6:07:fb:f5:20:ad:30:78:71:6f:92:67:66:
62:8f:1f:63:7c:56:8a:c1:3e:d3:b3:8f:43:f6:42:5d:da:8e:
14:f8:8c:81:e9:41:8c:5f:d3:51:07:eb:60:53:7e:c1:06:9d:
80:98:cb:2e:69:19:e1:98:de:18:7d:de:8f:35:2a:cc:27:99:
24:2a:a7:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:53:36 2025 by rpki-client