Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/26cc92-8bf7-48e0-937a-7e4e2f8b5b16/1/86GrooClUl71gkQpid-FncZdZKU.roa
File: 86GrooClUl71gkQpid-FncZdZKU.roa (raw, json)
Hash identifier: zCT8Hn2EfMRZJ+CRruBga86mHz3WUzz8AipAIgNPJEo=
Subject key identifier: F3:A1:AB:A2:80:A5:52:5E:F5:82:44:29:89:DF:85:9D:C6:5D:64:A5
Certificate issuer: /CN=6319295d3ada7e6eb329844961caa1002caa4d86
Certificate serial: 0194266BC9416C04C3F3E69EAF2599F99F74
Authority key identifier: 63:19:29:5D:3A:DA:7E:6E:B3:29:84:49:61:CA:A1:00:2C:AA:4D:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YxkpXTrafm6zKYRJYcqhACyqTYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/26cc92-8bf7-48e0-937a-7e4e2f8b5b16/1/86GrooClUl71gkQpid-FncZdZKU.roa
Signing time: Thu 02 Jan 2025 09:49:45 +0000
ROA not before: Thu 02 Jan 2025 09:49:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199131
IP address blocks: 91.244.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/26cc92-8bf7-48e0-937a-7e4e2f8b5b16/1/YxkpXTrafm6zKYRJYcqhACyqTYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/26cc92-8bf7-48e0-937a-7e4e2f8b5b16/1/YxkpXTrafm6zKYRJYcqhACyqTYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YxkpXTrafm6zKYRJYcqhACyqTYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 18:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:c9:41:6c:04:c3:f3:e6:9e:af:25:99:f9:9f:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6319295d3ada7e6eb329844961caa1002caa4d86
Validity
Not Before: Jan 2 09:49:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f3a1aba280a5525ef582442989df859dc65d64a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:1a:6f:b9:ef:52:d3:8c:68:25:c1:b4:11:97:
01:b7:f1:10:e0:d6:43:3d:72:f0:d0:b7:1c:7e:fe:
89:1c:d2:3b:8b:51:b2:99:1c:94:56:a7:67:eb:1a:
b3:12:cd:30:37:86:fe:2b:61:a5:09:d0:e9:89:0b:
13:2e:28:0f:5a:92:f5:a4:61:b3:78:14:42:0d:6d:
66:88:08:ac:3f:fa:29:77:ae:40:2e:c6:a7:ad:f5:
0b:6a:02:b7:4a:2b:2b:29:70:c7:43:81:e5:8d:3f:
5b:af:7c:9b:62:ff:a5:dd:c6:db:4e:ac:52:30:a1:
9f:2e:56:d3:ef:14:5f:42:b3:e2:02:bf:1b:e4:1f:
5a:7b:4b:f9:91:7a:b1:1b:f3:86:0c:2e:60:3b:2f:
a1:2d:30:3c:41:df:0c:5f:e8:b2:76:9e:42:01:95:
81:2e:e2:35:69:b6:e5:31:f1:e7:f3:fa:63:1f:66:
dc:b8:7a:ca:83:7a:29:66:db:96:4f:9e:91:d3:1f:
50:c0:8f:13:6a:9f:71:bd:fe:97:12:61:9a:23:09:
a0:50:07:07:72:74:ef:75:7c:91:94:89:15:6d:83:
60:a0:50:a1:56:a0:a6:b5:eb:f6:02:48:43:ad:af:
b4:a2:c9:06:7d:d3:72:ad:05:00:24:75:7a:a4:14:
6c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:A1:AB:A2:80:A5:52:5E:F5:82:44:29:89:DF:85:9D:C6:5D:64:A5
X509v3 Authority Key Identifier:
keyid:63:19:29:5D:3A:DA:7E:6E:B3:29:84:49:61:CA:A1:00:2C:AA:4D:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YxkpXTrafm6zKYRJYcqhACyqTYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/26cc92-8bf7-48e0-937a-7e4e2f8b5b16/1/86GrooClUl71gkQpid-FncZdZKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/26cc92-8bf7-48e0-937a-7e4e2f8b5b16/1/YxkpXTrafm6zKYRJYcqhACyqTYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.244.229.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:5d:d2:72:44:ac:69:29:b5:16:39:97:35:f5:6d:b3:8a:b7:
3d:23:9f:e4:b4:33:6c:44:df:41:9d:1a:0b:94:7f:52:ca:f7:
c7:fc:69:bd:bf:cb:c7:66:df:78:04:21:f1:23:67:83:47:f4:
e6:c5:ba:3d:21:de:e6:dd:0b:19:10:bb:74:e7:d9:90:96:5d:
09:cf:a3:70:b7:0b:b2:62:f3:64:33:3f:37:36:e0:86:30:59:
48:84:87:30:0b:26:9d:24:18:b1:3a:5a:e5:4f:68:2e:ba:45:
57:e5:32:9a:3a:fe:37:09:4f:7a:4a:06:32:f7:bc:0c:f2:95:
91:d4:47:90:f9:20:45:5a:9c:00:f7:2f:5f:08:e7:91:06:cf:
c8:e5:7b:eb:63:31:72:ce:e2:dc:d8:33:04:e6:c6:3b:4a:d5:
c5:9b:ab:f8:1b:b9:e7:47:0c:db:71:72:7d:3b:92:ab:ac:4b:
7f:00:4c:a3:12:0b:16:b3:ae:15:bc:3a:9c:5d:41:e6:3b:83:
82:7f:84:77:95:a1:58:4c:70:af:0a:74:41:8a:cf:94:f9:67:
70:36:05:f9:92:5c:2d:6a:75:0e:57:ad:df:9d:06:15:9e:e5:
5e:e8:d9:a2:9b:4a:dd:30:ae:13:0f:46:cf:bf:15:9b:5e:21:
e2:db:6a:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:40:01 2025 by rpki-client