Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/a33f9a-9bc3-430d-bb7c-5ec794b0e69c/1/lT88CqOH5vwMoi8VUrMFaxJU8J4.roa
File: lT88CqOH5vwMoi8VUrMFaxJU8J4.roa (raw, json)
Hash identifier: S4Errm7narViCee9k3oJgV4xcS7HzGtYGoc+vP+G/zk=
Subject key identifier: 95:3F:3C:0A:A3:87:E6:FC:0C:A2:2F:15:52:B3:05:6B:12:54:F0:9E
Certificate issuer: /CN=2f102815d27e6511746d4a3e9fd1359cd982a866
Certificate serial: 019424B3B2B58EB990CBFAF38592A8EF7E07
Authority key identifier: 2F:10:28:15:D2:7E:65:11:74:6D:4A:3E:9F:D1:35:9C:D9:82:A8:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/a33f9a-9bc3-430d-bb7c-5ec794b0e69c/1/lT88CqOH5vwMoi8VUrMFaxJU8J4.roa
Signing time: Thu 02 Jan 2025 01:49:03 +0000
ROA not before: Thu 02 Jan 2025 01:49:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208842
IP address blocks: 91.209.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/a33f9a-9bc3-430d-bb7c-5ec794b0e69c/1/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/a33f9a-9bc3-430d-bb7c-5ec794b0e69c/1/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:b2:b5:8e:b9:90:cb:fa:f3:85:92:a8:ef:7e:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f102815d27e6511746d4a3e9fd1359cd982a866
Validity
Not Before: Jan 2 01:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=953f3c0aa387e6fc0ca22f1552b3056b1254f09e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f9:5c:8b:a5:ef:d8:63:9a:b4:47:f7:15:67:
e5:8c:44:04:c9:66:ed:38:b7:e0:70:b7:97:5a:28:
af:58:0f:f7:0f:40:25:6d:d8:09:be:27:54:78:69:
70:1a:00:f4:bc:53:15:6d:98:c4:34:a0:b1:cd:45:
7f:d9:3d:5b:b4:85:2b:f0:20:2e:3e:17:03:bf:73:
81:0a:27:70:49:11:ec:3f:67:5b:2e:90:9b:80:f0:
3f:f4:f2:0f:a6:05:25:5b:b3:4d:09:18:5a:a9:84:
57:3c:95:db:fb:f9:d8:23:56:8a:7c:ac:6f:8b:e3:
cb:8b:dc:e2:98:45:2e:60:88:c1:e2:9b:fb:0c:88:
a6:8e:ce:27:46:b5:fa:76:f7:28:d8:c4:b1:c0:2b:
5d:7e:31:6e:98:01:47:b4:56:46:55:f9:f3:d0:28:
2c:1e:04:d8:11:5c:5c:5c:9c:19:3a:ef:8a:44:5a:
6b:ef:3e:3a:ca:a9:7f:03:9f:9e:a6:80:ec:e0:36:
e9:ce:fb:d4:5a:ee:14:c8:9c:c4:d5:22:78:15:fc:
e3:50:16:62:2b:5f:bf:68:ef:e8:be:9c:8d:59:af:
f1:8e:8e:63:53:2b:d3:b6:b6:c0:9f:fd:02:59:4c:
af:b6:99:f8:5c:5f:82:30:01:3c:28:24:f3:60:25:
93:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:3F:3C:0A:A3:87:E6:FC:0C:A2:2F:15:52:B3:05:6B:12:54:F0:9E
X509v3 Authority Key Identifier:
keyid:2F:10:28:15:D2:7E:65:11:74:6D:4A:3E:9F:D1:35:9C:D9:82:A8:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a33f9a-9bc3-430d-bb7c-5ec794b0e69c/1/lT88CqOH5vwMoi8VUrMFaxJU8J4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a33f9a-9bc3-430d-bb7c-5ec794b0e69c/1/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.4.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:34:24:77:1a:02:15:60:12:37:df:1f:5b:dd:c0:79:30:68:
75:c3:1d:df:6d:da:09:ae:d8:f8:45:2b:77:49:a0:b8:0d:02:
af:b7:23:7a:c3:01:c3:f4:f7:0c:60:fe:24:d6:99:88:b7:57:
b3:1d:0c:84:ee:fc:7a:6f:6f:77:e2:90:00:83:a6:cd:d0:50:
83:16:86:10:bd:cc:4c:4d:6c:9d:83:ff:6c:61:4b:cc:84:30:
9a:02:11:ab:82:74:49:ee:37:c7:dc:5f:39:57:3b:26:24:7e:
97:bf:ea:e9:e3:0d:a2:2c:cc:fa:81:e8:0a:97:f5:f9:6a:8f:
8c:10:c4:91:74:89:35:a1:3c:16:22:4a:41:d1:ad:27:74:a6:
96:a2:0a:6d:70:e2:9c:55:f3:3e:19:72:e9:c0:b7:1f:34:be:
a4:e1:1f:99:21:3e:ee:ce:11:4b:02:80:8a:83:b7:07:00:4f:
40:3a:88:dd:06:31:61:61:f8:53:e1:f6:e5:e6:9c:91:5b:a0:
0b:ed:30:e7:47:11:a2:3e:32:9f:57:fb:bc:80:41:39:62:0e:
2a:8a:ab:06:e0:91:39:6d:36:b7:a2:0d:98:4e:d4:15:5a:3f:
93:8d:15:77:b8:e6:75:80:2c:03:df:47:8d:1f:fc:1f:dc:38:
83:b8:7d:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:43:20 2025 by rpki-client