Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/340031-365b-4fd2-8732-8c0faca3cbd8/1/cnFeqHBw9aaza2RenBeNwJKndxs.roa
File: cnFeqHBw9aaza2RenBeNwJKndxs.roa (raw, json)
Hash identifier: kjgI4uTxYMi7MCfdj3M5XWKqSFRmZG0IxbqIvN1jC7s=
Subject key identifier: 72:71:5E:A8:70:70:F5:A6:B3:6B:64:5E:9C:17:8D:C0:92:A7:77:1B
Certificate issuer: /CN=1d0260406e837ae38380fcc8d992b93d0de1a83b
Certificate serial: 019422FC4E0383D1A630F38B3FBE1807F97B
Authority key identifier: 1D:02:60:40:6E:83:7A:E3:83:80:FC:C8:D9:92:B9:3D:0D:E1:A8:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQJgQG6DeuODgPzI2ZK5PQ3hqDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/340031-365b-4fd2-8732-8c0faca3cbd8/1/cnFeqHBw9aaza2RenBeNwJKndxs.roa
Signing time: Wed 01 Jan 2025 17:49:07 +0000
ROA not before: Wed 01 Jan 2025 17:49:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20900
IP address blocks: 91.231.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/340031-365b-4fd2-8732-8c0faca3cbd8/1/HQJgQG6DeuODgPzI2ZK5PQ3hqDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/340031-365b-4fd2-8732-8c0faca3cbd8/1/HQJgQG6DeuODgPzI2ZK5PQ3hqDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/HQJgQG6DeuODgPzI2ZK5PQ3hqDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:4e:03:83:d1:a6:30:f3:8b:3f:be:18:07:f9:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d0260406e837ae38380fcc8d992b93d0de1a83b
Validity
Not Before: Jan 1 17:49:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=72715ea87070f5a6b36b645e9c178dc092a7771b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:40:94:15:5f:9c:6a:a5:17:fe:a1:41:a0:83:
b5:4b:bc:c3:66:29:51:34:54:9d:b3:84:35:68:7c:
32:e9:b0:f1:79:51:26:67:9b:8e:d8:fa:fa:cc:5f:
77:e4:a9:cd:0b:71:fd:40:8a:b2:56:e9:a5:71:86:
47:53:0b:40:85:8e:32:83:a2:f2:34:74:f9:3c:05:
e1:4b:91:f6:e8:50:1c:04:87:31:18:f8:2a:7b:1f:
15:09:68:0b:43:46:8e:9f:04:c6:e3:d8:73:85:69:
c5:ae:03:d2:d4:26:90:d5:c0:04:1f:3e:f1:8d:58:
98:19:6f:23:fb:20:d2:01:2e:82:a6:05:14:39:77:
87:92:2a:9d:77:98:82:1d:85:e8:d6:94:d0:db:f4:
c9:b2:cc:fe:e0:6d:c9:46:b4:96:2b:70:bd:de:f1:
09:62:6b:60:fa:25:45:ae:4f:d0:94:f0:06:96:a0:
ef:fe:ec:ce:3e:b6:50:21:1c:04:fc:8f:66:34:38:
6a:f6:7a:9f:e7:71:d1:8c:78:c8:9b:11:19:64:b1:
f2:d3:37:59:f0:b0:66:3a:04:ac:73:4b:70:0e:5d:
e2:e5:82:b9:98:68:36:7c:89:94:14:82:80:c5:04:
58:9c:79:7e:3b:9c:b0:9a:70:30:83:38:5b:a9:1a:
69:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:71:5E:A8:70:70:F5:A6:B3:6B:64:5E:9C:17:8D:C0:92:A7:77:1B
X509v3 Authority Key Identifier:
keyid:1D:02:60:40:6E:83:7A:E3:83:80:FC:C8:D9:92:B9:3D:0D:E1:A8:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQJgQG6DeuODgPzI2ZK5PQ3hqDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/340031-365b-4fd2-8732-8c0faca3cbd8/1/cnFeqHBw9aaza2RenBeNwJKndxs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/340031-365b-4fd2-8732-8c0faca3cbd8/1/HQJgQG6DeuODgPzI2ZK5PQ3hqDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.231.175.0/24
Signature Algorithm: sha256WithRSAEncryption
64:f7:21:19:18:54:c8:d7:1a:55:8c:22:de:8f:1c:16:a3:58:
11:d4:40:88:a3:0c:48:35:7e:05:60:f4:6c:ca:eb:a7:b3:2d:
31:3b:3c:7a:3c:72:c1:7b:59:c3:83:b5:2c:7d:3a:ae:3a:44:
6b:eb:e0:5b:40:7b:4b:dd:21:16:66:eb:f8:85:3e:64:25:ca:
58:59:25:58:f9:6a:5d:5d:35:cc:88:12:43:c1:4e:46:8a:3e:
cd:1b:10:c9:52:b2:31:a2:8c:d5:d6:7a:79:9a:52:34:cf:a6:
bd:9e:ee:13:26:02:c3:00:a7:71:a4:63:bf:35:f0:00:b9:e1:
d2:2b:2c:99:31:c7:6e:ee:f1:dc:02:9e:96:1b:66:29:44:8b:
c1:fa:b6:59:f0:b0:5c:52:ae:1e:2e:0b:c4:60:ba:2f:2e:5f:
43:71:30:24:61:d3:0b:f6:28:d1:d2:44:ec:bb:46:92:58:0d:
c0:d6:a4:55:00:b7:da:15:d9:ec:a9:e8:fd:19:00:f6:e8:ba:
5c:81:d4:12:6a:a0:03:61:6f:93:9e:4f:71:c1:68:ce:a4:2c:
ad:e2:08:9c:c6:f3:10:87:92:96:41:ea:15:d5:77:a1:77:03:
ca:ba:70:cc:41:37:88:1e:5a:98:8b:fb:65:be:0f:b9:4b:c3:
73:07:7b:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 22:28:43 2025 by rpki-client