Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/d3a55c-1f62-4779-86b9-61b50f6a6c02/1/C5Gcuv2gc5uFwke_GvIiYxRqvf4.roa
File: C5Gcuv2gc5uFwke_GvIiYxRqvf4.roa (raw, json)
Hash identifier: aAHqvnwWD8oItQ342R5b0KuB97GMKDOjFhJ8IpWVibI=
Subject key identifier: 0B:91:9C:BA:FD:A0:73:9B:85:C2:47:BF:1A:F2:22:63:14:6A:BD:FE
Certificate issuer: /CN=28843db96e4f459b87df8c279057eed69bb9b862
Certificate serial: 019420D6039A2627F910AB93CC32FFE55469
Authority key identifier: 28:84:3D:B9:6E:4F:45:9B:87:DF:8C:27:90:57:EE:D6:9B:B9:B8:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KIQ9uW5PRZuH34wnkFfu1pu5uGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/d3a55c-1f62-4779-86b9-61b50f6a6c02/1/C5Gcuv2gc5uFwke_GvIiYxRqvf4.roa
Signing time: Wed 01 Jan 2025 07:48:04 +0000
ROA not before: Wed 01 Jan 2025 07:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51404
IP address blocks: 91.217.14.0/23 maxlen: 23
91.217.14.0/24 maxlen: 24
91.217.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/d3a55c-1f62-4779-86b9-61b50f6a6c02/1/KIQ9uW5PRZuH34wnkFfu1pu5uGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/d3a55c-1f62-4779-86b9-61b50f6a6c02/1/KIQ9uW5PRZuH34wnkFfu1pu5uGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/KIQ9uW5PRZuH34wnkFfu1pu5uGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 19:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:03:9a:26:27:f9:10:ab:93:cc:32:ff:e5:54:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28843db96e4f459b87df8c279057eed69bb9b862
Validity
Not Before: Jan 1 07:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0b919cbafda0739b85c247bf1af22263146abdfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:65:26:a1:44:13:9e:09:2a:0e:73:27:63:a2:
fc:9d:4b:8c:86:75:13:ff:92:c7:25:a0:fb:ff:2a:
a3:ef:e0:fb:a6:7e:8d:ae:e3:b8:0b:6c:65:63:d5:
34:3b:f5:14:70:a5:a9:b5:32:77:0c:f1:c8:af:35:
1b:5a:6c:9c:d5:e0:41:52:d3:1a:fa:0c:9d:74:d1:
cf:f1:5c:a3:8f:74:5c:5b:04:67:4d:c1:a9:12:27:
a4:c4:db:01:65:03:d9:1e:41:30:0e:d0:e1:c3:9a:
e6:f9:ac:90:a3:60:88:2b:52:bd:56:b8:47:cc:5b:
f6:a6:23:c7:f2:6c:03:16:8e:75:79:7b:39:41:78:
67:cb:60:d7:b1:78:cf:60:9f:75:ee:54:d6:9f:8e:
6c:d4:24:ae:a3:84:5e:92:04:f0:42:2f:29:7c:9d:
69:09:d1:72:be:a5:2b:b1:0f:0d:68:48:3e:8b:72:
e9:3f:58:89:19:0d:05:a9:89:4d:06:f3:43:c6:64:
8c:83:2f:05:1c:e7:00:cf:3e:be:01:11:14:3f:3a:
69:f5:e6:28:b1:c4:c3:e4:f0:56:f4:09:b8:f0:e5:
57:5e:34:ac:28:0e:f3:e2:f5:94:ff:6b:27:d9:cd:
f2:0d:a6:b2:6f:27:f9:9c:26:63:e3:32:ff:d4:6f:
84:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:91:9C:BA:FD:A0:73:9B:85:C2:47:BF:1A:F2:22:63:14:6A:BD:FE
X509v3 Authority Key Identifier:
keyid:28:84:3D:B9:6E:4F:45:9B:87:DF:8C:27:90:57:EE:D6:9B:B9:B8:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KIQ9uW5PRZuH34wnkFfu1pu5uGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/d3a55c-1f62-4779-86b9-61b50f6a6c02/1/C5Gcuv2gc5uFwke_GvIiYxRqvf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/d3a55c-1f62-4779-86b9-61b50f6a6c02/1/KIQ9uW5PRZuH34wnkFfu1pu5uGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.14.0/23
Signature Algorithm: sha256WithRSAEncryption
0a:3a:f1:36:e6:f6:53:f5:a8:9d:d6:b6:d7:19:03:ba:8b:ce:
58:47:c7:f7:dd:ba:7c:4b:0c:6d:82:c3:17:21:3c:a3:03:f3:
91:f9:70:4b:56:d5:c7:1a:ba:72:8b:3c:e6:17:be:1a:b9:07:
9d:b2:2b:df:a1:f6:2c:6f:d0:4a:9c:6c:cc:fb:0d:7f:4a:35:
d0:7a:41:c6:b4:17:9e:1a:09:81:d4:28:64:b9:bf:67:95:97:
89:60:ff:fc:2b:c5:9e:72:f7:c0:bf:58:b2:eb:04:44:02:3d:
98:c3:3f:92:c7:80:b5:a4:8e:53:7e:45:d1:66:58:25:44:7c:
66:7f:36:33:3f:7c:31:ce:cb:ad:ec:0f:45:06:28:f0:13:06:
85:59:29:ff:c2:15:59:02:b2:b5:5c:e8:6e:55:01:2a:65:4a:
cb:e0:46:9f:ae:9b:93:79:63:5d:c8:58:d2:00:ef:b2:ae:a0:
ad:e5:14:1c:fe:1b:99:d2:99:3c:4a:96:ad:d8:92:56:af:49:
47:98:c2:df:fe:37:36:21:4d:8e:90:d1:98:25:5a:c2:96:0d:
b1:34:c5:f1:9e:2a:b5:d1:90:cc:b4:28:d7:ee:bb:39:40:d6:
84:84:b0:ef:37:55:1b:58:8c:ee:57:a8:ea:fe:cc:1c:d4:3a:
5f:02:54:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:33:43 2025 by rpki-client