Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/006f56-1d8e-45cc-8694-1f188fcce855/1/_CJ0ryZ88cYP589Qq2Z03nLVv7o.roa
File: _CJ0ryZ88cYP589Qq2Z03nLVv7o.roa (raw, json)
Hash identifier: d5daN2lzwzk4YGoTznQDsoSXMlAa1gaQph+9wl7kXiM=
Subject key identifier: FC:22:74:AF:26:7C:F1:C6:0F:E7:CF:50:AB:66:74:DE:72:D5:BF:BA
Certificate issuer: /CN=a27c641b530a7c6ba234022e3327246232367100
Certificate serial: 0194228DD284A8ADEB157DEB9AB1AFB67BD0
Authority key identifier: A2:7C:64:1B:53:0A:7C:6B:A2:34:02:2E:33:27:24:62:32:36:71:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/onxkG1MKfGuiNAIuMyckYjI2cQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/006f56-1d8e-45cc-8694-1f188fcce855/1/_CJ0ryZ88cYP589Qq2Z03nLVv7o.roa
Signing time: Wed 01 Jan 2025 15:48:27 +0000
ROA not before: Wed 01 Jan 2025 15:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43541
IP address blocks: 91.239.200.0/22 maxlen: 22
2001:67c:e94::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/006f56-1d8e-45cc-8694-1f188fcce855/1/onxkG1MKfGuiNAIuMyckYjI2cQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/006f56-1d8e-45cc-8694-1f188fcce855/1/onxkG1MKfGuiNAIuMyckYjI2cQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/onxkG1MKfGuiNAIuMyckYjI2cQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:d2:84:a8:ad:eb:15:7d:eb:9a:b1:af:b6:7b:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a27c641b530a7c6ba234022e3327246232367100
Validity
Not Before: Jan 1 15:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fc2274af267cf1c60fe7cf50ab6674de72d5bfba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:56:94:fc:4a:33:77:d2:d9:38:e5:a4:32:f6:
00:11:78:b3:a9:f5:b6:78:96:a1:d4:f8:fb:fd:82:
be:b5:03:86:1d:d2:e5:31:a9:2b:fb:70:65:48:02:
ab:ee:8f:59:ec:39:91:3e:fd:61:21:51:bd:f3:cd:
2c:8f:b8:89:c7:1b:cc:b1:f2:f3:c7:50:2e:14:ba:
e6:42:9e:ee:ff:24:d8:f1:66:a8:49:87:48:6e:b5:
65:59:0f:54:9f:ae:92:2c:b5:6e:1a:71:77:31:8c:
a6:99:0e:03:e1:67:38:d5:b9:19:1b:d0:cc:c3:07:
93:07:16:d9:bd:6c:cd:a3:a8:20:19:c4:9e:27:6d:
bf:d9:68:52:12:65:9d:4f:42:82:d3:aa:9b:ad:e1:
8a:5f:2e:d9:ec:58:2e:a0:11:3a:fa:c1:3c:b9:8c:
00:47:85:de:80:47:bc:33:38:5d:1e:67:5b:cf:2a:
38:db:62:28:06:b9:3a:0a:d3:9a:53:31:4d:53:b1:
44:80:af:e4:33:32:70:1f:f9:5d:e8:4f:5e:b9:3c:
ee:0b:b6:9f:5e:ba:8e:43:29:a8:40:31:3e:1c:e8:
47:cc:7a:15:e0:ae:a8:7a:c0:28:72:e4:3d:7b:a0:
f7:12:2d:74:ae:ca:14:a7:a4:86:26:b4:9d:d0:85:
07:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:22:74:AF:26:7C:F1:C6:0F:E7:CF:50:AB:66:74:DE:72:D5:BF:BA
X509v3 Authority Key Identifier:
keyid:A2:7C:64:1B:53:0A:7C:6B:A2:34:02:2E:33:27:24:62:32:36:71:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/onxkG1MKfGuiNAIuMyckYjI2cQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/006f56-1d8e-45cc-8694-1f188fcce855/1/_CJ0ryZ88cYP589Qq2Z03nLVv7o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/006f56-1d8e-45cc-8694-1f188fcce855/1/onxkG1MKfGuiNAIuMyckYjI2cQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.200.0/22
IPv6:
2001:67c:e94::/48
Signature Algorithm: sha256WithRSAEncryption
6d:71:49:1f:e6:75:b8:81:b6:47:9e:42:fe:84:a7:7e:0c:fc:
ed:51:77:19:96:b9:db:95:a3:6b:ea:1e:1a:22:db:6a:76:b6:
41:0c:d8:1c:da:23:99:27:d9:77:f1:fb:2c:ae:60:1b:08:f8:
0e:d5:44:b4:ce:bc:c4:44:27:4b:42:04:dc:a5:9c:59:47:eb:
8b:8c:39:25:36:4c:9d:90:94:95:80:24:ee:41:b5:23:77:75:
66:b0:6d:cb:14:c2:1a:1d:93:6b:c2:2e:74:ab:73:83:95:f0:
71:46:64:58:61:57:a9:21:13:c9:53:1d:9c:04:a7:f1:59:c7:
71:92:6d:4d:8c:78:74:07:32:cf:8b:65:4f:1a:d3:42:8b:44:
d1:c0:53:74:32:3f:74:96:32:84:bb:0c:3e:53:64:c9:ac:f9:
a5:a2:eb:ef:c1:74:27:74:e2:17:31:31:78:8a:c9:ee:05:cb:
a1:64:b8:e3:c9:64:77:51:a6:ac:68:7b:2d:7c:a8:36:1a:40:
da:29:af:15:3e:56:1d:bf:c4:26:1f:1b:c6:5d:b9:9c:60:ee:
b3:88:9a:38:69:45:95:6e:5e:bc:c5:2d:9b:be:87:43:c5:3c:
8b:cb:81:39:8b:6c:5f:36:6d:e4:ba:bc:dd:4c:fd:64:24:04:
3e:73:27:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:28:07 2025 by rpki-client