Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/8bdb68-7016-468b-9751-0f59527f34cb/1/sKsIMzPD584L0VxOKj3vB4o7BOo.roa
File: sKsIMzPD584L0VxOKj3vB4o7BOo.roa (raw, json)
Hash identifier: rcaZ/4MvSYNPC9u83vkkXq81Cjv7cMoYe82DYi6JocE=
Subject key identifier: B0:AB:08:33:33:C3:E7:CE:0B:D1:5C:4E:2A:3D:EF:07:8A:3B:04:EA
Certificate issuer: /CN=36811c8affafb0ac1f5f7f6ff7b64bb70346457d
Certificate serial: 01941FFAABB6B22169680211B478CB5CD72F
Authority key identifier: 36:81:1C:8A:FF:AF:B0:AC:1F:5F:7F:6F:F7:B6:4B:B7:03:46:45:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NoEciv-vsKwfX39v97ZLtwNGRX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/8bdb68-7016-468b-9751-0f59527f34cb/1/sKsIMzPD584L0VxOKj3vB4o7BOo.roa
Signing time: Wed 01 Jan 2025 03:48:29 +0000
ROA not before: Wed 01 Jan 2025 03:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205446
IP address blocks: 91.216.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/8bdb68-7016-468b-9751-0f59527f34cb/1/NoEciv-vsKwfX39v97ZLtwNGRX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/8bdb68-7016-468b-9751-0f59527f34cb/1/NoEciv-vsKwfX39v97ZLtwNGRX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NoEciv-vsKwfX39v97ZLtwNGRX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 15:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:ab:b6:b2:21:69:68:02:11:b4:78:cb:5c:d7:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36811c8affafb0ac1f5f7f6ff7b64bb70346457d
Validity
Not Before: Jan 1 03:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b0ab083333c3e7ce0bd15c4e2a3def078a3b04ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:39:df:81:13:d1:d9:d7:e6:98:59:be:41:41:
3d:b3:00:38:5f:5d:61:f2:7f:4e:ba:74:d6:9c:32:
bb:7b:fc:d2:a2:3a:68:4f:66:ba:ef:14:92:c2:6e:
7c:51:e9:be:d2:bc:3f:e9:5e:49:4c:02:eb:cd:9b:
9f:6d:de:47:ff:02:32:a5:52:c6:69:96:13:d1:b6:
ff:8c:39:8f:5d:18:ca:62:20:da:16:fe:6f:29:40:
46:fa:e7:8a:2e:93:d7:05:ca:e9:c5:24:dc:3c:39:
e5:56:8f:af:a0:f2:b5:18:87:34:18:90:c7:46:6b:
6f:dd:ec:c7:25:64:f5:79:fc:3b:ef:4f:d7:07:4d:
50:7d:46:2f:c6:05:32:bd:91:2e:26:88:0c:1c:3c:
c0:f0:66:53:cc:2d:bb:7c:3f:53:88:07:71:f7:f9:
b0:f8:62:3c:80:c5:b0:7d:c5:8b:70:5d:09:c6:e6:
ff:a7:60:c7:6e:b9:d6:81:ee:cf:e3:c5:f1:41:8e:
2f:da:70:db:3a:7e:09:20:bc:34:da:bf:8d:2a:ec:
bd:39:c3:c7:9e:75:4f:a0:4c:e6:c1:c2:41:ac:2a:
5a:e4:b9:ab:83:2a:94:82:ea:fc:b9:11:37:c0:96:
d7:dd:6b:a5:23:35:ad:b6:28:be:08:71:3c:fd:b5:
42:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:AB:08:33:33:C3:E7:CE:0B:D1:5C:4E:2A:3D:EF:07:8A:3B:04:EA
X509v3 Authority Key Identifier:
keyid:36:81:1C:8A:FF:AF:B0:AC:1F:5F:7F:6F:F7:B6:4B:B7:03:46:45:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NoEciv-vsKwfX39v97ZLtwNGRX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8bdb68-7016-468b-9751-0f59527f34cb/1/sKsIMzPD584L0VxOKj3vB4o7BOo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8bdb68-7016-468b-9751-0f59527f34cb/1/NoEciv-vsKwfX39v97ZLtwNGRX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.210.0/24
Signature Algorithm: sha256WithRSAEncryption
48:c1:a3:b9:6e:ca:82:c7:df:ff:11:f2:82:a6:24:52:93:a2:
6e:20:42:5d:76:5f:f8:da:e6:30:ce:f1:d2:db:c5:b8:28:a6:
bf:89:ae:a6:02:61:3f:04:30:55:67:17:d3:6a:88:c1:91:6e:
12:b4:20:ef:fe:58:75:0b:7f:8a:35:d6:ca:84:43:4c:8f:44:
be:f9:d6:5c:d1:ba:ca:a1:45:cd:09:89:c8:9b:7b:d2:e4:e8:
11:00:9c:6c:65:e7:e0:4f:bd:ae:59:8a:cc:ab:33:da:f8:bc:
34:d2:45:f2:b1:68:8a:a3:40:e2:85:b7:c2:bc:71:50:02:e7:
9c:d0:93:10:af:c7:37:c9:1b:cd:91:97:c2:74:3f:fe:80:de:
d0:07:a2:d5:04:9a:5a:5a:3d:e4:ac:f5:ec:e4:13:3c:ff:73:
f9:ad:5f:c7:96:6f:2a:15:51:1b:26:85:28:08:a7:c0:2b:41:
7f:6e:53:c1:1e:d3:10:9b:9c:eb:b4:7f:85:da:87:ee:86:ac:
2b:f8:8a:30:a6:63:ae:e8:db:c0:3a:91:77:47:75:0e:79:d0:
3f:d7:ee:90:07:f5:78:fa:04:20:db:aa:e5:4c:2d:61:14:25:
42:10:96:06:4d:c2:b8:73:44:c2:7e:50:4d:73:8a:a5:c4:e1:
45:c6:e6:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:43:30 2025 by rpki-client