Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/89286f-0e59-4626-a617-602151522a09/1/VMxe0uGWpSo7MC38AuPyARm4ELw.roa
File: VMxe0uGWpSo7MC38AuPyARm4ELw.roa (raw, json)
Hash identifier: tdke4bTnyhBCQowtj7hvI4mzPoyXG8N51jhjgyuQaj8=
Subject key identifier: 54:CC:5E:D2:E1:96:A5:2A:3B:30:2D:FC:02:E3:F2:01:19:B8:10:BC
Certificate issuer: /CN=43b92ec2b0e32cb7b2db13e3765298d6d2e585cd
Certificate serial: 019427464668708F0C700307E02AF488A54E
Authority key identifier: 43:B9:2E:C2:B0:E3:2C:B7:B2:DB:13:E3:76:52:98:D6:D2:E5:85:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q7kuwrDjLLey2xPjdlKY1tLlhc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/89286f-0e59-4626-a617-602151522a09/1/VMxe0uGWpSo7MC38AuPyARm4ELw.roa
Signing time: Thu 02 Jan 2025 13:48:24 +0000
ROA not before: Thu 02 Jan 2025 13:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56441
IP address blocks: 91.197.241.0/24 maxlen: 24
91.224.118.0/24 maxlen: 24
91.224.119.0/24 maxlen: 24
91.231.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/89286f-0e59-4626-a617-602151522a09/1/Q7kuwrDjLLey2xPjdlKY1tLlhc0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/89286f-0e59-4626-a617-602151522a09/1/Q7kuwrDjLLey2xPjdlKY1tLlhc0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q7kuwrDjLLey2xPjdlKY1tLlhc0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 22:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:46:68:70:8f:0c:70:03:07:e0:2a:f4:88:a5:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43b92ec2b0e32cb7b2db13e3765298d6d2e585cd
Validity
Not Before: Jan 2 13:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=54cc5ed2e196a52a3b302dfc02e3f20119b810bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:24:8e:d0:10:f6:6e:60:8b:84:3c:e3:96:3b:
09:1d:3b:69:7e:9a:a3:95:88:2f:95:94:30:1d:8b:
32:fd:0f:ad:32:9d:03:1d:88:82:c9:36:fd:c1:80:
22:29:1c:41:1f:f8:3b:50:7d:dd:ab:84:d5:b3:47:
d2:dd:9f:23:2b:3d:de:5d:36:92:e8:9e:0e:46:37:
6a:ac:23:f2:d3:9a:d1:aa:75:35:c1:91:fb:f8:2f:
4a:3e:0a:be:f4:7a:e0:99:75:90:15:0b:50:9b:5a:
08:71:2c:a6:63:01:c9:0b:e9:ce:e6:7c:e7:40:a9:
ca:7a:5a:82:31:b0:be:a2:bb:fd:bf:e8:6a:6a:0b:
2b:36:9e:bb:89:a9:e3:c5:f1:3e:6a:1c:6e:e2:93:
24:4d:9f:b1:3f:3f:ee:2e:09:83:1a:46:84:2e:f4:
e2:70:4f:e2:3e:d8:a3:6a:3c:20:80:6b:b9:16:bf:
ed:f0:92:9c:92:51:d3:9f:36:5a:31:99:42:7c:6e:
41:fc:f8:4c:0f:c3:c6:8c:38:90:71:ce:d5:b6:97:
71:e4:da:b9:60:a9:2d:c4:0b:f4:87:6c:a7:4e:a2:
a5:d2:20:4c:99:ff:b8:fa:b8:88:86:c7:f3:ae:4e:
3e:1a:f2:84:32:71:01:88:3b:02:5d:d2:68:b2:04:
a3:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:CC:5E:D2:E1:96:A5:2A:3B:30:2D:FC:02:E3:F2:01:19:B8:10:BC
X509v3 Authority Key Identifier:
keyid:43:B9:2E:C2:B0:E3:2C:B7:B2:DB:13:E3:76:52:98:D6:D2:E5:85:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q7kuwrDjLLey2xPjdlKY1tLlhc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/89286f-0e59-4626-a617-602151522a09/1/VMxe0uGWpSo7MC38AuPyARm4ELw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/89286f-0e59-4626-a617-602151522a09/1/Q7kuwrDjLLey2xPjdlKY1tLlhc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.197.241.0/24
91.224.118.0/23
91.231.125.0/24
Signature Algorithm: sha256WithRSAEncryption
40:d6:a5:37:aa:57:dc:57:74:83:78:e5:d7:6d:78:20:45:50:
63:cc:23:7d:f0:5e:a5:da:36:00:fc:e6:0a:37:15:46:27:f9:
66:d3:1b:d3:27:0c:30:71:d1:9d:69:d3:5d:53:6d:a5:7c:bc:
dd:e6:c9:22:5a:a6:1a:3c:9c:a1:3b:67:1c:e7:62:95:3c:54:
fe:1d:43:2c:bf:b9:22:af:a6:30:7b:e8:82:d8:b2:69:f4:ce:
7f:8b:4a:a2:bf:14:4a:53:7a:fe:f1:b4:d1:62:a7:9d:16:46:
e0:dd:3f:57:21:17:f2:dd:5a:cf:a1:97:31:0f:b3:df:65:5e:
94:94:c3:1b:49:46:99:d0:bf:5e:cf:2a:75:f6:b7:cc:5d:55:
22:61:03:ab:0c:39:4b:2b:b0:49:56:44:6f:2b:30:3e:76:85:
b9:e0:30:78:4d:de:0b:04:35:49:0e:4b:17:eb:3d:a7:35:49:
ee:71:c4:6b:d6:44:b8:0e:9c:78:13:a3:ee:14:19:b8:5c:ee:
a0:28:1a:9a:4b:28:0c:9b:2b:4c:1e:99:d7:ef:c8:33:43:9c:
33:7e:2b:50:e8:82:f8:4d:8e:80:b6:2b:7d:4c:7f:b9:93:b4:
96:14:61:7e:7c:e8:81:cc:80:79:a2:b7:8b:13:b4:17:27:e6:
57:5e:f1:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:36:47 2025 by rpki-client