Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/9XJ8JgTiV-34uWu_hPOglrJk2n0.roa
File: 9XJ8JgTiV-34uWu_hPOglrJk2n0.roa (raw, json)
Hash identifier: +3NQyf49TSxAqBfL7Hu2b6iSQj37geRqsOg3CEtljdA=
Subject key identifier: F5:72:7C:26:04:E2:57:ED:F8:B9:6B:BF:84:F3:A0:96:B2:64:DA:7D
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 0194266BBD9590859548DBF2D4EEA8BA2D9D
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/9XJ8JgTiV-34uWu_hPOglrJk2n0.roa
Signing time: Thu 02 Jan 2025 09:49:42 +0000
ROA not before: Thu 02 Jan 2025 09:49:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 22427
IP address blocks: 91.210.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:bd:95:90:85:95:48:db:f2:d4:ee:a8:ba:2d:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jan 2 09:49:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f5727c2604e257edf8b96bbf84f3a096b264da7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:46:c9:f9:aa:d3:4c:25:a9:0a:3a:17:0a:37:
ff:13:11:a7:d0:2b:58:b2:f0:f0:e3:98:21:71:f3:
01:7c:b2:e2:e2:c3:20:57:2a:31:bb:a5:4a:2d:62:
28:a2:d4:1e:8a:e1:dd:c5:22:d4:b8:c6:b6:5c:89:
6e:f4:d9:1f:4b:b7:8f:c9:9f:fb:a3:9d:ba:c1:a8:
3a:55:a9:90:2b:2a:fc:3e:7a:26:e6:e4:e1:9d:6c:
c5:2e:ec:f2:5d:45:c1:c0:05:c9:cf:d2:86:b6:b7:
bb:49:2a:bf:76:50:6a:e8:67:79:82:d4:07:46:14:
73:42:cc:ac:1d:88:7f:48:c9:c9:17:49:aa:9b:0b:
19:cb:c5:82:44:80:5a:d3:13:c0:ae:b2:bb:7a:2a:
8a:97:5b:7d:92:73:5a:fb:59:33:e4:9a:fc:5f:81:
79:7f:53:c3:12:b9:07:24:e8:52:b2:d2:29:5b:ba:
58:0c:c4:5d:10:78:d1:0c:17:32:75:bd:bd:22:4b:
18:3c:88:f2:30:c3:80:db:79:4a:55:e7:94:1f:28:
c3:a7:61:79:3b:95:2a:1d:15:c6:11:23:b5:7a:ef:
26:dc:b4:df:f9:58:9b:84:67:b2:38:6c:56:17:29:
3b:cf:39:c2:6e:e5:6a:07:05:69:33:1a:73:35:bb:
81:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:72:7C:26:04:E2:57:ED:F8:B9:6B:BF:84:F3:A0:96:B2:64:DA:7D
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/9XJ8JgTiV-34uWu_hPOglrJk2n0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.210.145.0/24
Signature Algorithm: sha256WithRSAEncryption
50:52:fe:f3:fc:8d:68:15:15:cd:5a:1b:bc:16:d0:f0:a4:53:
57:69:15:31:11:37:1f:54:a8:aa:71:19:d2:a2:27:df:aa:14:
cb:f4:71:ca:81:b3:f5:f6:fe:3c:cd:b5:46:35:70:33:e9:52:
e9:23:9d:ca:7f:2c:8d:00:a3:58:d5:00:ff:50:f3:8d:b2:16:
38:60:3d:aa:da:b2:73:f4:b5:21:25:48:1d:f4:dc:28:1a:ae:
e9:4e:f2:53:eb:0b:82:9f:e5:9d:79:06:19:5a:a8:ae:c1:17:
a4:c9:ab:2a:30:ba:65:59:74:0f:51:c7:05:1d:8f:f2:25:00:
79:c4:b6:25:b4:e6:c4:d5:f6:11:05:a1:4c:39:ea:c6:82:40:
2f:f9:21:56:21:29:23:42:25:32:2b:15:2f:ad:51:48:15:38:
b4:7d:44:8c:9a:a5:f0:43:21:d3:09:ec:ef:97:cf:28:89:90:
3f:6b:2b:c7:46:f8:6a:ca:3a:e3:73:25:14:d3:3c:2c:29:76:
1c:e2:49:1a:dc:8d:fd:b4:8d:61:e0:24:4c:e8:64:48:03:d4:
a2:00:d1:87:34:49:c6:c8:cd:cd:f4:55:38:01:95:a1:98:82:
f1:7a:19:90:e8:f8:68:4d:e2:56:0f:42:f0:58:09:a1:46:60:
8f:eb:fe:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:01:08 2025 by rpki-client