Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/i3VEozY7zHl6WOCVl59PVxz43a8.roa
File: i3VEozY7zHl6WOCVl59PVxz43a8.roa (raw, json)
Hash identifier: jzz5iRsaOnS+mlLDbSWuuSqGL3bfQAaKxsPDmiylUHA=
Subject key identifier: 8B:75:44:A3:36:3B:CC:79:7A:58:E0:95:97:9F:4F:57:1C:F8:DD:AF
Certificate issuer: /CN=a90200a0000df5d845b9db284d0a2dbee676c5a8
Certificate serial: 019424B3943C6B7F73044E0B3F553F3C1526
Authority key identifier: A9:02:00:A0:00:0D:F5:D8:45:B9:DB:28:4D:0A:2D:BE:E6:76:C5:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQIAoAAN9dhFudsoTQotvuZ2xag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/i3VEozY7zHl6WOCVl59PVxz43a8.roa
Signing time: Thu 02 Jan 2025 01:48:56 +0000
ROA not before: Thu 02 Jan 2025 01:48:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8870
IP address blocks: 91.197.128.0/23 maxlen: 23
91.197.130.0/24 maxlen: 24
91.197.131.0/24 maxlen: 24
91.222.64.0/23 maxlen: 23
91.222.66.0/24 maxlen: 24
91.222.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.mft
rsync://rpki.ripe.net/repository/DEFAULT/qQIAoAAN9dhFudsoTQotvuZ2xag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:94:3c:6b:7f:73:04:4e:0b:3f:55:3f:3c:15:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a90200a0000df5d845b9db284d0a2dbee676c5a8
Validity
Not Before: Jan 2 01:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8b7544a3363bcc797a58e095979f4f571cf8ddaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:88:89:f1:cb:17:bf:85:46:62:5f:83:49:db:
3c:65:03:87:81:0c:6d:b2:60:a8:90:1e:3e:87:71:
7e:c4:47:e3:83:ab:c5:54:3a:e5:f2:0c:9a:96:ae:
4b:84:ae:fa:99:ab:53:3c:ec:9f:6a:8c:57:06:ac:
19:71:38:be:02:0b:4b:42:cf:b6:e6:0d:8f:61:59:
b5:42:8e:01:ba:54:56:c7:b7:cd:6e:33:31:20:65:
28:6b:54:f0:01:70:a1:5f:33:7f:a9:60:12:2e:bd:
8d:85:87:98:ab:c5:a9:c8:69:17:ec:34:e8:ce:24:
70:ee:7a:4d:8f:cf:38:01:06:aa:14:8d:62:69:11:
8a:c9:cb:c3:8b:6b:c8:00:d0:58:b2:98:fa:ff:b0:
fd:7e:c7:fc:d3:0a:43:61:99:06:aa:aa:79:2d:02:
fd:bd:c4:e6:ce:ed:a2:f5:7f:fc:f7:f1:b7:46:57:
20:23:d0:97:e9:70:e1:9c:13:4b:d5:69:f6:b4:60:
18:70:f6:08:d9:2e:e0:13:03:97:e5:c9:1f:79:8d:
1c:0f:7a:ef:2f:c9:ee:e0:2f:4c:9d:74:d3:8f:b0:
ae:96:49:ee:72:28:5a:54:0e:78:b6:53:14:31:87:
72:39:28:05:d8:bc:1d:af:c6:23:a0:75:ec:be:7c:
0b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:75:44:A3:36:3B:CC:79:7A:58:E0:95:97:9F:4F:57:1C:F8:DD:AF
X509v3 Authority Key Identifier:
keyid:A9:02:00:A0:00:0D:F5:D8:45:B9:DB:28:4D:0A:2D:BE:E6:76:C5:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQIAoAAN9dhFudsoTQotvuZ2xag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/i3VEozY7zHl6WOCVl59PVxz43a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.197.128.0/22
91.222.64.0/22
Signature Algorithm: sha256WithRSAEncryption
c0:65:42:88:84:2f:89:85:40:d7:ad:0a:07:fb:22:86:d5:1c:
0d:17:77:d9:79:45:53:45:d2:c4:d5:b7:29:d8:bd:a6:8b:49:
ce:18:06:fd:90:cb:e6:91:f3:90:54:34:0c:e8:5f:52:64:f3:
ff:b3:b6:c9:69:5e:99:0f:b7:c5:bd:75:9c:2d:11:34:75:84:
eb:75:f9:ae:28:22:37:8f:41:3f:36:f5:bf:3f:ef:c6:f2:1d:
a8:c2:47:26:29:5e:e3:ba:7d:a9:69:d1:23:cc:1d:cc:5d:fc:
42:ac:f0:1e:fd:31:c7:da:1c:40:80:17:40:70:10:51:17:9b:
3f:20:2a:a4:3c:6d:0f:91:da:6d:2f:30:78:fe:b3:48:ef:dc:
ae:fd:ac:ac:94:73:fe:23:62:5e:d5:87:a9:26:81:a6:3b:d1:
25:fe:8b:f8:e3:c7:d9:38:96:25:b4:4a:a6:75:91:5f:07:34:
c3:19:5c:b9:b7:79:58:40:75:3a:ec:09:0a:4f:c3:4c:86:46:
e8:d9:a5:29:a6:e1:e2:62:16:27:24:ef:c0:c9:36:57:1d:60:
e5:35:82:ec:b6:81:cc:0f:0d:a8:58:6e:05:97:b5:6f:c3:8c:
c4:11:99:31:36:e4:34:25:2f:5e:a9:8a:b1:ba:93:fb:ab:13:
cc:e3:de:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 16:15:51 2025 by rpki-client