Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/846C_HHWsmfMuTteTAyqZtSs9uU.roa
File: 846C_HHWsmfMuTteTAyqZtSs9uU.roa (raw, json)
Hash identifier: tRlhHsbjfBDjcdUQyF9uDZ6h5rAZGUSUYhMVpEGLRx8=
Subject key identifier: F3:8E:82:FC:71:D6:B2:67:CC:B9:3B:5E:4C:0C:AA:66:D4:AC:F6:E5
Certificate issuer: /CN=3d43cf40f691f14b35ca657032934802005cfa88
Certificate serial: 0194214396C9FFC479F4C5001F06C0FDEACE
Authority key identifier: 3D:43:CF:40:F6:91:F1:4B:35:CA:65:70:32:93:48:02:00:5C:FA:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PUPPQPaR8Us1ymVwMpNIAgBc-og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/846C_HHWsmfMuTteTAyqZtSs9uU.roa
Signing time: Wed 01 Jan 2025 09:47:45 +0000
ROA not before: Wed 01 Jan 2025 09:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20712
IP address blocks: 91.200.61.0/24 maxlen: 24
2001:67c:1270::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.mft
rsync://rpki.ripe.net/repository/DEFAULT/PUPPQPaR8Us1ymVwMpNIAgBc-og.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 06:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:96:c9:ff:c4:79:f4:c5:00:1f:06:c0:fd:ea:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d43cf40f691f14b35ca657032934802005cfa88
Validity
Not Before: Jan 1 09:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f38e82fc71d6b267ccb93b5e4c0caa66d4acf6e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:5f:39:ca:d3:1d:47:99:3d:29:6a:76:4b:8a:
0c:f4:5f:4b:bb:84:c4:2a:5d:27:cc:6c:48:46:3f:
1c:30:81:c1:9e:56:28:21:24:cd:3b:93:14:27:f8:
9e:c5:42:2a:4e:8e:a9:3b:52:6b:e2:26:07:e9:5a:
fc:f6:35:2a:4b:42:1e:b8:da:97:26:da:7d:97:3b:
91:21:c0:8c:ea:27:cd:10:c4:86:c3:b5:de:fc:a7:
b3:5c:e6:74:66:93:fa:53:71:1b:69:e0:c2:3c:c9:
33:59:68:7c:9e:b5:b7:b7:99:55:f6:82:9f:c2:ad:
5a:95:83:f7:7a:02:9c:e1:87:2a:ae:29:e7:c1:d7:
9e:bb:df:36:c3:d4:f1:c1:00:36:37:34:86:9f:66:
3f:bf:fc:82:06:fb:39:5c:97:0c:90:1d:83:03:fe:
8d:cc:ec:0a:f9:7b:65:34:62:0a:4d:d0:ae:e9:3a:
b1:ec:37:e7:88:a0:e6:0a:a1:fd:13:ef:e4:ec:07:
cc:c7:d8:5c:f5:cc:c1:c1:e9:94:3c:2c:29:71:9b:
ae:64:05:5a:f2:c2:96:53:43:6b:96:0a:c6:f7:4b:
b7:dc:5b:ce:6e:f1:46:33:41:73:17:b6:c4:41:05:
f1:3c:46:5c:fc:2d:18:e3:48:9e:c1:3f:08:44:29:
9c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:8E:82:FC:71:D6:B2:67:CC:B9:3B:5E:4C:0C:AA:66:D4:AC:F6:E5
X509v3 Authority Key Identifier:
keyid:3D:43:CF:40:F6:91:F1:4B:35:CA:65:70:32:93:48:02:00:5C:FA:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PUPPQPaR8Us1ymVwMpNIAgBc-og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/846C_HHWsmfMuTteTAyqZtSs9uU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.200.61.0/24
IPv6:
2001:67c:1270::/48
Signature Algorithm: sha256WithRSAEncryption
8b:71:df:42:61:c8:86:2e:50:ed:f8:77:2f:00:c9:f7:bd:64:
b4:f4:c1:1b:92:b0:d9:b8:23:fe:1c:dd:6c:c6:26:5a:c3:d1:
a2:e2:25:39:be:96:98:1f:49:58:96:ca:14:f8:c4:5f:02:f7:
c0:4f:b1:e3:8a:55:14:1d:9c:3e:34:a7:77:39:1c:7e:de:44:
83:41:de:02:98:b9:34:ca:ae:d7:f7:40:3d:5e:6d:26:5f:a3:
af:4a:e9:8b:92:97:63:03:87:34:7f:fd:25:76:92:7e:c7:5a:
77:53:05:e8:e3:4a:ab:93:23:a6:6d:c8:f0:09:64:1f:1d:2f:
0c:26:16:14:cf:c2:ca:38:8e:d7:5f:34:45:ca:ae:b7:05:84:
ff:2b:a6:a5:16:5d:49:16:ea:50:ab:76:43:dc:78:ae:ec:4b:
cd:69:bb:90:30:b9:16:38:00:db:ad:44:e9:76:d5:11:bb:cc:
6a:4e:16:89:c3:42:92:a2:d5:18:8c:16:a7:f9:b3:9e:0e:ab:
28:83:de:b6:26:68:dd:aa:e3:a7:2c:90:f6:00:d5:ef:94:70:
cf:a3:7b:8c:f5:1e:a0:8e:1c:a3:4e:de:20:14:99:4a:4e:20:
9b:df:7a:da:0e:bf:4d:62:4f:aa:de:e8:de:91:58:6b:18:7a:
22:af:6a:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:08:06 2025 by rpki-client