Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/bZT2idDZUO1DKUb7co3FqB3VKW4.roa
File: bZT2idDZUO1DKUb7co3FqB3VKW4.roa (raw, json)
Hash identifier: zTZlXvCalsHVX5iXfYRzwlj7VABlblYUj1CQAt7ezcs=
Subject key identifier: 6D:94:F6:89:D0:D9:50:ED:43:29:46:FB:72:8D:C5:A8:1D:D5:29:6E
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 019422FC274AF6DC3F7BA5F56284E8C777F0
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/bZT2idDZUO1DKUb7co3FqB3VKW4.roa
Signing time: Wed 01 Jan 2025 17:48:57 +0000
ROA not before: Wed 01 Jan 2025 17:48:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 398436
IP address blocks: 91.242.108.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:27:4a:f6:dc:3f:7b:a5:f5:62:84:e8:c7:77:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jan 1 17:48:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6d94f689d0d950ed432946fb728dc5a81dd5296e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ca:98:fa:cb:8d:17:87:62:2e:7f:50:9f:26:
f4:01:ed:d8:a1:6d:ab:97:fd:20:08:a7:f5:d4:3d:
cd:d6:ab:87:44:cd:9d:ca:37:62:f5:b0:29:73:54:
7c:19:0b:c3:46:cc:6f:4e:27:a1:70:b4:f8:11:b8:
2b:e7:c0:a9:b5:b0:d6:9b:7b:3c:50:36:5b:dc:ca:
72:0d:70:dc:42:66:d1:71:d8:96:83:72:85:23:85:
e4:9e:4a:83:84:09:bb:34:a1:ce:3c:74:94:ef:71:
ba:25:c8:32:9a:92:1d:66:3a:1a:67:8b:3f:ed:4d:
2c:26:5c:81:34:4c:68:c2:82:3e:01:bc:ca:1f:0e:
71:9d:8d:64:b3:b7:58:60:fc:18:e5:c6:2b:c1:57:
83:7c:8d:4b:7b:bd:ae:3b:3a:a3:d4:4c:ca:7f:b9:
5c:7d:b9:c7:b6:46:8c:b7:13:f5:cc:66:e0:3e:fa:
31:16:1d:6d:64:70:3b:43:47:da:43:00:73:77:7f:
1e:66:6e:67:ca:fa:0f:d6:1e:df:6e:70:1a:37:79:
fd:fa:8d:93:e8:21:c3:64:05:fe:d5:1c:fe:0b:b8:
c0:35:1b:59:b0:89:82:f5:a3:25:6a:4a:fa:5a:03:
8a:f5:72:90:7f:9f:14:69:c7:8c:41:39:ef:4d:ac:
94:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:94:F6:89:D0:D9:50:ED:43:29:46:FB:72:8D:C5:A8:1D:D5:29:6E
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/bZT2idDZUO1DKUb7co3FqB3VKW4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.108.0/22
Signature Algorithm: sha256WithRSAEncryption
10:ba:5f:29:ea:e5:19:a0:9a:57:7f:cf:51:0f:5a:b7:6e:29:
04:27:01:49:01:37:3e:88:ff:63:80:9d:b1:0b:0e:53:05:91:
a8:97:c6:4e:5a:68:b3:45:8a:62:84:58:b4:a2:7d:4b:a8:fb:
e6:ec:0f:d0:3e:e4:c6:1b:18:97:df:06:8e:c8:3f:cd:91:21:
d2:26:2c:a8:41:1a:6e:f4:5f:8f:99:e9:77:15:45:f0:f5:f5:
50:57:e4:3d:81:8b:34:14:8e:cc:eb:f8:87:fd:0a:20:ce:b1:
17:ff:92:38:9b:52:df:c8:7b:1f:08:e1:d1:e5:56:34:4b:a9:
d3:5a:9a:c6:55:4c:3e:d7:7a:20:2d:be:3b:d6:ae:59:19:c0:
1a:c6:9e:64:3f:ee:38:87:cf:b2:1a:f3:08:96:98:7d:04:bb:
b6:6d:82:76:d7:e0:a3:98:ee:97:be:ca:ea:25:e3:f8:f0:e7:
ea:68:5b:24:e9:84:0c:59:a9:25:89:1c:aa:b3:ed:a7:35:3c:
6c:d7:f9:1c:06:1e:85:3d:6f:74:47:ec:4c:25:f9:11:70:24:
39:80:88:19:5d:b7:95:d0:d5:af:e8:c2:d8:c2:c0:15:60:f6:
83:9c:2c:93:8e:31:6f:4b:23:1c:09:8b:cb:18:ba:66:07:60:
68:1f:09:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:21:28 2025 by rpki-client