Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/xxN54HhF3nPkoOWLETT1-obw37g.roa
File: xxN54HhF3nPkoOWLETT1-obw37g.roa (raw, json)
Hash identifier: tctgvIgnzapa7ju3obB7vPQ9BSZUGcl0t2jH0pOzjTQ=
Subject key identifier: C7:13:79:E0:78:45:DE:73:E4:A0:E5:8B:11:34:F5:FA:86:F0:DF:B8
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 019422FC1073017CC7905EF5B4E3106BA6D7
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/xxN54HhF3nPkoOWLETT1-obw37g.roa
Signing time: Wed 01 Jan 2025 17:48:52 +0000
ROA not before: Wed 01 Jan 2025 17:48:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57916
IP address blocks: 91.242.64.0/22 maxlen: 22
91.242.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:10:73:01:7c:c7:90:5e:f5:b4:e3:10:6b:a6:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jan 1 17:48:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c71379e07845de73e4a0e58b1134f5fa86f0dfb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:37:ed:50:a5:da:3a:35:7a:3d:0a:7a:41:d9:
3d:b8:e1:ca:39:01:b3:63:c4:80:4e:58:6e:94:18:
52:c0:72:5c:55:ed:73:01:21:be:b5:cb:59:1a:59:
ab:34:0e:d0:10:91:26:ef:15:af:e9:ac:7d:82:95:
68:7b:d0:40:2b:a3:ca:6e:0f:50:0e:7a:cb:df:59:
0f:01:2b:52:fc:0f:cd:55:4d:49:5e:2b:6a:8d:00:
a8:c7:76:ba:93:a1:da:20:3e:e9:cf:42:27:fb:dc:
b8:8f:d9:c7:56:81:76:5b:72:a9:f7:f5:42:d9:43:
94:e3:3c:74:61:96:59:2b:8d:77:e2:6b:ac:bf:c9:
ca:f0:91:e6:ce:88:89:5c:fa:a2:04:46:c2:03:2c:
1d:2f:e5:6e:84:a6:d8:2b:f7:ff:f7:c7:88:de:d9:
5a:13:5f:46:ac:76:96:07:af:e3:69:4d:09:3b:2b:
86:5c:b0:d9:4a:50:2b:46:db:a2:f3:70:e9:d2:9c:
b5:19:71:2a:39:77:c1:15:d6:33:d6:d1:4c:5a:a0:
58:f9:b0:e6:58:9c:4f:7e:83:e0:ab:88:54:b3:06:
5f:1b:7e:22:38:ee:fd:73:13:ca:f5:1d:c2:47:0c:
41:9b:b9:6c:29:64:ba:f8:fe:7b:c5:37:5d:71:c1:
8d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:13:79:E0:78:45:DE:73:E4:A0:E5:8B:11:34:F5:FA:86:F0:DF:B8
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/xxN54HhF3nPkoOWLETT1-obw37g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.64.0/22
91.242.97.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:02:f3:a2:6e:43:76:eb:b0:da:63:eb:66:4e:d4:22:15:ce:
24:04:5a:bf:75:df:af:f5:cc:09:d0:d5:a8:7a:0d:0e:17:b4:
f6:c4:38:6b:a0:f4:4c:87:1a:a3:f7:16:83:cc:8b:65:0c:74:
53:18:c5:f0:4b:bb:a8:63:21:15:a4:56:72:ff:96:09:2a:c7:
9e:b3:18:c7:c7:07:5d:12:b5:0f:f5:bb:e9:ab:24:57:02:b9:
47:f3:dc:80:39:a9:af:86:33:98:49:c6:9d:5e:c1:8e:33:a8:
df:7a:e9:8a:52:04:d8:ac:3b:95:ea:9e:50:a2:9a:e9:7b:b5:
2d:88:08:28:b2:17:07:28:a4:08:75:36:45:10:11:f3:8c:68:
54:1c:00:fc:df:62:29:6e:85:37:a0:e1:af:6f:f4:99:77:b5:
f3:56:72:3a:f7:93:34:cd:c5:0d:f8:31:a3:39:f6:68:28:cd:
56:6d:12:29:d4:92:d4:57:d2:f0:70:26:06:71:bb:73:a4:04:
56:3e:2e:2f:88:68:f1:dc:0c:a9:8d:c2:11:9a:e5:26:b8:ce:
e5:fe:17:55:5b:d7:f7:88:f5:b0:b3:be:bc:a3:a2:66:3f:43:
01:ec:95:21:90:fb:06:ea:57:dc:36:a4:19:cf:62:b2:71:59:
0d:ad:ef:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:42:09 2025 by rpki-client