Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/d279d3-947e-45c7-a890-3b84d79abdaf/1/1ofY17NAwbyhAHFj_yBzaevRgc4.roa
File: 1ofY17NAwbyhAHFj_yBzaevRgc4.roa (raw, json)
Hash identifier: FPWNmGXZmy3JcSLxjIHQ6BJRP2baM9xmkXSCswGMYik=
Subject key identifier: D6:87:D8:D7:B3:40:C1:BC:A1:00:71:63:FF:20:73:69:EB:D1:81:CE
Certificate issuer: /CN=035845f86cbc3cfa9e0e7987a0382d5d0dd7ce3e
Certificate serial: 0194228D92D6464BA2D95172982C32FCBB10
Authority key identifier: 03:58:45:F8:6C:BC:3C:FA:9E:0E:79:87:A0:38:2D:5D:0D:D7:CE:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/d279d3-947e-45c7-a890-3b84d79abdaf/1/1ofY17NAwbyhAHFj_yBzaevRgc4.roa
Signing time: Wed 01 Jan 2025 15:48:11 +0000
ROA not before: Wed 01 Jan 2025 15:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206714
IP address blocks: 91.223.243.0/24 maxlen: 24
2001:67c:1184::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/d279d3-947e-45c7-a890-3b84d79abdaf/1/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/d279d3-947e-45c7-a890-3b84d79abdaf/1/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 06:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:92:d6:46:4b:a2:d9:51:72:98:2c:32:fc:bb:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=035845f86cbc3cfa9e0e7987a0382d5d0dd7ce3e
Validity
Not Before: Jan 1 15:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d687d8d7b340c1bca1007163ff207369ebd181ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:46:a5:12:9c:7a:4c:73:3e:b0:1f:2b:ea:69:
9a:6b:64:0b:76:38:f6:09:39:43:9b:74:bb:9d:3e:
2a:02:d8:19:ce:6a:56:ec:33:5e:5a:ed:76:6b:fa:
0b:81:f5:8e:f1:b2:c7:69:c0:eb:7e:62:d6:be:82:
be:14:26:57:11:f7:c3:eb:cd:3b:9d:35:0e:de:b4:
b1:36:d8:04:35:a5:25:f0:8a:31:79:7c:95:9d:77:
da:fb:7c:a8:98:13:3c:57:9f:1d:31:35:6d:2e:e9:
bb:c8:00:4e:9e:03:cc:5a:6c:db:7c:b4:e5:fc:c8:
af:43:ae:c0:f3:b7:35:cd:cf:49:6e:20:c2:fb:13:
68:0d:9f:59:34:7c:fa:7b:10:b2:79:89:4c:d8:fd:
1a:97:64:18:6c:12:ce:a0:ff:03:bd:c3:eb:6f:41:
99:21:d1:9e:1a:6b:0d:d3:69:70:06:a9:85:32:45:
ec:26:b0:38:8c:9e:77:47:a5:d9:7f:fe:81:3c:b8:
b9:ac:7a:0a:fc:cf:0a:4d:b8:d3:8f:6d:e7:81:b0:
6f:7d:b3:21:38:ef:f0:76:02:56:fa:61:55:9d:7b:
02:12:64:a9:92:6d:e7:52:ab:77:ce:30:e1:3e:2f:
33:c1:b1:c7:52:ae:ac:84:87:ee:9d:68:67:ae:de:
f4:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:87:D8:D7:B3:40:C1:BC:A1:00:71:63:FF:20:73:69:EB:D1:81:CE
X509v3 Authority Key Identifier:
keyid:03:58:45:F8:6C:BC:3C:FA:9E:0E:79:87:A0:38:2D:5D:0D:D7:CE:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d279d3-947e-45c7-a890-3b84d79abdaf/1/1ofY17NAwbyhAHFj_yBzaevRgc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d279d3-947e-45c7-a890-3b84d79abdaf/1/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.243.0/24
IPv6:
2001:67c:1184::/48
Signature Algorithm: sha256WithRSAEncryption
4c:65:d9:73:bd:9a:ed:2c:51:8e:64:93:c7:6d:f1:74:4b:51:
77:b6:6a:51:19:9d:d3:29:74:3f:b1:0a:e0:2f:02:96:d3:15:
87:9f:d1:98:ff:2c:3c:d6:4c:b8:76:fc:c4:f4:2b:1c:47:b9:
4c:f2:82:ec:e5:e4:0b:ce:b6:9b:c6:04:4a:b2:02:9b:24:ec:
9a:99:3f:91:70:14:f3:11:b9:bc:a7:56:fd:34:6b:4e:7d:69:
aa:44:ca:b6:e2:16:ac:68:f5:e7:ea:a5:7f:b2:30:b2:58:2e:
4b:d3:cb:98:bd:62:2a:b2:ea:ba:87:e6:46:bc:03:32:9b:12:
5b:30:cc:53:6c:b3:1d:bb:85:97:24:af:46:f8:52:24:50:05:
63:03:95:54:6b:a9:c1:60:01:16:75:ef:14:e2:44:c2:86:1b:
b8:26:f6:5e:66:de:62:fd:05:21:78:e6:3e:9e:da:61:0d:2b:
1d:97:06:77:23:46:3f:be:d8:f2:2e:c2:1b:a3:70:e1:f5:07:
eb:1c:c5:0c:11:35:17:6f:dd:20:ee:5a:78:67:aa:eb:7d:48:
bb:6d:9a:b3:d2:a4:05:38:c7:30:b6:37:e1:22:6c:4a:41:a2:
41:5d:b4:28:ee:ad:15:cd:8d:bb:e1:bf:40:f6:21:42:38:65:
0d:41:02:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:28:02 2025 by rpki-client