Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/1-mZSuN8jPSBbxpJ0doddwA6wFPs.roa
File: 1-mZSuN8jPSBbxpJ0doddwA6wFPs.roa (raw, json)
Hash identifier: Sk05O6P4hwRcAJcaUWnZwocsNzWFPwC5OreYAuAopME=
Subject key identifier: FA:66:52:B8:DF:23:3D:20:5B:C6:92:74:76:87:5D:C0:0E:B0:14:FB
Certificate issuer: /CN=107312a5016a3cdcc0b7e61dc79f55d3d5ecb37e
Certificate serial: 01941F8C5C2A64715D9145B133B9F1C9F71F
Authority key identifier: 10:73:12:A5:01:6A:3C:DC:C0:B7:E6:1D:C7:9F:55:D3:D5:EC:B3:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHMSpQFqPNzAt-Ydx59V09Xss34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/1-mZSuN8jPSBbxpJ0doddwA6wFPs.roa
Signing time: Wed 01 Jan 2025 01:47:59 +0000
ROA not before: Wed 01 Jan 2025 01:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209576
IP address blocks: 91.132.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHMSpQFqPNzAt-Ydx59V09Xss34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 22:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:5c:2a:64:71:5d:91:45:b1:33:b9:f1:c9:f7:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=107312a5016a3cdcc0b7e61dc79f55d3d5ecb37e
Validity
Not Before: Jan 1 01:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fa6652b8df233d205bc6927476875dc00eb014fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:56:b1:e4:1e:e6:38:55:a7:16:5e:50:44:fc:
f0:85:24:96:3b:8c:a2:bb:a5:03:66:20:00:1c:d3:
a7:aa:16:eb:1e:72:3d:dc:6c:2d:51:96:84:91:91:
08:1d:ab:d7:fe:11:5d:06:82:6d:1b:32:53:e7:c3:
8f:29:52:31:cc:2f:b7:27:b8:b5:91:cd:c4:f9:19:
57:35:b7:af:48:6a:b7:3a:85:d4:de:81:a7:87:9c:
30:a7:e4:c3:ec:c2:39:05:27:c8:d3:9e:34:39:60:
a5:df:6b:34:24:93:86:df:22:e4:40:96:aa:0e:5d:
66:08:b5:c1:dd:a1:da:2a:5e:ca:d1:bd:e8:ea:63:
35:8e:c2:4f:62:85:1f:9b:b9:38:29:d2:b8:e4:1c:
ac:f8:3b:43:8f:0a:57:51:6a:1c:34:f3:e3:77:4d:
29:c1:96:86:af:6a:30:f3:b9:8f:38:75:b3:15:85:
33:ee:a2:56:41:5b:20:9f:a9:9b:2f:3a:76:d8:82:
9a:b1:9d:48:ae:36:d2:14:99:bc:af:19:03:ed:a6:
db:4b:ed:18:83:33:b4:56:53:44:00:bc:47:d3:ff:
cd:9a:f6:4f:72:0f:2c:80:c2:62:e4:e3:10:d4:51:
db:ba:ba:b2:38:34:b5:82:64:8c:61:cb:c8:b4:59:
fd:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:66:52:B8:DF:23:3D:20:5B:C6:92:74:76:87:5D:C0:0E:B0:14:FB
X509v3 Authority Key Identifier:
keyid:10:73:12:A5:01:6A:3C:DC:C0:B7:E6:1D:C7:9F:55:D3:D5:EC:B3:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHMSpQFqPNzAt-Ydx59V09Xss34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/1-mZSuN8jPSBbxpJ0doddwA6wFPs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.132.66.0/24
Signature Algorithm: sha256WithRSAEncryption
e2:f8:48:ed:24:9a:4f:61:c1:39:b5:fb:37:87:0c:cf:13:cd:
91:e0:e0:72:b1:df:0a:7b:43:70:31:aa:8e:86:3c:f6:3b:d1:
81:f0:6b:22:8e:d7:72:1b:98:e0:90:1e:58:a2:94:c8:9e:b8:
34:c8:24:77:a5:34:d6:a8:a3:17:53:49:01:99:8e:74:67:67:
46:53:e4:26:10:49:b8:da:12:5e:22:a3:20:af:d3:c0:49:b9:
af:59:06:b6:66:85:11:16:78:6b:f6:7a:ea:25:1d:f8:59:5e:
fe:78:6b:dd:69:af:32:14:47:36:ae:f1:aa:bd:1d:ef:91:dc:
38:d5:df:8d:81:c7:96:fb:d0:c3:e7:56:75:4a:3b:c4:5d:57:
76:5a:fc:71:57:71:84:f1:42:ac:ee:e3:f4:ab:92:a5:32:54:
40:78:3b:bb:e9:5a:1b:b1:d9:35:f2:42:07:a0:13:e3:85:f2:
c7:d4:6a:9d:4c:0a:dd:28:c1:66:b5:52:2c:8f:23:1b:39:89:
df:51:1c:41:24:68:62:8b:a7:bd:16:1d:4d:84:19:ae:f2:58:
39:e2:e0:55:ba:d6:8d:62:b0:27:21:f9:af:5a:54:a5:95:bb:
b7:8f:ca:e6:78:9a:48:ea:aa:59:c9:ef:4b:38:f3:ef:8c:f3:
f9:38:9e:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:37:26 2025 by rpki-client