Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/Xxx-aLbVPMFeFACAuRgkyYhKGZ4.roa
File: Xxx-aLbVPMFeFACAuRgkyYhKGZ4.roa (raw, json)
Hash identifier: Qjsr5YH+eP1GQSztBosIVdbSouCX9Gvl5XQ/f3iIe+4=
Subject key identifier: 5F:1C:7E:68:B6:D5:3C:C1:5E:14:00:80:B9:18:24:C9:88:4A:19:9E
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 0194266B4A6C0B84C14D7B20F0700C6996E7
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/Xxx-aLbVPMFeFACAuRgkyYhKGZ4.roa
Signing time: Thu 02 Jan 2025 09:49:13 +0000
ROA not before: Thu 02 Jan 2025 09:49:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48678
IP address blocks: 91.228.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 05:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:4a:6c:0b:84:c1:4d:7b:20:f0:70:0c:69:96:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Jan 2 09:49:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5f1c7e68b6d53cc15e140080b91824c9884a199e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:6d:1b:49:0e:94:a4:b9:6c:83:69:55:08:c0:
bc:cc:bc:26:5d:1d:c1:57:9d:96:54:9f:0b:da:f6:
5d:b5:2a:d0:89:12:04:2e:06:a1:2e:9d:fe:c4:24:
58:fc:2a:0c:d4:8c:e0:5e:63:f6:88:cd:a7:d5:0f:
10:38:f2:0b:9a:12:d4:21:d2:9b:f0:c6:5a:d8:fd:
20:cb:3f:0c:77:a5:01:4e:1e:91:ae:c0:14:2d:f0:
30:27:79:87:91:05:26:bd:92:d8:5d:a1:8c:3f:29:
f9:47:e2:9d:3d:e5:5d:05:e2:fc:10:c0:32:9a:7b:
fe:fb:3a:fc:9c:22:e9:63:82:6d:59:70:45:67:e2:
49:09:52:d2:01:cd:b5:79:5e:82:cd:0c:85:90:9f:
dc:57:b8:a0:8e:c5:76:c8:66:a9:b4:f0:94:72:e3:
43:3e:bf:0d:1c:46:bc:13:ca:a8:b0:b5:fa:c6:b4:
db:cb:dd:22:90:7d:ce:54:76:09:73:49:c9:ce:ad:
b8:19:66:1e:8c:df:00:dd:30:3e:15:b1:eb:89:9d:
1f:89:76:37:99:aa:cf:f1:ff:e7:d1:39:3b:36:3f:
51:24:f1:df:a1:e2:fb:be:d5:30:0d:f4:60:5d:97:
0f:b2:20:44:de:39:9c:af:30:26:ee:3c:16:3f:ba:
80:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:1C:7E:68:B6:D5:3C:C1:5E:14:00:80:B9:18:24:C9:88:4A:19:9E
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/Xxx-aLbVPMFeFACAuRgkyYhKGZ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.15.0/24
Signature Algorithm: sha256WithRSAEncryption
55:21:46:62:a9:05:4e:1f:26:56:b2:99:ff:53:40:c0:dd:2a:
ca:01:b3:a1:ed:68:5a:27:52:b4:1d:6d:ca:f6:ba:46:25:40:
bb:8e:25:ca:93:0f:b5:7d:7e:77:a4:61:5f:5d:4a:0d:0a:70:
0d:42:4f:e7:9c:e9:7e:89:44:75:8d:fd:b6:69:6e:2f:d8:87:
ec:41:e5:22:a2:e0:93:5d:c9:0f:eb:24:60:3b:29:85:52:d0:
ee:30:91:90:ae:c4:17:33:7b:ce:b8:c1:5d:6d:31:86:6e:72:
08:63:08:9a:f9:d6:b1:bb:05:cb:2a:14:5e:ac:1e:93:54:72:
3e:01:ce:e3:4a:ce:c2:87:6b:0c:66:0f:1b:7a:87:f0:e2:58:
aa:c1:50:00:4d:4c:0a:61:6a:ca:ce:26:06:e8:4a:f5:4b:eb:
de:9d:9d:76:cd:81:84:3d:11:1b:d9:d9:2b:bf:7f:ef:40:e2:
5c:2d:56:c5:33:62:93:8f:5b:71:1f:c6:15:04:34:6e:a3:34:
d2:b3:8b:6b:49:f7:3d:f4:f8:4b:1c:87:57:46:c1:64:92:14:
98:b2:f3:fa:72:e9:e4:13:3f:8d:96:27:88:f5:6c:71:d1:b7:
94:5d:45:db:65:54:11:02:2f:60:45:ec:d9:70:89:b4:7e:98:
56:a9:62:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:01:02 2025 by rpki-client