Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/826a5b-638f-461b-a24b-3bc6bc306f89/1/AIRZFXDpY9mQ7Mvu8kYb8OBEtUo.roa
File: AIRZFXDpY9mQ7Mvu8kYb8OBEtUo.roa (raw, json)
Hash identifier: d5gxdyXpVK75f5B2dssNKeXHA5IUThR6PGmkaU8utQY=
Subject key identifier: 00:84:59:15:70:E9:63:D9:90:EC:CB:EE:F2:46:1B:F0:E0:44:B5:4A
Certificate issuer: /CN=1598d75e8e32d5e847df4aa1a35c29344c976e26
Certificate serial: 019422FBA4DAAE427FF3EB2D1857EA6E7E02
Authority key identifier: 15:98:D7:5E:8E:32:D5:E8:47:DF:4A:A1:A3:5C:29:34:4C:97:6E:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZjXXo4y1ehH30qho1wpNEyXbiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/826a5b-638f-461b-a24b-3bc6bc306f89/1/AIRZFXDpY9mQ7Mvu8kYb8OBEtUo.roa
Signing time: Wed 01 Jan 2025 17:48:24 +0000
ROA not before: Wed 01 Jan 2025 17:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57361
IP address blocks: 91.231.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/826a5b-638f-461b-a24b-3bc6bc306f89/1/FZjXXo4y1ehH30qho1wpNEyXbiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/826a5b-638f-461b-a24b-3bc6bc306f89/1/FZjXXo4y1ehH30qho1wpNEyXbiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/FZjXXo4y1ehH30qho1wpNEyXbiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 08:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:a4:da:ae:42:7f:f3:eb:2d:18:57:ea:6e:7e:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1598d75e8e32d5e847df4aa1a35c29344c976e26
Validity
Not Before: Jan 1 17:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0084591570e963d990eccbeef2461bf0e044b54a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:97:bd:b3:ff:b0:d8:33:6d:f5:c6:c6:eb:58:
b0:97:f1:8b:96:b4:af:7d:a6:26:a1:05:99:84:4b:
9f:c1:14:dc:92:c6:cc:85:55:5a:eb:66:22:f5:4c:
b0:f8:46:3b:6d:4b:fa:0d:ad:b5:e0:d9:13:d0:5e:
14:d1:1d:7c:e0:67:8a:15:38:93:00:f4:ba:63:d4:
4f:f5:3b:b2:c9:53:7d:18:f9:4e:75:f1:88:44:d1:
7d:48:f2:c3:a5:3c:c2:94:af:58:1b:2e:b4:75:16:
33:06:4d:29:5b:e5:40:ab:e6:84:77:12:c2:15:ed:
67:f1:bc:0e:b5:12:15:91:5a:ca:eb:de:9e:c2:8f:
89:32:73:44:9c:6b:de:13:35:70:4a:42:d1:38:c0:
19:35:6b:16:db:0a:26:2a:d8:51:cd:27:98:d4:d1:
1c:ee:28:13:ee:fa:6a:b9:51:76:ca:6b:dc:88:6e:
21:8a:bb:1e:70:83:c3:dc:52:1c:ec:99:28:ae:af:
26:f2:4c:59:ee:30:53:f8:33:e4:f8:b7:07:ea:b6:
76:23:d0:30:ff:2e:4b:5e:e5:f8:bc:bb:c7:d3:74:
bc:28:be:0f:b1:10:96:6a:d6:38:c8:13:59:59:aa:
22:ab:5c:8b:a3:fd:82:63:f6:f0:9f:71:1b:7c:33:
00:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:84:59:15:70:E9:63:D9:90:EC:CB:EE:F2:46:1B:F0:E0:44:B5:4A
X509v3 Authority Key Identifier:
keyid:15:98:D7:5E:8E:32:D5:E8:47:DF:4A:A1:A3:5C:29:34:4C:97:6E:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZjXXo4y1ehH30qho1wpNEyXbiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/826a5b-638f-461b-a24b-3bc6bc306f89/1/AIRZFXDpY9mQ7Mvu8kYb8OBEtUo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/826a5b-638f-461b-a24b-3bc6bc306f89/1/FZjXXo4y1ehH30qho1wpNEyXbiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.231.229.0/24
Signature Algorithm: sha256WithRSAEncryption
99:ff:93:43:99:fe:0f:b1:a1:74:e0:80:d5:21:c2:1c:82:fd:
2e:58:be:e2:87:c8:a1:44:d5:ea:3e:f1:8a:4c:4b:d9:86:89:
dd:9c:11:9a:bf:f1:1f:4d:74:10:f2:ff:57:ed:be:f8:94:fc:
d7:12:ec:86:f3:1f:ab:f9:bd:52:06:eb:b6:35:7a:4d:75:90:
29:c1:c8:53:58:63:d8:6c:83:75:ba:f7:b0:4a:11:3d:e0:eb:
4b:6a:fe:bf:ed:e5:33:5c:64:5c:e7:b0:7c:a7:38:08:e0:39:
80:ed:0a:5d:5a:17:6a:2c:44:eb:90:95:d1:80:bb:f1:de:20:
9a:06:2d:86:5c:f2:41:19:41:63:dd:7c:ac:eb:c8:2a:f0:74:
20:86:b4:db:b5:c3:12:d6:bc:64:ee:ac:21:c0:0d:2c:ea:16:
73:8f:5e:5a:8f:2e:72:3c:6a:c3:72:0b:55:82:93:b6:45:7e:
52:20:c5:d6:c0:1e:d6:1e:b7:0c:d6:fd:90:55:0b:41:91:00:
47:1d:c5:3a:51:8a:6c:bd:e4:e3:83:15:2d:e0:89:a3:cf:f9:
3a:9e:c8:d3:fc:ce:80:20:cc:66:00:15:03:46:fa:4e:83:ed:
e8:fe:0c:a2:24:60:03:69:4d:19:a9:d9:21:96:88:46:01:d3:
c6:39:c2:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:59:32 2025 by rpki-client