Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/StPgXcpmiy5JYaEeTseShVrOOPw.roa
File: StPgXcpmiy5JYaEeTseShVrOOPw.roa (raw, json)
Hash identifier: 2TP419yQVLSPbiDET0BATqZqoaVVJJbtbUq/1dj+vY4=
Subject key identifier: 4A:D3:E0:5D:CA:66:8B:2E:49:61:A1:1E:4E:C7:92:85:5A:CE:38:FC
Certificate issuer: /CN=b7a9c34d3f843cdb035b7c30b3e84e22412522c5
Certificate serial: 019420D5988F217FC03E3FB43929746CF405
Authority key identifier: B7:A9:C3:4D:3F:84:3C:DB:03:5B:7C:30:B3:E8:4E:22:41:25:22:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t6nDTT-EPNsDW3wws-hOIkElIsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/StPgXcpmiy5JYaEeTseShVrOOPw.roa
Signing time: Wed 01 Jan 2025 07:47:36 +0000
ROA not before: Wed 01 Jan 2025 07:47:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41666
IP address blocks: 91.216.79.0/24 maxlen: 32
2001:67c:8e4::/48 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/t6nDTT-EPNsDW3wws-hOIkElIsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 13:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:98:8f:21:7f:c0:3e:3f:b4:39:29:74:6c:f4:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7a9c34d3f843cdb035b7c30b3e84e22412522c5
Validity
Not Before: Jan 1 07:47:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4ad3e05dca668b2e4961a11e4ec792855ace38fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:10:2e:9c:aa:a8:f5:90:a4:15:20:1f:b1:24:
1d:58:3d:c1:1c:f4:84:c6:ba:23:f7:45:d7:34:c2:
f3:8c:0b:80:51:d8:93:f4:2e:34:8e:6b:4f:6e:3b:
56:5e:80:27:5f:da:42:1e:8f:00:61:24:64:3b:17:
02:c7:63:0c:8d:6b:91:fa:ac:d9:42:14:d7:59:75:
1b:43:c0:5d:6a:52:6c:c8:09:45:e7:bc:51:e2:99:
b6:81:9d:d8:9b:b9:26:da:8c:73:e6:56:2b:e4:d4:
78:77:9c:eb:9e:91:57:c5:e3:7e:95:eb:e2:e5:ed:
59:f7:56:25:43:cd:ba:90:00:bb:f7:20:81:76:b3:
2c:9d:de:fb:9d:0b:75:b3:62:b7:65:e7:89:cf:f6:
49:8e:85:34:00:08:95:67:66:4f:3e:10:f1:14:ca:
6b:4a:5e:1b:f1:dc:4e:99:81:38:48:b8:39:04:dc:
88:33:95:fc:c2:98:01:45:69:4e:a8:e5:0a:55:64:
a6:34:5c:5d:4c:3e:15:66:b7:a8:fe:6f:69:04:dc:
9c:d2:82:c8:f7:97:06:43:2e:07:c2:2c:d4:ed:b5:
15:fd:9c:bb:0a:4e:d0:6c:13:ff:a2:cd:35:e5:e6:
b9:84:76:99:2d:67:b5:db:54:97:21:a9:5d:62:e8:
a3:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:D3:E0:5D:CA:66:8B:2E:49:61:A1:1E:4E:C7:92:85:5A:CE:38:FC
X509v3 Authority Key Identifier:
keyid:B7:A9:C3:4D:3F:84:3C:DB:03:5B:7C:30:B3:E8:4E:22:41:25:22:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6nDTT-EPNsDW3wws-hOIkElIsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/StPgXcpmiy5JYaEeTseShVrOOPw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.79.0/24
IPv6:
2001:67c:8e4::/48
Signature Algorithm: sha256WithRSAEncryption
a4:97:e3:5b:05:e5:30:cf:04:4f:60:4a:7b:f0:b8:85:bc:57:
68:a6:cc:ae:94:de:1c:ee:c4:b5:ea:d5:81:e3:f9:13:5e:91:
25:9d:0d:a3:74:a5:d5:8f:43:51:8e:2b:c5:75:3a:cf:94:71:
ce:07:c0:16:1c:34:ce:74:e3:3f:3e:bb:c3:7f:81:2c:63:ee:
c8:95:58:34:3a:e6:10:61:2c:98:00:ca:e0:fb:74:76:58:66:
69:57:df:e6:d0:7d:61:df:3a:8e:95:fb:72:c7:91:25:03:74:
4b:f6:c8:06:27:ee:da:3c:3b:98:a3:6b:87:f4:6d:49:0a:6e:
3f:ac:d6:60:e3:53:a7:5a:5d:25:12:7e:ee:27:00:f3:78:ef:
cf:bc:3d:38:8e:b6:1b:c4:a8:ab:75:02:05:52:2b:4a:5c:70:
a9:f2:ff:c7:ea:02:b8:04:1f:12:9d:24:a0:a6:76:96:ab:b5:
b4:fa:7e:7b:3d:b5:f8:3c:d2:9d:c2:8a:d6:fe:3e:51:31:d9:
78:76:37:b0:56:06:10:68:e5:ba:b4:18:c9:28:c3:77:34:9a:
40:d3:77:43:39:1f:10:fc:d0:56:5b:7c:c9:39:b2:5b:7a:fa:
63:9f:8b:a2:23:de:8d:33:73:a3:8f:86:9d:66:95:6a:3f:94:
03:8c:86:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 17:02:52 2025 by rpki-client