Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/54a58b-7a32-46bc-85c0-30b764eb4900/1/6WWGMBEJeVUhw0je11LNLXob3Fk.roa
File: 6WWGMBEJeVUhw0je11LNLXob3Fk.roa (raw, json)
Hash identifier: UR2dxpbdtKcSXZI0WPnuoltcK0Rk3PFpyvHQx4QFc88=
Subject key identifier: E9:65:86:30:11:09:79:55:21:C3:48:DE:D7:52:CD:2D:7A:1B:DC:59
Certificate issuer: /CN=9fddaf213257d176df50aa6e77648a0cc72a5fa1
Certificate serial: 01941F8C7BFA01256C871300F816ADE68B0C
Authority key identifier: 9F:DD:AF:21:32:57:D1:76:DF:50:AA:6E:77:64:8A:0C:C7:2A:5F:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n92vITJX0XbfUKpud2SKDMcqX6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/54a58b-7a32-46bc-85c0-30b764eb4900/1/6WWGMBEJeVUhw0je11LNLXob3Fk.roa
Signing time: Wed 01 Jan 2025 01:48:07 +0000
ROA not before: Wed 01 Jan 2025 01:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5089
IP address blocks: 91.223.46.0/24 maxlen: 24
91.224.26.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/54a58b-7a32-46bc-85c0-30b764eb4900/1/n92vITJX0XbfUKpud2SKDMcqX6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/54a58b-7a32-46bc-85c0-30b764eb4900/1/n92vITJX0XbfUKpud2SKDMcqX6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/n92vITJX0XbfUKpud2SKDMcqX6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 15:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:7b:fa:01:25:6c:87:13:00:f8:16:ad:e6:8b:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fddaf213257d176df50aa6e77648a0cc72a5fa1
Validity
Not Before: Jan 1 01:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e96586301109795521c348ded752cd2d7a1bdc59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:be:18:85:d2:8a:f7:6f:bb:22:d6:8f:aa:cc:
b9:ff:1b:a5:fb:cf:27:99:2e:3d:fc:67:b0:a7:e9:
4a:df:52:6b:60:0e:bc:69:52:54:e4:f7:b9:6e:43:
4f:b6:30:eb:60:b5:42:a5:0e:b7:81:d2:1a:fe:99:
41:eb:fc:ae:37:73:d5:c0:82:10:cb:f6:30:6b:e3:
4e:5b:09:81:86:25:1c:1c:3b:60:f3:f8:4e:12:9d:
91:6d:ff:c7:04:ab:89:fa:e2:6f:92:22:d7:5f:40:
00:25:12:8a:a9:ea:ce:45:88:65:ae:4b:9f:79:85:
d6:2a:8c:f7:0b:bd:23:2c:92:b8:99:d3:ab:05:99:
c3:70:d4:ba:98:f7:ca:cc:ab:58:a5:53:9f:fc:02:
7f:19:e0:c3:3d:4b:ad:80:d6:d7:bf:3a:ad:18:8b:
b2:76:2d:ad:d5:3a:66:1e:f6:b6:f7:5f:d3:ae:5b:
af:fe:d0:a3:85:94:bd:6c:15:aa:39:7f:1b:74:33:
d6:78:01:78:52:d4:d5:1d:f7:8a:fc:59:e2:3e:42:
30:96:49:9d:d1:77:4c:9b:5b:ea:56:b2:77:b0:94:
ec:1a:03:02:81:6e:cc:bf:2a:e4:58:a0:38:b9:98:
fc:4e:07:c5:9a:38:86:a9:8a:98:d5:a5:9f:89:83:
88:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:65:86:30:11:09:79:55:21:C3:48:DE:D7:52:CD:2D:7A:1B:DC:59
X509v3 Authority Key Identifier:
keyid:9F:DD:AF:21:32:57:D1:76:DF:50:AA:6E:77:64:8A:0C:C7:2A:5F:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n92vITJX0XbfUKpud2SKDMcqX6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/54a58b-7a32-46bc-85c0-30b764eb4900/1/6WWGMBEJeVUhw0je11LNLXob3Fk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/54a58b-7a32-46bc-85c0-30b764eb4900/1/n92vITJX0XbfUKpud2SKDMcqX6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.46.0/24
91.224.26.0/23
Signature Algorithm: sha256WithRSAEncryption
56:ad:2a:74:77:bb:f8:d1:55:d4:2b:65:d1:13:43:a0:aa:ce:
d4:15:cd:94:3a:81:40:07:9a:2c:e5:20:3b:56:3b:e8:26:00:
fe:2f:07:41:35:63:ab:8a:13:0c:32:c5:85:74:14:c7:6c:d5:
e7:18:56:af:a0:3e:df:9c:0f:2e:02:f7:7c:bd:41:a0:77:c6:
ea:fa:04:f9:06:5b:e1:d5:96:aa:7a:42:cb:ac:54:e9:4c:d6:
c9:ae:89:f6:78:33:28:f2:5f:bb:36:07:3a:3f:9b:3f:cc:af:
61:0a:df:73:d8:16:c1:f9:7d:c1:af:d6:d7:0c:90:3f:b4:18:
ad:ef:16:03:32:c9:31:a8:97:1c:00:c0:41:a4:a0:38:3a:e2:
d8:85:59:f9:d4:f5:d4:c5:0a:b9:4f:c0:c7:83:9c:bd:82:98:
b5:38:88:9e:93:69:b6:44:0a:2f:ad:1d:96:cf:1d:af:78:0a:
fc:c0:fa:75:7d:76:dd:14:c9:81:ed:39:58:89:75:50:25:74:
00:0d:ce:bc:78:11:df:f0:c3:d8:16:ae:a6:b6:a9:04:c1:73:
d1:5f:2a:84:4b:26:92:15:dd:4b:84:26:8c:19:e3:c1:ad:66:
89:36:82:2d:10:9c:7f:1a:9b:8d:75:77:42:d3:a6:f4:a9:c3:
8b:6c:38:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:33:25 2025 by rpki-client