Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/P8Lxwq111eWAUh-AaX54TNay4Mo.roa
File: P8Lxwq111eWAUh-AaX54TNay4Mo.roa (raw, json)
Hash identifier: h41kHDfq2odL1nNkeDStpm1mY6xl8fKk9t4SdCxRdD0=
Subject key identifier: 3F:C2:F1:C2:AD:75:D5:E5:80:52:1F:80:69:7E:78:4C:D6:B2:E0:CA
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 019424452357ADDF15ACE9965F5042FA4997
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/P8Lxwq111eWAUh-AaX54TNay4Mo.roa
Signing time: Wed 01 Jan 2025 23:48:18 +0000
ROA not before: Wed 01 Jan 2025 23:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57271
IP address blocks: 91.236.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 08:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:23:57:ad:df:15:ac:e9:96:5f:50:42:fa:49:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Jan 1 23:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3fc2f1c2ad75d5e580521f80697e784cd6b2e0ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4f:af:da:38:a8:a8:51:cf:21:ff:70:49:80:
bc:9e:e8:a0:9c:ae:59:2f:c8:60:ba:51:4f:10:8b:
f4:25:e5:73:1c:70:f3:2b:d5:4e:99:5c:b4:7f:3b:
08:c9:fe:c7:02:14:06:cb:3c:38:ce:77:9c:7f:86:
7f:21:6f:00:f6:e3:ae:03:4b:36:f1:85:5f:f1:ad:
02:4f:c8:a1:c4:85:18:4a:2b:f9:8a:13:cd:3a:a3:
3e:eb:88:40:e6:b5:82:c0:27:fa:e9:86:f6:0f:04:
cd:90:7a:93:a5:0b:25:48:24:15:f5:c6:e8:92:54:
2f:9b:5f:18:05:c0:b7:12:12:c6:09:83:de:c4:fa:
7b:fa:d4:f0:1c:d1:13:7d:5b:54:98:1f:7d:10:da:
2b:30:06:92:9c:45:5f:0e:73:d7:2b:1c:d6:ac:92:
af:e9:b8:41:8e:71:df:4d:4d:63:c3:b8:88:5d:19:
68:4a:90:32:49:d1:43:b9:4a:6f:4e:d7:bb:48:d3:
eb:b0:f1:fc:b8:e0:a1:01:fd:3c:9b:e0:60:c6:1a:
d8:99:a9:96:ab:e3:03:66:92:eb:81:7f:53:db:4f:
d0:82:93:18:60:37:c2:ed:f4:60:7a:d5:25:6e:ee:
05:be:47:e2:2b:7b:c6:42:7d:04:3e:c3:ad:82:e3:
65:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:C2:F1:C2:AD:75:D5:E5:80:52:1F:80:69:7E:78:4C:D6:B2:E0:CA
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/P8Lxwq111eWAUh-AaX54TNay4Mo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.120.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:b1:49:5f:c5:d4:a4:15:73:ee:07:cd:24:95:b4:5a:5e:87:
ec:e5:20:2d:10:f5:b0:4a:41:97:0e:82:dd:d9:53:7e:54:94:
65:fc:d6:90:fd:32:8e:c5:f3:fa:fc:0a:8d:61:f5:19:9f:2b:
ed:1c:f2:1c:d0:0a:a9:48:7a:19:ad:4d:76:1b:61:4b:04:3e:
98:b0:0f:7e:5d:46:c1:b3:66:79:75:61:b6:6e:01:40:f1:c9:
ef:d4:82:5e:92:c9:f5:4b:3a:44:45:bc:2a:d1:02:51:0d:de:
c4:83:3d:b3:08:2c:a7:75:c1:77:34:e7:0d:46:51:73:63:25:
69:bf:40:35:8a:7e:59:4b:02:fb:82:ca:e8:66:6d:04:26:c1:
53:0b:d9:fe:63:89:e8:e5:6e:74:17:6f:f2:c9:f5:a8:f4:e2:
11:5d:86:23:54:32:de:ab:3d:2b:38:5f:11:2d:66:4f:5c:a7:
57:2f:a4:1a:ea:fa:86:21:f8:2b:8e:b0:fe:29:8c:c0:0a:8b:
a3:b6:ec:2f:0d:3d:89:93:59:62:58:de:10:4a:25:8d:4e:6a:
1a:9a:09:18:86:c9:f8:2b:6b:d7:bd:01:0f:c9:f3:d6:7c:5d:
4c:d9:84:9d:47:69:dd:1b:c0:d0:d5:19:b7:69:bb:75:82:56:
26:b0:60:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:36:42 2025 by rpki-client