Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/l6GI4D95QOdH6rer6FTKscwK67A.roa
File: l6GI4D95QOdH6rer6FTKscwK67A.roa (raw, json)
Hash identifier: Cx/M7dUR5apEbOw90ISuzrAOK+OSPGqzAFRPiJ+mzng=
Subject key identifier: 97:A1:88:E0:3F:79:40:E7:47:EA:B7:AB:E8:54:CA:B1:CC:0A:EB:B0
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 019424451C0ED32C7B7FD88FC84195D7C846
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/l6GI4D95QOdH6rer6FTKscwK67A.roa
Signing time: Wed 01 Jan 2025 23:48:16 +0000
ROA not before: Wed 01 Jan 2025 23:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49981
IP address blocks: 91.212.229.0/24 maxlen: 24
146.19.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 08:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:1c:0e:d3:2c:7b:7f:d8:8f:c8:41:95:d7:c8:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Jan 1 23:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=97a188e03f7940e747eab7abe854cab1cc0aebb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:2c:8d:c1:eb:68:f7:47:4f:d4:2c:a4:31:9c:
4c:c9:51:65:ac:aa:c1:0f:25:41:13:03:a3:50:b8:
ed:40:46:50:34:31:e8:b2:cf:f9:71:4f:ac:e2:0a:
b7:e9:68:39:b1:b9:e0:12:5f:03:70:48:aa:e1:94:
c1:6e:89:1d:5e:3d:b0:66:5e:f8:0b:58:f3:e4:e7:
9f:1a:19:5f:71:75:b7:8b:e2:9f:2b:ea:8d:8e:79:
87:68:bf:e9:b5:ea:da:b7:e4:fb:8c:67:3c:76:3a:
63:e5:53:08:45:7d:e7:13:5e:ec:8e:0b:2e:69:87:
71:ea:27:ff:be:49:fa:c7:a9:e8:b4:6b:76:e2:fc:
16:fc:d0:38:c5:09:a9:84:23:ea:b9:bd:27:77:d6:
32:78:f8:ac:6e:2e:d3:08:0a:63:df:0f:ed:fb:3f:
8c:82:a9:58:52:84:9a:f5:52:28:e9:e5:66:93:d1:
1e:7f:1d:6c:4b:35:38:c7:d6:ec:b0:12:9e:98:83:
79:cf:84:6d:08:69:a7:0a:6f:52:98:58:5a:d6:7a:
2c:ad:e9:9e:05:aa:e5:5e:64:58:54:33:d9:1a:d8:
c8:a1:ca:af:aa:2d:78:c2:db:01:03:59:1d:09:c0:
9b:a2:d9:13:ed:58:af:b6:f0:28:ff:f8:a2:ae:f8:
0e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:A1:88:E0:3F:79:40:E7:47:EA:B7:AB:E8:54:CA:B1:CC:0A:EB:B0
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/l6GI4D95QOdH6rer6FTKscwK67A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.229.0/24
146.19.188.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:76:5a:cb:86:e2:f8:1b:0b:9c:9e:b0:e5:3b:dd:2c:b3:8a:
40:34:f7:5d:66:de:69:c6:b2:f9:ed:43:c8:06:40:a5:13:f6:
d0:c3:d7:10:5f:2a:eb:87:24:a4:37:81:5f:06:6d:ab:98:26:
87:0a:73:39:3f:04:9d:80:ec:f7:1f:65:ac:a5:d2:b3:7d:ea:
27:4b:e8:ce:8d:16:a7:b9:61:f3:ed:55:eb:47:09:b1:c8:6f:
58:fd:46:20:5e:29:a2:96:37:f5:53:fd:70:e9:30:8e:d8:0e:
51:83:de:54:ed:33:41:d7:04:21:82:2c:1f:31:6b:d7:46:e2:
df:a1:e6:a0:8f:aa:ff:aa:b8:ce:79:d3:5f:16:24:e5:fa:f7:
14:72:b8:68:89:9a:e5:c7:53:d1:78:a0:f1:24:81:0b:ea:93:
e5:55:38:bf:84:4c:e2:2b:41:e6:8a:61:3e:ae:01:bd:80:bd:
b0:00:62:a2:32:76:91:91:6d:a1:8d:a0:65:d8:49:13:52:46:
fd:81:4d:9f:c9:1b:5f:a1:54:cc:17:d3:da:36:1c:73:ac:eb:
ff:3a:29:aa:43:f5:44:b9:77:7e:11:a8:71:06:60:94:16:42:
57:d7:9d:2f:7e:b4:57:50:c2:0d:3b:ef:c7:59:95:45:42:f7:
fb:9e:18:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:20:05 2025 by rpki-client