Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/kZ91QLg0xrut8heY5oLTREuaDCo.roa
File: kZ91QLg0xrut8heY5oLTREuaDCo.roa (raw, json)
Hash identifier: MHAbqSvE1IAdHrt1bDct/PVOIuPEBRkSyGqv/6pjqdI=
Subject key identifier: 91:9F:75:40:B8:34:C6:BB:AD:F2:17:98:E6:82:D3:44:4B:9A:0C:2A
Certificate issuer: /CN=c172c5aef33c06c4aef2dac8f0503fcbdd9a7287
Certificate serial: 019423698FF9CEC608DFF1F57CF7B44353D6
Authority key identifier: C1:72:C5:AE:F3:3C:06:C4:AE:F2:DA:C8:F0:50:3F:CB:DD:9A:72:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wXLFrvM8BsSu8trI8FA_y92acoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/kZ91QLg0xrut8heY5oLTREuaDCo.roa
Signing time: Wed 01 Jan 2025 19:48:28 +0000
ROA not before: Wed 01 Jan 2025 19:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210292
IP address blocks: 160.238.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wXLFrvM8BsSu8trI8FA_y92acoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:8f:f9:ce:c6:08:df:f1:f5:7c:f7:b4:43:53:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c172c5aef33c06c4aef2dac8f0503fcbdd9a7287
Validity
Not Before: Jan 1 19:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=919f7540b834c6bbadf21798e682d3444b9a0c2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:84:d8:2d:af:37:01:bf:03:4b:03:67:6b:17:
fb:58:8b:9f:68:3d:c8:ac:73:9d:23:25:0a:ea:72:
46:e3:a1:f7:c4:51:30:d1:57:0c:11:a5:4b:6f:e1:
b1:86:9f:7e:80:3b:db:70:c1:5e:ed:f1:c2:b2:11:
35:0d:4c:da:ab:fb:07:36:0e:51:ee:c8:d1:62:64:
d0:a6:1a:f8:d8:a6:02:62:74:00:32:dd:68:44:13:
5d:ac:02:ab:0f:56:8e:42:13:32:16:77:6b:14:b1:
be:4e:40:56:5d:81:61:e8:2e:5f:ee:4b:9d:cc:c0:
73:d8:f0:b2:a2:ec:ac:67:49:b2:d6:e4:17:cd:63:
5e:04:6c:0e:f5:af:6d:f4:4b:2b:35:24:00:67:9a:
5d:a6:0c:ce:91:89:c0:96:13:a9:0f:aa:e9:36:e0:
5b:b9:ae:9d:82:91:20:85:6a:f1:0e:55:66:c6:b8:
e4:0f:92:e2:55:c6:ff:7b:de:95:e6:2f:5b:12:18:
37:bb:f4:dd:a9:99:02:b5:1a:d1:80:08:45:3b:4a:
b4:4f:64:87:04:9e:23:48:71:43:db:92:06:fc:32:
40:d5:92:3e:a4:e1:a1:b2:ad:3a:62:6c:91:69:be:
8f:17:e5:c0:67:f0:72:57:58:46:3b:d9:9b:f5:a7:
a8:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:9F:75:40:B8:34:C6:BB:AD:F2:17:98:E6:82:D3:44:4B:9A:0C:2A
X509v3 Authority Key Identifier:
keyid:C1:72:C5:AE:F3:3C:06:C4:AE:F2:DA:C8:F0:50:3F:CB:DD:9A:72:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wXLFrvM8BsSu8trI8FA_y92acoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/kZ91QLg0xrut8heY5oLTREuaDCo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.238.121.0/24
Signature Algorithm: sha256WithRSAEncryption
53:88:38:78:e9:a3:c2:7f:b4:96:c3:13:ff:8a:0f:ef:21:5f:
97:4b:b0:dc:ae:cb:aa:ef:d6:32:f7:73:d6:5c:9c:c8:8a:3c:
18:67:ee:5d:27:90:9f:1d:83:a3:ac:1a:83:93:79:89:c8:e6:
40:5b:3d:7a:fc:4c:a8:51:ae:7c:44:cd:36:95:3f:8e:2b:1e:
2e:ff:1b:b9:6d:e3:e0:05:b9:8b:ef:a0:6b:2e:fd:ea:1e:11:
e9:73:68:71:94:31:78:e5:9d:b7:0a:50:e1:83:1b:4c:e1:93:
d5:4a:35:2c:79:63:6b:dd:de:02:b8:c5:6a:8b:ef:a7:9a:3f:
46:34:98:03:db:12:9d:f2:13:3d:c0:3b:b5:f1:04:49:47:2b:
cc:e6:e4:e4:a6:67:ec:9f:02:ea:b9:75:7e:2b:99:73:43:ef:
89:b1:5c:bf:fb:0e:90:f2:7e:c6:5b:30:bc:99:de:9d:44:a4:
3d:81:3d:2b:f3:73:a2:7f:d3:50:a7:5c:5c:2e:36:d2:0b:87:
60:30:3c:e3:1d:5a:4b:ba:4c:a8:b6:da:d8:e0:02:ab:7c:b9:
d3:c0:c9:a9:36:39:33:8b:71:a0:da:22:02:e1:69:a5:7c:c1:
dd:0e:8b:ca:9d:c6:39:c8:b2:d4:03:d2:a7:ef:b2:38:fd:24:
24:e1:a0:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 12:09:06 2025 by rpki-client