Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/90f180-1f76-46fc-a721-1681370d9c10/1/vo41TJmt3C6QujdoChHPsobf9wU.roa
File: vo41TJmt3C6QujdoChHPsobf9wU.roa (raw, json)
Hash identifier: D6T9SlEvHKEsLXEPPq633IxaLopzaLfHyAO1ibmxPX4=
Subject key identifier: BE:8E:35:4C:99:AD:DC:2E:90:BA:37:68:0A:11:CF:B2:86:DF:F7:05
Certificate issuer: /CN=8fc2eda547887a5b4503d90592ea505658da6e7a
Certificate serial: 019422FB70F9849FAA5021919BF27C592AEA
Authority key identifier: 8F:C2:ED:A5:47:88:7A:5B:45:03:D9:05:92:EA:50:56:58:DA:6E:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8LtpUeIeltFA9kFkupQVljabno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/90f180-1f76-46fc-a721-1681370d9c10/1/vo41TJmt3C6QujdoChHPsobf9wU.roa
Signing time: Wed 01 Jan 2025 17:48:11 +0000
ROA not before: Wed 01 Jan 2025 17:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50061
IP address blocks: 91.151.24.0/21 maxlen: 24
195.234.12.0/23 maxlen: 24
212.90.104.0/22 maxlen: 24
2a01:6bc0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/90f180-1f76-46fc-a721-1681370d9c10/1/j8LtpUeIeltFA9kFkupQVljabno.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/90f180-1f76-46fc-a721-1681370d9c10/1/j8LtpUeIeltFA9kFkupQVljabno.mft
rsync://rpki.ripe.net/repository/DEFAULT/j8LtpUeIeltFA9kFkupQVljabno.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:70:f9:84:9f:aa:50:21:91:9b:f2:7c:59:2a:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fc2eda547887a5b4503d90592ea505658da6e7a
Validity
Not Before: Jan 1 17:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=be8e354c99addc2e90ba37680a11cfb286dff705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:17:0a:19:8d:94:66:0c:5c:63:71:1b:58:0f:
72:0f:7c:66:cd:a5:90:70:ea:9b:ab:aa:64:60:fb:
08:1c:08:6d:bb:c4:45:7b:fa:0f:b8:3d:dd:6c:fa:
54:d1:cf:49:af:34:22:da:d1:a5:8f:ec:e4:71:12:
d6:99:9a:ba:a4:2b:1c:f3:2b:3f:69:2a:84:4a:61:
c6:cc:cb:1a:47:72:f6:cf:c7:e4:f5:64:a5:a8:be:
82:3a:87:42:55:fb:3a:ca:20:04:4e:d0:46:eb:cc:
fc:7c:65:69:60:55:d8:9d:7b:ea:7f:86:30:88:9c:
6f:99:e0:0e:e8:22:65:1b:16:a5:96:a4:b8:d3:6e:
de:23:3c:00:af:ab:3d:ec:29:04:a3:20:7d:e5:89:
c7:89:6b:80:d8:46:50:ce:57:83:dc:21:a1:e4:02:
e9:73:a3:cf:57:96:e3:cb:4f:cd:3d:e8:3a:5c:35:
9e:3f:a1:56:17:42:36:42:ea:7d:1e:8d:c8:40:f0:
87:5a:fd:7f:55:2e:3f:60:cc:19:06:ec:5e:45:d9:
92:cc:98:a9:24:e9:87:cb:24:fb:a9:fa:d4:63:26:
fd:fd:ae:e2:a6:23:70:c6:a8:2b:33:ef:8a:5d:93:
a3:80:52:68:81:a7:22:2c:83:ca:3f:c3:72:ae:66:
46:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:8E:35:4C:99:AD:DC:2E:90:BA:37:68:0A:11:CF:B2:86:DF:F7:05
X509v3 Authority Key Identifier:
keyid:8F:C2:ED:A5:47:88:7A:5B:45:03:D9:05:92:EA:50:56:58:DA:6E:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8LtpUeIeltFA9kFkupQVljabno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/90f180-1f76-46fc-a721-1681370d9c10/1/vo41TJmt3C6QujdoChHPsobf9wU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/90f180-1f76-46fc-a721-1681370d9c10/1/j8LtpUeIeltFA9kFkupQVljabno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.151.24.0/21
195.234.12.0/23
212.90.104.0/22
IPv6:
2a01:6bc0::/32
Signature Algorithm: sha256WithRSAEncryption
03:a0:6c:e5:21:fa:98:22:f7:68:90:c2:af:04:d3:99:4d:d8:
34:41:8a:a5:07:96:f2:4d:69:d7:14:b3:3b:eb:65:e7:5c:77:
20:f5:de:51:7f:9f:40:3c:b9:08:14:c6:05:3a:7c:e2:11:9a:
d6:7c:6a:54:56:32:2f:a7:10:c8:d7:c7:8a:31:76:76:f1:28:
fa:37:54:6b:2f:1b:88:3c:4a:f7:ab:14:7a:bc:d4:5f:c5:64:
15:d6:41:38:01:5b:01:bb:a9:ec:4f:c7:2e:57:06:05:15:0e:
b6:e6:4c:c3:3c:4e:2f:f7:d4:6d:bd:fa:cc:2d:df:fc:90:18:
b3:4c:69:fa:4a:5d:fc:cf:e6:6f:c5:db:c6:a1:8e:c1:67:36:
a6:9b:a9:17:02:ba:cb:d3:5b:ef:ff:9f:53:aa:a9:89:cb:df:
4d:14:43:05:1f:12:a9:21:5a:77:bf:30:3b:54:22:47:72:34:
8c:6b:0e:ab:39:90:f3:67:af:4f:15:f4:65:8f:f4:95:5e:0d:
a2:21:43:a2:ba:db:0f:98:98:fd:11:97:9d:d0:bb:00:48:e9:
af:08:f3:93:4f:f9:03:21:5a:1e:b7:b6:44:5a:de:7a:27:ca:
7e:7e:22:8c:6f:99:ca:5b:51:e9:b1:46:79:4e:30:3b:6b:6c:
a6:48:f1:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:55:21 2025 by rpki-client