Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/i93FbkwGzwrRV5pk719Azh7mnco.roa
File: i93FbkwGzwrRV5pk719Azh7mnco.roa (raw, json)
Hash identifier: FbLtCYorp5+hnW87pG1j3ZHIdaixJG9L/nchejMVUes=
Subject key identifier: 8B:DD:C5:6E:4C:06:CF:0A:D1:57:9A:64:EF:5F:40:CE:1E:E6:9D:CA
Certificate issuer: /CN=dcff85bb8a3759523e0cc9f8a91dbdaf474d6b7c
Certificate serial: 0194258F0900355C9423EEFFBA126E0E2BFB
Authority key identifier: DC:FF:85:BB:8A:37:59:52:3E:0C:C9:F8:A9:1D:BD:AF:47:4D:6B:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3P-Fu4o3WVI-DMn4qR29r0dNa3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/i93FbkwGzwrRV5pk719Azh7mnco.roa
Signing time: Thu 02 Jan 2025 05:48:38 +0000
ROA not before: Thu 02 Jan 2025 05:48:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34714
IP address blocks: 91.209.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/3P-Fu4o3WVI-DMn4qR29r0dNa3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:09:00:35:5c:94:23:ee:ff:ba:12:6e:0e:2b:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcff85bb8a3759523e0cc9f8a91dbdaf474d6b7c
Validity
Not Before: Jan 2 05:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8bddc56e4c06cf0ad1579a64ef5f40ce1ee69dca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:49:8d:51:f1:9f:40:36:1f:f5:3f:de:4e:91:
20:b3:1e:33:1d:54:83:54:cb:07:18:dc:b1:b5:da:
87:f1:09:5f:23:d5:a0:3a:51:db:8f:90:cc:19:84:
5a:33:a5:af:f8:f3:eb:a7:fd:f0:bc:81:f7:27:a9:
fd:b4:d8:30:28:47:1a:7a:65:b4:50:ec:df:54:57:
3f:49:f8:f6:96:7a:4c:e2:2f:74:f2:34:3e:2b:b6:
20:21:91:13:58:ff:67:0f:31:5e:f9:f2:50:5e:10:
c6:dd:5f:b3:91:85:96:ba:4c:05:50:4d:ef:64:e3:
7a:1d:c6:15:ea:27:6a:0c:22:78:a8:b1:e7:68:64:
f1:2f:6e:2d:e9:ef:d6:7c:43:56:59:99:1b:f1:67:
37:31:36:a3:e2:c3:19:c3:c3:7b:56:61:87:26:14:
4f:9c:27:02:40:30:15:c8:58:97:04:44:fe:bc:af:
ea:2c:30:44:a5:01:6f:f9:d7:93:b7:80:d2:a1:07:
7f:84:4b:d8:7d:c0:28:05:4f:27:3d:65:64:94:62:
ab:37:93:20:db:32:f3:dc:30:01:dd:c8:ee:14:0f:
6b:c9:93:ec:3e:01:7f:f9:27:ce:e9:79:1c:25:93:
1b:0b:64:14:1c:f4:e7:3a:f5:a7:c0:2b:4c:a8:bf:
a5:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:DD:C5:6E:4C:06:CF:0A:D1:57:9A:64:EF:5F:40:CE:1E:E6:9D:CA
X509v3 Authority Key Identifier:
keyid:DC:FF:85:BB:8A:37:59:52:3E:0C:C9:F8:A9:1D:BD:AF:47:4D:6B:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3P-Fu4o3WVI-DMn4qR29r0dNa3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/i93FbkwGzwrRV5pk719Azh7mnco.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.171.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:ce:72:49:40:97:ad:78:91:0d:d3:a1:47:d8:70:47:4c:2d:
48:b3:44:e4:80:94:4c:06:98:dc:e5:c4:5b:4e:1d:f7:b1:b2:
e3:1e:15:37:81:18:77:f1:28:9a:be:ec:a1:3f:0b:a5:02:6b:
2b:24:37:a6:06:c1:1c:b3:c5:58:14:47:72:e7:52:73:3c:7c:
c6:27:3b:eb:7c:b9:d4:29:28:1c:fc:e0:a4:e5:c5:33:ae:33:
75:f4:93:cb:16:25:69:94:37:f0:ec:02:97:5c:ad:b0:44:c4:
38:5a:f4:ea:a1:82:ed:02:6b:29:01:63:c1:fc:9c:5f:97:aa:
b6:27:ca:f7:8b:7c:91:a0:c0:c9:ea:0a:af:a7:fb:d8:f6:d8:
4f:d5:6b:4f:26:c5:d2:e3:53:4b:fb:1e:e6:fb:6e:e1:95:61:
ee:65:f9:73:56:64:09:76:25:e0:55:19:92:a5:ae:e7:67:ac:
ec:a9:39:47:98:15:f5:52:ac:1d:c7:5a:82:eb:47:ad:72:7d:
f9:a7:05:38:db:60:52:f5:c7:5f:be:b4:e0:d8:6a:f7:8a:b9:
b5:6a:7d:01:42:88:7a:56:15:bb:a7:19:88:77:57:d2:55:8e:
81:7e:58:d3:cf:6d:85:24:04:20:a6:4f:dc:97:50:09:0c:98:
cc:18:b0:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:56:49 2025 by rpki-client