Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/l1XZX1b8reS_-7ZSCMj6Ssj_O6w.roa
File: l1XZX1b8reS_-7ZSCMj6Ssj_O6w.roa (raw, json)
Hash identifier: RmqK144BBUUebNDsDUz/Y3m99tgJ/EBiLtpE9PQVqL0=
Subject key identifier: 97:55:D9:5F:56:FC:AD:E4:BF:FB:B6:52:08:C8:FA:4A:C8:FF:3B:AC
Certificate issuer: /CN=b3d66297c5cdbd36d86849ddeae7985979f450ca
Certificate serial: 019423692FD561E116C79BE0DB0866D3A412
Authority key identifier: B3:D6:62:97:C5:CD:BD:36:D8:68:49:DD:EA:E7:98:59:79:F4:50:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9Zil8XNvTbYaEnd6ueYWXn0UMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/l1XZX1b8reS_-7ZSCMj6Ssj_O6w.roa
Signing time: Wed 01 Jan 2025 19:48:03 +0000
ROA not before: Wed 01 Jan 2025 19:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216108
IP address blocks: 91.241.15.0/24 maxlen: 24
2a01:9c00:c001::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/s9Zil8XNvTbYaEnd6ueYWXn0UMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:2f:d5:61:e1:16:c7:9b:e0:db:08:66:d3:a4:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3d66297c5cdbd36d86849ddeae7985979f450ca
Validity
Not Before: Jan 1 19:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9755d95f56fcade4bffbb65208c8fa4ac8ff3bac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9f:cb:f9:82:8f:70:ff:0a:54:23:33:d0:f3:
98:9f:e5:ee:be:be:b3:52:50:7f:ce:29:12:27:c5:
79:8e:4c:5f:1f:7a:19:f4:90:b0:c1:96:d4:69:fa:
de:f7:e6:a6:6f:be:f6:23:0c:93:91:19:d0:02:ef:
f6:f2:ce:a2:51:12:7f:e5:d6:73:13:b9:85:4e:b3:
31:73:33:18:11:47:ac:2f:52:69:ef:2c:c0:95:59:
c0:e1:a3:c3:b1:7e:75:fa:36:97:b2:29:c5:82:3d:
27:55:fd:9f:d2:60:70:70:75:73:68:1a:ee:cd:f4:
e3:80:36:2f:11:62:71:1c:90:d6:f0:28:3e:57:68:
e4:09:03:1b:32:50:78:41:9d:e4:47:38:28:81:c3:
06:7f:57:ee:04:0e:0e:66:ba:37:f7:fd:6d:01:91:
25:ba:3c:7e:55:1b:1a:db:46:ab:39:1b:1d:73:69:
75:15:5f:3c:9b:ab:8f:7c:a7:66:96:9f:56:a2:50:
1c:e4:77:e2:25:d9:34:ee:99:83:8d:41:29:de:ea:
66:2f:18:cc:dd:5d:8b:45:1a:35:d5:60:0e:2c:d0:
81:a1:0e:13:a5:0a:d4:09:5e:d2:69:43:6e:a4:95:
6b:dc:ce:2f:a7:f5:3c:a7:4f:b4:5f:8d:38:7f:2d:
b9:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:55:D9:5F:56:FC:AD:E4:BF:FB:B6:52:08:C8:FA:4A:C8:FF:3B:AC
X509v3 Authority Key Identifier:
keyid:B3:D6:62:97:C5:CD:BD:36:D8:68:49:DD:EA:E7:98:59:79:F4:50:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9Zil8XNvTbYaEnd6ueYWXn0UMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/l1XZX1b8reS_-7ZSCMj6Ssj_O6w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.241.15.0/24
IPv6:
2a01:9c00:c001::/48
Signature Algorithm: sha256WithRSAEncryption
06:ff:3f:c1:7e:ad:ad:f9:19:12:33:d2:46:70:99:85:71:c7:
b3:18:3b:71:7d:7d:db:1d:74:56:c2:05:be:20:b9:f5:ee:8c:
85:5d:26:6d:ca:fe:9a:fc:99:64:46:a2:0b:a8:ce:cd:e9:36:
d4:18:c8:a2:96:13:c1:b3:9a:cb:84:5b:5d:02:1b:1c:9b:61:
4f:29:5f:08:94:4a:d2:95:1e:48:65:83:ad:18:84:8c:4b:a5:
45:32:71:c8:2e:68:69:c2:97:c4:28:65:cd:2f:4b:60:e2:69:
50:d4:8d:66:23:7f:40:00:f1:33:35:82:25:59:e6:39:10:43:
ee:08:b9:25:8f:8d:c8:bc:cf:58:d5:ed:21:a9:ca:5d:d6:96:
bb:12:29:fa:7a:56:4b:4d:3e:29:b8:48:41:c6:60:21:93:02:
0f:91:00:57:4b:59:dd:04:a6:6f:65:ed:e9:3d:fd:a8:13:61:
13:68:ed:f2:12:86:b6:e4:6f:5a:03:71:17:be:c0:ad:c7:bd:
61:4a:98:72:b5:c9:9e:cb:ba:94:7c:49:7a:18:a9:d1:1f:63:
6b:76:07:61:11:d0:4d:ef:ff:3c:5c:77:13:c9:e0:0d:70:9b:
84:fd:af:23:a9:2b:61:7c:3b:2c:d3:9e:65:b8:f0:0a:87:9c:
6b:e3:f1:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:50:02 2025 by rpki-client