Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/XWaEMNo4oCmJKw7xuT_lUqU1a9o.roa
File: XWaEMNo4oCmJKw7xuT_lUqU1a9o.roa (raw, json)
Hash identifier: vlh1Ps1w/BBZ8U+fD5oVlO0yHpfRUnw+NHa2xAJ40qE=
Subject key identifier: 5D:66:84:30:DA:38:A0:29:89:2B:0E:F1:B9:3F:E5:52:A5:35:6B:DA
Certificate issuer: /CN=887fa37371d7d4593ba290ef45669ea0de293782
Certificate serial: 01941F8C5606D74B7643BDD910A01D0AAE54
Authority key identifier: 88:7F:A3:73:71:D7:D4:59:3B:A2:90:EF:45:66:9E:A0:DE:29:37:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iH-jc3HX1Fk7opDvRWaeoN4pN4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/XWaEMNo4oCmJKw7xuT_lUqU1a9o.roa
Signing time: Wed 01 Jan 2025 01:47:58 +0000
ROA not before: Wed 01 Jan 2025 01:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31027
IP address blocks: 91.231.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/iH-jc3HX1Fk7opDvRWaeoN4pN4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 21:03:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:56:06:d7:4b:76:43:bd:d9:10:a0:1d:0a:ae:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=887fa37371d7d4593ba290ef45669ea0de293782
Validity
Not Before: Jan 1 01:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5d668430da38a029892b0ef1b93fe552a5356bda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4e:98:2c:af:9f:77:84:5b:52:08:99:37:97:
1e:dd:c8:24:5d:45:0b:35:db:f5:8b:ed:54:97:03:
58:85:46:4c:45:0a:73:03:09:66:d2:e8:9a:f4:03:
5e:fe:14:1a:9c:5f:cb:35:0f:47:ca:7d:34:99:ed:
55:d7:85:7c:d1:f1:4c:51:57:c3:3e:e9:4d:89:10:
ca:d8:3e:58:33:5f:f8:35:d0:7a:22:57:31:04:25:
18:a9:73:92:53:0a:36:a0:0e:83:5e:b1:69:fb:1a:
13:f3:2a:df:8c:07:c1:46:4a:18:88:aa:ab:a0:40:
ac:b6:43:ac:03:51:f2:b3:13:82:42:60:a5:a4:0f:
55:0c:75:c7:00:34:62:54:30:20:f1:3b:55:64:a5:
4c:e7:5f:d7:5a:ec:d1:bc:f9:29:b3:3c:e8:ac:21:
2d:af:79:41:b8:7a:8b:2e:e5:b0:bb:a8:e1:37:bd:
d0:56:9f:ee:a4:0c:2c:b8:99:a4:67:92:d8:a4:af:
86:c3:76:7d:8e:9d:17:1d:46:2b:6d:57:7f:14:0b:
86:5c:67:7c:99:5f:f2:79:7a:88:38:2a:ec:71:46:
31:a2:5e:b2:cf:ec:4f:21:84:f0:c7:4a:23:9c:f2:
c0:64:a3:31:a9:bc:52:f9:28:a4:41:2d:61:69:a1:
8c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:66:84:30:DA:38:A0:29:89:2B:0E:F1:B9:3F:E5:52:A5:35:6B:DA
X509v3 Authority Key Identifier:
keyid:88:7F:A3:73:71:D7:D4:59:3B:A2:90:EF:45:66:9E:A0:DE:29:37:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iH-jc3HX1Fk7opDvRWaeoN4pN4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/XWaEMNo4oCmJKw7xuT_lUqU1a9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.231.147.0/24
Signature Algorithm: sha256WithRSAEncryption
68:94:7d:90:21:7c:eb:20:88:39:8a:c3:8b:37:a4:a0:b8:ee:
94:cf:8a:d6:b2:92:cb:20:ec:9c:84:1e:5a:e0:e1:40:0a:e8:
fb:cc:b8:84:62:8d:77:60:44:ee:bd:f0:63:47:3b:9c:69:fc:
9b:5a:d8:21:41:33:e2:1e:ee:f9:6a:83:a1:5a:74:68:eb:35:
26:21:7d:4f:29:f6:a2:b4:d6:af:fb:a4:4a:02:2e:c5:be:d7:
a9:e9:be:b5:4b:3e:cb:d1:07:1b:bb:9e:25:74:a5:a1:4a:3d:
26:01:6c:4a:d7:9a:a6:09:a6:26:cb:d8:49:cf:0a:86:c4:8c:
ac:3f:6e:ec:9c:02:c1:66:a0:01:73:74:e1:3d:f0:45:2c:6e:
06:24:c7:9a:ed:0b:ea:be:6d:b9:d9:31:46:cd:07:c2:6b:50:
44:9b:d5:20:e2:9d:b1:df:4d:71:cf:6e:3c:1d:93:a1:f2:b0:
83:bc:64:6e:96:0a:9f:5a:7c:fa:f0:cd:6e:9b:0b:40:fa:b7:
0f:18:18:13:58:fa:18:27:f9:4b:24:8f:1e:64:9d:5f:4b:d9:
0b:a3:f9:4d:bb:a5:1b:13:70:0b:12:98:7c:f2:e5:6b:14:e5:
b5:37:5f:7a:fb:f9:77:4e:29:8e:c6:40:cd:a0:53:53:f6:e2:
6f:74:53:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:31:50 2025 by rpki-client