Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/22581e-fe8c-4fb8-9585-9880f04db94a/1/shu5QB5GjPMBcKGZl2o9EhVlwLE.roa
File: shu5QB5GjPMBcKGZl2o9EhVlwLE.roa (raw, json)
Hash identifier: l2v228GgEP09+0vIbdur06C/ah0an7DTOFEqlZLFixU=
Subject key identifier: B2:1B:B9:40:1E:46:8C:F3:01:70:A1:99:97:6A:3D:12:15:65:C0:B1
Certificate issuer: /CN=62beaa57c67aeb5bafd99793ab4846850a796c28
Certificate serial: 019424B267270C7B92CB25509A8BE9C45795
Authority key identifier: 62:BE:AA:57:C6:7A:EB:5B:AF:D9:97:93:AB:48:46:85:0A:79:6C:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/22581e-fe8c-4fb8-9585-9880f04db94a/1/shu5QB5GjPMBcKGZl2o9EhVlwLE.roa
Signing time: Thu 02 Jan 2025 01:47:39 +0000
ROA not before: Thu 02 Jan 2025 01:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58192
IP address blocks: 91.239.189.0/24 maxlen: 24
2a13:d000::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/22581e-fe8c-4fb8-9585-9880f04db94a/1/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/22581e-fe8c-4fb8-9585-9880f04db94a/1/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:67:27:0c:7b:92:cb:25:50:9a:8b:e9:c4:57:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62beaa57c67aeb5bafd99793ab4846850a796c28
Validity
Not Before: Jan 2 01:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b21bb9401e468cf30170a199976a3d121565c0b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:fd:bc:78:43:ab:80:f2:1b:05:75:52:ed:d5:
4a:08:fb:2b:af:77:26:f2:84:de:a2:4e:3f:f2:12:
05:23:ab:98:5c:db:c9:4c:7a:3c:d1:40:d8:33:9f:
29:1d:eb:1a:4e:9a:02:95:2f:14:ae:00:c5:3a:68:
3a:cc:bc:b1:5a:07:ce:52:6c:b4:6f:be:c8:d5:33:
56:07:e6:d1:2b:df:db:4d:78:70:e7:90:ea:e6:a2:
db:5f:de:fd:3c:52:43:ac:44:e8:f4:f7:75:51:38:
fa:f1:a0:52:6b:75:29:71:fa:e6:68:2e:12:b2:d3:
db:48:84:bc:be:41:5e:1f:65:29:e2:31:0c:0d:ec:
13:4b:f9:8e:33:14:a6:f6:03:53:8d:f1:6b:52:05:
04:0a:92:93:a5:ce:3c:b3:3e:8c:8b:fd:05:8a:f0:
1c:f0:37:82:1d:d1:17:b4:36:92:0a:1a:ad:5f:3a:
b3:0d:fd:07:2a:9f:a5:e8:83:5f:3f:f5:4b:dd:8e:
ae:30:9a:89:1e:d3:a3:a9:55:a1:43:c1:9d:25:7f:
03:55:f5:27:8a:a5:04:1f:82:4c:83:99:e8:2f:d6:
d3:46:9a:0a:40:fb:24:d3:42:df:9d:96:5b:c7:39:
69:9c:cc:65:e5:2e:1f:34:d3:ed:fe:7e:52:4d:45:
09:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:1B:B9:40:1E:46:8C:F3:01:70:A1:99:97:6A:3D:12:15:65:C0:B1
X509v3 Authority Key Identifier:
keyid:62:BE:AA:57:C6:7A:EB:5B:AF:D9:97:93:AB:48:46:85:0A:79:6C:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/22581e-fe8c-4fb8-9585-9880f04db94a/1/shu5QB5GjPMBcKGZl2o9EhVlwLE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/22581e-fe8c-4fb8-9585-9880f04db94a/1/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.189.0/24
IPv6:
2a13:d000::/29
Signature Algorithm: sha256WithRSAEncryption
8d:93:c3:90:52:0b:bf:fd:ac:6d:62:c9:e0:db:42:81:e1:dc:
a5:d4:c1:ab:8e:ea:dd:a4:4b:82:2c:d6:61:2c:88:3f:33:cb:
ec:e1:27:fe:45:3e:56:67:96:38:17:45:59:72:93:08:2b:77:
47:81:09:a4:e8:cc:d6:48:ba:3d:29:7e:9c:ed:d4:1f:9d:01:
c2:82:e8:40:d9:52:11:ba:6f:39:01:cb:bc:97:92:2c:6a:3a:
77:78:fb:ea:89:74:b9:28:73:72:14:d5:40:73:30:85:ba:ca:
83:c5:66:60:77:62:80:74:1d:3b:fb:97:8b:22:00:c4:01:f3:
bf:03:ff:4e:e8:fa:9b:5f:81:ef:ee:36:fc:7a:50:01:5f:73:
4b:45:3f:ca:8b:0d:48:1a:58:8a:9c:f4:ab:9a:38:24:00:aa:
5d:ae:8a:18:5b:cc:e9:c3:da:f7:93:3a:ed:a1:f2:af:11:44:
9c:47:ec:06:f0:8e:2c:b3:fc:56:75:c4:40:5f:1d:2f:33:39:
fb:6b:52:7e:b4:68:4f:ac:ff:bd:16:66:99:9f:6c:69:50:92:
74:0a:4e:f0:72:f4:5c:80:67:70:53:0d:00:02:da:68:4e:fb:
1f:ea:43:31:00:31:bd:37:3b:bb:8a:63:6c:5d:8b:5c:83:1f:
d7:b9:f8:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:40:21 2025 by rpki-client