Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/iDTqLQGlZf0o0g616HIqRtwNiYs.roa
File: iDTqLQGlZf0o0g616HIqRtwNiYs.roa (raw, json)
Hash identifier: TywFJSy0+ByfjWm+cngApzau6nnLlHrdsw/oJofNjeY=
Subject key identifier: 88:34:EA:2D:01:A5:65:FD:28:D2:0E:B5:E8:72:2A:46:DC:0D:89:8B
Certificate issuer: /CN=6d088cef28e02af7d00f297816c55f8e3c43d535
Certificate serial: 01942827078D08B9C95B69254CF9DAB98FB2
Authority key identifier: 6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/iDTqLQGlZf0o0g616HIqRtwNiYs.roa
Signing time: Thu 02 Jan 2025 17:53:53 +0000
ROA not before: Thu 02 Jan 2025 17:53:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206446
IP address blocks: 77.91.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 02:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:07:8d:08:b9:c9:5b:69:25:4c:f9:da:b9:8f:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d088cef28e02af7d00f297816c55f8e3c43d535
Validity
Not Before: Jan 2 17:53:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8834ea2d01a565fd28d20eb5e8722a46dc0d898b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:52:5a:54:cb:df:4e:7a:19:58:10:d3:2d:42:
4e:bb:dc:2f:a4:e2:1d:f5:d9:b5:72:fd:08:68:5a:
1a:1b:e9:21:cf:73:50:3f:26:8b:78:88:0a:8d:ec:
89:0d:49:5f:ad:73:b6:4b:bd:9e:e2:86:ba:a5:81:
f6:0b:2e:58:c5:4f:41:0e:e1:c9:c2:55:1f:80:dd:
9f:12:b2:6a:87:5e:f8:05:5f:3b:04:32:d1:68:d0:
2e:28:f2:0c:ef:0a:62:cb:da:77:1f:77:30:05:6b:
8f:8a:a9:7d:56:4d:78:ce:12:e6:5f:62:95:4d:b8:
c3:9e:bd:b2:db:74:da:ea:2f:54:41:9d:26:67:01:
b8:97:fd:8b:cb:44:91:47:14:a4:08:09:28:c6:46:
46:f0:ce:63:2a:9e:d2:6f:3d:76:3c:c5:71:8b:a2:
8e:04:1d:6c:12:1a:cc:ba:db:90:17:b1:15:3e:e0:
f1:fd:47:1d:71:b1:45:b3:f9:8b:89:4d:02:71:1d:
25:42:25:e2:c9:86:5e:23:39:3a:e0:8e:40:ec:1d:
ae:44:07:b6:e1:bc:4a:76:b3:4f:21:a6:1c:4f:45:
49:a6:da:5f:fd:93:23:a7:8b:5b:c0:2d:4a:f6:81:
66:0c:ec:63:70:3c:51:0b:45:e9:17:b8:6f:07:c7:
93:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:34:EA:2D:01:A5:65:FD:28:D2:0E:B5:E8:72:2A:46:DC:0D:89:8B
X509v3 Authority Key Identifier:
keyid:6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/iDTqLQGlZf0o0g616HIqRtwNiYs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.91.69.0/24
Signature Algorithm: sha256WithRSAEncryption
68:3a:49:2a:4b:b5:01:ef:14:c5:38:76:9d:37:bc:ce:64:11:
6e:87:2b:25:92:0b:d1:8a:37:a3:3d:39:7d:29:ad:6a:59:88:
09:f6:ad:11:d6:bf:24:3f:73:9f:e3:0e:20:03:b9:58:a9:9a:
d5:bf:f0:70:74:b2:4b:99:ce:01:40:6e:31:37:8b:83:4e:ec:
4f:b3:d2:ec:49:29:f5:3e:58:db:63:c1:26:a1:0f:5e:30:00:
f3:d6:2a:20:17:b9:8c:18:57:46:60:43:3f:ba:b3:2c:28:d0:
74:4e:8b:ec:5b:ca:a9:89:21:97:99:f8:07:de:16:5f:dc:74:
81:2d:90:1d:4c:da:17:fb:58:83:02:40:8f:a5:1f:86:9a:3b:
3a:54:be:93:af:30:3b:ae:ec:86:12:a0:f0:1e:db:fb:52:6c:
fe:dd:b0:11:a7:20:34:26:fe:6e:f5:b0:12:d9:8b:a5:cd:da:
cd:a5:c0:0c:0d:d9:5f:58:dc:ca:cf:0a:7d:af:82:1f:93:82:
49:d4:99:1e:84:70:a1:59:f9:9f:5e:40:83:de:f5:16:ed:3d:
da:2e:d0:ba:b4:cc:2f:8f:57:85:d0:f9:3f:33:8c:d5:b7:d0:
23:3f:75:52:b6:68:b9:ae:54:f8:0a:ba:41:2b:d9:0b:fc:f2:
b5:bc:5e:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:08:36 2025 by rpki-client