Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/bdDCotOAfO1kv_FK4imM3A-Vth0.roa
File: bdDCotOAfO1kv_FK4imM3A-Vth0.roa (raw, json)
Hash identifier: SflKXIddgIp/qAd1Zs2morymiezh6i6wy0uu+gUqlSk=
Subject key identifier: 6D:D0:C2:A2:D3:80:7C:ED:64:BF:F1:4A:E2:29:8C:DC:0F:95:B6:1D
Certificate issuer: /CN=776fae43f73da35fe1a2e429662ae0b91751e3fb
Certificate serial: 0194282605D0C792C83F28397F5DA7E63BF4
Authority key identifier: 77:6F:AE:43:F7:3D:A3:5F:E1:A2:E4:29:66:2A:E0:B9:17:51:E3:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d2-uQ_c9o1_houQpZirguRdR4_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/bdDCotOAfO1kv_FK4imM3A-Vth0.roa
Signing time: Thu 02 Jan 2025 17:52:48 +0000
ROA not before: Thu 02 Jan 2025 17:52:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30860
IP address blocks: 91.230.121.0/24 maxlen: 24
91.235.142.0/23 maxlen: 23
91.235.142.0/24 maxlen: 24
91.235.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/d2-uQ_c9o1_houQpZirguRdR4_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:05:d0:c7:92:c8:3f:28:39:7f:5d:a7:e6:3b:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=776fae43f73da35fe1a2e429662ae0b91751e3fb
Validity
Not Before: Jan 2 17:52:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6dd0c2a2d3807ced64bff14ae2298cdc0f95b61d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:4a:b3:13:f0:56:f5:fa:6c:75:f3:9d:1b:fc:
35:f9:33:bf:87:1a:82:0d:de:0d:64:1c:50:61:a3:
3a:46:a0:e7:a1:9b:bc:36:a8:f6:f8:12:81:b2:ac:
49:6c:66:cd:07:6f:cd:b6:41:74:51:13:0b:29:36:
56:c3:c0:4b:76:f1:89:07:11:05:d1:c6:f7:13:91:
2d:01:73:39:e6:65:8d:65:95:2f:b5:13:34:a4:3b:
b1:6e:6b:13:d4:51:b8:84:b3:04:53:da:fd:3f:f3:
1e:5b:44:c4:0d:4d:87:9a:55:de:4a:d3:8c:39:34:
63:97:63:b8:53:95:b5:e2:d1:e2:41:33:0c:3b:00:
28:e2:72:e3:bf:39:e0:46:ef:cf:1b:1f:33:8a:2e:
8d:64:54:4b:b1:14:ce:8b:d3:df:96:a2:04:29:e4:
d5:56:80:c1:33:b0:c5:3f:04:85:84:f8:53:ce:55:
d7:f0:68:21:ef:ef:cd:64:15:11:21:f3:d9:a7:e5:
3a:36:af:d5:42:27:aa:7b:a7:9c:c8:49:f1:74:2e:
65:a7:d7:58:88:9f:7f:04:cd:73:4b:a6:94:b4:ac:
fc:fd:40:69:5a:14:95:be:a9:b5:3a:12:e4:da:85:
70:7c:bf:36:87:95:3b:b0:49:a1:00:73:18:78:09:
dc:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:D0:C2:A2:D3:80:7C:ED:64:BF:F1:4A:E2:29:8C:DC:0F:95:B6:1D
X509v3 Authority Key Identifier:
keyid:77:6F:AE:43:F7:3D:A3:5F:E1:A2:E4:29:66:2A:E0:B9:17:51:E3:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2-uQ_c9o1_houQpZirguRdR4_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/bdDCotOAfO1kv_FK4imM3A-Vth0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.230.121.0/24
91.235.142.0/23
Signature Algorithm: sha256WithRSAEncryption
9c:19:70:f8:85:03:bb:dd:20:01:1d:b5:bb:b9:af:a7:48:d8:
42:02:32:ac:7f:8a:6f:67:b8:25:a6:84:85:1b:f3:98:1f:0d:
d7:50:de:79:fa:75:4c:05:b5:87:a5:1f:3e:1f:a4:ac:37:5b:
79:31:a4:e1:48:c2:49:64:4a:d2:60:14:8d:ef:53:78:17:08:
8a:9d:64:76:5a:cf:10:3f:7c:da:4b:e1:6d:f1:6f:5a:2b:a5:
f5:76:14:2b:9a:94:20:99:98:ea:05:81:c7:8a:ac:5a:36:d1:
64:7b:7e:36:52:eb:d6:dd:6b:b4:81:a9:a3:d4:ee:c5:5b:1a:
e3:eb:d9:88:d6:3c:ec:2d:b3:e4:3b:5b:b2:32:1e:78:f9:85:
a4:4f:fc:0e:3c:bc:ad:c7:df:1c:47:bb:6a:69:c1:73:e8:47:
ba:96:c6:ff:73:dd:4a:f6:e9:ba:6e:55:c7:30:03:83:69:96:
c7:21:e3:ca:87:ea:1f:25:e4:d6:38:b7:e7:09:6d:6d:1c:97:
4c:57:e9:af:c8:01:97:6c:07:39:01:44:33:34:60:7e:dd:f0:
52:53:05:85:03:01:23:63:8c:74:da:80:0d:46:e7:e7:d2:cc:
c5:0b:bf:f2:2a:d9:ab:b9:56:98:bd:0f:ea:08:f9:7a:71:d6:
0a:c8:45:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:28:28 2025 by rpki-client