Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/rs4VD6KTdnC8-M30vhe8nEsSG1w.roa
File: rs4VD6KTdnC8-M30vhe8nEsSG1w.roa (raw, json)
Hash identifier: UOANafcA9Zs9hN/KKAjiuhW5jfpZmrVPNk0GGA9bGXQ=
Subject key identifier: AE:CE:15:0F:A2:93:76:70:BC:F8:CD:F4:BE:17:BC:9C:4B:12:1B:5C
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 019507408236F59BABEAAFDA3C78171DFAF6
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/rs4VD6KTdnC8-M30vhe8nEsSG1w.roa
Signing time: Sat 15 Feb 2025 01:37:02 +0000
ROA not before: Sat 15 Feb 2025 01:37:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 91.147.119.0/24 maxlen: 24
91.147.123.0/24 maxlen: 24
91.147.126.0/23 maxlen: 24
212.116.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 12:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:07:40:82:36:f5:9b:ab:ea:af:da:3c:78:17:1d:fa:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Feb 15 01:37:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aece150fa2937670bcf8cdf4be17bc9c4b121b5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8c:38:a9:c0:33:61:50:20:a6:2d:a9:c6:77:
f9:dc:a7:f5:92:81:71:44:76:be:92:2c:83:69:6b:
a1:a4:88:bc:9e:34:5e:42:7f:26:3a:3c:c2:e7:74:
0d:f7:b1:4c:1e:9f:8e:d6:a3:67:8a:94:a9:6d:12:
f4:02:79:58:a3:fa:a6:46:50:d3:14:96:45:ed:c1:
55:3c:30:0d:8e:ad:c8:46:99:d0:c8:0d:82:4b:79:
80:20:fc:bb:72:c5:ec:3e:07:a9:1a:c8:13:4e:0d:
b3:67:3a:52:85:6c:55:80:81:ed:ca:53:a2:cc:b1:
0f:73:c8:ac:f0:09:4a:d0:97:d5:91:1b:a0:1a:64:
0a:82:8a:25:f2:af:ef:4f:2a:fc:5f:3e:fe:b2:78:
76:9c:02:26:2d:85:24:83:f2:26:64:0e:86:b7:1a:
e7:37:73:f4:eb:0e:dc:65:d4:b3:28:fa:46:01:77:
e4:3d:c8:39:94:f6:1e:66:b9:32:8b:9d:32:1b:7d:
e6:3a:85:27:1a:84:cd:14:29:f4:94:af:58:3f:62:
53:99:35:6d:1a:56:c8:87:ca:e3:e8:0f:6c:c5:82:
bd:f1:e5:4d:fc:26:fc:b9:bb:d7:09:ad:d9:aa:75:
10:7f:1d:b2:b8:03:a2:61:22:41:f2:f9:b0:d6:7f:
52:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:CE:15:0F:A2:93:76:70:BC:F8:CD:F4:BE:17:BC:9C:4B:12:1B:5C
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/rs4VD6KTdnC8-M30vhe8nEsSG1w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.147.119.0/24
91.147.123.0/24
91.147.126.0/23
212.116.244.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:35:d9:33:9b:64:e0:09:82:a7:25:54:f8:a6:34:0e:f2:bf:
85:d0:5a:72:f6:f5:d2:69:88:36:b8:14:7e:1f:b1:70:f5:45:
84:50:cc:94:23:9c:9d:57:c9:ac:a2:50:78:e1:4c:b3:c1:d5:
be:cd:7e:5d:01:18:b1:27:e8:d6:95:7d:6e:e0:5c:6e:a8:ae:
98:35:74:0f:3b:1c:48:d6:2b:5b:2e:85:48:aa:d3:9d:32:07:
f8:d2:40:29:74:5a:40:1f:e7:1d:d1:eb:bc:b4:e9:3a:7c:90:
15:51:0f:24:d9:4f:5e:b7:05:9e:01:da:0e:73:8a:45:44:21:
91:eb:41:d6:dc:dd:57:ee:52:02:a2:46:84:a3:0c:e0:a7:33:
ec:dd:63:60:6e:01:f1:2c:a7:8a:64:34:f9:c7:4f:3b:10:6a:
92:6d:21:e6:e6:54:c4:5f:f2:b3:fa:4f:d4:51:aa:36:75:1e:
98:1b:1e:4c:ae:15:8b:06:82:88:97:c2:b6:a0:ea:d1:ea:fd:
7b:e2:92:0d:33:a9:d9:41:9c:cd:de:9d:71:4a:e0:c7:ac:74:
f0:f2:e3:09:a0:21:24:43:0e:60:0c:65:cf:62:ed:63:10:37:
c6:5f:57:4f:02:0f:f4:9c:21:69:0e:6c:33:9c:b0:b7:20:86:
08:7f:71:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:00:33 2025 by rpki-client