Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/e487da-4d2a-4b4d-bfe5-57c7e6199b12/1/r3X5pk5U2Z-5txOYvpcZbvrFurQ.roa
File: r3X5pk5U2Z-5txOYvpcZbvrFurQ.roa (raw, json)
Hash identifier: 87QkeU5ku+ENNSsEiVa7il+EqGwoFRelcSgk+xC7ai4=
Subject key identifier: AF:75:F9:A6:4E:54:D9:9F:B9:B7:13:98:BE:97:19:6E:FA:C5:BA:B4
Certificate issuer: /CN=e8271443905f940b138d9d4b4a3487cbfbd021e3
Certificate serial: 019427482DA6886327FC4C3FC9148432A5F2
Authority key identifier: E8:27:14:43:90:5F:94:0B:13:8D:9D:4B:4A:34:87:CB:FB:D0:21:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/e487da-4d2a-4b4d-bfe5-57c7e6199b12/1/r3X5pk5U2Z-5txOYvpcZbvrFurQ.roa
Signing time: Thu 02 Jan 2025 13:50:29 +0000
ROA not before: Thu 02 Jan 2025 13:50:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57105
IP address blocks: 91.230.206.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/e487da-4d2a-4b4d-bfe5-57c7e6199b12/1/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/e487da-4d2a-4b4d-bfe5-57c7e6199b12/1/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:2d:a6:88:63:27:fc:4c:3f:c9:14:84:32:a5:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8271443905f940b138d9d4b4a3487cbfbd021e3
Validity
Not Before: Jan 2 13:50:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=af75f9a64e54d99fb9b71398be97196efac5bab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:02:b3:d5:9a:15:4c:21:7f:0c:51:ad:60:c8:
ee:61:2b:37:1a:3a:20:a9:ec:1e:41:cb:bc:fc:1e:
cd:c8:14:21:17:ad:9c:0e:09:48:b6:95:17:be:4f:
56:4c:4d:e6:aa:6f:01:9f:08:c0:4f:31:f0:19:04:
86:42:75:70:4f:4f:1c:c3:4a:58:ee:bd:4b:b2:49:
86:74:4e:49:ad:49:fa:51:c4:2d:6d:9d:ed:9e:5f:
0d:4b:76:66:6a:b8:97:72:2b:74:79:c0:f3:25:79:
11:ac:5b:58:38:d4:f6:e6:80:0b:64:8d:63:22:ce:
9e:f5:e9:e2:69:00:d4:d3:d6:f4:e5:19:2d:bf:07:
36:92:5b:4a:f0:2c:bc:ce:e9:6b:89:12:87:9c:54:
3d:c6:a3:ff:b9:6f:fd:66:69:70:b3:2e:04:07:c7:
a5:f8:75:4d:66:6a:48:fa:a9:ce:4c:07:bf:16:a1:
e9:84:96:bf:cf:c2:c3:d2:75:ac:63:27:ad:02:7e:
1b:0f:c6:b3:a4:fa:2f:76:56:19:ab:8e:24:a9:7e:
58:e9:7e:78:d4:6b:dc:0f:13:e5:21:4e:6b:9b:7a:
ec:1c:ff:40:07:d5:a4:9d:0b:1c:55:42:97:04:d0:
1f:14:96:d8:53:a2:72:24:74:08:33:49:72:18:72:
2b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:75:F9:A6:4E:54:D9:9F:B9:B7:13:98:BE:97:19:6E:FA:C5:BA:B4
X509v3 Authority Key Identifier:
keyid:E8:27:14:43:90:5F:94:0B:13:8D:9D:4B:4A:34:87:CB:FB:D0:21:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e487da-4d2a-4b4d-bfe5-57c7e6199b12/1/r3X5pk5U2Z-5txOYvpcZbvrFurQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e487da-4d2a-4b4d-bfe5-57c7e6199b12/1/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.230.206.0/23
Signature Algorithm: sha256WithRSAEncryption
27:9f:c0:84:08:41:13:7f:bd:a9:7c:25:4b:d2:35:83:41:0a:
4e:46:b0:a6:00:3d:37:5e:37:b4:6c:e0:f2:a2:5a:d8:a0:19:
16:a2:0b:6b:bb:e3:a6:bb:26:a2:dd:7f:34:03:e9:9a:20:04:
86:41:ba:43:f9:92:9d:68:1c:f9:f0:66:7d:d2:c3:04:4d:39:
4d:7d:41:8c:d6:f7:7a:d3:45:ea:5c:6b:6d:f4:00:24:c8:c5:
68:14:ca:20:31:57:ae:08:c5:dc:6d:84:a5:f6:17:5b:af:5a:
a5:11:49:9d:b9:bb:da:27:80:db:a4:fb:7a:2e:56:ca:e2:c2:
0c:4b:50:2e:9e:32:b4:73:ac:11:4e:10:45:75:48:41:f0:b4:
c3:c1:fb:1a:13:1e:5e:01:2e:aa:54:fc:41:14:74:25:7c:9c:
6e:18:73:72:ab:5e:5b:ce:d8:b2:c4:2a:18:d6:e8:2e:f9:b9:
74:1d:4d:4b:fd:41:7c:79:38:a4:f6:10:83:c3:f6:ba:96:f1:
a3:4f:a9:c6:bb:47:32:2c:b0:3a:a7:e7:e1:bc:ba:8f:48:81:
fa:cd:4d:5e:c1:13:83:3d:84:ac:b9:ff:89:23:91:36:ba:46:
70:e1:23:e1:2b:45:84:ae:cd:9e:18:9c:4c:98:8b:92:35:9b:
ae:55:14:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:53:19 2025 by rpki-client