Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/rsYfCDwusLsrJbhFacpTz-HDjfU.roa
File: rsYfCDwusLsrJbhFacpTz-HDjfU.roa (raw, json)
Hash identifier: O6JB/ggb5jt1mvOF+3NkLkH3JGPJ5nijBG0kU9AI6Fo=
Subject key identifier: AE:C6:1F:08:3C:2E:B0:BB:2B:25:B8:45:69:CA:53:CF:E1:C3:8D:F5
Certificate issuer: /CN=837e177f76663166c75190e2d209335a6aae5ace
Certificate serial: 019425FDB91C1AAA31415CE123437E6171C1
Authority key identifier: 83:7E:17:7F:76:66:31:66:C7:51:90:E2:D2:09:33:5A:6A:AE:5A:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g34Xf3ZmMWbHUZDi0gkzWmquWs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/rsYfCDwusLsrJbhFacpTz-HDjfU.roa
Signing time: Thu 02 Jan 2025 07:49:32 +0000
ROA not before: Thu 02 Jan 2025 07:49:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57069
IP address blocks: 91.226.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/g34Xf3ZmMWbHUZDi0gkzWmquWs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 14:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:b9:1c:1a:aa:31:41:5c:e1:23:43:7e:61:71:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=837e177f76663166c75190e2d209335a6aae5ace
Validity
Not Before: Jan 2 07:49:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aec61f083c2eb0bb2b25b84569ca53cfe1c38df5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:7e:6c:43:6e:28:29:2d:45:61:d1:17:82:74:
e8:4a:63:78:60:ea:b1:43:3b:4d:af:50:76:02:e9:
e7:6f:12:49:31:43:2c:41:70:b9:dd:6d:a3:78:c6:
74:9d:6e:4f:46:73:25:55:fc:ab:5a:d4:46:80:7c:
24:be:93:38:7f:7e:51:6d:f8:ef:31:16:b6:48:e9:
4f:70:c4:cc:ee:d2:67:54:ee:c7:d9:e1:68:52:64:
43:c4:3d:36:e6:60:0b:e3:80:2c:5e:67:6f:64:53:
ed:06:6d:e1:c9:7d:4e:2a:dc:eb:d6:a9:13:86:7f:
fb:c7:69:51:b3:52:9b:30:76:1c:be:2e:fa:8a:46:
b5:a5:d4:fd:2b:da:a9:03:f9:c2:42:34:ec:20:1d:
04:3c:81:4c:24:2d:98:2e:ea:0b:04:02:99:fb:fb:
57:a4:6d:f9:a7:76:90:a7:31:03:ad:88:89:ab:62:
d6:66:4f:e3:98:10:6d:6f:d7:49:e5:5f:1c:74:d5:
d5:cf:64:1c:bf:3e:60:89:9f:32:43:d6:41:97:ac:
64:c0:d6:1c:60:35:d4:1f:fb:43:0e:49:24:5d:32:
b4:07:16:07:45:2e:14:b4:5e:4d:46:9d:b6:10:7e:
d2:76:72:0f:19:66:94:65:53:a2:08:84:4d:7b:22:
e9:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:C6:1F:08:3C:2E:B0:BB:2B:25:B8:45:69:CA:53:CF:E1:C3:8D:F5
X509v3 Authority Key Identifier:
keyid:83:7E:17:7F:76:66:31:66:C7:51:90:E2:D2:09:33:5A:6A:AE:5A:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g34Xf3ZmMWbHUZDi0gkzWmquWs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/rsYfCDwusLsrJbhFacpTz-HDjfU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.219.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:44:c9:4d:b0:a2:cb:19:3b:d3:98:af:8d:95:93:e6:ec:40:
94:56:43:fe:7e:ac:fb:d3:7f:c5:64:a2:2b:ba:32:b2:f3:47:
5f:21:96:81:1c:61:3b:2d:74:45:b0:4f:58:ad:4e:44:a7:62:
d7:c0:c2:4e:73:67:9a:a3:4f:05:33:83:c7:77:7c:0d:e3:df:
b8:88:36:92:dd:ec:29:97:60:e3:6a:16:9b:7f:ff:54:d1:85:
ce:3b:cd:63:14:be:5c:99:ea:32:45:31:38:0e:f4:aa:24:7e:
d3:6c:29:df:05:a4:27:04:3a:99:58:c2:ce:9b:31:15:b2:f4:
7d:b8:b8:3f:91:32:9f:8d:ae:97:3b:38:31:c4:88:0e:89:48:
ec:db:94:c4:85:03:39:56:9d:01:c8:4e:9a:bd:8c:f6:42:1a:
bb:8c:bb:73:83:0f:4a:5b:81:37:23:15:47:4c:b2:db:e0:40:
9a:25:10:67:b2:c5:4e:25:ea:e6:6d:d1:a3:62:95:ec:0f:c2:
f8:49:28:94:fc:64:fa:e8:22:f2:b6:6e:bd:b9:d1:9b:ba:a6:
b2:7d:b4:d8:9c:8f:a0:ef:a0:b2:a2:29:40:55:56:f6:91:e0:
d7:5f:7b:6f:fd:02:94:2b:68:84:4b:95:35:50:56:15:e1:9a:
e8:b8:6d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:44:09 2025 by rpki-client