Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/cJHg2gIr4WTjVDRa1ns7V2mNNv8.roa
File: cJHg2gIr4WTjVDRa1ns7V2mNNv8.roa (raw, json)
Hash identifier: Gqt+X6bBo4psBa/sbAE81ESpRX77S0jVh8nWorkfigg=
Subject key identifier: 70:91:E0:DA:02:2B:E1:64:E3:54:34:5A:D6:7B:3B:57:69:8D:36:FF
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 0194266BD90B840C6E50812189210EC823FA
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/cJHg2gIr4WTjVDRa1ns7V2mNNv8.roa
Signing time: Thu 02 Jan 2025 09:49:49 +0000
ROA not before: Thu 02 Jan 2025 09:49:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42401
IP address blocks: 91.192.88.0/22 maxlen: 22
91.192.88.0/24 maxlen: 24
91.192.89.0/24 maxlen: 24
91.192.90.0/24 maxlen: 24
91.192.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:d9:0b:84:0c:6e:50:81:21:89:21:0e:c8:23:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 2 09:49:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7091e0da022be164e354345ad67b3b57698d36ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a7:90:18:5f:05:fd:29:85:7b:b8:74:35:32:
21:55:69:d3:fd:18:31:f5:2f:1f:cc:ef:cf:c9:f8:
c6:c2:ba:6e:d3:cf:c0:11:db:1c:7b:2b:c8:7c:67:
67:58:6a:03:70:63:5c:7e:0b:5c:80:8b:99:c4:40:
2f:74:8d:9e:da:15:03:d9:c1:ea:cf:80:7d:d0:4f:
9d:e4:87:5d:9c:2e:d8:f8:1a:ea:6b:78:9c:98:a3:
a2:e2:24:5d:ba:36:8f:68:04:ae:d3:15:c8:34:57:
ab:38:47:54:50:fa:a8:eb:ca:5d:81:01:1e:72:96:
eb:e1:36:4a:bf:e1:36:e1:38:4e:ed:40:8f:d8:16:
82:25:bc:90:ea:56:97:1d:0d:85:c0:4d:3e:ec:55:
80:fe:54:a6:9f:6d:a3:d2:ed:16:49:e2:f2:33:d4:
e6:b0:85:2b:e9:a4:bf:a1:74:6b:45:64:63:bd:7a:
62:ef:4b:75:f2:f9:f4:62:77:da:95:db:4a:ae:48:
fb:14:23:4e:0a:42:87:19:96:b5:0b:69:56:19:e1:
80:e5:34:41:57:ef:9d:6e:2f:09:3c:71:7b:ee:05:
50:a9:95:4f:28:6f:d1:fc:44:b8:cd:14:80:07:43:
2a:02:b7:02:fa:23:85:08:97:b2:d0:27:8b:3f:13:
4b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:91:E0:DA:02:2B:E1:64:E3:54:34:5A:D6:7B:3B:57:69:8D:36:FF
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/cJHg2gIr4WTjVDRa1ns7V2mNNv8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.192.88.0/22
Signature Algorithm: sha256WithRSAEncryption
31:b1:00:e1:e7:39:72:29:09:3b:bc:dc:3b:f2:36:1a:31:58:
9e:82:81:4a:ce:d8:db:65:bb:f7:ce:29:e4:a7:d9:35:c3:3f:
97:1f:e5:a6:c9:44:4b:d8:ce:05:31:9c:18:58:67:94:9d:4e:
c9:d7:62:0e:95:35:5e:a8:90:aa:30:88:15:dd:ab:c1:50:10:
1c:fc:9e:d7:db:03:b0:01:97:d6:42:ca:da:18:ee:f1:68:01:
f0:d4:43:00:d4:b0:d1:5b:73:2f:7c:fb:bb:a1:e9:01:f2:e6:
e6:31:ec:58:27:59:af:2e:78:0c:18:d1:2b:f8:5e:74:70:8a:
46:a6:78:27:e2:32:e4:03:7e:cf:95:41:2c:4b:f0:bb:29:d5:
e6:4a:5f:05:f9:79:95:2f:f3:44:8f:fb:d5:42:9c:42:02:4d:
af:54:6e:39:fc:ea:5e:4a:25:e7:6e:6e:4a:bb:97:7b:5e:31:
24:1f:e1:76:9c:61:52:c1:69:e4:c4:82:89:ef:34:97:2f:41:
53:02:31:ac:38:66:93:84:4a:bb:bd:82:d4:0b:f5:ae:77:89:
03:bd:4c:32:d1:b6:a6:a9:d3:ae:28:1a:42:c4:a5:37:95:5e:
ad:49:18:96:a9:f5:1a:2f:45:c2:27:04:d7:ab:13:f6:72:b9:
d9:82:d0:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:48:40 2025 by rpki-client