Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/ArAhICSanbkeXehKoKQd1V5tguU.roa
File: ArAhICSanbkeXehKoKQd1V5tguU.roa (raw, json)
Hash identifier: 8+a9w0L+HOX6KtVQT5sEhoZJ7WpUWjL5KHUsIh1x6Pg=
Subject key identifier: 02:B0:21:20:24:9A:9D:B9:1E:5D:E8:4A:A0:A4:1D:D5:5E:6D:82:E5
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 019427472D533B61981758FBF9BEC6594074
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/ArAhICSanbkeXehKoKQd1V5tguU.roa
Signing time: Thu 02 Jan 2025 13:49:23 +0000
ROA not before: Thu 02 Jan 2025 13:49:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201079
IP address blocks: 91.194.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:2d:53:3b:61:98:17:58:fb:f9:be:c6:59:40:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Jan 2 13:49:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=02b02120249a9db91e5de84aa0a41dd55e6d82e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:39:53:99:61:25:9d:63:14:e1:6a:48:93:90:
76:97:26:c6:08:7b:60:24:93:e7:9c:39:d8:7a:32:
7c:a2:70:db:53:fd:59:45:4f:4a:88:08:2b:7f:14:
81:70:45:b0:ea:44:58:60:c9:1a:de:0e:cb:7f:9c:
fe:17:69:e5:e8:3d:5e:8a:c6:a7:58:b9:eb:32:64:
d6:a8:fc:fc:2d:16:c6:0a:9d:af:57:2c:81:d0:ec:
a0:d7:67:af:a2:ff:36:9d:df:11:39:11:5f:cc:c3:
37:2d:49:3c:aa:27:53:aa:f7:20:92:18:d2:ec:a4:
da:fb:2e:d4:e4:46:c3:57:2a:38:bd:51:6e:25:e7:
5d:4f:45:3f:62:49:48:b3:34:ab:d7:9f:42:6d:52:
91:3d:d5:e0:76:7e:d6:d1:96:41:fe:91:5d:3e:b3:
d2:d2:35:97:28:a8:e5:a5:a6:1d:c7:18:4b:15:2c:
59:42:83:f6:95:4b:a7:bb:b9:34:e4:a2:5d:a9:dd:
ec:2f:af:fe:a2:36:42:1d:1a:10:c6:63:3e:b9:5f:
d4:6d:e8:cf:f0:51:7d:3c:b0:3e:6c:77:b2:9d:81:
08:d1:45:0c:34:a7:96:a1:15:7a:aa:80:3d:4c:13:
b9:8d:9c:a2:04:86:ea:26:38:b5:f4:ce:e0:34:da:
5c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:B0:21:20:24:9A:9D:B9:1E:5D:E8:4A:A0:A4:1D:D5:5E:6D:82:E5
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/ArAhICSanbkeXehKoKQd1V5tguU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.53.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:ed:a0:90:db:d8:bd:93:cc:76:06:ab:e4:2f:cc:1c:86:5d:
fe:55:4c:53:33:56:fd:ed:f1:e6:56:30:39:6a:ad:ed:84:18:
28:82:64:72:ac:94:11:2f:ef:07:4c:30:83:db:07:1a:34:ff:
e0:d7:d4:78:dd:a1:3c:db:36:50:e4:4c:c1:70:1e:4d:ec:8f:
66:1a:f5:f9:cf:05:f5:b5:27:0e:ba:1f:ea:43:53:0f:04:e7:
73:5f:a0:08:0b:67:81:3d:67:fd:0c:ea:63:4d:2f:e6:f9:0e:
36:32:7a:37:34:ca:af:55:0b:b7:f6:64:e5:c6:c7:85:9d:3a:
0b:55:45:ac:7d:ba:a3:be:34:0c:60:5d:79:43:2b:91:4d:6a:
50:5a:4d:6c:aa:0a:92:d3:f6:f8:c9:cc:97:6e:73:a0:05:67:
ed:51:c9:42:5e:6b:4b:f0:bf:1f:1b:3b:a7:63:14:b4:f6:d6:
69:86:12:ab:20:1e:c6:8e:81:04:d4:0d:4d:26:70:a2:79:70:
b7:51:ce:c7:c8:b1:d3:ae:8d:4e:d0:51:c1:a2:d7:75:67:ff:
90:73:c0:aa:c6:d3:cf:6d:e2:dd:d6:06:12:f7:2f:ef:20:ce:
04:68:b8:2c:50:0a:66:aa:ce:cb:e5:00:26:3b:d6:49:63:6e:
3e:2b:56:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:39:40 2025 by rpki-client