Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/e8281f-cd17-4e02-8fca-8c5ac06c14a8/1/83ORI60y9_dT-ZS0TxgmLQxr8rs.roa
File: 83ORI60y9_dT-ZS0TxgmLQxr8rs.roa (raw, json)
Hash identifier: XaEd60rpbEkG2S/BDB5xP5HVMCi/G1L7f4PejwoD2Lo=
Subject key identifier: F3:73:91:23:AD:32:F7:F7:53:F9:94:B4:4F:18:26:2D:0C:6B:F2:BB
Certificate issuer: /CN=220a9859fbf2e6bc3ed8273911762bd8fa5e802e
Certificate serial: 019426D9EF993E256F5D3908F6774F96C687
Authority key identifier: 22:0A:98:59:FB:F2:E6:BC:3E:D8:27:39:11:76:2B:D8:FA:5E:80:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IgqYWfvy5rw-2Cc5EXYr2PpegC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/e8281f-cd17-4e02-8fca-8c5ac06c14a8/1/83ORI60y9_dT-ZS0TxgmLQxr8rs.roa
Signing time: Thu 02 Jan 2025 11:50:04 +0000
ROA not before: Thu 02 Jan 2025 11:50:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50005
IP address blocks: 91.224.84.0/23 maxlen: 23
195.178.18.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/e8281f-cd17-4e02-8fca-8c5ac06c14a8/1/IgqYWfvy5rw-2Cc5EXYr2PpegC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/e8281f-cd17-4e02-8fca-8c5ac06c14a8/1/IgqYWfvy5rw-2Cc5EXYr2PpegC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IgqYWfvy5rw-2Cc5EXYr2PpegC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:ef:99:3e:25:6f:5d:39:08:f6:77:4f:96:c6:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=220a9859fbf2e6bc3ed8273911762bd8fa5e802e
Validity
Not Before: Jan 2 11:50:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f3739123ad32f7f753f994b44f18262d0c6bf2bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:45:2b:95:08:c5:5c:94:19:45:a0:83:b6:61:
37:85:a5:64:e1:40:d6:46:1d:83:d6:a6:e0:5b:11:
5e:dd:98:15:8a:82:35:78:59:e0:b9:27:ba:8b:da:
18:77:5f:8e:4f:0e:1d:1a:dd:6b:2d:3b:dc:bf:1c:
be:19:70:d2:83:b1:24:06:a7:68:dc:4f:9f:cc:8f:
97:0a:60:f4:9d:ff:8c:71:60:3d:5b:11:9a:5f:cc:
2e:42:9f:05:76:3b:3e:d3:6a:a5:df:0d:22:7e:e9:
0d:dc:e4:4c:dc:80:94:bc:e4:02:87:8d:ed:59:00:
f6:2d:1d:35:af:13:1f:5d:8d:32:91:8d:81:98:c8:
4f:19:ae:ec:c0:2d:89:04:3f:c5:56:b7:a7:8b:1e:
32:5e:18:58:e2:ea:ec:e7:0b:08:59:8a:4b:fa:0c:
b0:f9:dd:68:e7:9d:3e:0f:f3:a6:ce:1e:7c:94:33:
0d:a4:9e:97:54:7a:7b:ba:99:10:72:5d:38:86:a4:
a2:e4:8e:8d:02:9d:91:c2:66:53:8f:45:44:e3:49:
7e:55:11:15:3b:ce:89:47:db:d3:d5:ed:29:aa:69:
cc:c2:ea:19:71:00:02:8b:a6:7d:0f:14:26:0a:02:
78:1c:3d:d1:c7:d6:8e:d9:2d:06:8a:b1:f2:f2:10:
66:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:73:91:23:AD:32:F7:F7:53:F9:94:B4:4F:18:26:2D:0C:6B:F2:BB
X509v3 Authority Key Identifier:
keyid:22:0A:98:59:FB:F2:E6:BC:3E:D8:27:39:11:76:2B:D8:FA:5E:80:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IgqYWfvy5rw-2Cc5EXYr2PpegC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e8281f-cd17-4e02-8fca-8c5ac06c14a8/1/83ORI60y9_dT-ZS0TxgmLQxr8rs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e8281f-cd17-4e02-8fca-8c5ac06c14a8/1/IgqYWfvy5rw-2Cc5EXYr2PpegC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.224.84.0/23
195.178.18.0/23
Signature Algorithm: sha256WithRSAEncryption
1b:30:89:53:09:b4:64:b2:24:b5:9e:80:99:c0:80:74:9d:d0:
b2:0a:e5:4c:61:08:b5:60:53:3e:6b:37:4c:07:ad:46:8f:e5:
49:72:ff:a3:40:eb:98:39:26:ed:b9:e6:ec:42:9a:23:68:b8:
ac:a9:16:d5:38:2c:c1:2a:0d:74:aa:c9:31:ef:03:9a:86:e2:
a3:3e:9f:3f:19:1e:26:c4:0f:04:ea:33:4f:d6:a7:6c:07:60:
38:34:08:23:b7:e3:dc:fe:99:9f:c8:97:7b:00:59:5d:44:c4:
48:03:b2:a0:7a:41:33:74:a9:6c:4b:d8:24:b9:14:b3:5e:e9:
96:49:5c:fd:5e:48:20:23:09:4f:e7:f0:b7:c4:af:31:7a:fc:
55:3b:d6:c4:58:df:0f:03:69:26:a9:36:24:aa:04:0e:ab:12:
d5:95:6c:c2:58:dc:c4:9f:aa:77:86:5e:1e:3a:19:bb:23:01:
34:5a:dd:27:e3:77:be:d7:91:dc:04:95:00:56:54:95:75:8d:
35:07:87:78:d1:2f:4f:a7:6e:d9:f0:e4:7b:48:71:5d:22:64:
09:52:f0:fe:1c:6a:83:af:06:af:2b:0c:ff:ee:f2:76:7d:5f:
3d:e4:af:67:29:03:23:1b:38:72:ba:81:33:ab:2a:78:3b:3d:
66:85:7a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 08:57:12 2025 by rpki-client