Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/42d3db-e0c3-4a41-b7e9-2b9bf8051c8b/1/1-5IS6Ne9g4EAXudMX1E3CGgmJ9w.roa
File: 1-5IS6Ne9g4EAXudMX1E3CGgmJ9w.roa (raw, json)
Hash identifier: EViR1sYnZ/PqhZx9KFwP6/uSLvB4Cxcfj8Xc2wwuXVM=
Subject key identifier: FB:92:12:E8:D7:BD:83:81:00:5E:E7:4C:5F:51:37:08:68:26:27:DC
Certificate issuer: /CN=b91be2b3679904b60a2fc399b78081c86b038d99
Certificate serial: 019422FB06A2A6209C134732103DA198E7B4
Authority key identifier: B9:1B:E2:B3:67:99:04:B6:0A:2F:C3:99:B7:80:81:C8:6B:03:8D:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRvis2eZBLYKL8OZt4CByGsDjZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/42d3db-e0c3-4a41-b7e9-2b9bf8051c8b/1/1-5IS6Ne9g4EAXudMX1E3CGgmJ9w.roa
Signing time: Wed 01 Jan 2025 17:47:44 +0000
ROA not before: Wed 01 Jan 2025 17:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198492
IP address blocks: 83.229.56.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/42d3db-e0c3-4a41-b7e9-2b9bf8051c8b/1/uRvis2eZBLYKL8OZt4CByGsDjZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/42d3db-e0c3-4a41-b7e9-2b9bf8051c8b/1/uRvis2eZBLYKL8OZt4CByGsDjZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRvis2eZBLYKL8OZt4CByGsDjZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:06:a2:a6:20:9c:13:47:32:10:3d:a1:98:e7:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b91be2b3679904b60a2fc399b78081c86b038d99
Validity
Not Before: Jan 1 17:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fb9212e8d7bd8381005ee74c5f513708682627dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e5:10:55:f2:81:91:73:e5:9b:ac:75:94:d8:
05:c9:57:c0:63:0f:ec:80:ea:a4:cd:f2:3d:91:16:
1f:f3:cd:bb:42:e9:d6:8f:c4:e5:52:e9:9e:2d:17:
84:6e:3d:a0:8c:8f:14:6c:66:fb:a6:e6:d0:83:3f:
5b:93:1f:6d:ae:0b:33:a0:2b:ff:37:24:73:19:64:
97:ee:97:7e:d7:14:a1:ef:6e:66:af:68:b6:6c:f4:
ac:51:8a:3d:28:0a:c1:ad:fc:53:36:fd:c4:9e:54:
9d:3c:da:57:65:42:6b:5a:0c:9c:d4:d6:68:b5:22:
7d:bd:ae:9a:28:ae:ac:b7:bd:a8:ec:d3:c4:3a:be:
e9:7d:54:c5:13:27:3f:ee:99:8c:bb:84:05:8b:8e:
53:86:26:f2:7c:4c:27:b3:1c:d0:34:aa:bd:6d:d8:
e4:7c:2e:68:5c:20:d1:43:8a:80:65:f3:0f:d0:a2:
b1:8f:26:4e:c4:40:5c:3b:f1:a1:48:ef:cc:78:10:
a3:a7:ce:53:ae:0d:7c:06:89:3b:e3:d7:4d:4c:02:
96:b6:2f:71:16:5a:48:4d:f1:1a:e4:3a:d2:fe:ee:
98:35:4b:52:2a:87:e6:90:01:40:ae:4c:ac:32:e8:
5b:9b:06:31:50:68:0e:29:e1:b3:79:1a:3a:87:4e:
59:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:92:12:E8:D7:BD:83:81:00:5E:E7:4C:5F:51:37:08:68:26:27:DC
X509v3 Authority Key Identifier:
keyid:B9:1B:E2:B3:67:99:04:B6:0A:2F:C3:99:B7:80:81:C8:6B:03:8D:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRvis2eZBLYKL8OZt4CByGsDjZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/42d3db-e0c3-4a41-b7e9-2b9bf8051c8b/1/1-5IS6Ne9g4EAXudMX1E3CGgmJ9w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/42d3db-e0c3-4a41-b7e9-2b9bf8051c8b/1/uRvis2eZBLYKL8OZt4CByGsDjZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.229.56.0/23
Signature Algorithm: sha256WithRSAEncryption
81:81:82:1d:3b:42:95:fc:ea:f8:bf:fc:08:a8:e4:62:34:67:
47:92:d4:37:b1:d4:29:9e:32:bd:bb:43:14:bb:c0:36:dc:fb:
83:4a:ef:14:87:4c:dc:88:52:52:c7:ac:4e:8f:12:79:ff:e0:
9d:3a:8f:35:69:ff:16:19:e0:71:be:a2:77:dc:79:37:3a:9c:
ff:f8:df:78:26:2f:ce:f4:8d:8c:b9:e3:e3:46:e0:f8:f1:31:
81:c3:2a:39:9a:df:77:3d:13:be:03:8c:4b:9e:5a:86:d2:53:
b0:2a:43:67:83:e9:11:a0:fd:40:b5:20:2d:3e:7f:54:ac:c2:
92:27:d3:be:22:78:8a:b4:d4:0d:9f:27:e7:38:bc:6f:13:0e:
0e:9b:01:e0:70:6e:26:85:0e:ed:33:ba:8b:73:18:6f:d2:de:
ae:6d:1a:aa:e2:ff:51:8d:20:70:36:dd:b2:7e:88:37:ab:ed:
de:45:01:43:a0:55:54:9e:df:60:f6:fa:99:92:cf:a3:6d:a7:
e4:b9:54:9b:e3:0e:0b:65:85:72:2a:d8:09:39:b3:f8:aa:7a:
0c:43:c2:7a:75:8f:a3:3d:46:b4:fe:52:e9:c3:8d:c1:0b:81:
1a:a6:be:d6:58:e8:19:6d:4b:55:a5:91:3b:be:2e:97:f4:93:
13:9c:f8:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 10:06:16 2025 by rpki-client