Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/kA5bGRl5EHENPG-lFJ-KaUPwtEE.roa
File: kA5bGRl5EHENPG-lFJ-KaUPwtEE.roa (raw, json)
Hash identifier: SCW2no/wqMGhhPF1PG24OTD/SWeQikiX3GB3gK0CJDQ=
Subject key identifier: 90:0E:5B:19:19:79:10:71:0D:3C:6F:A5:14:9F:8A:69:43:F0:B4:41
Certificate issuer: /CN=09ea1d4531b071d6574699c12e5afa41f89bd409
Certificate serial: 0194228DC14246128FE3132D04C6149E25D7
Authority key identifier: 09:EA:1D:45:31:B0:71:D6:57:46:99:C1:2E:5A:FA:41:F8:9B:D4:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeodRTGwcdZXRpnBLlr6Qfib1Ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/kA5bGRl5EHENPG-lFJ-KaUPwtEE.roa
Signing time: Wed 01 Jan 2025 15:48:22 +0000
ROA not before: Wed 01 Jan 2025 15:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5545
IP address blocks: 91.229.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/CeodRTGwcdZXRpnBLlr6Qfib1Ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:c1:42:46:12:8f:e3:13:2d:04:c6:14:9e:25:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09ea1d4531b071d6574699c12e5afa41f89bd409
Validity
Not Before: Jan 1 15:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=900e5b19197910710d3c6fa5149f8a6943f0b441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f2:2b:3a:e8:a8:b8:3f:35:aa:7f:c9:8b:7e:
ed:39:d1:6c:3c:47:45:8c:35:2d:e7:25:4f:f4:11:
a8:e7:f5:02:69:31:80:8c:17:81:54:2b:b8:ea:f1:
75:55:aa:ef:06:bb:96:e4:69:98:5c:91:29:f7:27:
b7:2c:ff:eb:8a:5e:81:59:6c:9b:6b:45:e2:4e:ef:
d6:13:fb:00:11:19:a2:8d:f3:48:67:5f:03:64:1e:
aa:72:43:bb:5b:95:7a:79:c7:57:2a:f0:ce:0f:8b:
2e:a5:e3:2a:07:61:cd:ba:ac:ac:de:ca:c5:39:51:
3d:0d:ed:22:a1:b6:9a:9a:29:b9:b1:b4:47:ae:45:
58:24:a4:a7:74:1f:9f:5d:0f:5e:f3:e6:97:82:05:
66:ab:1a:54:84:ed:15:9e:b5:1e:ce:12:d7:54:f1:
8e:fe:b0:63:56:27:3e:cc:9e:e0:a3:5a:78:23:4b:
d9:44:02:1b:33:3d:f6:51:e1:19:56:a5:55:9e:41:
12:38:9e:c8:8f:de:15:ba:91:48:37:94:75:0d:13:
fc:8f:8d:70:ac:07:8d:77:8a:ee:78:14:de:8f:f7:
a9:2a:5a:90:83:7f:f3:d9:af:75:47:1a:7f:28:3b:
b6:a7:05:06:bf:c0:7c:5f:bf:75:c0:1c:55:e5:25:
45:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:0E:5B:19:19:79:10:71:0D:3C:6F:A5:14:9F:8A:69:43:F0:B4:41
X509v3 Authority Key Identifier:
keyid:09:EA:1D:45:31:B0:71:D6:57:46:99:C1:2E:5A:FA:41:F8:9B:D4:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeodRTGwcdZXRpnBLlr6Qfib1Ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/kA5bGRl5EHENPG-lFJ-KaUPwtEE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.229.94.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:62:32:a5:1d:9f:7b:e9:da:2e:51:a9:7c:1c:cf:37:5e:b3:
d4:80:3d:a6:e7:d4:92:97:92:c6:57:5e:ce:69:85:73:b1:48:
94:f8:a0:e3:28:77:25:08:69:df:d5:db:63:6a:f6:ba:e2:d3:
59:f2:00:d3:54:3d:08:fc:c1:f3:14:92:51:4a:d6:3d:d2:fb:
ae:59:0d:90:b8:92:dd:3e:75:76:30:bf:22:48:2f:ee:ee:ec:
f8:bb:5c:dc:33:70:2f:58:40:df:b9:7b:80:a0:b2:2f:18:42:
22:b9:7c:c5:ae:64:1c:37:da:bf:23:81:a3:25:5f:73:d5:03:
dd:f1:88:72:27:b8:47:1a:5d:af:66:95:72:fe:7d:53:02:34:
6c:3c:71:36:b8:ec:88:a3:8e:03:ac:0f:51:24:bd:18:69:eb:
65:3f:a7:eb:2d:ad:2d:51:73:16:9a:5b:98:57:7c:a8:9c:51:
82:79:97:d1:fd:b3:8e:12:ca:ce:a7:75:18:c8:fb:2f:49:20:
7d:03:c8:85:aa:d1:75:e5:44:48:00:fd:7f:6a:fa:e3:f2:78:
96:b8:0e:2f:03:6d:02:33:cf:fc:8b:d8:a0:c3:68:a2:f7:a4:
b6:2b:17:a8:2d:38:a1:2b:60:bf:d3:1e:66:1c:df:9d:50:ce:
54:79:2e:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:24:08 2025 by rpki-client