Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/ac25b4-194e-49c4-aab1-0fe4d7f7db3d/1/sY4zDGKaTiswT3v9bquB0z3xZ38.roa
File: sY4zDGKaTiswT3v9bquB0z3xZ38.roa (raw, json)
Hash identifier: UFeTme0jN/PK2GkSjMta2wryPzRGN56pgsmPYrOPfD0=
Subject key identifier: B1:8E:33:0C:62:9A:4E:2B:30:4F:7B:FD:6E:AB:81:D3:3D:F1:67:7F
Certificate issuer: /CN=22c152606125eb66d522263fa03109bbf0bba3da
Certificate serial: 01941FFA2B93A564E5AA4261984E04B25A79
Authority key identifier: 22:C1:52:60:61:25:EB:66:D5:22:26:3F:A0:31:09:BB:F0:BB:A3:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsFSYGEl62bVIiY_oDEJu_C7o9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/ac25b4-194e-49c4-aab1-0fe4d7f7db3d/1/sY4zDGKaTiswT3v9bquB0z3xZ38.roa
Signing time: Wed 01 Jan 2025 03:47:56 +0000
ROA not before: Wed 01 Jan 2025 03:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198874
IP address blocks: 91.234.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/ac25b4-194e-49c4-aab1-0fe4d7f7db3d/1/IsFSYGEl62bVIiY_oDEJu_C7o9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/ac25b4-194e-49c4-aab1-0fe4d7f7db3d/1/IsFSYGEl62bVIiY_oDEJu_C7o9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsFSYGEl62bVIiY_oDEJu_C7o9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:2b:93:a5:64:e5:aa:42:61:98:4e:04:b2:5a:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c152606125eb66d522263fa03109bbf0bba3da
Validity
Not Before: Jan 1 03:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b18e330c629a4e2b304f7bfd6eab81d33df1677f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f5:15:1c:25:03:85:27:39:a2:fe:8f:91:4e:
ab:c1:79:c2:65:ae:86:cc:f1:0b:e5:83:f5:b3:f7:
1b:e3:a8:1d:0d:e6:8d:dc:a1:5d:6b:ab:e9:51:e1:
15:4b:f7:2c:82:6e:43:df:15:e2:b5:b7:29:da:56:
da:fe:a9:76:b2:03:7b:46:c9:f9:a6:f3:aa:8e:9e:
a3:1f:3d:64:ef:bf:ce:4f:b9:96:b0:62:ad:45:8e:
e9:ab:44:ab:f0:83:a0:21:8c:4d:a5:c2:5d:77:21:
93:14:39:69:92:ea:bb:2a:7c:95:2e:51:5d:7d:d1:
29:b7:e5:20:39:ce:ed:06:09:f1:80:85:c6:63:72:
ed:63:9c:41:15:1c:0a:95:36:56:42:c1:52:f4:af:
9f:0e:1c:15:dd:fd:c4:a6:a0:7c:93:be:54:66:1f:
69:c7:7c:37:14:4f:71:46:db:96:de:e6:cf:ef:f0:
f0:de:ae:b1:8d:9e:71:d7:9f:c0:a2:08:e3:71:51:
36:e4:95:13:c9:5f:9a:7b:1b:27:07:ab:1b:94:91:
a3:58:3d:c5:4f:19:4e:97:b4:db:9e:3a:a9:55:e4:
7a:16:f1:e2:67:39:79:e6:43:0b:2d:05:dd:ec:b6:
b4:5a:39:38:11:bd:2c:a8:9a:27:a8:57:38:3f:62:
e3:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:8E:33:0C:62:9A:4E:2B:30:4F:7B:FD:6E:AB:81:D3:3D:F1:67:7F
X509v3 Authority Key Identifier:
keyid:22:C1:52:60:61:25:EB:66:D5:22:26:3F:A0:31:09:BB:F0:BB:A3:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsFSYGEl62bVIiY_oDEJu_C7o9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ac25b4-194e-49c4-aab1-0fe4d7f7db3d/1/sY4zDGKaTiswT3v9bquB0z3xZ38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ac25b4-194e-49c4-aab1-0fe4d7f7db3d/1/IsFSYGEl62bVIiY_oDEJu_C7o9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.234.228.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:55:fe:88:02:f3:91:6a:99:a5:de:8f:fc:60:cb:56:e8:45:
64:37:2d:0c:e0:81:f3:7e:a3:41:e8:42:54:b0:0d:0e:46:50:
9d:1b:c7:06:87:bb:c1:9b:f8:07:c3:46:c1:74:08:ff:1f:0a:
67:09:1a:93:0d:5c:9d:68:41:5b:39:9e:6b:bd:7d:de:06:09:
f9:c3:be:d9:6a:e3:0f:37:2c:68:a9:1e:1d:8e:86:18:bc:77:
cf:de:ca:a1:c0:bc:7a:f8:0c:5a:a8:89:f6:9b:74:0c:6a:8a:
84:7c:36:7c:85:ed:46:a9:78:92:a1:65:0d:d8:0b:fd:46:67:
b5:60:60:f5:ff:38:7e:cd:df:8f:4c:5a:62:57:bf:85:36:23:
6d:19:c7:65:29:1d:54:fb:84:c6:91:45:6b:92:18:1e:6f:27:
49:dc:6f:e9:5b:5c:32:0e:27:dc:12:f9:92:56:9d:4b:fc:51:
21:a8:a0:83:1f:60:45:3a:24:5a:14:6c:c4:04:30:ea:01:4e:
72:e9:ef:49:5b:f8:13:0d:db:11:9c:d7:79:36:b3:8d:91:1c:
c7:88:18:3d:a0:e1:5c:4f:5b:4a:d9:2a:30:5f:a6:3a:19:81:
c0:8e:f8:11:31:f8:3d:ff:10:a4:27:50:24:c9:56:84:b2:88:
e8:ca:b3:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:34:55 2025 by rpki-client