Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/964035-381a-41b0-9fdd-f65d33a9926b/1/Z6qviYCXQTeLJoJfMAOJcgB-9Qg.roa
File: Z6qviYCXQTeLJoJfMAOJcgB-9Qg.roa (raw, json)
Hash identifier: oDapm5Z+x3QJafhm3qUyzSGeINGec4KUVgNU/i7jaZI=
Subject key identifier: 67:AA:AF:89:80:97:41:37:8B:26:82:5F:30:03:89:72:00:7E:F5:08
Certificate issuer: /CN=fc59549f6dd2b83144b880c23f06fba3b25d3986
Certificate serial: 019421B1EF4D718503A87D637362C5E82DC6
Authority key identifier: FC:59:54:9F:6D:D2:B8:31:44:B8:80:C2:3F:06:FB:A3:B2:5D:39:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_FlUn23SuDFEuIDCPwb7o7JdOYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/964035-381a-41b0-9fdd-f65d33a9926b/1/Z6qviYCXQTeLJoJfMAOJcgB-9Qg.roa
Signing time: Wed 01 Jan 2025 11:48:16 +0000
ROA not before: Wed 01 Jan 2025 11:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198841
IP address blocks: 91.239.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/964035-381a-41b0-9fdd-f65d33a9926b/1/_FlUn23SuDFEuIDCPwb7o7JdOYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/964035-381a-41b0-9fdd-f65d33a9926b/1/_FlUn23SuDFEuIDCPwb7o7JdOYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/_FlUn23SuDFEuIDCPwb7o7JdOYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 10:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:ef:4d:71:85:03:a8:7d:63:73:62:c5:e8:2d:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc59549f6dd2b83144b880c23f06fba3b25d3986
Validity
Not Before: Jan 1 11:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=67aaaf89809741378b26825f30038972007ef508
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e0:1b:01:f8:8a:69:52:08:0b:25:db:2f:9a:
1e:2c:c3:b4:60:cd:90:77:53:4c:81:62:06:ca:f6:
ca:69:c2:d3:c4:dd:95:20:2e:74:56:6f:7a:ad:b8:
3b:e7:9e:85:63:9d:0a:9f:43:3d:56:99:99:a7:d0:
21:5a:a2:e0:60:97:1d:8e:7b:62:78:a0:ae:51:a5:
46:6b:20:bd:74:d6:08:3a:52:6e:74:94:ab:fb:26:
40:ce:99:33:37:62:55:55:f2:aa:49:74:3c:04:11:
1c:22:6f:3b:5a:45:79:a2:fb:15:33:00:4d:5f:13:
83:1a:47:96:1d:fd:6a:18:8e:97:44:58:cb:62:d7:
a0:28:2c:15:55:65:72:6f:a9:91:4f:df:2c:cb:9a:
e7:79:c1:ba:b9:0c:c1:0a:06:9a:93:64:ec:da:bf:
05:82:66:45:5c:9f:94:6f:02:e5:98:b4:06:c1:9b:
2d:ed:68:d0:6e:05:41:e0:fb:64:2c:13:92:a2:83:
2d:5d:84:f4:c6:35:9e:6b:99:ea:07:3b:f6:fe:6d:
2f:fc:78:7f:c6:11:79:ac:54:d7:1c:61:fe:f2:e0:
1f:10:09:d5:1b:d7:ad:f9:ec:42:98:7e:f0:c7:50:
93:c6:3a:3d:15:31:93:e0:48:aa:3b:5a:b8:07:a5:
61:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:AA:AF:89:80:97:41:37:8B:26:82:5F:30:03:89:72:00:7E:F5:08
X509v3 Authority Key Identifier:
keyid:FC:59:54:9F:6D:D2:B8:31:44:B8:80:C2:3F:06:FB:A3:B2:5D:39:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FlUn23SuDFEuIDCPwb7o7JdOYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/964035-381a-41b0-9fdd-f65d33a9926b/1/Z6qviYCXQTeLJoJfMAOJcgB-9Qg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/964035-381a-41b0-9fdd-f65d33a9926b/1/_FlUn23SuDFEuIDCPwb7o7JdOYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.243.0/24
Signature Algorithm: sha256WithRSAEncryption
54:e6:c8:aa:a4:b3:89:f6:13:c0:4e:b1:9b:7b:f6:a8:37:08:
6d:85:c1:70:bf:fd:cc:53:b2:2a:5b:f7:0f:76:bf:30:80:ec:
c6:c9:2a:98:ec:ba:b0:92:25:2b:c8:56:01:91:c9:7f:52:53:
19:45:88:af:51:43:68:63:d9:fc:49:2d:b7:31:f0:e1:a9:a4:
b2:55:4f:92:b3:d1:eb:41:d8:bc:6d:da:f2:8f:db:85:aa:f4:
79:a4:17:8c:8c:09:db:47:f5:2a:4d:7c:4e:d8:e6:01:42:0d:
cd:af:2c:1d:00:e7:d7:d2:03:03:76:a6:89:d4:55:cd:f8:bf:
46:fe:96:c0:07:7e:92:da:b3:1d:0b:de:d4:6a:b6:54:8a:20:
22:9f:42:d6:8e:f3:58:fb:2d:4c:f6:42:b3:4a:db:a5:1f:89:
f3:ee:fc:2c:26:50:d4:ea:4c:c1:77:b0:11:25:fb:e3:41:bb:
99:a7:14:c2:7a:47:07:00:92:e0:0c:a0:0a:e1:ce:4f:bb:ab:
1b:74:49:7f:77:96:26:b8:4c:4b:da:3a:e3:a5:d9:77:89:4d:
56:67:b7:7a:d2:e7:25:87:29:75:ea:e9:e9:47:b3:c1:5a:08:
f1:47:e0:dc:2b:a1:0d:5f:4a:6f:ea:25:0f:73:37:2b:ff:eb:
88:c6:54:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:37:12 2025 by rpki-client