Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/34VAKZ3gTB0K6y5Jn98OpVnf6K0.roa
File: 34VAKZ3gTB0K6y5Jn98OpVnf6K0.roa (raw, json)
Hash identifier: 0+PPWp0o1/rwBJiAmqaqRlxFY24T5j6RDdie2DfGC7Q=
Subject key identifier: DF:85:40:29:9D:E0:4C:1D:0A:EB:2E:49:9F:DF:0E:A5:59:DF:E8:AD
Certificate issuer: /CN=9a7edeac0c6c20ea49d492990e4858541d190ff1
Certificate serial: 019423D72FAB25222B735C182E342127D68F
Authority key identifier: 9A:7E:DE:AC:0C:6C:20:EA:49:D4:92:99:0E:48:58:54:1D:19:0F:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/34VAKZ3gTB0K6y5Jn98OpVnf6K0.roa
Signing time: Wed 01 Jan 2025 21:48:12 +0000
ROA not before: Wed 01 Jan 2025 21:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6698
IP address blocks: 91.213.175.0/24 maxlen: 24
91.237.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 21:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:2f:ab:25:22:2b:73:5c:18:2e:34:21:27:d6:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a7edeac0c6c20ea49d492990e4858541d190ff1
Validity
Not Before: Jan 1 21:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=df8540299de04c1d0aeb2e499fdf0ea559dfe8ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:fb:ad:7e:79:9d:51:51:5a:77:9d:fd:0c:d0:
74:1e:23:5d:f8:fd:31:67:f5:3a:99:95:c7:12:30:
36:6b:45:aa:98:c0:06:4e:23:03:88:63:d0:2b:f7:
15:4f:a6:ce:ec:a7:7c:5c:e6:cd:09:41:ba:a5:3a:
c4:c8:b1:a1:99:4f:44:52:a0:b7:2e:7b:a4:b3:57:
06:1e:8c:c0:f8:c4:8e:8b:ee:db:44:9c:03:42:11:
0a:c9:c3:d0:dd:47:11:4b:36:8b:c6:7b:40:af:81:
73:fa:f3:78:6c:dd:19:57:48:5e:6d:8e:bd:37:3d:
24:91:7a:ae:fa:0a:88:e8:70:d0:98:3f:d0:1d:ff:
87:4e:f4:e0:cc:d2:eb:1b:43:b4:f5:2c:9c:11:bf:
df:55:2b:dd:1a:6e:9b:1d:19:4d:0f:5b:77:e6:f3:
ff:58:3d:18:a5:21:31:7b:9c:02:62:63:80:01:22:
e2:d0:75:a9:f4:0c:57:50:81:31:03:36:6a:d1:68:
dd:d5:77:a9:77:83:e2:10:e0:bc:5a:e4:e0:35:ff:
2a:9c:92:66:30:bb:7b:13:bb:2b:74:ad:7e:1f:da:
74:2d:00:42:a6:c4:a0:6c:cf:73:ab:05:cc:3f:b6:
3c:a1:7e:92:c3:d9:17:f9:9d:f3:ab:de:7d:dd:96:
90:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:85:40:29:9D:E0:4C:1D:0A:EB:2E:49:9F:DF:0E:A5:59:DF:E8:AD
X509v3 Authority Key Identifier:
keyid:9A:7E:DE:AC:0C:6C:20:EA:49:D4:92:99:0E:48:58:54:1D:19:0F:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/34VAKZ3gTB0K6y5Jn98OpVnf6K0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.175.0/24
91.237.250.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:14:43:77:ef:3a:6a:7d:ad:ef:5b:0a:2b:ab:4a:c4:d2:92:
0c:59:47:2d:81:93:5a:e3:fd:04:69:40:46:bd:fb:d7:9b:a0:
e1:03:c7:bf:89:eb:18:06:01:6b:23:62:aa:0e:a7:65:5d:de:
3d:30:2a:de:b1:55:6c:40:0a:29:b3:04:63:5f:94:90:45:5b:
1d:8c:ce:6d:fa:89:66:c5:b1:43:65:c7:cf:f5:e8:fd:3a:5f:
40:69:6c:1b:fb:bd:44:6b:61:27:2b:4f:74:81:ec:73:4f:23:
e7:46:94:82:dd:ea:df:c9:6e:7c:f1:9b:5a:2d:df:e7:81:8b:
13:c7:54:93:4a:6b:ac:75:85:fd:80:06:74:1b:cc:72:87:32:
f1:aa:18:39:54:7f:aa:dd:fd:fa:37:af:51:de:43:8e:a7:f8:
30:a2:e6:f8:51:92:55:df:f3:f5:63:72:68:5c:ec:8d:45:db:
2e:48:89:1f:5d:30:d8:17:2b:3e:9b:e0:72:2f:bb:13:6d:35:
b5:ce:43:de:8b:10:8c:38:b9:d9:9c:2d:ae:c3:5b:72:57:e6:
0c:31:04:e3:71:3f:ab:04:8c:0c:05:8b:6f:b1:6d:fa:dc:7a:
1e:ed:32:98:50:a5:64:a1:69:6e:dd:3d:a8:1c:cb:ed:90:6c:
95:d0:1f:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 07:01:23 2025 by rpki-client