Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/i3qsVHyfbqO0LUJfHTVL0XnxqmQ.roa
File: i3qsVHyfbqO0LUJfHTVL0XnxqmQ.roa (raw, json)
Hash identifier: bRxbKPEHo1x0VknlCGZJYlUtB8abnLChZo1PgdyJ4io=
Subject key identifier: 8B:7A:AC:54:7C:9F:6E:A3:B4:2D:42:5F:1D:35:4B:D1:79:F1:AA:64
Certificate issuer: /CN=2f2a0fa20383332a3f414f054753a0b60b25ba10
Certificate serial: 01942220111A4D183414BE8E2CB31BE0A932
Authority key identifier: 2F:2A:0F:A2:03:83:33:2A:3F:41:4F:05:47:53:A0:B6:0B:25:BA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/i3qsVHyfbqO0LUJfHTVL0XnxqmQ.roa
Signing time: Wed 01 Jan 2025 13:48:34 +0000
ROA not before: Wed 01 Jan 2025 13:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31742
IP address blocks: 91.241.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 22:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:11:1a:4d:18:34:14:be:8e:2c:b3:1b:e0:a9:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f2a0fa20383332a3f414f054753a0b60b25ba10
Validity
Not Before: Jan 1 13:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8b7aac547c9f6ea3b42d425f1d354bd179f1aa64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:93:db:19:f6:c6:8e:f4:37:ef:7e:2f:dc:be:
a4:53:fc:a7:7d:69:b6:7b:74:73:be:4b:f4:a9:4f:
30:03:74:e8:f3:fc:48:8a:c6:f8:12:49:e3:e0:bb:
6b:02:d5:f3:26:ad:74:12:87:ea:43:85:fd:23:ed:
53:db:b9:7b:1a:02:4d:9c:58:ca:65:2c:b4:c5:d4:
47:bc:0e:a5:66:bf:6f:55:04:ca:c2:51:63:15:3c:
7a:a2:46:30:e1:e5:c6:d8:84:fc:ce:9e:fe:40:df:
0e:cf:83:e5:3f:dd:92:66:56:e5:3c:d9:e5:90:bf:
b4:4f:42:f1:3e:72:35:30:3b:04:b7:a0:1e:49:87:
cd:79:ae:32:2a:f0:b8:e0:38:44:cb:33:0f:f9:b1:
69:02:5c:08:c0:90:83:fe:61:ef:12:e4:3f:dc:40:
a8:a4:a8:5f:e2:a3:b2:bd:c2:2e:0d:fd:53:e4:9e:
17:b8:bb:56:af:1e:2b:99:f7:6f:49:7d:76:c3:50:
72:7d:ba:ba:ce:b5:67:43:ab:e7:ad:9d:d4:8d:fa:
98:f1:af:f4:a5:0b:ae:37:72:3f:70:3b:c5:ed:6e:
69:d1:c7:83:f6:ef:32:68:f7:e3:0c:ff:71:b7:b7:
88:b6:2a:fb:db:bb:1b:46:3c:50:54:03:42:ba:e7:
93:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:7A:AC:54:7C:9F:6E:A3:B4:2D:42:5F:1D:35:4B:D1:79:F1:AA:64
X509v3 Authority Key Identifier:
keyid:2F:2A:0F:A2:03:83:33:2A:3F:41:4F:05:47:53:A0:B6:0B:25:BA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/i3qsVHyfbqO0LUJfHTVL0XnxqmQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.241.78.0/24
Signature Algorithm: sha256WithRSAEncryption
15:7b:b3:84:de:01:7e:42:82:ca:bf:fa:34:ee:05:dc:49:cf:
f9:1b:e8:13:ef:13:69:cf:cc:ed:82:03:21:a0:eb:53:e0:8c:
09:a5:cc:fa:8f:33:fa:d3:42:69:d5:a1:23:eb:a3:c5:f7:1d:
fc:29:e9:fd:f0:75:f5:2b:2f:f5:d4:ff:c8:00:91:02:48:51:
53:50:d5:ad:96:2b:25:46:19:6a:56:82:25:87:a0:d0:1e:8f:
12:42:b3:99:31:2a:b1:95:a2:7f:1a:18:6a:f9:08:dc:73:21:
5b:ce:d4:48:f0:b6:6e:eb:15:ca:b3:5d:26:00:6f:89:ae:f4:
1e:78:11:17:fb:fc:4e:7c:50:4f:be:e1:6f:e1:53:c4:54:8b:
a7:cc:8a:e7:d0:d2:13:55:13:53:8b:e4:68:1e:85:a2:1e:d4:
42:1e:e2:c0:1b:ae:0a:8b:a1:01:b4:98:0f:40:b3:c4:b0:9d:
6f:6e:9a:62:41:35:93:a5:1e:17:41:d5:77:2d:69:5a:71:7e:
2e:37:5c:54:92:23:2f:43:8a:79:9a:f0:b8:d0:f4:b1:d6:c4:
e3:c3:8f:ad:4c:58:fd:d0:be:12:26:d0:69:d1:2e:e7:c2:89:
a6:c8:5d:bc:83:2a:82:c7:a9:35:28:05:e4:4c:42:51:8f:e8:
dd:73:46:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 08:27:02 2025 by rpki-client