Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/6f12c1-9133-4a2b-9df8-9b537f63b75d/1/REh2fJFOUQT0aTDY9FX0qElIo2A.roa
File: REh2fJFOUQT0aTDY9FX0qElIo2A.roa (raw, json)
Hash identifier: v403zz3pfGBhC2EeF1+1/Ixjaub1EklsKy+XOu6apXQ=
Subject key identifier: 44:48:76:7C:91:4E:51:04:F4:69:30:D8:F4:55:F4:A8:49:48:A3:60
Certificate issuer: /CN=1838c5c22c976da65a1fd16e8f9c0c94e27a4ba6
Certificate serial: 019425FDC18ACFDEF0F5D6063136C15C4A04
Authority key identifier: 18:38:C5:C2:2C:97:6D:A6:5A:1F:D1:6E:8F:9C:0C:94:E2:7A:4B:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/6f12c1-9133-4a2b-9df8-9b537f63b75d/1/REh2fJFOUQT0aTDY9FX0qElIo2A.roa
Signing time: Thu 02 Jan 2025 07:49:34 +0000
ROA not before: Thu 02 Jan 2025 07:49:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43986
IP address blocks: 91.198.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/6f12c1-9133-4a2b-9df8-9b537f63b75d/1/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/6f12c1-9133-4a2b-9df8-9b537f63b75d/1/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:c1:8a:cf:de:f0:f5:d6:06:31:36:c1:5c:4a:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1838c5c22c976da65a1fd16e8f9c0c94e27a4ba6
Validity
Not Before: Jan 2 07:49:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4448767c914e5104f46930d8f455f4a84948a360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b7:3d:9b:1c:41:9f:e8:2c:7d:cd:26:3d:f1:
c6:d8:f6:d0:5f:7d:f4:90:54:d1:5c:69:6b:18:90:
25:ac:0e:da:20:48:10:dd:88:5a:9c:3d:99:d9:06:
f9:1a:b9:40:73:35:9f:3f:26:bc:b8:75:5c:69:86:
75:f3:25:ac:ef:dd:9c:e3:af:8d:1f:15:4e:a9:e2:
26:e6:db:22:00:7a:07:f9:74:95:3a:ff:54:20:5c:
19:bc:3c:bf:e8:05:29:19:e9:f1:7f:6e:9c:fa:7a:
15:07:d5:fc:d8:b4:66:65:70:ee:31:93:07:b2:3a:
de:80:e4:5b:f7:5a:32:e3:35:6b:6a:be:5b:4b:5c:
49:d5:5b:c5:00:d9:4e:aa:c4:85:28:01:e3:58:5d:
94:11:e9:4f:85:d5:79:08:20:10:7c:7e:24:ec:32:
23:3a:43:ad:2a:19:dd:c9:b0:3a:2a:1f:ef:9b:90:
89:12:15:6a:77:bb:38:62:3b:78:15:50:d8:bb:f7:
a5:1c:2f:08:61:90:d2:35:f8:f2:63:24:28:41:93:
3e:c2:41:f8:b4:49:c1:38:53:8b:f4:73:77:7c:a4:
ce:2a:99:8a:c3:f1:c2:f1:9d:ea:7e:fa:3e:2e:7d:
88:1b:ee:47:7f:93:5a:a0:d6:09:f0:af:66:4e:34:
6b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:48:76:7C:91:4E:51:04:F4:69:30:D8:F4:55:F4:A8:49:48:A3:60
X509v3 Authority Key Identifier:
keyid:18:38:C5:C2:2C:97:6D:A6:5A:1F:D1:6E:8F:9C:0C:94:E2:7A:4B:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6f12c1-9133-4a2b-9df8-9b537f63b75d/1/REh2fJFOUQT0aTDY9FX0qElIo2A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6f12c1-9133-4a2b-9df8-9b537f63b75d/1/GDjFwiyXbaZaH9Fuj5wMlOJ6S6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.237.0/24
Signature Algorithm: sha256WithRSAEncryption
01:6b:1a:3d:39:1e:4b:d6:89:f6:03:d3:35:cb:5f:23:6d:9b:
62:d9:13:75:e0:50:b7:f7:09:66:0b:ca:d7:72:19:83:cf:22:
72:67:57:9e:2f:a5:5b:08:03:b4:c5:72:94:bf:d6:f4:6a:fa:
68:70:77:09:2a:89:3b:75:0d:9a:6d:e7:74:4b:c3:c3:24:77:
87:50:ab:ca:63:c9:29:12:16:86:3e:f5:4b:db:49:c2:cd:b9:
13:ce:68:83:a7:08:4d:a1:e5:18:8a:f6:25:85:17:9d:89:7c:
f8:28:b1:b1:55:1e:c0:5e:ec:5c:cf:f5:09:bf:5c:6a:1e:a2:
1c:d4:c2:54:c0:7b:13:c7:61:05:5b:5b:3c:f6:88:2f:0f:5f:
a1:d6:23:a3:3e:04:5f:aa:05:05:19:76:e0:5f:0b:73:fd:96:
9f:60:f6:9f:38:58:c9:be:c9:d1:24:26:73:f4:77:cc:26:8e:
aa:a6:95:0a:f6:9e:c8:c0:80:9a:9b:72:6b:b4:b7:aa:73:af:
48:ae:e9:e5:85:b2:98:9d:6c:aa:f1:53:18:f1:4e:f0:dd:79:
28:b9:91:4c:7c:e3:7f:69:ed:c5:35:d4:64:57:ca:00:2c:c5:
94:de:c0:c1:d0:38:79:a6:1d:d8:a5:0a:db:56:b9:86:d6:fa:
d7:25:3e:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:54:55 2025 by rpki-client