Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/AIeHAMlo02ixYJZr9DxoRfeqC_w.roa
File: AIeHAMlo02ixYJZr9DxoRfeqC_w.roa (raw, json)
Hash identifier: r/OyoKCdS9zD7ksUp6W0p8pqS4rPDdjM46a0P82mb/E=
Subject key identifier: 00:87:87:00:C9:68:D3:68:B1:60:96:6B:F4:3C:68:45:F7:AA:0B:FC
Certificate issuer: /CN=aa31c98e3cab821c84ddeff2069e02259bd6e61c
Certificate serial: 0194266B8DE5A5D81AEB539161A1F2974C5C
Authority key identifier: AA:31:C9:8E:3C:AB:82:1C:84:DD:EF:F2:06:9E:02:25:9B:D6:E6:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjHJjjyrghyE3e_yBp4CJZvW5hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/AIeHAMlo02ixYJZr9DxoRfeqC_w.roa
Signing time: Thu 02 Jan 2025 09:49:30 +0000
ROA not before: Thu 02 Jan 2025 09:49:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50673
IP address blocks: 91.195.80.0/24 maxlen: 24
91.195.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qjHJjjyrghyE3e_yBp4CJZvW5hw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:8d:e5:a5:d8:1a:eb:53:91:61:a1:f2:97:4c:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa31c98e3cab821c84ddeff2069e02259bd6e61c
Validity
Not Before: Jan 2 09:49:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=00878700c968d368b160966bf43c6845f7aa0bfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b1:b3:3a:80:13:30:3b:3c:61:05:a8:9a:ec:
be:1b:8f:7c:2c:b6:49:81:38:d6:11:60:ab:44:e7:
03:4c:95:41:76:78:f8:7f:ad:2c:3f:49:b9:22:0a:
8c:31:b5:56:76:0c:31:62:b6:ea:ac:02:86:95:98:
89:3a:da:bb:20:6a:e9:0c:03:80:eb:29:52:9d:f2:
6b:e9:db:c4:da:de:e6:27:08:e0:a7:ba:4c:9e:c5:
1a:79:75:58:52:80:55:2a:bf:c7:25:92:91:8c:3e:
d2:38:f6:c5:6e:0c:bf:b4:29:68:bd:47:5b:23:86:
fc:db:e5:ce:65:28:49:21:2c:4f:a4:28:19:42:75:
29:22:bd:db:1e:70:5e:52:31:15:dd:77:14:a3:ae:
14:8a:45:f3:43:f4:9c:74:e0:bf:6f:15:04:04:02:
d9:f4:ba:59:37:20:ad:30:a1:73:5a:4d:bb:ca:f9:
f7:1d:78:37:b9:46:79:36:7f:fe:5e:ae:38:21:96:
1f:92:b2:03:27:92:4a:53:8e:e1:32:73:d3:0e:e5:
3a:21:da:d6:fd:cf:83:df:73:b4:c3:77:11:c9:2b:
1d:02:00:58:43:3f:8c:4d:70:89:4f:bd:69:3d:cd:
98:7f:a8:2c:dd:20:cf:ac:d6:b8:32:93:73:4a:49:
9e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:87:87:00:C9:68:D3:68:B1:60:96:6B:F4:3C:68:45:F7:AA:0B:FC
X509v3 Authority Key Identifier:
keyid:AA:31:C9:8E:3C:AB:82:1C:84:DD:EF:F2:06:9E:02:25:9B:D6:E6:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjHJjjyrghyE3e_yBp4CJZvW5hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/AIeHAMlo02ixYJZr9DxoRfeqC_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.195.80.0/23
Signature Algorithm: sha256WithRSAEncryption
82:31:68:f6:d7:fd:1b:b0:16:20:54:8f:5c:68:48:00:d8:17:
36:8a:61:35:f6:f1:96:b8:a9:70:24:95:3e:5e:85:20:47:cb:
53:ed:e1:3f:c8:de:26:84:8f:ff:16:72:ac:0c:9d:66:1f:7a:
50:81:7d:1a:dd:61:c5:ef:1f:ed:6c:07:2a:f9:f2:a0:4a:10:
6e:16:9f:2f:3d:e2:c8:ac:73:0d:cd:5c:b8:72:92:cd:cb:61:
9d:bd:19:ba:c6:1c:c1:b7:f2:ce:e8:12:a3:9c:ea:df:b5:49:
05:8a:5d:2e:ad:63:15:38:45:8c:c5:14:4f:f1:d4:3c:cb:1c:
04:b1:fd:ea:6d:32:06:b3:90:28:92:c3:e5:17:cb:1d:cb:c0:
51:32:14:99:7c:a3:16:a7:5a:38:96:2f:20:bf:d6:9d:5a:9c:
3d:6e:3b:2b:88:53:d2:39:05:d4:96:7b:12:cc:b0:d9:30:88:
40:36:13:d4:53:f5:fe:2b:94:33:ae:13:f1:15:a4:e1:0c:98:
44:b2:0c:fc:fc:ca:5d:f1:d5:64:ef:d8:33:ec:a2:43:b2:9c:
ff:3e:3f:5f:65:f6:13:1d:4e:0c:7e:4a:2e:d7:3b:f4:dc:cd:
74:3a:af:2e:68:91:55:4e:4a:91:96:42:df:23:83:ab:88:c9:
b8:06:3c:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:54:57 2025 by rpki-client