Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/hTVB9eVU8NNiy6MIVDn_GhyE-TY.roa
File: hTVB9eVU8NNiy6MIVDn_GhyE-TY.roa (raw, json)
Hash identifier: d7gEsYm91j6b+k2E5nN8wQQW4TMiwqo8rZZMnn76l+U=
Subject key identifier: 85:35:41:F5:E5:54:F0:D3:62:CB:A3:08:54:39:FF:1A:1C:84:F9:36
Certificate issuer: /CN=cec3b347a216bc437b0bd4cf0bc8cda65e8c2d3b
Certificate serial: 019426D964094310B36A1C11F03194E718E3
Authority key identifier: CE:C3:B3:47:A2:16:BC:43:7B:0B:D4:CF:0B:C8:CD:A6:5E:8C:2D:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsOzR6IWvEN7C9TPC8jNpl6MLTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/hTVB9eVU8NNiy6MIVDn_GhyE-TY.roa
Signing time: Thu 02 Jan 2025 11:49:28 +0000
ROA not before: Thu 02 Jan 2025 11:49:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 91.102.184.0/24 maxlen: 24
91.102.185.0/24 maxlen: 24
91.102.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/zsOzR6IWvEN7C9TPC8jNpl6MLTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/zsOzR6IWvEN7C9TPC8jNpl6MLTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/zsOzR6IWvEN7C9TPC8jNpl6MLTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 20:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:64:09:43:10:b3:6a:1c:11:f0:31:94:e7:18:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec3b347a216bc437b0bd4cf0bc8cda65e8c2d3b
Validity
Not Before: Jan 2 11:49:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=853541f5e554f0d362cba3085439ff1a1c84f936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d3:b8:08:91:70:3e:97:89:7f:5e:f5:a0:dc:
ee:4b:1e:60:62:6a:9d:3e:ed:d5:de:c7:2f:c8:4d:
8f:b9:d9:64:30:d1:1f:7f:ce:5b:63:6f:4b:1c:f2:
2b:fa:da:4f:97:f7:49:7c:d2:a0:68:a7:a5:94:ba:
d4:bc:04:d8:83:9f:7f:f3:2c:e2:31:86:36:ce:12:
60:0b:fa:71:65:31:e5:4c:d7:f1:74:c3:a4:77:bf:
7a:ed:19:d1:60:9d:a1:54:6a:bf:5f:eb:a0:60:86:
80:44:99:ab:03:79:d7:d4:9b:ec:ab:fb:26:42:63:
41:41:99:f4:7d:55:3e:04:c1:e5:59:0b:9e:bf:36:
6f:49:47:08:ee:3e:18:d4:7b:e1:09:cd:b9:be:5b:
32:7f:dc:6c:51:b1:b5:11:de:99:c7:df:b9:74:80:
9b:5c:9b:6d:de:e8:6d:4c:37:00:0e:28:da:95:cc:
8f:34:12:93:8d:a1:ad:59:c0:90:13:d5:c4:7f:2d:
41:06:32:52:48:c3:52:65:be:39:be:70:5c:d8:4e:
67:c4:b4:13:8f:95:dd:56:39:09:f5:d2:ec:f7:4f:
cd:21:1d:49:27:c8:a8:97:7c:97:5c:b0:63:21:13:
bc:3f:2d:f8:32:f9:89:54:18:38:76:79:8d:70:56:
af:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:35:41:F5:E5:54:F0:D3:62:CB:A3:08:54:39:FF:1A:1C:84:F9:36
X509v3 Authority Key Identifier:
keyid:CE:C3:B3:47:A2:16:BC:43:7B:0B:D4:CF:0B:C8:CD:A6:5E:8C:2D:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsOzR6IWvEN7C9TPC8jNpl6MLTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/hTVB9eVU8NNiy6MIVDn_GhyE-TY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/zsOzR6IWvEN7C9TPC8jNpl6MLTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.102.184.0-91.102.186.255
Signature Algorithm: sha256WithRSAEncryption
76:fb:82:0a:54:f8:1e:c6:60:39:a0:c4:a1:2f:8d:45:06:e1:
42:8f:8f:16:7c:40:82:60:03:53:98:70:b6:07:0c:50:b4:14:
aa:60:40:fa:0f:a9:ab:98:f5:a8:27:36:b0:96:dc:4a:be:61:
8d:5e:aa:f1:dc:b1:60:36:f5:0a:ed:41:2e:61:55:2c:c0:c2:
ea:bd:4f:78:d9:13:c9:f3:aa:bb:c8:14:6f:89:55:c5:3c:89:
80:76:4c:10:d2:cb:4c:48:f7:e8:06:62:ca:49:8b:7c:ec:1c:
37:a9:f4:2e:70:18:fb:a4:aa:ae:c1:c4:dc:5f:00:2a:4e:cd:
f9:50:b7:a2:48:64:e6:65:c0:a9:9e:40:2f:6e:2f:65:0e:d8:
fa:8f:ae:eb:41:24:75:b3:3e:2f:43:b0:d5:ba:99:b7:fa:6e:
62:99:a3:15:1d:b7:1e:a7:ee:79:38:51:b2:04:84:cc:d3:8b:
3a:ca:23:52:d6:8b:3d:95:e1:5d:96:f0:da:4d:77:fa:b4:e1:
24:8d:5c:04:98:a4:22:1e:e0:37:93:93:6a:fa:5d:80:98:51:
14:b7:62:88:2b:99:ed:0e:46:36:2c:ba:e4:3f:f8:17:f3:e0:
9d:47:88:17:29:8d:d2:f6:25:58:17:0e:a2:63:1c:93:4c:be:
d1:22:1b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:34:09 2025 by rpki-client