Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/xiu8A8Z9HiQjvOQtwLKzLq6Rmzs.roa
File: xiu8A8Z9HiQjvOQtwLKzLq6Rmzs.roa (raw, json)
Hash identifier: lWKOLN6hC8W0RzZe4v2RWSxfRmyJvM8+WBxEcTGjqnA=
Subject key identifier: C6:2B:BC:03:C6:7D:1E:24:23:BC:E4:2D:C0:B2:B3:2E:AE:91:9B:3B
Certificate issuer: /CN=06b164189f7db61e8b61fddae5622a0b134f5c16
Certificate serial: 0194228DE8843948D2970573A12595EB598E
Authority key identifier: 06:B1:64:18:9F:7D:B6:1E:8B:61:FD:DA:E5:62:2A:0B:13:4F:5C:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BrFkGJ99th6LYf3a5WIqCxNPXBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/xiu8A8Z9HiQjvOQtwLKzLq6Rmzs.roa
Signing time: Wed 01 Jan 2025 15:48:32 +0000
ROA not before: Wed 01 Jan 2025 15:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62446
IP address blocks: 91.197.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BrFkGJ99th6LYf3a5WIqCxNPXBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 06:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:e8:84:39:48:d2:97:05:73:a1:25:95:eb:59:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06b164189f7db61e8b61fddae5622a0b134f5c16
Validity
Not Before: Jan 1 15:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c62bbc03c67d1e2423bce42dc0b2b32eae919b3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c7:f7:07:fd:ad:15:73:18:7c:94:d9:9c:6e:
05:42:94:88:2e:55:14:5f:a0:6a:e2:05:55:96:7f:
e2:77:a7:ec:7e:ec:47:9d:26:dd:c6:f8:89:ec:59:
01:f8:53:00:21:37:bf:d2:54:20:2b:86:dd:7a:03:
b8:04:b6:7d:a4:14:33:98:91:bd:49:72:92:90:5a:
00:c7:ad:19:ac:3b:c8:f4:e5:8a:3e:77:7f:03:10:
c9:1f:2a:4e:22:e2:9c:40:a8:36:3c:3c:27:64:4c:
82:52:0f:26:3f:6b:5f:18:84:53:04:03:cc:ff:d0:
2d:cf:0c:b6:20:2f:2a:1c:4f:6e:b8:a4:4e:ab:c5:
3e:62:ba:af:11:a9:77:ff:ce:69:01:b8:16:30:af:
4e:e6:52:41:0e:b6:aa:4d:bf:4d:26:02:90:4b:90:
30:48:a8:0a:a0:2e:26:32:da:dc:64:24:5e:cd:70:
5b:90:fa:57:32:bc:f2:bc:47:42:8f:75:17:53:56:
bf:aa:f3:98:ea:09:71:22:27:e9:04:64:9a:d7:0a:
8b:57:45:ef:42:fd:8d:86:a4:fa:4c:12:c5:b0:74:
ee:2c:07:ae:e0:87:54:49:30:3c:fe:2f:f0:c6:1d:
71:48:fd:69:3c:4a:b2:29:a7:d8:bd:9f:3c:1c:1c:
9a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:2B:BC:03:C6:7D:1E:24:23:BC:E4:2D:C0:B2:B3:2E:AE:91:9B:3B
X509v3 Authority Key Identifier:
keyid:06:B1:64:18:9F:7D:B6:1E:8B:61:FD:DA:E5:62:2A:0B:13:4F:5C:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BrFkGJ99th6LYf3a5WIqCxNPXBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/xiu8A8Z9HiQjvOQtwLKzLq6Rmzs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.197.57.0/24
Signature Algorithm: sha256WithRSAEncryption
68:e1:4d:5a:5b:db:96:2d:ef:4d:1c:29:e5:f9:b1:38:47:65:
0d:99:8d:dd:75:e7:92:38:0e:53:f9:de:b2:c3:e8:8d:97:6f:
58:35:94:95:2a:40:2a:80:19:62:b7:4a:05:61:f8:b6:a3:51:
f5:dd:f0:91:26:e0:41:81:03:c0:84:bf:0e:c3:da:32:b1:57:
1f:11:51:e9:a2:45:5f:17:2e:03:61:e1:fe:3a:c4:de:cf:4b:
ff:a4:7d:00:95:90:e8:cb:55:33:f7:10:68:0b:e6:21:c1:89:
63:cd:5c:4a:ef:77:39:33:d2:15:b0:41:02:6e:92:91:09:5a:
1c:49:5c:1a:80:98:d2:73:73:42:07:df:5d:c3:e9:6f:bb:28:
fb:3e:1c:c7:ce:2c:5d:c5:cc:bb:18:08:de:7a:f4:15:b3:a9:
45:f3:b6:a6:2b:c3:84:ae:64:bb:9c:4a:a1:91:f4:d3:fe:c8:
7c:38:1f:42:96:69:0a:8d:cb:6b:79:17:8b:10:43:ef:da:49:
6b:3a:17:88:91:ce:9a:28:84:a1:30:02:1b:29:c3:64:9d:f6:
4e:59:6b:e6:01:53:b9:1f:2b:b4:be:a9:44:8a:b4:4f:86:c6:
d5:00:7c:af:66:54:0b:03:a1:3d:dc:40:e6:51:91:16:bc:c5:
08:d2:9f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:53:03 2025 by rpki-client