Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/452c2b-f2cf-4a92-a1cd-f0198c6c2474/1/Ss4p2Wi9YLUTVxVEOHNi-gD-YLo.roa
File: Ss4p2Wi9YLUTVxVEOHNi-gD-YLo.roa (raw, json)
Hash identifier: IbN6B6NWFefTjZbMVpJkmbwj8ZHivUrVhvuHXNdd+oQ=
Subject key identifier: 4A:CE:29:D9:68:BD:60:B5:13:57:15:44:38:73:62:FA:00:FE:60:BA
Certificate issuer: /CN=6696aea6bab79c48f5ddee4a46bf4ab64d863160
Certificate serial: 0194228DFEFB5041306F1C46BA71CD69A013
Authority key identifier: 66:96:AE:A6:BA:B7:9C:48:F5:DD:EE:4A:46:BF:4A:B6:4D:86:31:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zpauprq3nEj13e5KRr9Ktk2GMWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/452c2b-f2cf-4a92-a1cd-f0198c6c2474/1/Ss4p2Wi9YLUTVxVEOHNi-gD-YLo.roa
Signing time: Wed 01 Jan 2025 15:48:38 +0000
ROA not before: Wed 01 Jan 2025 15:48:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200363
IP address blocks: 91.197.232.0/24 maxlen: 24
91.197.233.0/24 maxlen: 24
2a01:af::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/452c2b-f2cf-4a92-a1cd-f0198c6c2474/1/Zpauprq3nEj13e5KRr9Ktk2GMWA.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/452c2b-f2cf-4a92-a1cd-f0198c6c2474/1/Zpauprq3nEj13e5KRr9Ktk2GMWA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zpauprq3nEj13e5KRr9Ktk2GMWA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 06:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:fe:fb:50:41:30:6f:1c:46:ba:71:cd:69:a0:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6696aea6bab79c48f5ddee4a46bf4ab64d863160
Validity
Not Before: Jan 1 15:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4ace29d968bd60b513571544387362fa00fe60ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c4:a0:24:41:47:a3:fa:e6:78:6f:8b:03:ee:
3a:14:1a:d3:c4:c8:9b:b5:7c:f1:b6:61:74:a2:aa:
27:6d:76:c1:99:ad:5b:fa:79:76:27:33:d2:d0:9d:
e8:0b:41:0d:94:6f:5a:9b:ab:e9:dd:4b:ce:6e:dc:
65:e2:96:aa:b7:0f:a2:40:bf:73:29:11:e3:55:d9:
11:23:49:f7:ad:fb:79:90:d9:5f:01:8d:09:a0:e1:
c4:f8:d8:98:3f:fd:17:b4:e1:e9:05:24:cc:04:ea:
f1:c0:6b:74:62:16:69:39:8b:79:35:ab:18:84:23:
92:7f:5f:20:b7:79:4b:25:c3:b8:3f:3a:41:13:99:
a6:c8:d2:ec:a5:24:ee:ae:31:3f:1f:c8:f7:f6:1c:
ab:82:fb:36:3e:04:e1:20:00:5b:cb:a6:3e:b3:07:
b0:e6:03:95:bb:22:80:72:0f:fe:17:98:20:1b:03:
36:e6:05:fa:bd:6d:78:0d:fd:ee:0c:b0:ef:2d:36:
3d:26:89:4a:ba:66:a9:2b:c2:1f:1b:b8:0c:09:d9:
af:24:22:b7:4d:9e:89:a9:b6:b4:53:a6:85:00:13:
44:5d:5e:6c:17:58:12:c6:ef:ba:be:d9:b0:fe:b7:
28:f7:89:a9:22:97:d0:71:61:91:c0:df:7a:62:fe:
df:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:CE:29:D9:68:BD:60:B5:13:57:15:44:38:73:62:FA:00:FE:60:BA
X509v3 Authority Key Identifier:
keyid:66:96:AE:A6:BA:B7:9C:48:F5:DD:EE:4A:46:BF:4A:B6:4D:86:31:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zpauprq3nEj13e5KRr9Ktk2GMWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/452c2b-f2cf-4a92-a1cd-f0198c6c2474/1/Ss4p2Wi9YLUTVxVEOHNi-gD-YLo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/452c2b-f2cf-4a92-a1cd-f0198c6c2474/1/Zpauprq3nEj13e5KRr9Ktk2GMWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.197.232.0/23
IPv6:
2a01:af::/32
Signature Algorithm: sha256WithRSAEncryption
39:fd:f2:1a:72:54:f6:b5:28:24:b0:9c:ba:7f:b2:18:2a:f4:
1e:6e:76:c1:7f:57:4d:5d:ad:f7:1a:58:ba:2d:97:92:fa:d4:
30:df:bf:4f:93:e8:28:c3:21:3b:cd:0c:f3:d0:65:26:b3:82:
ca:51:20:c7:9c:82:bc:74:0f:2c:db:65:4f:0b:f3:76:d9:1d:
69:78:aa:2c:d4:08:84:1d:39:6b:2e:1d:7f:a0:8d:5c:21:d1:
0d:27:69:05:ea:71:18:42:b4:4e:9f:99:a7:dc:0a:9b:68:ff:
85:2b:c1:51:90:60:2e:04:a0:35:3c:63:09:53:f6:e4:e3:7f:
64:b2:1d:a0:60:4b:6b:20:ba:9f:27:82:48:c1:a1:ab:d1:51:
d6:84:41:65:b8:9a:95:96:fa:c4:87:1b:f9:f3:bb:da:ff:33:
65:5d:3c:92:60:f1:79:5d:6e:ca:f7:fb:4e:6a:a1:01:ae:63:
a2:c1:a3:b8:4b:1a:86:77:6a:dc:43:2d:54:ec:4c:75:e5:64:
6e:c2:4d:46:dd:92:49:e3:eb:35:21:4b:09:2a:f2:a2:e8:63:
80:aa:5d:5a:0d:42:a2:50:9a:38:35:d8:f3:79:3a:8c:1f:1c:
3a:bc:43:44:8c:d8:3e:61:59:7f:78:b9:1e:71:f7:9e:80:e2:
60:d6:e1:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 16:06:39 2025 by rpki-client