Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/s6g2qeenxmDkGrPs5BM25xHO8xU.roa
File: s6g2qeenxmDkGrPs5BM25xHO8xU.roa (raw, json)
Hash identifier: BC1HJ2/1smBeQKjZhdC/Dii9NT9VDbWsnbk1hLUwmhI=
Subject key identifier: B3:A8:36:A9:E7:A7:C6:60:E4:1A:B3:EC:E4:13:36:E7:11:CE:F3:15
Certificate issuer: /CN=7001e422227fa44cc5cb95d2a9dcce0fa5b89c07
Certificate serial: 019425FDB07BF7F625CB9D409AA9AA19E446
Authority key identifier: 70:01:E4:22:22:7F:A4:4C:C5:CB:95:D2:A9:DC:CE:0F:A5:B8:9C:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/s6g2qeenxmDkGrPs5BM25xHO8xU.roa
Signing time: Thu 02 Jan 2025 07:49:30 +0000
ROA not before: Thu 02 Jan 2025 07:49:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211238
IP address blocks: 91.227.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:b0:7b:f7:f6:25:cb:9d:40:9a:a9:aa:19:e4:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7001e422227fa44cc5cb95d2a9dcce0fa5b89c07
Validity
Not Before: Jan 2 07:49:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b3a836a9e7a7c660e41ab3ece41336e711cef315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ee:83:63:e1:7d:75:4e:67:a9:06:ea:a1:43:
ce:df:a7:cf:19:4d:74:99:24:9a:66:71:0a:4b:ff:
58:3f:4b:75:67:b3:0f:22:38:bc:30:c0:11:c6:11:
d0:16:0d:78:ac:a9:9c:a2:4f:67:ce:41:2c:b6:fa:
78:3e:4c:e5:b6:0a:eb:44:80:19:75:7c:1d:61:13:
27:95:93:f5:bf:8d:51:d5:98:31:f6:68:af:b1:95:
1f:c0:d2:89:59:e9:8f:73:d8:3c:d0:56:1d:81:66:
f0:57:01:ab:3f:4b:33:8b:c6:f3:06:54:66:61:80:
8d:14:df:db:c6:7b:30:6e:9d:f0:de:b7:00:48:34:
a3:06:02:5a:40:b4:62:62:26:0c:8b:10:ce:02:7c:
5e:d1:c0:8d:8f:af:58:5f:de:51:94:6b:14:cc:34:
f0:45:37:ad:fd:aa:45:cb:60:44:67:07:72:cc:f0:
68:f6:11:fd:0f:2f:54:f9:3a:0e:da:36:28:44:7d:
62:6c:84:38:cd:e0:ab:9c:32:49:f7:ed:c8:75:13:
d3:50:8b:4d:c0:6d:95:50:02:fd:ac:72:48:a3:a9:
9b:d7:33:b7:43:27:8c:76:b3:ae:14:0e:00:57:e2:
3a:e5:97:04:15:a9:c0:fb:7f:9d:4a:79:cb:c6:d0:
5f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:A8:36:A9:E7:A7:C6:60:E4:1A:B3:EC:E4:13:36:E7:11:CE:F3:15
X509v3 Authority Key Identifier:
keyid:70:01:E4:22:22:7F:A4:4C:C5:CB:95:D2:A9:DC:CE:0F:A5:B8:9C:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/s6g2qeenxmDkGrPs5BM25xHO8xU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.227.168.0/24
Signature Algorithm: sha256WithRSAEncryption
63:cf:59:36:b6:74:c4:4b:c6:73:81:55:1b:6e:86:a0:ca:bb:
47:53:ff:40:cb:a3:c7:16:ff:5b:fc:b7:e7:1f:f3:13:35:ac:
87:2a:9a:94:b1:b4:73:73:26:f2:c2:f5:27:b8:3c:51:99:05:
00:34:a2:b2:20:ed:b5:5a:b4:43:29:ac:2f:0c:b0:19:d1:a9:
4a:b0:29:8f:e4:3f:9d:9a:03:7c:9e:aa:f5:2d:07:1b:fa:a3:
52:45:24:ab:71:da:fc:01:9a:85:b3:95:89:ec:dc:57:ab:fa:
1c:c0:7d:6c:5f:f3:6a:25:e6:5d:d6:1a:d5:4b:5c:47:c2:07:
d5:34:55:84:4f:74:64:06:58:db:54:75:23:0f:9c:ab:7b:d7:
aa:92:a2:98:7f:54:04:fb:75:aa:4c:c1:57:e2:3e:e7:da:fb:
59:af:ea:45:2e:fc:29:5b:69:9f:a9:d1:1b:81:e9:20:d1:a5:
43:db:cf:1f:ea:4e:de:8c:93:8f:24:fa:7d:f8:1e:ce:74:0d:
c2:76:29:af:fa:38:ac:7a:4d:01:fc:6c:b6:b7:c8:80:0f:36:
d2:6c:99:ec:62:22:80:f7:6f:89:69:2b:f4:59:b5:14:b3:ac:
c1:8b:4b:c6:3c:c9:ad:21:65:e4:3f:00:0b:e2:7c:fb:4f:3e:
8e:bb:d4:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 02:41:57 2025 by rpki-client