Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/_TB_DSwnuCOKtWool6QsRH-BI2c.roa
File: _TB_DSwnuCOKtWool6QsRH-BI2c.roa (raw, json)
Hash identifier: IfCRqnm3tSTnJ1oqOSYusfB1IFZQtEWpYBfMbK20Izo=
Subject key identifier: FD:30:7F:0D:2C:27:B8:23:8A:B5:6A:28:97:A4:2C:44:7F:81:23:67
Certificate issuer: /CN=1f29bcbd5cfcc195e76b70a1bf0dd991ec7e33d4
Certificate serial: 01942143EBEAEA648B1AD7A5DB05E9743EAF
Authority key identifier: 1F:29:BC:BD:5C:FC:C1:95:E7:6B:70:A1:BF:0D:D9:91:EC:7E:33:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hym8vVz8wZXna3Chvw3Zkex-M9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/_TB_DSwnuCOKtWool6QsRH-BI2c.roa
Signing time: Wed 01 Jan 2025 09:48:06 +0000
ROA not before: Wed 01 Jan 2025 09:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207066
IP address blocks: 91.199.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hym8vVz8wZXna3Chvw3Zkex-M9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:eb:ea:ea:64:8b:1a:d7:a5:db:05:e9:74:3e:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f29bcbd5cfcc195e76b70a1bf0dd991ec7e33d4
Validity
Not Before: Jan 1 09:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fd307f0d2c27b8238ab56a2897a42c447f812367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a7:d4:b2:b8:9f:ab:6b:22:ed:c5:93:8d:15:
f8:7e:be:f7:7e:70:5d:aa:7c:f4:b2:91:0e:1c:8a:
46:88:66:c3:17:f9:42:77:9c:b2:f2:1b:bc:64:ab:
64:56:9f:44:18:2b:aa:c2:48:c7:5c:cd:c5:37:4c:
10:23:b1:13:43:bd:c4:32:e1:17:fd:cf:d7:35:b6:
6c:12:8b:73:b6:73:ac:93:e3:ea:cc:84:d7:51:fa:
5a:95:34:57:ff:30:66:e6:99:cb:3f:cd:a6:f8:1a:
5b:86:d2:dd:81:01:e9:61:d0:e1:b9:e8:6e:97:47:
10:4c:d5:79:bd:d8:d3:57:66:f5:a0:5e:46:60:1a:
ee:d4:51:05:6c:5b:fe:29:c4:47:94:87:82:94:f8:
15:9b:26:2a:61:30:be:e4:df:3d:59:91:e8:af:a2:
aa:b9:d9:d1:53:5b:ba:61:7a:c9:1e:90:fb:e2:0f:
0b:ec:b3:f5:2a:35:d2:84:dc:ff:a0:de:69:53:0c:
83:7c:79:ab:52:df:bd:38:6e:5a:d4:90:ab:11:4a:
f1:30:01:c1:5c:a9:97:09:89:91:29:f3:da:18:ce:
11:cb:8b:34:bc:6c:3f:09:b4:7c:e4:d3:77:c5:6d:
29:45:9a:01:e3:87:f7:1c:f2:77:41:16:c9:ae:ca:
27:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:30:7F:0D:2C:27:B8:23:8A:B5:6A:28:97:A4:2C:44:7F:81:23:67
X509v3 Authority Key Identifier:
keyid:1F:29:BC:BD:5C:FC:C1:95:E7:6B:70:A1:BF:0D:D9:91:EC:7E:33:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hym8vVz8wZXna3Chvw3Zkex-M9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/_TB_DSwnuCOKtWool6QsRH-BI2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.86.0/24
Signature Algorithm: sha256WithRSAEncryption
79:b0:50:43:8b:27:22:1c:c2:a1:2e:31:10:70:c8:56:35:37:
43:c9:65:44:aa:e4:0c:68:37:d9:0b:65:91:b1:69:43:16:ab:
00:ca:d9:8d:db:4f:95:15:75:9a:93:a2:07:be:6c:7b:e6:bd:
8b:3e:a9:47:5e:53:ac:60:81:64:f2:32:8a:4a:6d:cb:b3:50:
86:b8:3a:e5:09:be:b0:e4:df:e2:b8:c4:4a:21:57:d0:f3:74:
36:2e:32:4c:23:72:23:e4:8e:74:79:ce:fb:c9:39:2d:09:fa:
97:64:2c:cb:aa:34:33:55:75:21:18:34:d1:49:71:9c:e9:17:
3d:8f:52:97:a0:06:9f:ba:4e:ba:89:9e:e8:57:32:4d:60:39:
ef:7a:19:d8:7c:91:6b:50:66:29:25:b0:e4:7e:06:8a:9a:fa:
a3:f7:54:4a:f2:49:1a:69:de:af:5c:cb:28:cb:3f:a9:41:dc:
d5:ac:91:5c:85:1d:06:86:8a:95:a8:43:7d:a8:69:52:48:b2:
38:d3:3b:e2:46:dd:99:1a:70:df:77:32:cc:df:61:6b:b0:32:
90:f7:ca:74:1f:e7:f3:22:3a:4f:dc:f7:b5:61:ca:ac:c0:b1:
6a:03:43:f2:a5:e5:ab:00:62:37:ba:b2:e0:67:fb:ef:42:4a:
fe:29:59:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:03:00 2025 by rpki-client