Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/RgnQQrRta7gI5tMEs8KYLDUw56A.roa
File: RgnQQrRta7gI5tMEs8KYLDUw56A.roa (raw, json)
Hash identifier: BgqUN0fwjyUmpN6+mMGR9pZDz7pjjDqgWhnYghe6PvM=
Subject key identifier: 46:09:D0:42:B4:6D:6B:B8:08:E6:D3:04:B3:C2:98:2C:35:30:E7:A0
Certificate issuer: /CN=38180c074fbe598824c7003195b30aa4a366152c
Certificate serial: 019423694B6FB51396BBD41638981E02B5CB
Authority key identifier: 38:18:0C:07:4F:BE:59:88:24:C7:00:31:95:B3:0A:A4:A3:66:15:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OBgMB0--WYgkxwAxlbMKpKNmFSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/RgnQQrRta7gI5tMEs8KYLDUw56A.roa
Signing time: Wed 01 Jan 2025 19:48:10 +0000
ROA not before: Wed 01 Jan 2025 19:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20682
IP address blocks: 91.235.248.0/24 maxlen: 24
91.235.249.0/24 maxlen: 24
91.235.250.0/24 maxlen: 24
91.235.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/OBgMB0--WYgkxwAxlbMKpKNmFSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/OBgMB0--WYgkxwAxlbMKpKNmFSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/OBgMB0--WYgkxwAxlbMKpKNmFSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:4b:6f:b5:13:96:bb:d4:16:38:98:1e:02:b5:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38180c074fbe598824c7003195b30aa4a366152c
Validity
Not Before: Jan 1 19:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4609d042b46d6bb808e6d304b3c2982c3530e7a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f1:ce:98:1e:e4:a4:ec:23:bd:f6:56:e9:79:
3d:0e:17:68:cd:d0:64:5d:43:d1:06:3d:2c:29:5f:
75:87:f3:b8:bf:2f:a1:93:33:84:7b:f2:fb:10:df:
fd:ec:90:92:46:6c:73:b6:aa:39:e5:a0:fa:a2:38:
06:97:b5:6e:ea:9c:46:18:80:a5:f4:a8:af:f8:bf:
80:9d:d2:0b:8a:27:4d:f8:b8:38:50:14:8e:59:47:
1f:1a:2e:63:05:5a:e2:60:49:68:fd:84:b6:cf:7a:
a7:58:e1:da:f1:e6:65:64:34:06:05:c6:75:38:54:
2c:8f:8a:2a:74:49:22:78:69:71:c0:de:a7:54:75:
0f:ad:97:75:a9:2a:b6:b7:d4:44:61:81:99:d8:58:
a4:70:93:27:8c:71:f7:07:bf:14:21:56:b7:92:58:
19:25:e5:ab:e1:b8:c3:d6:98:3d:65:1b:c2:85:d7:
07:0b:16:3b:4c:5e:f7:e2:01:84:2b:77:12:d8:09:
90:95:c2:88:c0:b7:a8:95:66:87:e0:d2:35:0b:e2:
56:94:0e:a4:12:ab:09:79:7a:40:42:4c:b6:cf:89:
e0:6e:de:52:ef:04:ed:a3:38:f6:d8:e6:da:5b:f5:
76:34:26:9c:41:05:8d:f3:09:71:30:9d:d9:e2:c5:
cb:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:09:D0:42:B4:6D:6B:B8:08:E6:D3:04:B3:C2:98:2C:35:30:E7:A0
X509v3 Authority Key Identifier:
keyid:38:18:0C:07:4F:BE:59:88:24:C7:00:31:95:B3:0A:A4:A3:66:15:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OBgMB0--WYgkxwAxlbMKpKNmFSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/RgnQQrRta7gI5tMEs8KYLDUw56A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/OBgMB0--WYgkxwAxlbMKpKNmFSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.235.248.0/22
Signature Algorithm: sha256WithRSAEncryption
10:64:2c:ad:d1:02:6c:fb:d6:59:4b:c8:42:7f:6d:6f:54:ac:
d5:52:e0:a4:b5:e1:92:a2:21:37:1b:8b:24:35:a8:6a:ac:5f:
a5:71:21:1f:d3:81:98:7d:94:e5:fa:36:f2:24:40:89:64:71:
98:aa:d5:96:01:b6:f1:d4:9d:9c:b9:14:f8:88:7d:04:c3:ed:
47:24:c8:98:f2:4d:75:83:8e:0a:68:c9:2a:00:2d:88:e8:42:
3f:4e:d9:7c:a1:85:a7:18:a1:51:d6:4c:66:98:a2:43:88:d5:
6a:23:78:4d:f1:c3:37:1a:d1:ef:23:a0:da:2a:da:0b:4f:5b:
a0:c8:6d:d6:82:aa:1f:ea:96:7c:4e:ee:85:5d:dd:59:02:c9:
ed:a9:0a:c3:72:73:07:28:09:5a:37:fd:14:14:f4:06:02:b5:
5c:f0:81:c0:26:65:5a:91:2d:a6:74:74:07:1d:be:2b:e5:e2:
df:8b:9c:be:d9:a7:37:da:d1:89:02:1b:1d:8b:85:7f:f0:03:
73:a7:6f:ba:7a:b8:b8:d4:06:2e:ef:7d:39:28:23:4b:61:1b:
b3:77:62:cc:30:ac:ca:51:55:ee:1e:28:5f:13:5e:b2:98:a5:
a3:5b:7f:f7:19:ff:fd:1e:1e:07:0b:10:65:fc:5c:25:59:02:
f0:9c:19:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:21:29 2025 by rpki-client