Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/h2bGxUxbqOMwKZqb7G6CRO2lZho.roa
File: h2bGxUxbqOMwKZqb7G6CRO2lZho.roa (raw, json)
Hash identifier: mynhqYVK2VXcY1dJrTVkYeBGm7TzlIqS2eWaSHlhFbc=
Subject key identifier: 87:66:C6:C5:4C:5B:A8:E3:30:29:9A:9B:EC:6E:82:44:ED:A5:66:1A
Certificate issuer: /CN=02c168ec597a3a37742cb4ded78356f1454f2bad
Certificate serial: 0194228E3D264FB483E77A4E4B8FD6C94E3C
Authority key identifier: 02:C1:68:EC:59:7A:3A:37:74:2C:B4:DE:D7:83:56:F1:45:4F:2B:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsFo7Fl6Ojd0LLTe14NW8UVPK60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/h2bGxUxbqOMwKZqb7G6CRO2lZho.roa
Signing time: Wed 01 Jan 2025 15:48:54 +0000
ROA not before: Wed 01 Jan 2025 15:48:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201108
IP address blocks: 91.206.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft
rsync://rpki.ripe.net/repository/DEFAULT/AsFo7Fl6Ojd0LLTe14NW8UVPK60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 18:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:3d:26:4f:b4:83:e7:7a:4e:4b:8f:d6:c9:4e:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02c168ec597a3a37742cb4ded78356f1454f2bad
Validity
Not Before: Jan 1 15:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8766c6c54c5ba8e330299a9bec6e8244eda5661a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0c:32:42:59:7a:98:6d:16:e5:80:66:c8:93:
12:36:39:52:4e:f7:18:1e:59:0f:86:68:cd:10:c5:
5d:9c:0a:52:de:a5:7b:a8:be:35:fd:6c:2f:72:e1:
71:9f:5b:54:90:2d:f4:9d:49:80:a9:40:37:fe:85:
75:1a:f3:e5:db:32:b7:69:72:b1:7d:6a:de:fd:84:
a0:5b:30:c1:3e:5b:ac:24:aa:8d:6d:f7:79:0d:44:
6b:32:35:89:65:e9:7b:31:db:03:db:60:ca:6c:a9:
4c:57:13:ff:8f:c4:c1:1a:07:a9:95:16:d0:42:3c:
d0:3f:79:1f:91:d9:14:fa:e1:ef:3f:ae:71:ad:af:
30:1a:cd:9b:58:bf:95:db:0e:bb:9b:05:21:31:7c:
bd:94:9c:d6:cd:52:94:27:d1:71:fe:b0:89:b7:ee:
cf:5a:00:41:73:97:c3:b5:be:09:fb:8a:c1:aa:38:
0d:bd:60:91:67:5e:d0:14:ae:33:24:a7:85:a3:06:
2f:fd:af:c6:3c:5a:f0:7c:d0:d4:69:4e:99:b2:91:
4b:56:c7:73:66:25:3f:f1:a1:04:63:04:5a:e6:f7:
6e:d0:a7:4a:8d:78:0c:15:30:f1:98:6c:37:7f:d3:
de:6f:d1:11:5a:46:9a:97:d0:0f:93:a5:d0:a6:5c:
94:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:66:C6:C5:4C:5B:A8:E3:30:29:9A:9B:EC:6E:82:44:ED:A5:66:1A
X509v3 Authority Key Identifier:
keyid:02:C1:68:EC:59:7A:3A:37:74:2C:B4:DE:D7:83:56:F1:45:4F:2B:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsFo7Fl6Ojd0LLTe14NW8UVPK60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/h2bGxUxbqOMwKZqb7G6CRO2lZho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.113.0/24
Signature Algorithm: sha256WithRSAEncryption
01:aa:14:5d:87:b3:f9:c6:5e:57:32:cb:1c:80:f9:69:7e:ed:
4f:f3:ca:a6:2a:49:b9:81:10:87:81:61:0a:6b:93:55:00:6c:
d8:68:21:f8:09:46:a2:12:cb:22:1d:71:24:01:05:08:71:c7:
63:e4:3f:f4:00:39:6c:f2:92:90:cd:30:cc:6a:8c:4d:69:a8:
f7:a8:a3:9e:52:0a:ab:a0:f5:2a:e6:b1:14:15:db:09:6a:2a:
a9:8c:c5:87:74:d4:94:4e:62:29:a0:8f:eb:ca:14:c8:b9:bb:
5b:db:d0:b0:04:72:05:2f:8a:2f:27:54:14:7b:56:af:99:43:
b0:3e:4b:e2:1d:d4:f7:49:40:93:48:d6:aa:3c:60:86:cc:32:
11:d9:c4:66:f9:dd:e0:e0:99:0f:d3:71:a1:3d:f7:7c:86:ba:
87:20:b2:34:e6:b7:f7:86:bc:ab:82:31:45:6c:41:86:aa:23:
04:17:99:cf:aa:01:3b:46:c2:2d:67:3b:49:06:cf:fa:6c:06:
c3:08:a0:d7:8a:88:3a:6f:93:d9:81:d4:9e:59:0e:06:da:bb:
d2:e7:f8:76:d2:69:7b:fa:66:b8:12:84:3b:35:92:33:94:5b:
7f:dd:96:af:33:c0:3f:19:c4:d3:76:94:82:5c:94:8f:5a:cf:
82:94:ea:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:37:49 2025 by rpki-client