Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/4003bd-494d-4246-be94-c8659f76a2ea/1/ixxoDXsLiKFHG8cJ3pni9CuIWeY.roa
File: ixxoDXsLiKFHG8cJ3pni9CuIWeY.roa (raw, json)
Hash identifier: e7F9bx5lz4I+jxRKeA3TL2cV3HxTGyF8ndmJymIUkLM=
Subject key identifier: 8B:1C:68:0D:7B:0B:88:A1:47:1B:C7:09:DE:99:E2:F4:2B:88:59:E6
Certificate issuer: /CN=419a82be1e16422f9a88549af6d542481d691ac9
Certificate serial: 01942521FD248583E16867B972884F9FD807
Authority key identifier: 41:9A:82:BE:1E:16:42:2F:9A:88:54:9A:F6:D5:42:48:1D:69:1A:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QZqCvh4WQi-aiFSa9tVCSB1pGsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/4003bd-494d-4246-be94-c8659f76a2ea/1/ixxoDXsLiKFHG8cJ3pni9CuIWeY.roa
Signing time: Thu 02 Jan 2025 03:49:31 +0000
ROA not before: Thu 02 Jan 2025 03:49:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48955
IP address blocks: 91.211.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/4003bd-494d-4246-be94-c8659f76a2ea/1/QZqCvh4WQi-aiFSa9tVCSB1pGsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/4003bd-494d-4246-be94-c8659f76a2ea/1/QZqCvh4WQi-aiFSa9tVCSB1pGsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QZqCvh4WQi-aiFSa9tVCSB1pGsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:fd:24:85:83:e1:68:67:b9:72:88:4f:9f:d8:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=419a82be1e16422f9a88549af6d542481d691ac9
Validity
Not Before: Jan 2 03:49:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8b1c680d7b0b88a1471bc709de99e2f42b8859e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:bc:b4:00:91:64:30:9a:9e:46:66:0b:79:65:
ab:0f:73:8e:58:85:74:29:87:e4:d8:53:0e:5b:62:
75:47:9b:80:70:39:d6:31:91:92:f4:09:8f:fa:ca:
df:90:ee:75:d5:1d:8d:0a:7c:4a:57:36:00:95:5d:
cd:93:ce:93:25:25:85:ef:48:24:d4:29:84:d9:cd:
d4:2c:7e:ba:93:1f:a1:5f:0a:ad:e3:f7:08:63:ee:
0b:1e:1d:81:66:0e:04:16:e1:89:f7:57:3b:2a:b8:
87:d8:ce:1d:31:70:1b:18:7a:29:85:95:42:28:54:
33:fa:71:c5:01:9f:a7:87:58:27:41:bf:bd:d7:99:
84:fb:70:75:10:9b:2d:4c:be:3d:b1:a4:05:ee:17:
9e:b9:39:ff:15:44:3a:94:8f:8d:d2:ad:5d:07:56:
6a:ff:a7:54:07:f6:2b:42:e5:3d:08:44:ec:fc:bd:
19:dd:53:ce:25:b3:d6:ae:b0:7b:02:10:32:95:14:
69:3f:16:81:bf:44:90:78:8d:ae:eb:99:b1:73:f8:
af:2b:09:34:db:c4:10:b3:ef:ec:0d:3f:35:e0:85:
af:4f:ac:d3:30:94:9a:4c:0d:07:27:46:ef:31:08:
94:7e:08:43:e3:62:fc:5e:a5:de:3c:16:62:72:03:
44:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:1C:68:0D:7B:0B:88:A1:47:1B:C7:09:DE:99:E2:F4:2B:88:59:E6
X509v3 Authority Key Identifier:
keyid:41:9A:82:BE:1E:16:42:2F:9A:88:54:9A:F6:D5:42:48:1D:69:1A:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZqCvh4WQi-aiFSa9tVCSB1pGsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4003bd-494d-4246-be94-c8659f76a2ea/1/ixxoDXsLiKFHG8cJ3pni9CuIWeY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4003bd-494d-4246-be94-c8659f76a2ea/1/QZqCvh4WQi-aiFSa9tVCSB1pGsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.211.87.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:7f:c7:78:33:3b:7f:26:c1:0c:2d:9d:9c:92:cb:6b:97:07:
91:e6:b0:15:6b:8f:bc:20:74:77:c8:d1:b5:4e:96:e7:49:a8:
5c:0b:37:42:e8:22:8b:c9:0a:96:3a:81:8c:f5:7c:02:dd:43:
fc:b8:0d:02:90:c9:59:61:99:2c:74:3a:de:15:3f:75:9a:92:
7f:cc:64:37:56:dc:97:dd:b7:c4:02:cf:1d:e8:2d:9f:c4:e2:
41:dd:62:96:d6:16:09:fa:01:31:1e:f5:0d:1b:79:60:81:f3:
8a:17:7c:38:0b:e5:0a:2e:fe:bb:33:d5:db:4b:34:42:cd:f9:
89:a0:15:38:38:78:d7:1c:b9:8b:59:20:11:97:0e:11:ac:10:
43:c1:c0:0b:b0:ad:0d:c1:50:8e:c3:01:aa:48:7d:62:76:75:
bd:26:ac:3b:6d:79:ca:6c:41:f9:d2:90:fc:b5:81:fc:44:14:
f1:02:6a:13:ba:ab:32:e5:87:5a:30:06:df:39:5e:82:a1:a0:
fa:85:af:86:b3:b0:c9:ef:04:9d:76:a4:5a:1f:57:f4:90:1f:
3b:0b:23:fe:31:96:98:7a:27:e0:7b:fa:ec:b3:49:46:42:9b:
1d:1c:d0:a1:a8:94:4d:98:54:d9:3f:11:72:11:b7:5a:dc:c9:
26:8d:7f:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 21:16:19 2025 by rpki-client