Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/2c1061-db25-44bd-804c-a14dcee57e74/1/84tG8i7AzsbcSC45wc7jZshEjRw.roa
File: 84tG8i7AzsbcSC45wc7jZshEjRw.roa (raw, json)
Hash identifier: WTaqS+mbYOTiyd8Z/4uN3P2O0v0Yj8od2qxY4V4ByWg=
Subject key identifier: F3:8B:46:F2:2E:C0:CE:C6:DC:48:2E:39:C1:CE:E3:66:C8:44:8D:1C
Certificate issuer: /CN=36cfb3975bbd5ef87b29c3dc4a4b98ea5c25c444
Certificate serial: 0194258E2AEE0979D0326DF2A1B0BC093DE5
Authority key identifier: 36:CF:B3:97:5B:BD:5E:F8:7B:29:C3:DC:4A:4B:98:EA:5C:25:C4:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ns-zl1u9Xvh7KcPcSkuY6lwlxEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/2c1061-db25-44bd-804c-a14dcee57e74/1/84tG8i7AzsbcSC45wc7jZshEjRw.roa
Signing time: Thu 02 Jan 2025 05:47:41 +0000
ROA not before: Thu 02 Jan 2025 05:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47991
IP address blocks: 91.208.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/2c1061-db25-44bd-804c-a14dcee57e74/1/Ns-zl1u9Xvh7KcPcSkuY6lwlxEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/2c1061-db25-44bd-804c-a14dcee57e74/1/Ns-zl1u9Xvh7KcPcSkuY6lwlxEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ns-zl1u9Xvh7KcPcSkuY6lwlxEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:2a:ee:09:79:d0:32:6d:f2:a1:b0:bc:09:3d:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36cfb3975bbd5ef87b29c3dc4a4b98ea5c25c444
Validity
Not Before: Jan 2 05:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f38b46f22ec0cec6dc482e39c1cee366c8448d1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d5:1e:55:81:f7:61:5a:69:ef:fd:3a:f8:a7:
a2:fa:9d:75:0d:63:64:58:eb:26:3e:93:ac:6f:10:
a7:12:8c:20:41:a4:6e:61:dd:5d:10:43:42:d0:7d:
63:a5:e7:0d:ae:a4:d7:13:11:f0:87:19:0b:d4:d9:
69:d8:cb:c0:c6:d5:a6:09:93:d8:bd:ca:8e:66:bc:
aa:6f:73:c6:7e:1e:36:51:33:e7:d9:bc:fc:a2:fd:
10:1c:ef:a4:53:a6:32:b2:a0:6c:39:3f:aa:71:9e:
de:06:82:2c:b0:77:34:84:19:d9:83:63:b8:2b:3f:
6f:80:0f:f7:6a:ef:b9:a3:bc:d3:4d:56:2f:53:4b:
9c:28:d8:ab:c0:2d:01:ee:8b:cc:c0:d0:ef:b3:dc:
62:44:6b:87:25:34:3e:58:19:95:35:cc:7f:02:d2:
2b:94:9e:d9:8a:08:e2:f4:ae:74:30:7e:d8:67:a1:
52:fd:23:de:e7:8b:80:47:4c:9a:bf:c9:43:eb:2f:
ed:25:d3:8b:d6:a0:ca:50:70:06:3f:21:5c:7b:25:
c4:f8:5f:d4:86:1c:b0:98:e0:43:c9:6e:b2:da:51:
0a:c4:d7:d7:7c:0b:32:a7:29:b9:26:32:1e:6d:02:
59:2b:d2:6a:42:3b:fe:0f:f1:cb:96:8e:d0:29:77:
c7:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:8B:46:F2:2E:C0:CE:C6:DC:48:2E:39:C1:CE:E3:66:C8:44:8D:1C
X509v3 Authority Key Identifier:
keyid:36:CF:B3:97:5B:BD:5E:F8:7B:29:C3:DC:4A:4B:98:EA:5C:25:C4:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ns-zl1u9Xvh7KcPcSkuY6lwlxEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2c1061-db25-44bd-804c-a14dcee57e74/1/84tG8i7AzsbcSC45wc7jZshEjRw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2c1061-db25-44bd-804c-a14dcee57e74/1/Ns-zl1u9Xvh7KcPcSkuY6lwlxEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.235.0/24
Signature Algorithm: sha256WithRSAEncryption
10:f6:4f:ff:20:1c:f4:af:ff:35:d9:d8:81:d2:3f:ad:4a:7f:
38:97:f0:51:35:0d:59:dc:09:9f:42:95:ea:3e:8f:03:c6:63:
d3:fa:19:63:c0:09:fe:fb:6d:cb:c3:e5:ca:fc:eb:9e:c7:49:
25:81:2f:61:5b:d1:14:59:a1:4c:65:59:e6:b0:e5:1e:0e:27:
00:42:4e:76:d1:cf:ec:49:71:46:60:4a:d4:d8:a5:bd:be:90:
24:91:3d:f0:1c:b0:1c:bd:7b:b5:40:8b:f4:17:e4:c1:b2:39:
2e:c6:76:54:d2:d5:5b:b9:70:5d:92:ac:fa:bb:a8:e8:1a:f8:
37:9c:8e:35:9b:13:98:20:06:65:0d:b2:05:aa:62:b7:d4:20:
fa:68:93:ae:c1:6a:e6:f0:35:9f:0c:74:2f:f1:0d:04:0b:78:
2e:bb:97:19:5e:82:55:48:57:ad:32:4c:42:a4:a4:e2:82:90:
ca:6e:02:79:99:6b:47:68:2e:24:3f:7b:34:5e:9a:e3:56:a9:
0c:96:67:a2:15:fd:48:6f:7c:0f:d0:8a:ba:d9:60:7a:60:57:
5c:bb:ad:b2:1f:42:07:bb:db:21:a7:3d:c0:d7:c2:90:fc:70:
b9:80:bc:fc:a1:30:ef:2f:75:3d:be:e2:de:2f:bb:ac:7e:b3:
d4:d8:6e:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:47:17 2025 by rpki-client