Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/630904-5612-49f7-80b3-a3ca2112268b/1/RTINrk5K9twShi2ws8-7GReQguo.roa
File: RTINrk5K9twShi2ws8-7GReQguo.roa (raw, json)
Hash identifier: AdVChkjeYt7VqV92ZVz1KihOag+zBOsNiMEkZJtbBCI=
Subject key identifier: 45:32:0D:AE:4E:4A:F6:DC:12:86:2D:B0:B3:CF:BB:19:17:90:82:EA
Certificate issuer: /CN=f38b7ca41f40082290ca8aefdec4bd297d3aec0c
Certificate serial: 0194258F4CC3B732280BB395BC15FBFA479E
Authority key identifier: F3:8B:7C:A4:1F:40:08:22:90:CA:8A:EF:DE:C4:BD:29:7D:3A:EC:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/84t8pB9ACCKQyorv3sS9KX067Aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/630904-5612-49f7-80b3-a3ca2112268b/1/RTINrk5K9twShi2ws8-7GReQguo.roa
Signing time: Thu 02 Jan 2025 05:48:55 +0000
ROA not before: Thu 02 Jan 2025 05:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198611
IP address blocks: 91.240.131.0/24 maxlen: 24
2a0c:44c0:1::/48 maxlen: 48
2a0c:44c0:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/630904-5612-49f7-80b3-a3ca2112268b/1/84t8pB9ACCKQyorv3sS9KX067Aw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/630904-5612-49f7-80b3-a3ca2112268b/1/84t8pB9ACCKQyorv3sS9KX067Aw.mft
rsync://rpki.ripe.net/repository/DEFAULT/84t8pB9ACCKQyorv3sS9KX067Aw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:4c:c3:b7:32:28:0b:b3:95:bc:15:fb:fa:47:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f38b7ca41f40082290ca8aefdec4bd297d3aec0c
Validity
Not Before: Jan 2 05:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=45320dae4e4af6dc12862db0b3cfbb19179082ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5e:39:3b:46:b6:0f:d3:f6:53:46:af:a1:1b:
0c:e7:11:d6:3d:20:b4:b8:72:ed:8b:4a:2f:b4:b9:
d3:83:d8:a4:4e:05:e0:7d:ed:ae:d8:08:cb:ca:37:
c3:5c:75:5e:bb:7c:d7:98:33:f3:cc:cc:3f:73:3f:
dc:ac:db:0b:8b:49:97:17:c7:ec:34:d3:9c:7c:48:
ee:d2:b5:ea:ab:02:76:62:89:b5:e0:0d:93:b1:4c:
9f:bb:4d:a4:0a:50:80:e4:f9:a1:f2:0b:70:2a:16:
f3:0a:b2:39:90:e2:d8:e4:a3:d1:2d:09:27:ca:22:
27:cc:11:96:52:b6:ea:da:ae:53:58:7a:f2:53:8b:
45:44:71:8d:6c:1e:b2:a0:8a:a4:55:c6:2d:37:01:
1a:28:f4:e8:55:db:94:ad:aa:c3:11:6f:bb:4f:84:
61:6a:a7:58:d6:09:c1:e1:02:93:d8:e3:ed:0b:ee:
ff:86:50:c4:10:b7:66:16:3f:3c:70:55:8d:dc:08:
36:9e:a9:99:bd:d0:a4:db:15:9b:d5:2a:a2:6b:07:
2d:89:35:c2:dd:fe:0f:29:6e:4c:a8:f6:f2:91:8a:
21:d6:fd:bb:18:6a:56:4e:b3:06:4d:6f:04:23:8b:
65:60:a6:c6:1e:68:1e:61:00:93:49:2f:fb:80:20:
a5:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:32:0D:AE:4E:4A:F6:DC:12:86:2D:B0:B3:CF:BB:19:17:90:82:EA
X509v3 Authority Key Identifier:
keyid:F3:8B:7C:A4:1F:40:08:22:90:CA:8A:EF:DE:C4:BD:29:7D:3A:EC:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/84t8pB9ACCKQyorv3sS9KX067Aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/630904-5612-49f7-80b3-a3ca2112268b/1/RTINrk5K9twShi2ws8-7GReQguo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/630904-5612-49f7-80b3-a3ca2112268b/1/84t8pB9ACCKQyorv3sS9KX067Aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.240.131.0/24
IPv6:
2a0c:44c0:1::-2a0c:44c0:2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
91:b5:24:a6:91:1e:50:9a:9f:33:2a:af:96:80:61:fa:28:77:
ad:3d:8a:b1:fc:b3:54:62:82:3c:70:c6:b3:de:e8:f2:1c:fb:
fc:52:21:b2:98:eb:ed:22:cc:d4:e9:fe:68:62:0d:1d:08:f4:
31:c3:1c:54:71:c6:5c:31:ca:e5:81:7b:f0:91:44:dc:c7:54:
13:6d:a8:42:d5:7e:20:fd:a1:7e:ba:75:ab:71:e7:54:27:57:
c1:dd:e1:a9:62:be:2c:58:b7:92:ce:03:7d:7b:bd:9a:bb:2b:
8d:03:03:f1:c1:b7:f2:ac:1f:a0:55:d7:24:45:d8:43:f4:47:
76:ba:6e:77:fb:aa:63:54:3c:19:68:cb:a9:4e:b7:53:4d:00:
4f:f3:24:fa:2c:2c:37:e3:1d:ab:97:cd:4a:b3:be:ad:d6:6d:
49:a0:38:a9:37:86:7c:ac:a0:24:de:35:d9:90:9d:4b:d4:cd:
f4:2d:4a:3f:fb:97:07:b3:dc:5b:c4:f8:9e:e0:7b:00:d3:01:
da:90:de:9a:d5:30:90:20:d9:ea:c8:fd:c3:31:d4:d8:59:16:
8b:df:88:05:3e:d8:62:04:79:fe:dc:dd:fd:d1:23:d3:91:6f:
d7:49:96:32:ca:c4:d6:aa:91:ec:8e:a9:4c:45:e0:e8:4f:83:
10:dc:c3:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:11:20 2025 by rpki-client