Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/oQEA3DnBm500dJBYY9a5KgZXmQQ.roa
File: oQEA3DnBm500dJBYY9a5KgZXmQQ.roa (raw, json)
Hash identifier: TzJe0tF7p07+4ocoJWUSx+pyInMnz9/Rqe/WjvQu6+Q=
Subject key identifier: A1:01:00:DC:39:C1:9B:9D:34:74:90:58:63:D6:B9:2A:06:57:99:04
Certificate issuer: /CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Certificate serial: 01942823FFEFA7AED759EF4B4882CDB54E2E
Authority key identifier: 27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/oQEA3DnBm500dJBYY9a5KgZXmQQ.roa
Signing time: Thu 02 Jan 2025 17:50:35 +0000
ROA not before: Thu 02 Jan 2025 17:50:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215155
IP address blocks: 91.102.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 07:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:ff:ef:a7:ae:d7:59:ef:4b:48:82:cd:b5:4e:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Validity
Not Before: Jan 2 17:50:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a10100dc39c19b9d3474905863d6b92a06579904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:93:7d:02:db:37:70:08:f4:53:9c:6c:22:ab:
73:12:77:d9:0e:91:5e:cf:85:2c:3f:dd:b3:79:5a:
5a:2c:0f:ce:2f:7e:90:7e:89:5e:6f:80:66:70:24:
e1:83:a3:f2:f9:3f:58:b7:e3:6e:2f:22:eb:af:c1:
5b:0e:45:0b:d4:05:55:9e:a2:de:06:43:45:3b:7c:
25:1c:8c:70:fd:24:80:bc:62:17:93:ca:97:a2:44:
d1:e9:64:be:72:c9:2c:83:fd:c5:35:80:cc:15:fb:
ab:ba:2a:cf:8d:75:d7:5f:f8:a0:c4:fa:20:0c:61:
61:d0:76:1d:e9:55:4e:90:ec:b1:dc:3f:49:c5:c0:
b9:4e:f0:55:57:af:da:f0:f9:d7:15:ce:a3:bb:05:
9f:b9:d0:b7:c8:7c:54:d2:de:c0:1a:2a:3f:64:0e:
38:b7:ce:bf:50:9b:95:bc:2e:8f:c2:98:b4:8f:40:
71:bc:56:43:56:03:3b:a0:52:57:1d:a2:72:a5:15:
7e:9b:42:74:98:d7:ee:0e:f0:02:84:46:94:48:ae:
3e:70:38:70:ca:76:7b:53:86:ff:6b:28:f0:e4:64:
de:4c:33:3b:e3:ab:47:80:61:e4:0e:12:b7:0b:4a:
7e:f2:b1:22:73:d7:93:0a:9d:6b:49:db:17:9c:7d:
5e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:01:00:DC:39:C1:9B:9D:34:74:90:58:63:D6:B9:2A:06:57:99:04
X509v3 Authority Key Identifier:
keyid:27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/oQEA3DnBm500dJBYY9a5KgZXmQQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.102.163.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:71:5e:45:72:87:78:64:18:9e:76:38:58:29:8f:2a:7a:48:
7c:96:cf:6a:2d:04:b1:55:7e:4b:77:b8:47:70:11:68:22:dc:
03:7d:4d:cd:b7:5c:22:6f:54:73:ca:03:38:81:0f:89:2a:9a:
5f:d3:4b:1b:74:a7:92:bb:00:c5:dd:de:ba:38:9b:22:61:f5:
ba:bb:3c:c8:6e:bb:4d:57:4f:ec:2c:b5:af:ec:6c:6c:0f:91:
de:d3:f4:4f:ab:9f:ca:21:e2:bb:d8:79:64:e5:10:b3:13:40:
a6:63:67:14:38:7f:a2:21:b8:cd:d1:62:d6:00:2d:96:76:d4:
87:62:d0:05:f4:7a:97:71:51:9c:c7:85:2b:d4:40:8e:8b:c0:
5e:95:54:76:db:c7:fe:79:a5:6a:10:d2:45:8d:1d:6d:99:17:
ce:36:c4:85:3f:59:37:4b:4b:08:05:2e:5b:5a:76:0e:9b:1b:
a4:ea:b1:ff:98:49:16:23:a4:9e:e2:6a:7d:26:4f:63:2b:cc:
09:c6:77:63:3e:93:10:7f:84:73:53:31:8e:dd:17:1c:5e:9f:
26:3a:80:97:61:a2:a4:4e:2e:f8:63:1c:f9:0c:35:e0:70:f3:
ef:ee:54:c4:5c:2e:b5:7d:93:8f:cf:c7:0c:5a:9b:f1:60:af:
dd:e3:e5:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 12:36:30 2025 by rpki-client