Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/M5VBoueFwyiZ7y6LqhtMdkXqTgA.roa
File: M5VBoueFwyiZ7y6LqhtMdkXqTgA.roa (raw, json)
Hash identifier: KvER2HIUGSx1EcSqGbNB9cVOLanNeLf/MKB2z89H4ZY=
Subject key identifier: 33:95:41:A2:E7:85:C3:28:99:EF:2E:8B:AA:1B:4C:76:45:EA:4E:00
Certificate issuer: /CN=a3c03158aed81161d4f57c1742d460834173a79e
Certificate serial: 019420D5E2D9F7B3DB4A8DE05E38DC8777F7
Authority key identifier: A3:C0:31:58:AE:D8:11:61:D4:F5:7C:17:42:D4:60:83:41:73:A7:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8AxWK7YEWHU9XwXQtRgg0Fzp54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/M5VBoueFwyiZ7y6LqhtMdkXqTgA.roa
Signing time: Wed 01 Jan 2025 07:47:55 +0000
ROA not before: Wed 01 Jan 2025 07:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43260
IP address blocks: 91.194.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/o8AxWK7YEWHU9XwXQtRgg0Fzp54.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/o8AxWK7YEWHU9XwXQtRgg0Fzp54.mft
rsync://rpki.ripe.net/repository/DEFAULT/o8AxWK7YEWHU9XwXQtRgg0Fzp54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:e2:d9:f7:b3:db:4a:8d:e0:5e:38:dc:87:77:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3c03158aed81161d4f57c1742d460834173a79e
Validity
Not Before: Jan 1 07:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=339541a2e785c32899ef2e8baa1b4c7645ea4e00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:15:97:f7:1a:cf:ed:77:ad:a2:41:ac:23:5d:
0e:9d:84:ac:03:91:8b:9a:8e:04:43:18:2c:84:86:
36:8e:0a:e0:8b:b6:9a:ba:32:34:93:0e:af:d6:85:
82:58:9c:7f:86:ce:9f:38:b4:4b:84:e5:cf:fc:3e:
31:8a:f9:3d:43:ad:12:e7:3e:87:e7:63:c5:77:b9:
f5:6e:9c:f0:2d:82:1b:65:68:30:88:fe:85:32:70:
6c:c5:41:b5:bf:01:70:67:ea:23:5d:fc:aa:4c:c5:
4f:52:74:df:91:b6:b9:49:04:9c:2c:bf:e3:7f:29:
01:87:0c:d1:d5:34:96:ed:95:16:fc:16:04:cd:ae:
78:27:8f:eb:43:78:ff:f4:a7:a7:eb:4e:9e:bc:a9:
be:2f:a7:f9:c6:da:7d:ef:2f:47:f0:54:19:38:17:
5c:d8:f3:5a:8c:25:eb:1c:3e:a1:16:84:49:38:97:
78:c5:e5:9f:88:44:ef:ce:9d:f4:f6:bb:aa:26:0e:
77:74:3e:f9:28:38:ca:3b:f2:48:be:44:a6:5e:26:
e6:b7:9a:99:15:ac:ee:c1:33:81:a8:13:12:8a:ef:
31:c5:a6:fd:84:bb:24:c0:6c:45:aa:0b:b4:7b:44:
6b:03:40:5b:93:8f:a8:c5:a1:a3:d2:0f:30:14:79:
69:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:95:41:A2:E7:85:C3:28:99:EF:2E:8B:AA:1B:4C:76:45:EA:4E:00
X509v3 Authority Key Identifier:
keyid:A3:C0:31:58:AE:D8:11:61:D4:F5:7C:17:42:D4:60:83:41:73:A7:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8AxWK7YEWHU9XwXQtRgg0Fzp54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/M5VBoueFwyiZ7y6LqhtMdkXqTgA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/o8AxWK7YEWHU9XwXQtRgg0Fzp54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.236.0/24
Signature Algorithm: sha256WithRSAEncryption
90:92:22:f6:96:11:36:cb:27:9c:38:e3:35:b2:e9:1c:28:ec:
44:af:6e:c1:b8:b2:80:d0:cf:e2:a4:85:3d:0f:5d:02:9e:93:
9f:a8:ca:8c:2a:0d:c1:bf:32:54:19:49:b5:ba:cf:a8:b9:06:
be:76:9b:43:62:b8:4c:88:6c:d2:10:d7:66:66:f4:7b:6b:dc:
ba:82:96:8b:fb:0f:5f:25:81:a1:69:d2:87:39:63:df:7a:8a:
1c:6f:38:dd:2f:45:2b:b3:2c:92:38:1e:84:8f:4c:10:83:92:
a7:f8:52:09:96:cc:cb:26:47:77:50:ec:25:47:47:35:6b:7f:
cb:c2:29:9e:f1:4b:3b:66:4b:a5:84:5e:f2:a3:0c:a2:1f:ba:
91:53:11:1c:25:f8:3b:0d:48:bf:72:83:c8:a4:61:04:16:10:
cc:55:70:02:0f:5e:97:f8:b9:4f:57:d4:c7:39:3f:41:7d:b7:
3b:8c:da:c1:20:38:aa:25:97:b5:db:14:88:e9:64:8c:74:93:
a9:3b:56:0f:9e:86:7b:9e:f4:e6:00:1f:e9:70:e2:3c:b6:9e:
86:2b:3a:78:a2:0e:20:32:00:0d:c8:c8:33:26:0e:6f:20:bb:
39:b7:12:8d:b2:04:f8:75:4f:4d:0e:cb:c8:85:9f:d8:48:68:
55:fe:08:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 02:42:52 2025 by rpki-client