
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/186a18-5d7f-43ed-b06a-cea7eb350537/1/cGNrX1MW3V5Pj8rPvvjXgsht_VU.roa
File: cGNrX1MW3V5Pj8rPvvjXgsht_VU.roa (raw, json)
Hash identifier: r7fN/lwL4D0NMCG6ql+7DEym7FVBCcSQnDkJLbzAoCE=
Subject key identifier: 70:63:6B:5F:53:16:DD:5E:4F:8F:CA:CF:BE:F8:D7:82:C8:6D:FD:55
Certificate issuer: /CN=7ff1b81cfe6abb118e97e0325b662eaf984f2f6a
Certificate serial: 0194228DA2F8D70B6CA8D777539F0E16C85A
Authority key identifier: 7F:F1:B8:1C:FE:6A:BB:11:8E:97:E0:32:5B:66:2E:AF:98:4F:2F:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f_G4HP5quxGOl-AyW2Yur5hPL2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/186a18-5d7f-43ed-b06a-cea7eb350537/1/cGNrX1MW3V5Pj8rPvvjXgsht_VU.roa
Signing time: Wed 01 Jan 2025 15:48:15 +0000
ROA not before: Wed 01 Jan 2025 15:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8075
IP address blocks: 91.216.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/186a18-5d7f-43ed-b06a-cea7eb350537/1/f_G4HP5quxGOl-AyW2Yur5hPL2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/186a18-5d7f-43ed-b06a-cea7eb350537/1/f_G4HP5quxGOl-AyW2Yur5hPL2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/f_G4HP5quxGOl-AyW2Yur5hPL2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:a2:f8:d7:0b:6c:a8:d7:77:53:9f:0e:16:c8:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ff1b81cfe6abb118e97e0325b662eaf984f2f6a
Validity
Not Before: Jan 1 15:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=70636b5f5316dd5e4f8fcacfbef8d782c86dfd55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4a:cc:90:ef:35:13:13:bc:c6:fc:d8:23:a1:
6e:79:a1:18:77:e0:65:a6:b1:29:ac:07:37:03:34:
c3:01:20:f7:7b:7b:de:5f:02:ce:f7:f5:a8:6f:ea:
41:c9:07:45:d0:65:2f:18:8a:42:fc:fa:c9:27:fb:
e5:50:f4:46:cb:c1:5c:2f:08:1b:33:6b:67:7d:22:
95:a2:f9:8c:59:37:1a:96:e4:08:a0:33:1b:02:18:
5e:1d:3d:dc:90:0c:2b:8e:f2:a6:41:c4:c0:ea:58:
aa:a3:8f:bb:ec:01:f6:e1:78:e6:cd:7a:3c:79:9b:
85:ee:bd:7d:80:2f:7b:9e:81:92:4d:e4:b3:47:42:
86:3e:4f:2e:79:2a:f3:66:86:b4:4a:26:a9:98:71:
6f:1d:93:d7:f3:f1:55:b2:ab:63:d8:3c:57:25:f8:
a3:5d:db:82:03:67:83:86:b2:73:5f:02:19:3b:80:
82:b7:4c:c5:48:a0:5c:dd:25:ee:af:dd:56:5f:a8:
71:dc:35:04:13:4a:75:2c:e7:7d:2a:ae:da:4b:e2:
a5:c3:3a:60:46:9e:90:89:84:2e:91:a7:4c:72:4f:
2f:68:54:51:22:c5:3f:36:c5:81:77:5d:bb:18:28:
da:9b:ba:cd:69:d7:60:22:48:07:71:65:06:3e:5f:
2c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:63:6B:5F:53:16:DD:5E:4F:8F:CA:CF:BE:F8:D7:82:C8:6D:FD:55
X509v3 Authority Key Identifier:
keyid:7F:F1:B8:1C:FE:6A:BB:11:8E:97:E0:32:5B:66:2E:AF:98:4F:2F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f_G4HP5quxGOl-AyW2Yur5hPL2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/186a18-5d7f-43ed-b06a-cea7eb350537/1/cGNrX1MW3V5Pj8rPvvjXgsht_VU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/186a18-5d7f-43ed-b06a-cea7eb350537/1/f_G4HP5quxGOl-AyW2Yur5hPL2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.184.0/24
Signature Algorithm: sha256WithRSAEncryption
97:f3:07:3a:70:b8:60:42:94:7e:78:c5:20:d0:2c:43:08:8f:
5f:77:69:b5:12:84:a3:d6:4f:e6:3a:34:d9:99:f5:1c:e7:f0:
62:cd:ca:a0:b6:f9:c2:12:e3:b3:e3:2b:1d:7d:09:e7:c1:5c:
98:1a:8c:bd:33:56:85:d4:6a:62:3f:47:7e:ca:58:98:34:d9:
9a:49:b0:cd:1c:5a:a6:ac:39:78:aa:ad:20:4f:8e:13:0f:c0:
76:05:ac:7f:67:af:85:b9:1a:74:f8:3b:7d:12:06:ee:d2:f0:
e6:e7:09:a4:72:8d:57:97:9b:e7:bb:d6:b5:70:ce:12:ea:09:
b0:81:b6:68:35:03:17:ec:e5:f8:b6:d8:df:41:7a:e3:fa:fe:
d8:8b:a2:5b:a6:1e:bd:ea:3f:1d:85:40:03:b3:d7:2f:70:2c:
73:e9:5e:b2:ce:21:9b:67:64:01:c9:f3:0b:96:ca:22:11:e5:
11:b7:43:2d:74:07:39:7b:1b:1c:aa:7f:80:97:f6:e4:28:53:
8b:06:e7:9e:c0:2f:e9:c8:6f:7e:3a:ff:2a:f4:4b:93:a4:43:
fb:09:f3:ae:7f:8f:2f:f5:54:e5:38:c0:4a:d2:d6:b6:47:21:
91:37:49:41:f8:fb:b9:f9:c2:34:2b:3c:2a:48:f4:f6:4a:29:
20:cb:dc:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:37:07 2025 by rpki-client