Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/m-oD5AGGiKc-qI8F9BHOsqfUhwQ.roa
File: m-oD5AGGiKc-qI8F9BHOsqfUhwQ.roa (raw, json)
Hash identifier: ZivLa2r1rkIhgA7nnzvSrie3rkSLQvNS6UhWQpi2o50=
Subject key identifier: 9B:EA:03:E4:01:86:88:A7:3E:A8:8F:05:F4:11:CE:B2:A7:D4:87:04
Certificate issuer: /CN=3919f2ad91584baff0467447bac8fb978d1f9dd3
Certificate serial: 0194258E450BB90F9162416D33B4302B335A
Authority key identifier: 39:19:F2:AD:91:58:4B:AF:F0:46:74:47:BA:C8:FB:97:8D:1F:9D:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/m-oD5AGGiKc-qI8F9BHOsqfUhwQ.roa
Signing time: Thu 02 Jan 2025 05:47:48 +0000
ROA not before: Thu 02 Jan 2025 05:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206409
IP address blocks: 90.158.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 08:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:45:0b:b9:0f:91:62:41:6d:33:b4:30:2b:33:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3919f2ad91584baff0467447bac8fb978d1f9dd3
Validity
Not Before: Jan 2 05:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9bea03e4018688a73ea88f05f411ceb2a7d48704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:58:55:32:9b:f6:e1:82:f1:54:15:2b:78:be:
e7:4c:51:79:cf:97:62:4a:a3:a4:1b:ab:f9:ca:a2:
99:4e:61:b5:54:a0:9d:54:6b:d6:f7:e8:0e:b5:19:
99:4c:bb:3b:65:9b:00:10:a8:09:77:45:b6:44:41:
33:ff:00:41:7b:d6:b3:8c:be:cc:db:9f:ab:3d:e5:
86:3f:15:35:05:ec:8c:ed:71:f9:53:44:7f:97:87:
91:81:0d:c5:45:60:0d:cb:c0:42:20:81:7a:c2:c5:
fc:83:cf:db:2f:90:e4:76:9a:8d:44:34:82:d1:6d:
77:27:b1:b2:0a:ef:e9:ce:4c:1e:bc:12:39:9e:01:
53:37:a7:20:52:7a:a9:88:90:69:4c:0c:85:74:f5:
30:90:e7:0c:68:15:d1:0e:ff:85:cb:15:e8:6e:6b:
32:a1:93:ce:e3:74:81:7b:2f:f4:2c:ff:2a:3b:2b:
71:5b:0f:a5:d7:89:ad:c9:4e:e6:40:07:08:60:e5:
fc:b5:5e:7d:f1:ef:8c:db:a9:0d:5f:a5:3f:be:c6:
11:ff:43:64:05:dc:77:2c:5e:4c:fc:05:0a:ee:b0:
35:a9:af:e8:90:4a:25:cc:39:df:5e:95:64:91:2d:
82:eb:45:75:4f:9e:10:a4:f4:a1:2d:b8:f3:64:69:
f6:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:EA:03:E4:01:86:88:A7:3E:A8:8F:05:F4:11:CE:B2:A7:D4:87:04
X509v3 Authority Key Identifier:
keyid:39:19:F2:AD:91:58:4B:AF:F0:46:74:47:BA:C8:FB:97:8D:1F:9D:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/m-oD5AGGiKc-qI8F9BHOsqfUhwQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.158.17.0/24
Signature Algorithm: sha256WithRSAEncryption
30:2b:3a:27:f4:9b:45:99:ec:a9:4c:71:33:c1:41:21:4a:4e:
d4:ca:af:a8:1e:e9:d2:f0:8c:76:f3:4f:48:37:82:e9:22:45:
4d:59:65:e5:89:18:7b:a1:d1:31:43:10:06:eb:86:38:72:c0:
e5:42:4c:0b:18:36:bd:79:93:e6:2b:07:4b:b2:91:07:d4:bc:
30:c2:89:1e:ea:ea:0a:b8:c9:94:ee:2f:bc:6e:ee:f5:a8:3c:
d0:cb:11:d9:27:33:54:7b:33:d4:2a:8c:88:6e:6d:f7:68:94:
9b:07:72:1a:48:d6:44:62:cf:0d:e7:b0:f5:51:55:78:80:42:
13:cc:28:f5:7e:a1:9b:1b:4c:ea:a7:20:17:a7:0a:78:cf:74:
ee:99:13:06:13:ff:4c:56:7f:c6:94:23:3a:6f:43:86:cd:cf:
3d:ce:4f:eb:d4:62:55:21:94:eb:49:35:1d:16:29:44:4d:01:
06:6f:3e:2c:16:8c:98:87:96:e5:e4:7e:ec:d3:9b:0a:c4:4b:
b4:43:95:a5:d7:76:a3:53:ee:2f:be:c2:dc:46:33:11:96:dc:
bf:db:6b:1b:a0:60:ef:7a:d8:e2:78:15:00:fc:7d:13:2f:c2:
3b:06:15:9e:26:6a:68:ca:d1:5c:08:2e:e9:e5:3e:9d:e3:0c:
1a:6e:05:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 15:26:21 2025 by rpki-client