Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/c26a7c-2bef-4abc-a225-f1d11413e18a/1/T97PhxMy-s6iz7MiHiiatck56go.roa
File: T97PhxMy-s6iz7MiHiiatck56go.roa (raw, json)
Hash identifier: IEjvDcy1RVm7HLUPdOdFrc1JxBew7Tzwoxa/LhSLExY=
Subject key identifier: 4F:DE:CF:87:13:32:FA:CE:A2:CF:B3:22:1E:28:9A:B5:C9:39:EA:0A
Certificate issuer: /CN=bbfe42cb30c3d496f96f11ed93cf74361708c7e1
Certificate serial: 01941F8C805550613DF97489EC6AB6583ECB
Authority key identifier: BB:FE:42:CB:30:C3:D4:96:F9:6F:11:ED:93:CF:74:36:17:08:C7:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_5CyzDD1Jb5bxHtk890NhcIx-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/c26a7c-2bef-4abc-a225-f1d11413e18a/1/T97PhxMy-s6iz7MiHiiatck56go.roa
Signing time: Wed 01 Jan 2025 01:48:09 +0000
ROA not before: Wed 01 Jan 2025 01:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44073
IP address blocks: 91.198.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/c26a7c-2bef-4abc-a225-f1d11413e18a/1/u_5CyzDD1Jb5bxHtk890NhcIx-E.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/c26a7c-2bef-4abc-a225-f1d11413e18a/1/u_5CyzDD1Jb5bxHtk890NhcIx-E.mft
rsync://rpki.ripe.net/repository/DEFAULT/u_5CyzDD1Jb5bxHtk890NhcIx-E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 15:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:80:55:50:61:3d:f9:74:89:ec:6a:b6:58:3e:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbfe42cb30c3d496f96f11ed93cf74361708c7e1
Validity
Not Before: Jan 1 01:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4fdecf871332facea2cfb3221e289ab5c939ea0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a2:fe:a7:27:62:dd:c6:5f:42:8c:7d:5e:ab:
53:58:d8:34:85:73:9d:ec:0b:c9:cd:b2:41:fe:00:
6c:ca:08:ae:b2:ea:85:d3:b3:23:17:c9:dd:01:63:
15:9b:b4:21:6b:4a:b8:01:98:cf:3f:38:e1:5f:d7:
89:2d:aa:cb:15:a8:b1:d5:2e:e7:0b:a0:1b:e3:ab:
3b:23:69:82:4d:3f:b3:87:16:49:5a:b4:f9:c3:1b:
82:f8:93:01:3d:bc:a0:89:13:50:1e:8b:b4:02:8b:
b9:0f:e5:d3:a7:c3:42:6a:7f:ea:6f:18:2f:74:cf:
37:87:3a:6b:74:c5:d8:26:75:dc:57:31:f1:81:db:
f6:d7:41:68:09:f1:f0:75:20:0a:03:8b:e1:1f:70:
cd:cf:c4:7d:97:38:68:d5:cc:4c:26:5f:8e:61:98:
c6:47:91:96:41:83:f8:19:0a:e0:84:8c:03:fb:d6:
d4:b9:1e:f6:c9:9a:29:e3:a6:b5:2c:4c:85:97:df:
f0:47:c7:eb:a7:32:60:84:b1:ba:2d:50:37:a9:46:
c5:6d:ea:73:ca:00:ed:29:e7:fb:7c:85:22:dd:12:
57:3d:03:f0:03:58:17:7c:12:e1:a1:cd:ef:07:f5:
7a:3e:01:66:87:f6:aa:cb:d8:10:0a:a1:99:1d:5c:
4a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:DE:CF:87:13:32:FA:CE:A2:CF:B3:22:1E:28:9A:B5:C9:39:EA:0A
X509v3 Authority Key Identifier:
keyid:BB:FE:42:CB:30:C3:D4:96:F9:6F:11:ED:93:CF:74:36:17:08:C7:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_5CyzDD1Jb5bxHtk890NhcIx-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c26a7c-2bef-4abc-a225-f1d11413e18a/1/T97PhxMy-s6iz7MiHiiatck56go.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c26a7c-2bef-4abc-a225-f1d11413e18a/1/u_5CyzDD1Jb5bxHtk890NhcIx-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.112.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:ce:27:9e:ea:07:b5:1f:82:c8:8f:27:a6:7c:7b:f6:6a:c5:
13:07:a5:40:18:2b:75:74:b7:12:65:ac:c5:5d:f9:2c:ed:d0:
aa:e0:d1:53:91:0f:18:bb:3c:63:76:bc:9a:4f:e4:1b:37:ed:
58:2f:4a:35:7a:f0:27:20:c1:25:fe:d2:bd:5f:79:d6:21:be:
d7:4f:33:70:73:91:a7:b2:72:47:e2:f4:a2:03:b8:d8:19:d3:
f0:e9:a9:3b:7f:e2:9f:4e:98:53:9c:df:a1:21:8b:3d:5b:c6:
f7:22:65:f0:92:f3:62:46:52:23:83:04:44:a4:77:41:cf:54:
59:84:7f:cd:d3:b5:84:0d:53:35:fe:3b:ce:5d:5e:d0:1e:d4:
99:88:a9:9e:6a:b5:ea:4a:7a:1d:94:3b:95:dd:d3:95:28:21:
a4:2f:73:02:c4:79:f4:30:d1:11:6d:6b:98:7b:6b:fa:22:87:
6b:4c:ed:26:49:07:cc:9c:b7:8a:dd:a8:07:f6:a2:d6:0d:a0:
07:ef:06:90:f1:aa:36:24:f5:cd:15:c0:72:4f:a3:e5:55:0e:
12:76:19:28:8f:5f:38:0c:b7:91:e6:1e:e7:d9:f5:b2:50:a8:
ca:95:9f:89:b1:39:e4:06:d7:8f:74:73:5d:5e:6a:05:86:b1:
6a:23:20:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 10 00:42:33 2025 by rpki-client