Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/39Bk5qZTsKQMFFHFGYz2jXcUTL0.roa
File: 39Bk5qZTsKQMFFHFGYz2jXcUTL0.roa (raw, json)
Hash identifier: yuPdwUCFZLhlTho5KUzDTwTUnjWxu1cEHPF0b38FGK8=
Subject key identifier: DF:D0:64:E6:A6:53:B0:A4:0C:14:51:C5:19:8C:F6:8D:77:14:4C:BD
Certificate issuer: /CN=f8a31d2eeeb67a937e2e87d76ad9f9d17cda97f0
Certificate serial: 019424B36CB619213CEDD04CFB87A136554E
Authority key identifier: F8:A3:1D:2E:EE:B6:7A:93:7E:2E:87:D7:6A:D9:F9:D1:7C:DA:97:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KMdLu62epN-LofXatn50Xzal_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/39Bk5qZTsKQMFFHFGYz2jXcUTL0.roa
Signing time: Thu 02 Jan 2025 01:48:46 +0000
ROA not before: Thu 02 Jan 2025 01:48:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199144
IP address blocks: 91.245.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-KMdLu62epN-LofXatn50Xzal_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:6c:b6:19:21:3c:ed:d0:4c:fb:87:a1:36:55:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a31d2eeeb67a937e2e87d76ad9f9d17cda97f0
Validity
Not Before: Jan 2 01:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dfd064e6a653b0a40c1451c5198cf68d77144cbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:17:99:52:a3:fd:69:79:86:38:5b:87:34:47:
19:f3:0a:e2:91:45:35:25:12:e2:11:7d:0b:14:84:
6b:b3:10:f1:08:17:2e:ec:fc:e0:37:f3:71:11:d6:
52:bb:62:be:d7:44:1f:62:f8:13:49:b6:cb:d8:2c:
fc:24:d1:6f:54:fa:6f:b0:ea:ed:0d:de:18:5b:1b:
8f:d8:7c:8e:83:ef:b0:6f:7c:ce:d7:27:62:d6:0d:
88:f1:fc:b7:be:19:c3:0b:c1:ee:66:53:39:02:4e:
10:0d:d2:58:e3:a1:10:34:b3:34:be:46:84:9c:89:
af:8a:52:c0:44:66:0f:ae:46:d9:8e:7b:c2:70:93:
eb:1d:38:2f:86:ce:cb:0e:c0:a7:e1:c8:c3:0d:c0:
73:cd:7a:34:21:70:28:b5:f8:80:df:12:ec:7f:48:
c1:66:87:5e:c4:08:a3:6a:25:a0:8b:e3:d9:df:09:
a7:9a:5f:4f:43:f6:ef:2f:e8:63:f7:d6:f1:3e:50:
1a:9d:4c:f9:2c:f3:ca:bf:fb:75:e1:82:03:50:88:
34:e2:cd:a4:9c:12:47:d7:75:13:98:b3:0e:cf:16:
18:fe:b9:64:b7:57:85:5c:b2:8b:4b:0e:95:e9:b2:
d1:39:53:71:f0:37:a0:b3:80:f0:04:7d:33:54:7d:
f1:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:D0:64:E6:A6:53:B0:A4:0C:14:51:C5:19:8C:F6:8D:77:14:4C:BD
X509v3 Authority Key Identifier:
keyid:F8:A3:1D:2E:EE:B6:7A:93:7E:2E:87:D7:6A:D9:F9:D1:7C:DA:97:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KMdLu62epN-LofXatn50Xzal_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/39Bk5qZTsKQMFFHFGYz2jXcUTL0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.245.215.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:e1:b0:e2:97:b4:62:b2:64:13:9b:0e:13:6e:28:24:e8:fc:
f0:84:d2:3e:05:45:e6:82:17:b9:a3:87:0e:29:c7:45:c6:68:
f7:a3:9a:0c:a0:1b:f7:79:dc:6b:43:27:cc:ee:23:0b:34:80:
74:6c:8a:08:56:ba:50:40:9c:67:3b:d6:a6:69:3a:37:38:1d:
f0:49:08:49:b1:d2:b2:8b:ef:00:2b:f0:76:56:b2:6b:a3:03:
ad:19:58:e7:2b:c0:02:4b:64:6d:3f:e9:84:26:bd:ba:83:3c:
40:57:5d:ed:17:a1:cf:1c:2b:da:89:05:77:b5:d4:db:9f:4a:
85:85:88:ad:7c:b5:2d:9d:4e:83:73:51:22:c0:f2:61:90:93:
97:d2:72:bd:57:f8:9c:8b:8e:8c:d2:f1:84:5d:37:a3:21:42:
24:24:41:9c:9c:c7:29:16:5a:d4:e0:52:25:dc:80:d9:86:c1:
e6:87:78:48:6f:86:fc:d4:5c:4d:62:1e:cc:71:20:67:b4:90:
72:58:e1:93:ed:33:36:65:db:f3:7b:e8:fd:09:ed:fb:6b:ee:
df:93:e9:eb:f5:62:ac:30:55:6d:f3:56:fb:06:f3:af:43:d3:
16:c4:b0:91:bf:35:e6:68:32:b7:90:29:72:ae:20:b0:8f:e7:
d0:da:b0:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:50:23 2025 by rpki-client