Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/y4Dr14LmLQXVPFrGXXshyx64j84.roa
File: y4Dr14LmLQXVPFrGXXshyx64j84.roa (raw, json)
Hash identifier: 1bzHGlABR0e65obFVowAu77APqKznVv88s6eHNbebiQ=
Subject key identifier: CB:80:EB:D7:82:E6:2D:05:D5:3C:5A:C6:5D:7B:21:CB:1E:B8:8F:CE
Certificate issuer: /CN=db418bcf3194317b9c2881193196feb598fd9eee
Certificate serial: 0194274808CEABC10867332B041D84C087FC
Authority key identifier: DB:41:8B:CF:31:94:31:7B:9C:28:81:19:31:96:FE:B5:98:FD:9E:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/20GLzzGUMXucKIEZMZb-tZj9nu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/y4Dr14LmLQXVPFrGXXshyx64j84.roa
Signing time: Thu 02 Jan 2025 13:50:19 +0000
ROA not before: Thu 02 Jan 2025 13:50:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48571
IP address blocks: 91.209.189.0/24 maxlen: 24
91.216.80.0/24 maxlen: 24
128.0.55.0/24 maxlen: 24
194.55.152.0/22 maxlen: 24
2a0c:cb40::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.mft
rsync://rpki.ripe.net/repository/DEFAULT/20GLzzGUMXucKIEZMZb-tZj9nu4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 01:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:08:ce:ab:c1:08:67:33:2b:04:1d:84:c0:87:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db418bcf3194317b9c2881193196feb598fd9eee
Validity
Not Before: Jan 2 13:50:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cb80ebd782e62d05d53c5ac65d7b21cb1eb88fce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:4c:ae:59:28:4d:88:c8:ca:70:64:c6:05:e4:
c1:c3:9a:fd:6b:b3:27:d9:7d:13:92:f1:e1:65:2f:
43:67:d7:d6:27:f0:50:76:cc:bb:0a:5d:69:77:72:
1d:81:55:09:44:07:e3:f2:41:21:d6:0c:d0:22:16:
a0:29:aa:3d:92:e9:f2:95:68:3b:41:6f:f2:f9:f3:
ed:5d:fa:b4:8f:de:63:ab:4e:cb:79:2d:de:c3:84:
b3:5f:96:92:8e:9f:10:d6:11:e5:50:76:27:9c:01:
24:3f:ba:c7:2a:ed:54:78:a0:79:d3:9e:13:d5:f3:
6e:8c:3a:d1:e9:f2:18:96:7a:62:0b:a5:ac:55:92:
84:30:f2:2d:92:c1:81:cd:97:9f:58:3a:e8:f7:e8:
38:c5:25:26:de:12:19:a9:c1:27:32:79:94:fe:a3:
71:ae:24:dd:d6:4a:5e:93:d3:77:6d:2c:d8:3e:5c:
08:70:07:19:b3:70:a5:1d:58:ff:0f:e3:52:1d:71:
2c:72:d1:a3:e3:67:97:97:c2:a0:0a:7e:1c:59:c1:
6f:0c:30:2d:4c:39:ec:92:cf:29:24:ce:d5:c2:dc:
5e:52:f2:f9:11:aa:92:2f:3e:94:c6:52:6f:7d:66:
fd:56:32:76:84:d2:0b:18:6b:9c:c1:2d:b0:4e:55:
a4:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:80:EB:D7:82:E6:2D:05:D5:3C:5A:C6:5D:7B:21:CB:1E:B8:8F:CE
X509v3 Authority Key Identifier:
keyid:DB:41:8B:CF:31:94:31:7B:9C:28:81:19:31:96:FE:B5:98:FD:9E:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/20GLzzGUMXucKIEZMZb-tZj9nu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/y4Dr14LmLQXVPFrGXXshyx64j84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.189.0/24
91.216.80.0/24
128.0.55.0/24
194.55.152.0/22
IPv6:
2a0c:cb40::/29
Signature Algorithm: sha256WithRSAEncryption
11:fe:0e:3b:60:36:4c:ae:c9:68:0c:2e:4b:c5:e5:07:56:01:
f2:a4:d1:d4:3b:d8:a2:1a:a0:59:83:4a:f6:02:40:4e:5a:96:
d4:fb:a4:43:a4:72:c5:a4:48:99:d9:44:30:4d:f6:36:e6:7d:
b1:54:ec:41:b9:de:46:b8:64:ae:74:51:18:10:63:95:13:c0:
89:30:59:b0:07:f8:e6:4c:2b:2c:ca:1e:05:1e:45:39:1a:af:
d3:24:39:19:3c:8e:a7:f7:b2:c6:9d:91:af:c2:ee:75:f2:5f:
c5:bf:97:36:d5:d1:e6:db:85:cf:e1:5f:8d:ff:73:c9:d2:8f:
fe:82:cc:6e:06:25:7b:dc:1d:d5:05:14:73:a2:d0:38:63:c2:
d3:8a:38:05:96:be:3b:84:f5:f7:81:de:c2:e5:2b:91:ec:2d:
d4:29:00:2d:db:6c:21:86:27:35:3d:85:3b:30:2f:50:03:06:
59:09:28:4d:38:f9:19:5f:eb:0d:2d:11:2b:b9:c9:ad:e2:86:
a8:71:9f:a7:06:12:56:09:14:6e:d5:04:f6:c9:4c:bd:62:3d:
bd:f3:f5:fa:95:29:01:42:48:33:65:1c:aa:7b:35:ea:87:1c:
bf:53:62:1d:94:8d:fe:75:fd:d0:02:db:1d:eb:04:e7:3f:b8:
0a:2f:31:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 11:33:40 2025 by rpki-client