Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/IfVj5aDzwI_pIfsi19tG8SlhNUU.roa
File: IfVj5aDzwI_pIfsi19tG8SlhNUU.roa (raw, json)
Hash identifier: 6w13xfZ6L14mhKJP/CtzgVaPjgCMlMEt5Ve3cKKBCSc=
Subject key identifier: 21:F5:63:E5:A0:F3:C0:8F:E9:21:FB:22:D7:DB:46:F1:29:61:35:45
Certificate issuer: /CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019
Certificate serial: 01958F4A0D56F2E957F33EF1A1D697D5A4ED
Authority key identifier: 5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/IfVj5aDzwI_pIfsi19tG8SlhNUU.roa
Signing time: Thu 13 Mar 2025 11:35:49 +0000
ROA not before: Thu 13 Mar 2025 11:35:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34346
IP address blocks: 91.202.160.0/24 maxlen: 24
178.214.208.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 18:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8f:4a:0d:56:f2:e9:57:f3:3e:f1:a1:d6:97:d5:a4:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019
Validity
Not Before: Mar 13 11:35:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=21f563e5a0f3c08fe921fb22d7db46f129613545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:bb:3f:d3:b3:81:6a:d4:e9:81:c4:fc:22:34:
0e:e5:df:d5:b6:a9:b6:f5:a4:ce:8a:4b:ee:0f:1e:
60:19:ea:6c:3d:03:50:aa:16:b6:26:29:50:5e:5d:
9c:5d:53:ee:d2:08:d4:4e:32:90:14:fb:24:27:16:
42:b5:f4:24:79:af:58:18:6e:4c:28:54:9f:f2:22:
1a:e2:de:53:db:41:ab:89:5b:7c:d5:45:6b:3a:2a:
75:92:20:e4:a4:18:04:16:4e:e5:cc:5d:9a:47:46:
ca:14:68:05:7f:16:10:9e:26:b7:91:5a:af:f2:b9:
56:c0:4a:97:b7:7f:0c:86:59:8f:a9:cc:99:ba:c5:
f8:2e:58:03:5e:e3:45:8f:e9:7a:30:58:23:f5:96:
53:3f:00:8d:ce:39:90:4f:a1:d2:af:cd:be:9a:fc:
da:c2:1f:53:2d:52:15:5c:1a:73:40:47:7f:c8:10:
cd:15:5a:96:44:52:87:86:e3:cc:30:51:f1:12:53:
06:1c:52:7f:74:e8:b2:64:44:39:3a:f6:08:93:85:
aa:3d:f5:9e:36:61:48:f2:c9:b0:8e:1b:24:82:e9:
b6:f0:ee:1b:42:bd:f2:95:e2:2b:3f:11:d0:d1:aa:
54:b3:dd:77:40:e4:b5:7c:b8:25:19:60:23:a4:ae:
76:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:F5:63:E5:A0:F3:C0:8F:E9:21:FB:22:D7:DB:46:F1:29:61:35:45
X509v3 Authority Key Identifier:
keyid:5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/IfVj5aDzwI_pIfsi19tG8SlhNUU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.202.160.0/24
178.214.208.0/20
Signature Algorithm: sha256WithRSAEncryption
5e:d4:71:eb:81:40:55:9a:e6:db:ce:7e:cf:76:7a:59:7f:02:
74:05:31:de:e5:61:28:0d:12:35:a9:93:1a:b5:95:71:6e:21:
af:8b:0a:00:51:e1:5c:51:38:47:a1:10:ab:bb:24:a3:42:e4:
fe:e8:69:84:14:07:7a:02:df:d5:3e:f8:d2:4c:f1:26:4b:4c:
f9:5f:d1:28:54:c2:91:bc:e6:84:2d:01:73:c3:60:10:36:77:
02:c3:4b:88:c6:d2:85:ab:d1:8e:4c:c3:ab:4c:16:5e:4f:4e:
e3:a7:a4:ef:10:39:86:69:ff:b4:aa:4f:af:41:23:15:f2:74:
71:22:10:12:a3:a7:17:1c:f9:1c:f4:da:bc:4f:ef:93:8c:e1:
bc:11:d0:34:5b:e9:7a:db:f8:36:66:da:97:32:47:01:b9:37:
2f:15:8b:ab:de:21:0c:59:9b:85:60:fe:98:b1:0c:ad:40:d1:
df:d5:28:4b:47:b7:1d:07:84:2e:b5:d1:8c:c0:bf:d1:ea:fc:
b2:08:1c:2d:1c:4d:4e:f4:c4:2c:0f:1c:50:ca:5a:b2:3e:5f:
03:19:0e:8c:7d:c5:2a:cd:0e:ff:02:58:18:a7:a4:ed:c6:41:
74:ff:e2:97:66:53:3b:52:1a:c9:03:ce:1e:f3:12:d3:c5:38:
27:6c:f4:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:15:04 2025 by rpki-client