Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/piNzw1TtbP-p8HWhuy6SBF8spgg.roa
File: piNzw1TtbP-p8HWhuy6SBF8spgg.roa (raw, json)
Hash identifier: wNEUGiASiQTLAx7gOGoQvQVkZK49FM62Tev24iu4h1k=
Subject key identifier: A6:23:73:C3:54:ED:6C:FF:A9:F0:75:A1:BB:2E:92:04:5F:2C:A6:08
Certificate issuer: /CN=2b3d5db900e081b213ea1f071ec5c00347a6fd95
Certificate serial: 01942067E905D11983DFCD42936C2881FD30
Authority key identifier: 2B:3D:5D:B9:00:E0:81:B2:13:EA:1F:07:1E:C5:C0:03:47:A6:FD:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kz1duQDggbIT6h8HHsXAA0em_ZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/piNzw1TtbP-p8HWhuy6SBF8spgg.roa
Signing time: Wed 01 Jan 2025 05:47:48 +0000
ROA not before: Wed 01 Jan 2025 05:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43477
IP address blocks: 91.198.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/Kz1duQDggbIT6h8HHsXAA0em_ZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/Kz1duQDggbIT6h8HHsXAA0em_ZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kz1duQDggbIT6h8HHsXAA0em_ZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:e9:05:d1:19:83:df:cd:42:93:6c:28:81:fd:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b3d5db900e081b213ea1f071ec5c00347a6fd95
Validity
Not Before: Jan 1 05:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a62373c354ed6cffa9f075a1bb2e92045f2ca608
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:15:7c:a6:39:f9:12:00:86:86:66:87:24:24:
9a:e5:2d:88:6a:2a:cd:1a:16:84:08:a6:00:65:60:
42:ae:bf:e0:6b:a5:46:80:98:b2:74:38:38:17:dd:
c4:a7:e1:5e:95:e6:58:34:4e:72:d7:6b:36:03:0b:
9b:58:8f:88:0e:bb:e4:ee:4e:3f:85:91:5d:5d:0a:
67:ed:39:81:8b:4d:ef:d0:51:b9:7e:07:0d:1b:27:
2d:a1:6e:e9:a2:82:b1:c0:61:8f:12:1b:62:e1:41:
ff:b6:d5:1a:56:55:bd:c9:43:78:1a:df:1c:04:47:
a4:fa:8a:1e:86:e1:3f:64:2c:2a:f1:fb:d3:f4:28:
43:7d:66:67:f7:91:a1:84:20:8a:91:26:0c:32:f7:
47:ab:50:60:5b:a5:c3:aa:4a:1a:e3:f7:51:b0:e9:
85:5c:20:7a:27:60:a7:57:47:5a:f6:d7:39:93:cf:
c3:03:20:e5:40:f6:74:4f:4f:e6:52:c6:66:a0:6d:
a0:80:7e:4c:41:26:e1:69:34:f7:0a:f4:7d:8d:e9:
22:5f:4a:6e:5e:2d:52:d4:a3:3f:ac:0e:35:12:b0:
a2:d3:6c:eb:bf:65:a3:e7:0b:fc:2d:20:c9:4d:a7:
e1:52:e2:d4:84:77:78:87:55:7f:a0:28:88:55:6a:
da:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:23:73:C3:54:ED:6C:FF:A9:F0:75:A1:BB:2E:92:04:5F:2C:A6:08
X509v3 Authority Key Identifier:
keyid:2B:3D:5D:B9:00:E0:81:B2:13:EA:1F:07:1E:C5:C0:03:47:A6:FD:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kz1duQDggbIT6h8HHsXAA0em_ZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/piNzw1TtbP-p8HWhuy6SBF8spgg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/Kz1duQDggbIT6h8HHsXAA0em_ZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.173.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:ea:d7:26:e1:d2:93:52:69:ac:76:66:d3:ae:19:9c:7d:58:
67:d8:23:d2:e8:99:49:35:a1:21:00:e5:e4:0a:61:b6:f1:a1:
2c:bc:83:5c:40:80:90:08:b5:f1:3f:50:6d:07:ce:81:87:dc:
23:9d:83:c6:23:67:11:d9:fa:d4:61:d6:85:f7:40:25:87:f3:
1f:48:97:71:13:96:ed:20:20:66:2a:39:60:9a:a3:67:65:bc:
b8:c2:e7:ca:0f:4b:32:dc:0e:6d:02:a5:db:12:cf:bb:ef:cd:
6f:c0:8e:f1:0b:16:b3:ff:17:f1:32:0d:5f:6b:9b:f3:f3:a5:
03:be:a6:53:29:ad:ea:58:8f:d8:65:37:71:4a:88:bf:4c:0e:
fe:e0:30:51:40:5f:d9:b8:03:58:90:e8:bb:a1:f3:58:bc:b6:
4d:e8:5d:0c:05:4c:29:a2:35:8e:6e:9e:ec:0e:af:c1:44:b1:
ed:5a:d7:6b:cf:73:80:26:9d:9a:48:83:96:1b:51:0e:c0:3c:
4f:5d:8e:b0:a5:c0:df:5b:b5:f8:6a:62:dd:7e:02:8d:f2:20:
fc:b9:f7:12:b1:6b:e8:ff:0b:cc:bd:6b:9f:13:4f:38:69:4f:
86:78:c9:5c:f2:7e:1b:43:ff:e3:76:64:9f:05:c8:84:e2:de:
19:5b:81:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:15:17 2025 by rpki-client