Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/onN6KmPVXQwrcGzs19GCsiDsKrQ.roa
File: onN6KmPVXQwrcGzs19GCsiDsKrQ.roa (raw, json)
Hash identifier: z68kDOoDWacxs1gAQw1w/1PdDLWcZUVC2dAlyVoGWL0=
Subject key identifier: A2:73:7A:2A:63:D5:5D:0C:2B:70:6C:EC:D7:D1:82:B2:20:EC:2A:B4
Certificate issuer: /CN=dcfae7d4e69d42e4f4c95d99f482b9a944dbefc8
Certificate serial: 019426D9D754A65CA8C4D7FC8715FD98F9AD
Authority key identifier: DC:FA:E7:D4:E6:9D:42:E4:F4:C9:5D:99:F4:82:B9:A9:44:DB:EF:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Prn1OadQuT0yV2Z9IK5qUTb78g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/onN6KmPVXQwrcGzs19GCsiDsKrQ.roa
Signing time: Thu 02 Jan 2025 11:49:58 +0000
ROA not before: Thu 02 Jan 2025 11:49:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 91.236.66.0/24 maxlen: 24
91.236.67.0/24 maxlen: 24
2a10:a700:100::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/3Prn1OadQuT0yV2Z9IK5qUTb78g.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/3Prn1OadQuT0yV2Z9IK5qUTb78g.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Prn1OadQuT0yV2Z9IK5qUTb78g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 17:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:d7:54:a6:5c:a8:c4:d7:fc:87:15:fd:98:f9:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcfae7d4e69d42e4f4c95d99f482b9a944dbefc8
Validity
Not Before: Jan 2 11:49:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a2737a2a63d55d0c2b706cecd7d182b220ec2ab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3a:6e:78:ef:b2:b6:b4:6c:e9:6f:53:ee:26:
e1:b5:02:fa:e7:50:e5:96:56:61:5b:98:56:2e:78:
67:16:cb:07:fc:f0:7f:05:c3:d8:2d:65:49:67:f9:
ac:59:66:8b:b2:8d:21:c6:66:22:ef:29:af:49:e3:
cc:41:c1:fd:5a:d7:b5:c3:88:d9:bf:33:85:26:cb:
d0:bb:a4:3e:8a:4b:a2:fa:ac:f7:83:e6:7b:f8:5c:
18:33:56:94:d2:34:96:9c:63:f2:16:58:88:3d:a4:
c9:32:43:09:df:7a:4b:ce:47:fc:4d:c8:56:b5:bd:
2e:2b:9f:a8:6a:26:cb:b9:d8:c5:0d:04:c5:ba:b8:
f5:ce:f5:4b:42:f0:9f:a0:97:10:3d:5e:4a:b3:01:
3c:d5:d2:95:fd:9f:47:31:02:25:c8:b7:b8:ec:30:
fc:a4:96:90:43:6a:48:aa:41:ff:b2:68:e1:a8:9a:
83:b8:8c:7d:b3:cc:f5:cb:01:02:97:b3:ae:ba:74:
e0:24:ce:7b:7d:88:e8:b9:fa:98:fe:15:40:64:75:
ed:f2:02:4e:5d:85:cf:bb:69:d5:01:a1:80:bd:b5:
75:be:8f:04:04:cb:ac:17:76:9a:77:6c:1d:d4:f2:
d2:88:f3:15:79:bf:f1:cf:4a:ec:02:4f:d0:08:9a:
c8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:73:7A:2A:63:D5:5D:0C:2B:70:6C:EC:D7:D1:82:B2:20:EC:2A:B4
X509v3 Authority Key Identifier:
keyid:DC:FA:E7:D4:E6:9D:42:E4:F4:C9:5D:99:F4:82:B9:A9:44:DB:EF:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Prn1OadQuT0yV2Z9IK5qUTb78g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/onN6KmPVXQwrcGzs19GCsiDsKrQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/3Prn1OadQuT0yV2Z9IK5qUTb78g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.66.0/23
IPv6:
2a10:a700:100::/40
Signature Algorithm: sha256WithRSAEncryption
ac:64:36:bf:67:72:61:8f:cf:1e:6a:df:fb:0a:2f:20:17:2a:
8b:a1:3c:ae:1a:eb:89:ed:5f:49:7c:10:e2:8d:0a:71:d2:d9:
13:93:7a:4c:1b:40:e6:a7:5a:c9:d5:db:43:da:c9:30:8b:df:
23:96:79:0f:0c:3b:0a:19:c1:6a:b8:f7:32:1a:07:63:b4:6f:
d1:9e:6b:bd:24:af:e2:28:bf:69:7c:08:da:56:ff:50:8e:c4:
d5:49:34:92:b5:7d:c5:70:c0:9a:2a:eb:f8:c8:3f:56:16:40:
69:d4:7a:59:a6:49:66:47:4e:67:24:fd:12:35:00:39:0e:5e:
87:1a:fb:02:59:c9:2b:43:65:62:48:45:ec:f6:b7:d7:1b:ef:
bb:6f:c3:9e:ef:04:82:4b:d7:4d:b1:98:a4:43:c6:4d:d6:69:
30:69:b5:af:3c:9f:be:1a:2d:1b:d2:cd:7d:0f:d6:69:6f:cc:
bc:6e:5a:26:5d:33:6f:3c:31:7f:00:fb:b6:59:6a:5f:ae:4c:
ff:7b:8f:66:a5:2a:2e:4b:77:43:fe:8b:42:49:b9:a0:95:50:
a7:5f:0b:67:8a:72:76:5b:0a:64:8e:28:df:b0:70:7c:3a:91:
a0:9f:c9:d4:38:3a:59:97:ad:8f:1c:46:95:f9:36:80:23:0b:
5b:73:e6:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:38:24 2025 by rpki-client