Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/60de46-5974-4c45-be36-8dcdb998fd5a/1/dbO_KM950SVoV4qdoDfieNWIw0s.roa
File: dbO_KM950SVoV4qdoDfieNWIw0s.roa (raw, json)
Hash identifier: DCE7AE8Wo5HEULV6TjwRejnJ6LMRCD866TcEBq5yg4o=
Subject key identifier: 75:B3:BF:28:CF:79:D1:25:68:57:8A:9D:A0:37:E2:78:D5:88:C3:4B
Certificate issuer: /CN=3722b2f090a967e0bcacd19f39ad2a887263b524
Certificate serial: 01942444C876DAC171D00BE5F1967802EB34
Authority key identifier: 37:22:B2:F0:90:A9:67:E0:BC:AC:D1:9F:39:AD:2A:88:72:63:B5:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/60de46-5974-4c45-be36-8dcdb998fd5a/1/dbO_KM950SVoV4qdoDfieNWIw0s.roa
Signing time: Wed 01 Jan 2025 23:47:55 +0000
ROA not before: Wed 01 Jan 2025 23:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49139
IP address blocks: 91.212.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/60de46-5974-4c45-be36-8dcdb998fd5a/1/NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/60de46-5974-4c45-be36-8dcdb998fd5a/1/NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:c8:76:da:c1:71:d0:0b:e5:f1:96:78:02:eb:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3722b2f090a967e0bcacd19f39ad2a887263b524
Validity
Not Before: Jan 1 23:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=75b3bf28cf79d12568578a9da037e278d588c34b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:58:28:54:19:1f:6f:e2:61:7c:7e:03:63:1e:
95:f1:b2:63:36:50:09:f2:7e:c8:be:2b:e3:a3:96:
7b:96:8e:c2:05:66:65:f9:27:43:c2:34:9a:f8:91:
68:71:9a:f1:3b:8a:ec:4e:3a:91:9d:7d:66:63:97:
04:7a:2c:9e:d2:d3:3a:0e:19:b2:c6:33:a8:4d:97:
df:a3:d2:04:e4:75:f4:49:fd:d7:73:03:34:2c:a5:
06:91:c1:e6:fd:8c:58:bc:54:7f:d8:04:46:87:fe:
01:8d:7f:bd:ee:6b:80:da:b4:90:27:41:d2:e2:79:
86:6e:c5:49:77:67:6d:db:12:ac:5f:71:38:29:62:
4c:47:94:91:09:29:86:52:f0:52:5d:d8:d3:02:03:
38:6a:2c:4d:d2:55:46:b8:8b:2e:a5:3a:2f:e2:a2:
3a:6b:48:36:5a:aa:fb:b1:d4:c1:73:26:87:9f:d7:
e2:10:f0:8c:d5:00:43:78:ad:63:c9:0b:fb:3d:8a:
58:f1:12:ab:11:b0:58:c8:75:b1:a4:81:4c:17:93:
04:95:c3:87:91:11:04:34:17:8a:00:57:a7:91:79:
d4:a3:57:f2:9a:27:ac:80:27:42:8b:77:03:43:aa:
a4:d9:d2:39:fc:9f:fe:c2:97:84:64:3f:d9:bd:69:
26:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:B3:BF:28:CF:79:D1:25:68:57:8A:9D:A0:37:E2:78:D5:88:C3:4B
X509v3 Authority Key Identifier:
keyid:37:22:B2:F0:90:A9:67:E0:BC:AC:D1:9F:39:AD:2A:88:72:63:B5:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/60de46-5974-4c45-be36-8dcdb998fd5a/1/dbO_KM950SVoV4qdoDfieNWIw0s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/60de46-5974-4c45-be36-8dcdb998fd5a/1/NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.154.0/24
Signature Algorithm: sha256WithRSAEncryption
45:0d:6e:88:b7:08:26:b6:ee:5b:f8:66:ea:14:96:a9:01:ad:
f3:8f:e2:a7:4a:ff:68:69:00:a7:7b:e9:0b:70:bb:aa:40:c8:
f2:8c:51:c2:e0:83:fd:bc:b1:23:3e:40:47:e0:e4:62:9e:db:
a3:22:db:ba:8e:2f:c6:b6:3b:0a:1a:bd:48:c4:1c:15:a3:32:
8f:73:87:26:80:46:e5:48:53:dd:d2:90:2c:4c:65:73:4c:31:
40:4b:92:74:c9:cb:b5:ca:31:e6:c1:d4:90:fe:38:68:1a:dd:
b7:0c:33:87:10:85:f1:41:53:98:97:b8:6a:52:8f:8f:14:8c:
d1:aa:20:e7:30:2e:92:5d:81:8e:dc:9f:42:7a:88:1e:7f:98:
96:56:dc:c6:d9:4a:7f:52:d7:1f:0b:bb:d1:d6:05:a0:37:40:
e4:22:f1:ff:c7:79:c6:6d:41:de:cf:33:22:10:ed:c3:d7:f0:
0e:65:eb:73:18:54:d1:8f:38:90:45:67:1f:fa:77:ac:1c:5d:
89:6b:72:7f:e0:4d:de:d1:2c:08:9c:01:d7:c0:28:86:e5:cc:
9e:54:0e:03:4b:7a:7f:68:47:65:2a:51:a5:f4:d3:e9:5f:7e:
77:e6:72:65:55:7c:2d:a6:31:17:44:6d:dd:8f:c4:13:bc:79:
5c:4f:03:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 07:36:12 2025 by rpki-client