Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/cL9nhQ_yecQ23ce1lo-bdJYUkQA.roa
File: cL9nhQ_yecQ23ce1lo-bdJYUkQA.roa (raw, json)
Hash identifier: Tm+oi/lD++p4PhyCp4bPhVckvck4FHBGPjkqfjDYDXk=
Subject key identifier: 70:BF:67:85:0F:F2:79:C4:36:DD:C7:B5:96:8F:9B:74:96:14:91:00
Certificate issuer: /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Certificate serial: 019421B1D5C05F1A2172A67B60DDE3476078
Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/cL9nhQ_yecQ23ce1lo-bdJYUkQA.roa
Signing time: Wed 01 Jan 2025 11:48:10 +0000
ROA not before: Wed 01 Jan 2025 11:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33973
IP address blocks: 91.120.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.mft
rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:d5:c0:5f:1a:21:72:a6:7b:60:dd:e3:47:60:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Validity
Not Before: Jan 1 11:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=70bf67850ff279c436ddc7b5968f9b7496149100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3e:61:95:b3:41:a0:60:7e:f4:db:6e:b4:cc:
e2:3f:63:41:34:1b:d8:e8:24:d8:f1:6e:ae:c3:f7:
3c:95:42:9f:fc:f5:a1:f4:76:55:7c:bc:cd:b4:35:
1a:4d:17:a3:f4:4e:1d:00:2d:07:a5:f4:00:44:07:
c7:d1:62:60:59:dc:42:cc:38:68:fe:a3:cd:a6:45:
7a:58:18:1e:48:ef:d5:e0:a2:a1:7d:5a:16:89:5f:
bc:ef:13:e8:9c:e2:52:6e:9c:35:2e:ff:22:fc:ec:
9e:80:fe:e9:42:0f:dc:89:c0:a1:2b:6a:c5:15:25:
47:eb:46:72:c1:cd:69:54:97:d7:6b:09:a4:89:db:
57:e7:ee:d4:80:b0:62:2a:32:64:45:d7:c9:13:7e:
c5:de:11:42:c9:5f:70:37:22:92:b6:53:4b:27:bf:
52:a1:4a:ed:ba:03:52:76:4c:fc:49:ce:1e:e3:97:
c6:ac:2d:68:fe:8f:e0:0a:90:7a:b8:ce:61:e7:b6:
52:86:d1:0c:e0:b8:ab:a8:61:8a:05:eb:42:a1:9f:
ef:36:29:11:3e:d8:33:50:a9:6d:33:57:c6:4c:37:
59:95:a3:e4:7e:c4:be:51:29:2d:db:e2:5f:15:66:
e5:bb:80:c0:a9:05:d1:89:2b:e1:24:1b:80:5f:e7:
2b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:BF:67:85:0F:F2:79:C4:36:DD:C7:B5:96:8F:9B:74:96:14:91:00
X509v3 Authority Key Identifier:
keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/cL9nhQ_yecQ23ce1lo-bdJYUkQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.120.43.0/24
Signature Algorithm: sha256WithRSAEncryption
62:2b:47:e6:68:81:05:53:0f:d3:56:28:c2:44:fd:5f:4a:62:
e0:07:2d:ca:50:14:d0:50:a3:ec:ca:5e:9c:ae:3b:b2:52:df:
bb:63:da:03:63:85:9d:a7:3b:81:6b:8a:9c:13:2c:14:f7:52:
19:9a:de:5a:d3:65:29:75:a2:83:1b:dd:56:7c:80:2c:8e:74:
de:33:4c:8c:9b:18:49:6d:ae:da:ad:66:a9:66:36:8e:14:55:
9c:f4:e6:29:bc:7a:00:03:37:92:17:7c:fd:e5:ca:54:c3:75:
af:12:c1:5c:ff:a5:bc:32:57:e1:0b:1e:d5:09:ac:ca:52:e3:
46:55:03:6c:b7:5b:3f:45:49:df:bb:6c:ea:dc:f5:21:cb:04:
b1:0a:6c:31:e0:3c:47:a5:48:d8:d3:ea:0b:24:21:aa:6d:f6:
b4:5c:6a:e3:ca:b3:83:f6:31:5a:a3:8b:6a:ae:ca:38:ad:a9:
b2:ae:89:89:7f:4c:fe:f4:8f:96:6f:1c:d1:49:d4:ad:f0:a8:
4c:c8:7f:7a:44:2f:0a:c8:b8:9b:e2:b9:de:33:3e:dc:aa:05:
8d:07:09:3e:3d:6f:4b:b0:01:86:01:7d:72:b1:ca:73:5f:6a:
5e:9e:91:48:8c:34:0c:f1:59:f1:77:8b:78:17:b4:fd:87:bb:
d0:c8:07:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 16:19:38 2025 by rpki-client