Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/1f9bd4-2f6c-4da2-bdd7-1c67d24ae672/1/yQAP9rAxN3jSiptdtGasvuqbR7k.roa
File: yQAP9rAxN3jSiptdtGasvuqbR7k.roa (raw, json)
Hash identifier: jwuLoZWMrvVKlN8mNHV1G2VK8hE/jVPJU+HGrpMeIIE=
Subject key identifier: C9:00:0F:F6:B0:31:37:78:D2:8A:9B:5D:B4:66:AC:BE:EA:9B:47:B9
Certificate issuer: /CN=7985c5bc754ca585bd2592e6bf1cfa6f649cd9f4
Certificate serial: 019427472330E91F048B5A42F30757747E01
Authority key identifier: 79:85:C5:BC:75:4C:A5:85:BD:25:92:E6:BF:1C:FA:6F:64:9C:D9:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eYXFvHVMpYW9JZLmvxz6b2Sc2fQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/1f9bd4-2f6c-4da2-bdd7-1c67d24ae672/1/yQAP9rAxN3jSiptdtGasvuqbR7k.roa
Signing time: Thu 02 Jan 2025 13:49:20 +0000
ROA not before: Thu 02 Jan 2025 13:49:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15889
IP address blocks: 91.208.125.0/24 maxlen: 24
193.23.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/1f9bd4-2f6c-4da2-bdd7-1c67d24ae672/1/eYXFvHVMpYW9JZLmvxz6b2Sc2fQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/1f9bd4-2f6c-4da2-bdd7-1c67d24ae672/1/eYXFvHVMpYW9JZLmvxz6b2Sc2fQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/eYXFvHVMpYW9JZLmvxz6b2Sc2fQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 22:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:23:30:e9:1f:04:8b:5a:42:f3:07:57:74:7e:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7985c5bc754ca585bd2592e6bf1cfa6f649cd9f4
Validity
Not Before: Jan 2 13:49:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c9000ff6b0313778d28a9b5db466acbeea9b47b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:92:ea:f4:10:c0:58:04:e8:fa:48:a3:04:49:
f3:b6:5e:a0:72:3c:c7:ca:ec:9c:dd:f5:b1:3a:7d:
a6:63:3e:0e:cb:d5:06:35:52:eb:b1:41:95:79:a1:
02:2b:b7:27:e0:fe:17:f8:16:24:3c:f9:6b:43:9c:
51:b8:fd:14:8e:2d:da:c4:1d:01:a6:52:d5:7e:ab:
10:38:3f:b0:79:2e:a7:5d:a0:c9:cc:96:23:05:70:
92:c7:82:7e:1b:d1:fb:11:56:7f:ca:94:04:8f:db:
c8:4c:8f:ee:f1:2d:4b:1e:5c:5e:23:53:9c:59:01:
9e:f5:1a:b4:68:c6:0d:1f:25:a1:b4:21:2a:59:91:
ea:0d:ed:55:c2:58:67:c3:2e:e9:4a:98:78:8d:6a:
b3:82:22:07:d7:a3:3f:49:f1:a0:d7:76:58:d3:83:
70:8d:64:6a:94:67:af:b6:81:0d:c1:ca:56:3e:70:
7c:2d:ae:91:76:7b:fd:83:2d:e3:ad:da:11:0d:d0:
78:a8:76:b8:7a:1c:13:84:87:29:c5:8f:67:07:ff:
83:69:f1:0f:61:a6:3c:a8:c6:b9:8b:09:fc:81:64:
24:0b:17:c6:f5:ce:a6:a6:23:d4:b5:e9:66:7c:78:
2c:9d:f9:ec:ce:48:82:77:1c:fc:92:a0:36:c2:8f:
fa:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:00:0F:F6:B0:31:37:78:D2:8A:9B:5D:B4:66:AC:BE:EA:9B:47:B9
X509v3 Authority Key Identifier:
keyid:79:85:C5:BC:75:4C:A5:85:BD:25:92:E6:BF:1C:FA:6F:64:9C:D9:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eYXFvHVMpYW9JZLmvxz6b2Sc2fQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1f9bd4-2f6c-4da2-bdd7-1c67d24ae672/1/yQAP9rAxN3jSiptdtGasvuqbR7k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1f9bd4-2f6c-4da2-bdd7-1c67d24ae672/1/eYXFvHVMpYW9JZLmvxz6b2Sc2fQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.125.0/24
193.23.137.0/24
Signature Algorithm: sha256WithRSAEncryption
68:1e:ea:64:f3:80:f4:2f:fd:30:85:c1:b6:ea:69:8f:4f:30:
e7:af:0d:fd:f0:cc:ad:a2:ff:15:9a:e8:ad:86:c5:1b:1d:98:
1d:36:ea:63:4b:03:f4:c5:fd:eb:7e:80:ef:f2:54:59:ba:23:
74:d1:72:9f:51:a9:17:b8:cd:81:dd:5d:97:7b:45:27:f0:1c:
3c:c6:ce:08:75:2f:27:3e:54:4d:de:84:b4:ac:72:20:32:6c:
e5:db:55:67:9d:f7:c7:c5:d9:ef:e5:6a:cb:98:d1:b9:27:6b:
1d:cc:64:74:51:1a:7a:b0:19:8f:f7:1e:6b:91:6c:a9:d9:f0:
b9:cd:dc:aa:1b:25:0d:68:ab:d5:08:2f:07:9e:33:a2:2d:f6:
96:76:ab:e0:ff:23:42:87:34:1a:81:c0:69:40:3b:04:42:0a:
02:e0:78:0e:41:44:2c:11:6b:a1:72:0c:81:c9:7f:b1:e8:4c:
30:6d:3d:ae:93:07:86:2d:f9:87:32:3a:cf:65:26:1c:b2:bc:
45:53:95:58:59:22:58:1b:87:12:bc:c5:55:c2:92:b7:65:d0:
ee:6e:ba:22:b0:71:19:1f:1e:d4:54:42:5e:bd:cf:95:ff:5e:
e5:88:a2:42:79:4c:a4:a5:44:39:bd:cf:d3:ea:80:09:0f:36:
ac:90:13:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:48:40 2025 by rpki-client