Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/9a8a3b-9b44-49ca-b674-d92c9380af33/1/okivhnQi7w6GWYPlNEAmkXkmxpY.roa
File: okivhnQi7w6GWYPlNEAmkXkmxpY.roa (raw, json)
Hash identifier: k4R8rWTOlMy3O5fk1lka5CmGZaX0JQEHHbZQX1i51u4=
Subject key identifier: A2:48:AF:86:74:22:EF:0E:86:59:83:E5:34:40:26:91:79:26:C6:96
Certificate issuer: /CN=35d7dbaa75ef3420d8d9459130ed01dc535136fb
Certificate serial: 019422FC457D9BE13C033372F9C2D5EF2795
Authority key identifier: 35:D7:DB:AA:75:EF:34:20:D8:D9:45:91:30:ED:01:DC:53:51:36:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NdfbqnXvNCDY2UWRMO0B3FNRNvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/9a8a3b-9b44-49ca-b674-d92c9380af33/1/okivhnQi7w6GWYPlNEAmkXkmxpY.roa
Signing time: Wed 01 Jan 2025 17:49:05 +0000
ROA not before: Wed 01 Jan 2025 17:49:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198176
IP address blocks: 91.232.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/9a8a3b-9b44-49ca-b674-d92c9380af33/1/NdfbqnXvNCDY2UWRMO0B3FNRNvs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/9a8a3b-9b44-49ca-b674-d92c9380af33/1/NdfbqnXvNCDY2UWRMO0B3FNRNvs.mft
rsync://rpki.ripe.net/repository/DEFAULT/NdfbqnXvNCDY2UWRMO0B3FNRNvs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 17:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:45:7d:9b:e1:3c:03:33:72:f9:c2:d5:ef:27:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35d7dbaa75ef3420d8d9459130ed01dc535136fb
Validity
Not Before: Jan 1 17:49:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a248af867422ef0e865983e5344026917926c696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:cb:e8:21:3e:37:82:51:c1:95:ed:b8:ad:8e:
dd:56:86:59:d8:30:27:d8:29:0a:17:02:df:9e:1f:
d2:3a:b9:65:f6:46:46:ba:87:9d:5a:f9:ea:fc:96:
25:bb:c4:e1:59:3d:1c:0b:3d:92:56:1e:cd:35:93:
ab:85:da:2c:07:6a:c0:18:80:65:9b:1a:0d:02:86:
57:cd:29:c8:5a:ee:45:b5:4a:69:40:c5:6b:ea:ef:
b2:42:54:32:04:48:50:aa:47:69:33:ef:c4:97:46:
06:87:6a:4c:e2:63:cc:ec:02:f7:70:80:fe:fd:be:
bf:bb:60:52:91:ba:65:ed:4b:06:2d:c3:56:42:63:
03:1a:74:b4:ff:fb:77:31:86:41:c4:d2:ed:85:cf:
c1:de:f9:d4:7b:d1:c0:3c:f8:e4:60:fc:14:3b:86:
08:49:e5:fc:d7:23:23:99:95:d9:c4:c1:55:29:b9:
d6:49:0b:e2:7d:85:8b:f8:87:68:24:7c:7d:32:c5:
32:3f:df:5f:fc:4d:5d:a6:d7:25:21:5b:3f:05:d0:
78:a6:03:f9:2b:7d:5e:cb:5c:7c:c4:81:32:f3:de:
ac:67:33:a0:b5:13:97:cc:46:63:a8:4c:be:99:99:
92:5b:c0:df:a9:2f:48:ea:32:64:83:1c:21:ed:63:
4a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:48:AF:86:74:22:EF:0E:86:59:83:E5:34:40:26:91:79:26:C6:96
X509v3 Authority Key Identifier:
keyid:35:D7:DB:AA:75:EF:34:20:D8:D9:45:91:30:ED:01:DC:53:51:36:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NdfbqnXvNCDY2UWRMO0B3FNRNvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/9a8a3b-9b44-49ca-b674-d92c9380af33/1/okivhnQi7w6GWYPlNEAmkXkmxpY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/9a8a3b-9b44-49ca-b674-d92c9380af33/1/NdfbqnXvNCDY2UWRMO0B3FNRNvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.232.27.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:77:4c:15:2e:0c:1f:46:de:6d:25:d5:b1:57:b9:52:3e:df:
90:37:f6:5b:c5:7f:34:ad:a2:bc:03:ef:60:66:45:49:b6:d4:
aa:17:d9:a4:ba:ee:b1:99:c9:2c:9c:67:df:33:c4:84:69:c4:
a4:96:b0:3a:8d:9a:e6:d5:5d:61:8c:bb:eb:65:7a:6a:52:3c:
b1:79:be:61:7a:eb:d2:5c:de:4a:07:c6:ab:ef:4c:5d:0e:29:
95:f5:b1:be:82:17:06:57:5a:cc:c7:f7:af:4c:9c:0a:87:04:
6b:62:c4:eb:c9:84:26:ce:93:3d:eb:1b:7c:d7:0f:dc:09:a4:
20:53:c6:cb:b0:31:14:a7:fd:5a:02:48:1e:c7:b7:80:42:c5:
e3:a7:59:1b:43:c6:24:6b:87:6a:cb:9e:56:a2:ee:92:84:7a:
9e:2b:41:93:b6:45:17:ad:f5:46:9f:bc:03:cb:d6:c5:9a:46:
d8:55:a3:b4:2b:9a:eb:7b:c5:9f:bf:b0:da:61:b6:12:22:79:
d3:d1:90:e4:a2:c5:7d:8e:7e:f9:bb:d9:fe:06:09:61:61:ca:
30:84:41:bc:bc:b1:ff:22:7f:96:80:04:da:ae:c0:a1:c5:41:
31:a5:b5:cb:4d:1b:26:97:c4:54:48:16:37:be:01:cb:5f:5d:
e9:1e:d6:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 03:04:12 2025 by rpki-client