Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/t7tnySRpEFMTydXCzGToiDJgYGQ.roa
File: t7tnySRpEFMTydXCzGToiDJgYGQ.roa (raw, json)
Hash identifier: CXeAI4+kyWk1ca7T6WDcTTVmJi/Ezadlx47KG35a8Bw=
Subject key identifier: B7:BB:67:C9:24:69:10:53:13:C9:D5:C2:CC:64:E8:88:32:60:60:64
Certificate issuer: /CN=3613022dedc1f8f013aa6e390fa23bd22f1fe392
Certificate serial: 019425C201ADFB5700E1780CC65DB6FAE810
Authority key identifier: 36:13:02:2D:ED:C1:F8:F0:13:AA:6E:39:0F:A2:3B:D2:2F:1F:E3:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NhMCLe3B-PATqm45D6I70i8f45I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/t7tnySRpEFMTydXCzGToiDJgYGQ.roa
Signing time: Thu 02 Jan 2025 06:44:18 +0000
ROA not before: Thu 02 Jan 2025 06:44:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19905
IP address blocks: 91.220.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.mft
rsync://rpki.ripe.net/repository/DEFAULT/NhMCLe3B-PATqm45D6I70i8f45I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:c2:01:ad:fb:57:00:e1:78:0c:c6:5d:b6:fa:e8:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3613022dedc1f8f013aa6e390fa23bd22f1fe392
Validity
Not Before: Jan 2 06:44:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b7bb67c92469105313c9d5c2cc64e88832606064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a0:e4:25:2f:56:de:41:ee:77:9f:90:56:32:
23:43:2c:81:05:f0:bf:b6:6f:53:91:7e:76:ba:75:
68:85:2d:11:e4:8a:92:15:7d:69:d1:25:59:e2:61:
43:71:6b:be:ae:4d:52:09:c6:c2:9b:2a:7f:16:21:
e6:57:c5:dc:b1:77:18:63:83:5a:d4:8d:5d:39:0e:
20:39:94:7b:ea:02:80:76:e6:56:42:80:1b:f9:44:
2d:6e:04:19:f4:55:a9:d9:22:84:25:67:c0:4b:dc:
bf:72:92:7d:35:8d:d5:3e:89:86:ea:16:d0:99:35:
3a:fe:33:5e:b9:82:98:b4:fa:40:c6:43:9a:53:e8:
da:ba:60:23:39:85:be:ad:2d:2f:0b:36:1a:5d:99:
26:46:bc:f2:a0:c3:ad:04:e7:5b:a4:56:60:5f:76:
46:0b:7d:3b:71:17:11:9b:12:8a:bd:94:bc:e8:e1:
bb:06:a0:61:a6:36:28:04:9c:58:f6:76:bc:f4:94:
73:d6:9e:ad:80:58:5c:07:dc:f8:96:78:fc:92:bb:
7a:45:37:9d:34:3a:c0:8b:20:36:cc:1d:0f:a1:1e:
6d:59:62:d3:11:d0:b7:63:05:09:9e:12:36:61:a9:
7c:6f:2b:8f:6d:7b:38:d4:49:22:e6:82:8d:1e:31:
00:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:BB:67:C9:24:69:10:53:13:C9:D5:C2:CC:64:E8:88:32:60:60:64
X509v3 Authority Key Identifier:
keyid:36:13:02:2D:ED:C1:F8:F0:13:AA:6E:39:0F:A2:3B:D2:2F:1F:E3:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhMCLe3B-PATqm45D6I70i8f45I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/t7tnySRpEFMTydXCzGToiDJgYGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.41.0/24
Signature Algorithm: sha256WithRSAEncryption
53:2d:ca:f4:b8:ba:5b:6f:6e:60:25:fe:b5:3b:ff:e5:51:79:
05:e5:1c:46:90:bd:8c:e4:0d:9c:3e:cb:0a:8d:d1:18:12:da:
39:b6:cc:bb:af:46:64:50:a1:5c:1d:8b:b4:c8:72:c9:40:0d:
19:f4:06:db:48:87:4e:cf:32:aa:bd:81:9e:c1:2e:61:b1:cc:
a6:4f:1d:5f:ea:03:ff:b3:36:ad:9e:8e:2d:ef:dc:5c:66:32:
2a:c4:63:0a:8a:5e:9a:d7:59:82:1f:d8:a9:b8:be:25:1d:1c:
b4:99:1b:f4:9c:f9:0d:c3:b1:14:c7:81:04:c3:88:b9:6b:e9:
12:f0:df:5b:04:a9:28:83:1f:5a:cb:03:ca:77:4a:15:cb:ae:
59:79:a5:54:f4:2a:6a:e5:90:14:1b:98:d0:c2:b0:4c:4c:b1:
f5:9b:c7:83:c4:12:f3:bc:06:dc:3b:ee:e3:84:95:c7:69:fd:
9b:d3:e5:7f:2f:17:5f:94:e1:9c:9b:49:85:b0:06:56:2b:98:
b9:9b:31:71:67:ab:c6:01:7a:86:0b:b9:b1:47:bf:19:5f:9f:
9a:55:c2:65:98:5a:f6:52:e9:f4:4a:17:a1:1b:05:cb:e7:88:
aa:b4:76:ad:2b:aa:98:cf:67:8a:a5:83:04:ed:a8:a6:6e:d1:
58:00:24:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 16:52:10 2025 by rpki-client