Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/tL5-Keddv0icrOkLTgT8ryYM2Dk.roa
File: tL5-Keddv0icrOkLTgT8ryYM2Dk.roa (raw, json)
Hash identifier: oDOl9ZfQxy4MI0oXfGazHV5Kou2gL/nj4KWfMXDD32c=
Subject key identifier: B4:BE:7E:29:E7:5D:BF:48:9C:AC:E9:0B:4E:04:FC:AF:26:0C:D8:39
Certificate issuer: /CN=3613022dedc1f8f013aa6e390fa23bd22f1fe392
Certificate serial: 0194258E40102F757917880C535A277466C2
Authority key identifier: 36:13:02:2D:ED:C1:F8:F0:13:AA:6E:39:0F:A2:3B:D2:2F:1F:E3:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NhMCLe3B-PATqm45D6I70i8f45I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/tL5-Keddv0icrOkLTgT8ryYM2Dk.roa
Signing time: Thu 02 Jan 2025 05:47:47 +0000
ROA not before: Thu 02 Jan 2025 05:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200200
IP address blocks: 91.220.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.mft
rsync://rpki.ripe.net/repository/DEFAULT/NhMCLe3B-PATqm45D6I70i8f45I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:40:10:2f:75:79:17:88:0c:53:5a:27:74:66:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3613022dedc1f8f013aa6e390fa23bd22f1fe392
Validity
Not Before: Jan 2 05:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b4be7e29e75dbf489cace90b4e04fcaf260cd839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f5:bb:88:28:e2:c6:8c:39:ea:05:d5:49:9e:
ad:41:f9:58:19:23:6f:7c:fe:5b:29:a3:26:aa:d3:
70:76:aa:d4:49:d1:5c:0f:5f:51:37:f1:47:6b:c9:
9e:26:2c:05:23:0a:61:f1:84:68:a1:da:2c:c7:07:
f5:c3:3e:75:45:fd:d9:8e:dc:1f:1e:c3:01:41:8e:
3c:62:cf:e1:d6:f7:b4:30:ab:00:72:94:bc:04:d8:
7c:82:e3:f3:66:fe:48:58:a5:f9:7a:2e:08:a2:bb:
16:be:d8:91:ea:10:78:f0:3c:9b:31:c2:20:bf:d8:
37:e3:90:67:b1:da:61:67:e9:e3:5e:2e:86:3b:a9:
1b:30:88:97:3f:49:77:fb:f2:a5:5a:61:1f:4f:3f:
d2:59:d3:04:8b:b0:a8:a7:0b:f9:5c:a2:9a:55:9c:
42:8a:32:97:68:b9:c5:da:a5:4d:e9:6f:67:f6:47:
0b:9d:c4:39:87:7a:e2:69:8b:d6:90:2e:1d:86:c4:
3c:35:01:ef:cf:75:e1:e7:21:cc:e3:61:ee:18:c7:
0b:cd:88:24:fc:6b:81:22:fb:90:6b:b0:24:05:6e:
e1:24:88:a6:65:2f:23:1f:f5:80:ea:d9:35:7d:e6:
72:88:cf:07:a8:cd:01:83:58:1e:69:d3:d6:65:3b:
55:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:BE:7E:29:E7:5D:BF:48:9C:AC:E9:0B:4E:04:FC:AF:26:0C:D8:39
X509v3 Authority Key Identifier:
keyid:36:13:02:2D:ED:C1:F8:F0:13:AA:6E:39:0F:A2:3B:D2:2F:1F:E3:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhMCLe3B-PATqm45D6I70i8f45I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/tL5-Keddv0icrOkLTgT8ryYM2Dk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/1e7f96-e936-42c8-ac62-40669ad19fb9/1/NhMCLe3B-PATqm45D6I70i8f45I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.41.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:d0:da:3a:f0:e5:a1:a5:5e:e1:3e:55:f4:2a:32:4b:a4:06:
2e:ff:d2:2a:90:ae:f2:5c:e6:96:17:36:5c:2c:a4:d2:05:c1:
d0:24:5d:28:f5:42:74:43:e0:08:c3:ee:53:31:51:db:be:59:
37:12:b9:4e:77:b9:e3:33:d0:9a:43:bf:03:e1:00:f9:bb:3c:
bf:55:de:7d:34:63:13:97:6f:6f:60:31:73:9a:a9:8d:6e:22:
10:2f:f9:33:27:85:85:30:08:4e:f1:bc:21:f1:a1:78:ba:e6:
d0:65:e3:f3:89:bf:97:1d:24:e1:1a:96:0b:4f:0c:b5:bf:0e:
d5:e7:1c:ba:4f:f5:fe:3f:f2:77:80:75:75:98:c2:31:1e:68:
9a:0e:63:eb:9b:1c:56:6c:05:83:36:91:8b:09:61:1a:87:9d:
4b:43:0f:9c:0a:a6:fa:aa:39:ef:f1:c3:1d:33:d1:1b:0d:3e:
d4:89:75:cb:4e:bb:f0:3a:d7:06:ca:f4:cf:74:8a:2a:ab:27:
9f:47:ff:7f:58:e9:77:c6:06:2e:14:70:76:bd:1f:35:0f:59:
e4:66:db:6a:f4:5d:11:fc:e4:5b:ec:a0:62:0d:62:8c:b8:ba:
5a:ac:5e:03:04:11:1c:b0:ef:ee:ed:99:82:b1:69:3a:0f:4f:
85:f6:9c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 15:23:39 2025 by rpki-client