Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/URa5fH07dVIqF3IJwFtjDdus5xo.roa
File: URa5fH07dVIqF3IJwFtjDdus5xo.roa (raw, json)
Hash identifier: bQ7L6PdzuMotAJCcbvlg+nm2FLpujqZUwsr24eILLiQ=
Subject key identifier: 51:16:B9:7C:7D:3B:75:52:2A:17:72:09:C0:5B:63:0D:DB:AC:E7:1A
Certificate issuer: /CN=e0689340283794489e41ac86aafa4414f8a4d6be
Certificate serial: 019420687756BCE6A77EA09F72924FF19A12
Authority key identifier: E0:68:93:40:28:37:94:48:9E:41:AC:86:AA:FA:44:14:F8:A4:D6:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4GiTQCg3lEieQayGqvpEFPik1r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/URa5fH07dVIqF3IJwFtjDdus5xo.roa
Signing time: Wed 01 Jan 2025 05:48:24 +0000
ROA not before: Wed 01 Jan 2025 05:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12978
IP address blocks: 91.233.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/4GiTQCg3lEieQayGqvpEFPik1r4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/4GiTQCg3lEieQayGqvpEFPik1r4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4GiTQCg3lEieQayGqvpEFPik1r4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 18:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:77:56:bc:e6:a7:7e:a0:9f:72:92:4f:f1:9a:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0689340283794489e41ac86aafa4414f8a4d6be
Validity
Not Before: Jan 1 05:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5116b97c7d3b75522a177209c05b630ddbace71a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b5:9a:97:56:ab:bc:b8:c0:01:d1:46:8e:bf:
b5:c4:d2:1c:a8:b3:6f:58:2f:17:7a:9f:5a:53:ef:
cd:0e:6c:3b:11:ac:9b:d6:a4:fb:a5:95:39:52:c9:
8e:7a:f9:31:77:5b:c3:19:5f:fe:bf:a2:a4:ea:3f:
80:1e:3e:65:f6:35:ff:c9:2c:23:0f:eb:2e:42:b2:
35:7f:58:ce:2d:f9:3c:d1:e7:b4:87:13:8b:13:57:
57:4a:80:da:a7:8c:cb:36:2d:06:22:23:11:43:c3:
57:0e:7b:f6:8b:3d:41:7c:29:63:8d:5b:db:df:55:
eb:a2:dd:aa:fa:8d:4f:00:60:65:5d:6f:5e:7e:b7:
9d:d8:ba:e4:68:fc:0a:29:b1:6d:88:3d:fe:7d:32:
4b:ed:d5:9d:9b:bc:1f:7e:e7:bd:32:22:5c:83:5c:
ee:44:22:90:85:6f:0d:69:8c:55:e0:b9:ac:19:b9:
ef:04:4f:5a:4f:85:42:39:72:3a:ce:69:24:39:ab:
53:74:2a:68:ea:15:b2:bc:25:12:72:e8:d6:d9:b3:
d4:71:cf:cc:f2:d4:63:f2:05:2f:08:1c:94:45:7c:
9c:22:4a:fa:a3:7c:51:de:5c:bf:35:6b:7f:59:35:
9a:07:4a:ee:d4:1e:2b:7f:a5:a5:61:a8:ea:2d:94:
ed:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:16:B9:7C:7D:3B:75:52:2A:17:72:09:C0:5B:63:0D:DB:AC:E7:1A
X509v3 Authority Key Identifier:
keyid:E0:68:93:40:28:37:94:48:9E:41:AC:86:AA:FA:44:14:F8:A4:D6:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GiTQCg3lEieQayGqvpEFPik1r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/URa5fH07dVIqF3IJwFtjDdus5xo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/4GiTQCg3lEieQayGqvpEFPik1r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.233.80.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:5b:57:f6:76:95:02:23:a4:59:06:f6:69:e5:f7:01:5f:b2:
ca:89:cc:b3:3b:ae:d4:72:3c:3f:40:93:2b:40:3d:3a:4c:71:
d5:95:f6:d2:8e:e2:4c:8a:1f:a9:26:19:2e:7e:69:27:af:8b:
67:60:ef:30:79:d4:49:fd:a7:ca:03:79:63:d0:69:a1:00:25:
0c:6b:07:f4:2d:f0:6f:38:ec:dd:8d:a0:c3:b2:b5:26:32:ab:
74:a7:ca:d9:57:6a:df:da:d6:94:3e:11:23:7a:43:ca:ae:ad:
f4:14:4b:55:43:98:5c:95:b2:cf:6d:9b:7d:f0:da:37:df:42:
a7:59:c7:62:f4:e4:b9:c8:48:aa:72:57:a7:17:ab:08:af:54:
e7:fe:a9:e7:55:17:58:b8:2c:e2:65:db:0c:ba:ae:b7:e8:73:
e5:28:63:26:b0:59:86:3f:fd:8d:4c:c4:a2:19:04:16:f0:8d:
22:c9:bf:48:2a:51:e7:9d:6f:f9:2f:1c:2f:61:c8:0f:8f:e4:
b3:82:dd:c5:36:1b:5b:85:70:6e:bd:d6:63:38:d9:f0:3d:47:
09:43:db:ad:a8:64:43:5b:06:8b:aa:f2:c3:37:a2:29:2f:51:
0f:0b:de:3c:29:f4:0e:22:a0:30:1f:22:c3:02:81:9f:69:d9:
5e:bb:f0:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:46:51 2025 by rpki-client