Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/5b29ff-bf90-4883-97da-3c8627d9788d/1/sjY2Az_5yr-Wx6rCGo_8zNvp2Gw.roa
File: sjY2Az_5yr-Wx6rCGo_8zNvp2Gw.roa (raw, json)
Hash identifier: bO46czBi72k/nkGNkOK/k0Kad2q6af0PdZpkur6OmcY=
Subject key identifier: B2:36:36:03:3F:F9:CA:BF:96:C7:AA:C2:1A:8F:FC:CC:DB:E9:D8:6C
Certificate issuer: /CN=b801c33094a09922c0a10486d21df5589675bc94
Certificate serial: 01942747DC022FF7C0181EF1A644F9AE1E83
Authority key identifier: B8:01:C3:30:94:A0:99:22:C0:A1:04:86:D2:1D:F5:58:96:75:BC:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/5b29ff-bf90-4883-97da-3c8627d9788d/1/sjY2Az_5yr-Wx6rCGo_8zNvp2Gw.roa
Signing time: Thu 02 Jan 2025 13:50:08 +0000
ROA not before: Thu 02 Jan 2025 13:50:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42573
IP address blocks: 91.199.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/5b29ff-bf90-4883-97da-3c8627d9788d/1/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/5b29ff-bf90-4883-97da-3c8627d9788d/1/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:dc:02:2f:f7:c0:18:1e:f1:a6:44:f9:ae:1e:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b801c33094a09922c0a10486d21df5589675bc94
Validity
Not Before: Jan 2 13:50:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b23636033ff9cabf96c7aac21a8ffcccdbe9d86c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:58:68:81:81:a6:36:a0:43:83:2f:a7:40:88:
06:4f:9e:af:cb:35:12:1d:fa:b7:c0:9e:c8:ef:47:
d7:b7:2d:7e:ad:1d:ff:8c:b2:ba:b0:d8:58:5e:ce:
ce:29:5b:cf:9f:11:2c:5c:6b:da:17:b9:97:ec:6b:
77:a1:53:1a:c3:c6:f9:8a:df:d8:ec:12:1f:e4:3d:
8d:6b:e0:38:3b:12:1b:19:69:80:15:07:29:f3:de:
8a:aa:ee:ed:84:07:09:ce:ef:df:8c:b7:39:a8:a5:
2f:aa:9d:25:e7:d6:c8:34:90:ce:a1:19:e3:65:cb:
77:99:e4:b8:bd:9f:99:8e:fd:67:77:e2:64:50:9d:
cb:9d:7e:42:cf:59:60:b0:98:c1:4b:8d:3c:46:af:
ab:6d:14:0d:f3:a3:3b:9c:a9:8b:21:71:15:9e:07:
81:0b:ee:70:5a:85:a9:0d:63:38:e6:6d:5c:05:72:
6b:c8:84:e2:01:12:55:5b:58:1c:fd:76:20:3d:4e:
a3:00:b9:52:f0:ae:ee:06:9b:3b:13:23:2d:1b:60:
cb:7e:2d:c1:51:cc:71:3d:e9:44:ca:5a:4b:78:75:
64:ac:fa:90:86:ed:55:e9:39:b2:5f:18:8e:93:fe:
45:22:f2:6f:8f:b8:39:15:0c:2b:6a:3b:bf:bf:29:
03:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:36:36:03:3F:F9:CA:BF:96:C7:AA:C2:1A:8F:FC:CC:DB:E9:D8:6C
X509v3 Authority Key Identifier:
keyid:B8:01:C3:30:94:A0:99:22:C0:A1:04:86:D2:1D:F5:58:96:75:BC:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/5b29ff-bf90-4883-97da-3c8627d9788d/1/sjY2Az_5yr-Wx6rCGo_8zNvp2Gw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/5b29ff-bf90-4883-97da-3c8627d9788d/1/uAHDMJSgmSLAoQSG0h31WJZ1vJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.89.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:ee:03:71:d9:2e:d6:4c:e8:db:80:61:f7:bc:fd:a6:f1:fb:
6f:8f:e4:88:31:75:13:c9:ac:0c:41:4f:07:57:0e:4c:56:a6:
21:54:db:57:79:f8:db:31:30:e1:29:57:1f:fc:8a:cf:61:ff:
f8:be:56:02:ef:09:67:11:68:95:fc:0b:6b:cb:ac:ca:24:01:
97:65:72:3b:c3:06:c5:64:00:43:72:1d:16:d9:49:65:33:12:
0e:61:ad:f6:5c:53:43:b7:74:25:3e:ef:69:52:33:fa:87:8f:
49:ad:8c:2c:dd:56:4f:ab:42:ba:51:84:26:84:6e:11:97:52:
34:f8:a2:47:84:c4:aa:8c:52:13:7d:a2:6f:bf:f5:ab:5f:a2:
b2:41:a5:79:3c:02:b1:fa:09:ac:48:7d:7d:9a:71:34:a6:c4:
9a:0a:c1:45:27:c1:b7:46:a6:9f:d0:33:89:03:93:a0:bd:4e:
57:a8:08:4b:45:98:5c:8b:0b:f0:08:83:cd:6e:f4:28:a8:81:
ef:e5:76:36:f1:9e:c5:9f:cf:81:ea:ac:3a:8f:e7:a3:15:33:
85:9f:21:3a:7e:fa:d0:87:fc:76:ed:0f:2a:bc:ee:cb:7d:ec:
e4:b3:c4:95:a3:ef:1c:9b:ac:ac:5b:af:09:ca:8d:37:11:0a:
6b:e5:2d:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 08:56:29 2025 by rpki-client