Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/6fa51b-812e-4284-9d17-ad51ba216531/1/m-RbidkNWQkN01GbFCAQaZKCeHY.roa
File: m-RbidkNWQkN01GbFCAQaZKCeHY.roa (raw, json)
Hash identifier: rUWJNToLZ6TcfaoQcpJt+6y642guAKwp5vd3Wd/8VLw=
Subject key identifier: 9B:E4:5B:89:D9:0D:59:09:0D:D3:51:9B:14:20:10:69:92:82:78:76
Certificate issuer: /CN=df4f720fbbce6b155d7357dbe7126ca56c1ebe75
Certificate serial: 0195190426037986EEEE6F680BC9EC8E8680
Authority key identifier: DF:4F:72:0F:BB:CE:6B:15:5D:73:57:DB:E7:12:6C:A5:6C:1E:BE:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/309yD7vOaxVdc1fb5xJspWwevnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/6fa51b-812e-4284-9d17-ad51ba216531/1/m-RbidkNWQkN01GbFCAQaZKCeHY.roa
Signing time: Tue 18 Feb 2025 12:24:17 +0000
ROA not before: Tue 18 Feb 2025 12:24:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41965
IP address blocks: 91.208.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/6fa51b-812e-4284-9d17-ad51ba216531/1/309yD7vOaxVdc1fb5xJspWwevnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/6fa51b-812e-4284-9d17-ad51ba216531/1/309yD7vOaxVdc1fb5xJspWwevnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/309yD7vOaxVdc1fb5xJspWwevnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:19:04:26:03:79:86:ee:ee:6f:68:0b:c9:ec:8e:86:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df4f720fbbce6b155d7357dbe7126ca56c1ebe75
Validity
Not Before: Feb 18 12:24:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9be45b89d90d59090dd3519b1420106992827876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e4:92:5a:78:5d:c4:dd:e8:ee:03:6a:e6:a6:
6a:12:60:cb:e1:1e:07:7e:10:3b:14:ee:bb:4e:04:
94:c1:00:e7:9c:29:b2:5c:f5:8d:68:b3:43:ec:4c:
46:21:f5:28:45:61:d4:4c:8a:fc:88:94:51:b2:91:
b3:9c:a2:b9:c3:56:f8:bc:49:34:89:d5:ad:a3:a4:
97:6c:9e:8c:1b:6c:ec:88:b5:6d:c2:42:77:43:7e:
c9:7a:60:39:ab:e0:0c:dd:6d:40:38:fc:78:3d:7e:
ad:42:7a:1d:5c:c7:19:94:26:e0:36:c4:be:02:eb:
47:77:18:d2:44:b3:ef:0d:d9:86:c6:d3:f5:b3:22:
87:96:fd:66:00:16:f2:e9:c5:02:bb:4c:5d:be:c7:
d2:0c:fb:81:27:bc:af:62:2c:db:71:b1:f9:00:d3:
c0:61:0b:e7:62:6e:9c:63:c5:21:07:a0:f5:48:5e:
86:51:4b:6d:f5:0b:9c:6f:54:89:b5:ce:ec:b5:d1:
5a:50:2a:15:3e:b6:1f:47:ea:4e:d3:c0:ac:ae:b4:
76:1d:60:08:d5:b2:b2:8d:74:e1:1d:7b:99:7b:dc:
b2:50:13:70:2c:55:56:c9:4b:66:2f:d6:f0:88:65:
f5:0d:e5:c4:23:c1:ac:b2:e9:dd:b9:be:99:89:aa:
53:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:E4:5B:89:D9:0D:59:09:0D:D3:51:9B:14:20:10:69:92:82:78:76
X509v3 Authority Key Identifier:
keyid:DF:4F:72:0F:BB:CE:6B:15:5D:73:57:DB:E7:12:6C:A5:6C:1E:BE:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/309yD7vOaxVdc1fb5xJspWwevnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/6fa51b-812e-4284-9d17-ad51ba216531/1/m-RbidkNWQkN01GbFCAQaZKCeHY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/6fa51b-812e-4284-9d17-ad51ba216531/1/309yD7vOaxVdc1fb5xJspWwevnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.76.0/24
Signature Algorithm: sha256WithRSAEncryption
21:76:60:05:3c:79:b4:54:4c:18:4a:1f:ae:89:6f:42:74:70:
49:c5:58:f9:ba:41:fd:9b:04:6b:4e:3d:2d:66:af:7a:4c:0f:
2d:84:9f:bd:13:5a:23:0a:55:e9:74:0d:a4:d1:b4:6b:ad:96:
88:e2:8f:8a:5e:a5:ca:dd:df:b3:b4:ae:13:04:46:59:4c:71:
74:82:f2:f9:47:4b:1f:da:f2:f4:4b:71:59:7c:ed:fd:03:05:
74:9c:0b:ce:3f:53:82:e1:5c:b1:b6:d0:2c:72:1f:6e:e7:10:
a9:25:a5:fd:ae:1d:bf:9f:9c:b7:d3:d2:d8:e8:17:7a:50:12:
ae:c1:55:35:e1:d5:16:47:4f:62:ce:50:81:e5:3e:be:4c:ec:
6b:bf:b6:15:9f:22:8c:d7:50:1f:25:74:80:20:57:dd:38:91:
d2:b3:20:33:31:1d:5b:89:a5:94:27:dc:29:fe:7e:cd:bc:56:
10:0e:0e:f3:94:53:03:c1:ed:28:78:d3:91:73:99:f3:23:b9:
c4:fc:e1:6e:25:dc:39:e2:ad:dd:9e:81:9e:06:71:46:09:09:
4c:4e:11:27:39:2b:84:90:e6:2a:fc:a6:4f:a9:a1:42:b0:a2:
45:21:15:b8:e3:71:f5:bb:36:91:a6:e6:bd:6a:64:cd:72:a1:
36:e2:29:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 23:49:53 2025 by rpki-client