Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/e53313-ba6a-4e81-ba7b-6715f58ceebf/1/abpRqtiQtQaZu4MHu087BH1phaI.roa
File: abpRqtiQtQaZu4MHu087BH1phaI.roa (raw, json)
Hash identifier: Oq4Z5f20QFJa82wcUjWOln7tJ0DH2NRa/Bs4WGmPNhY=
Subject key identifier: 69:BA:51:AA:D8:90:B5:06:99:BB:83:07:BB:4F:3B:04:7D:69:85:A2
Certificate issuer: /CN=c79a7ca44027d2e5ad389f169ed15936d7851166
Certificate serial: 01942444CEA6577B735D1EDB23499B60BB9E
Authority key identifier: C7:9A:7C:A4:40:27:D2:E5:AD:38:9F:16:9E:D1:59:36:D7:85:11:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x5p8pEAn0uWtOJ8WntFZNteFEWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/e53313-ba6a-4e81-ba7b-6715f58ceebf/1/abpRqtiQtQaZu4MHu087BH1phaI.roa
Signing time: Wed 01 Jan 2025 23:47:56 +0000
ROA not before: Wed 01 Jan 2025 23:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204881
IP address blocks: 91.213.235.0/24 maxlen: 24
91.240.163.0/24 maxlen: 24
2a12:fd40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/e53313-ba6a-4e81-ba7b-6715f58ceebf/1/x5p8pEAn0uWtOJ8WntFZNteFEWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/e53313-ba6a-4e81-ba7b-6715f58ceebf/1/x5p8pEAn0uWtOJ8WntFZNteFEWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/x5p8pEAn0uWtOJ8WntFZNteFEWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:ce:a6:57:7b:73:5d:1e:db:23:49:9b:60:bb:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c79a7ca44027d2e5ad389f169ed15936d7851166
Validity
Not Before: Jan 1 23:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69ba51aad890b50699bb8307bb4f3b047d6985a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:64:a3:a6:6b:fc:17:db:b1:3e:c6:a5:b7:60:
a7:67:7b:b1:0c:e2:5f:23:79:f9:cf:25:0a:80:11:
5f:39:73:c9:96:00:e5:86:db:f5:50:70:fb:94:cf:
1a:3e:b1:35:db:8d:66:c6:67:34:93:93:0e:79:9c:
c4:27:7b:d3:0b:79:fa:d8:b2:52:a9:28:3b:44:1b:
83:5b:c4:a7:6b:ca:e5:17:7d:fe:33:84:51:6f:ad:
ef:45:1f:d5:93:3f:bc:16:ed:21:0e:d9:30:11:06:
43:9e:9b:b9:c4:95:43:f8:50:66:66:ff:41:77:9f:
6f:03:41:16:aa:8b:ea:b2:35:e8:5e:2c:26:7a:a9:
d5:82:86:cc:5d:a7:df:a0:20:63:c8:2f:1f:76:c1:
52:0d:ee:40:25:b0:5c:ed:94:d5:cd:68:12:80:ba:
fe:49:43:34:bd:6c:73:83:33:7d:cd:09:f5:07:12:
d7:7c:80:0c:0e:fa:52:67:b1:35:08:2a:5b:ee:cc:
fd:23:65:ba:bb:4b:e3:09:86:e9:8f:3c:d8:e8:c6:
08:6b:76:76:ec:bf:7d:29:e4:65:ae:05:b9:66:ca:
06:cb:56:2c:ab:ab:82:8a:cc:02:1d:39:a2:31:d2:
5c:ac:74:f5:1b:59:08:03:10:46:9c:f7:93:a9:39:
36:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:BA:51:AA:D8:90:B5:06:99:BB:83:07:BB:4F:3B:04:7D:69:85:A2
X509v3 Authority Key Identifier:
keyid:C7:9A:7C:A4:40:27:D2:E5:AD:38:9F:16:9E:D1:59:36:D7:85:11:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x5p8pEAn0uWtOJ8WntFZNteFEWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/e53313-ba6a-4e81-ba7b-6715f58ceebf/1/abpRqtiQtQaZu4MHu087BH1phaI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/e53313-ba6a-4e81-ba7b-6715f58ceebf/1/x5p8pEAn0uWtOJ8WntFZNteFEWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.235.0/24
91.240.163.0/24
IPv6:
2a12:fd40::/29
Signature Algorithm: sha256WithRSAEncryption
43:63:68:50:80:38:c3:28:3a:ea:ef:fc:e6:23:87:d1:ff:be:
48:0a:2e:ca:5d:e9:e6:e4:e4:36:27:e2:a5:3f:a0:6c:ac:52:
0c:36:45:5a:81:c0:ac:4a:5c:07:ea:bb:11:e1:ca:94:eb:a7:
85:24:33:e9:88:7b:03:df:10:0a:6c:04:e4:fc:8f:91:d1:1b:
69:5e:5a:13:11:77:36:c5:44:62:1b:c6:51:22:ab:57:05:fa:
97:3e:69:eb:ef:d3:26:48:22:d2:0b:ca:ca:5d:d6:bb:fa:8a:
23:1a:c5:79:53:6d:bc:4f:6a:ba:f1:f0:8e:67:4f:0f:80:5c:
c5:57:86:68:46:7c:08:a4:9b:90:d4:9b:28:cc:a2:7c:9b:fb:
b0:b8:04:b0:7f:37:00:f4:d8:0a:27:2e:f3:ca:10:2e:d5:8b:
08:50:2e:43:b2:2d:c6:e8:9e:50:f8:6f:b8:a3:91:c4:c9:b0:
eb:90:37:19:1b:f6:21:ee:0b:7a:b9:91:c0:c1:7a:ae:8f:3a:
a2:07:f4:d6:bd:ae:58:00:8b:c3:de:35:f5:10:67:f7:73:c1:
21:18:5d:7e:d9:5d:82:5e:ee:66:34:e8:6f:ae:21:b4:8a:d4:
06:95:3a:78:92:3e:04:d7:d7:1a:24:c2:80:66:77:5e:bc:be:
84:d2:07:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:55:40 2025 by rpki-client