Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/P_96blpHfAQM3voIBaqDmBhs-8E.roa
File: P_96blpHfAQM3voIBaqDmBhs-8E.roa (raw, json)
Hash identifier: R9hyFEujTVmaNvCmjtuWK6MWoWwhFPOAcCmIzjoPwgM=
Subject key identifier: 3F:FF:7A:6E:5A:47:7C:04:0C:DE:FA:08:05:AA:83:98:18:6C:FB:C1
Certificate issuer: /CN=2793bde946ae936d3cacc136a5f3239edf2431f4
Certificate serial: 019428243DB8C92FA1EDAF7FCA8D9D8202A6
Authority key identifier: 27:93:BD:E9:46:AE:93:6D:3C:AC:C1:36:A5:F3:23:9E:DF:24:31:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J5O96Uauk208rME2pfMjnt8kMfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/P_96blpHfAQM3voIBaqDmBhs-8E.roa
Signing time: Thu 02 Jan 2025 17:50:51 +0000
ROA not before: Thu 02 Jan 2025 17:50:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 91.188.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/J5O96Uauk208rME2pfMjnt8kMfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:3d:b8:c9:2f:a1:ed:af:7f:ca:8d:9d:82:02:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2793bde946ae936d3cacc136a5f3239edf2431f4
Validity
Not Before: Jan 2 17:50:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3fff7a6e5a477c040cdefa0805aa8398186cfbc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:55:ee:78:ce:62:a9:31:6c:a7:22:fb:3e:45:
16:ed:cd:03:86:e0:23:71:cc:3e:cd:7b:3c:39:eb:
ce:07:9b:a7:63:13:4b:0a:d3:01:c8:28:22:7f:fe:
78:df:ee:7c:b1:c9:dd:a7:ee:30:13:33:6b:1a:ef:
e8:7c:d4:67:35:04:81:24:fe:39:1d:4d:cb:2b:91:
fb:97:b6:40:68:36:08:72:9c:96:d3:d5:6e:f9:81:
13:bf:ab:93:54:73:80:e6:e5:c9:1d:25:dd:04:5d:
76:37:dd:ec:8a:25:16:21:76:e1:0e:38:3b:9a:d3:
aa:d1:d3:7a:2c:ef:85:0d:d9:f5:6a:ef:c0:9a:25:
47:eb:90:c4:8f:88:a7:f7:f4:6b:89:35:27:0a:90:
6b:9a:fe:d1:6c:f1:49:f6:b6:e0:f2:7c:2f:2b:d1:
fb:4d:32:90:6c:b9:26:28:c6:d0:46:b5:57:80:a0:
de:fb:42:53:a0:f6:93:cb:87:cf:97:a0:8e:fb:c1:
95:fc:4f:5e:b0:80:a1:26:a3:db:b3:63:b3:3c:df:
3a:d9:3e:01:74:41:7f:11:40:65:89:99:0d:c4:87:
72:89:fa:8c:2e:8b:e7:f5:fb:cc:a4:ad:79:66:45:
5f:8c:23:43:d1:75:eb:5a:a4:9d:4f:4e:c3:d8:d3:
b5:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:FF:7A:6E:5A:47:7C:04:0C:DE:FA:08:05:AA:83:98:18:6C:FB:C1
X509v3 Authority Key Identifier:
keyid:27:93:BD:E9:46:AE:93:6D:3C:AC:C1:36:A5:F3:23:9E:DF:24:31:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5O96Uauk208rME2pfMjnt8kMfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/P_96blpHfAQM3voIBaqDmBhs-8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.188.255.0/24
Signature Algorithm: sha256WithRSAEncryption
96:80:1c:4b:7b:0c:60:66:ca:68:e6:ea:22:f0:fa:fc:d0:45:
25:71:4a:51:61:21:d0:61:b2:9c:cf:8e:3c:f9:d3:6d:0e:3b:
a2:5a:6c:c8:43:d6:2a:fb:3f:17:1c:c1:5d:c0:33:93:e7:33:
68:75:c3:51:e2:c4:bb:d6:b5:e7:99:32:39:41:ee:5d:9a:3b:
22:cd:fb:99:5e:e6:4c:07:e9:72:17:af:f6:e3:05:78:33:ba:
49:6d:4b:1e:49:3d:55:f4:04:f6:41:ed:9b:d8:f1:c5:ab:94:
a4:ed:21:1b:57:f1:a5:b3:88:a3:a2:ab:0a:c3:5c:79:c6:85:
b2:b8:8d:d5:d7:cc:79:b2:eb:af:79:2e:54:7b:7f:e6:e2:48:
29:3d:8e:bb:6f:76:fc:55:bc:59:ff:7a:e5:ec:9d:5d:52:da:
ee:da:8e:eb:f8:6a:20:77:63:e0:09:98:32:68:dc:45:a7:f4:
20:29:b4:6f:d9:b8:00:ef:c6:9e:ed:f3:77:a6:3e:07:15:8e:
b3:67:cc:cc:7d:db:25:8c:cd:87:57:1c:9d:15:9f:75:f6:b1:
d7:1b:a3:c4:ed:9c:fc:d3:7f:1a:77:b3:ac:5f:cb:b6:99:2b:
8f:a2:4d:e9:35:72:ca:90:bc:9e:ce:70:d6:f6:2f:0b:1b:d4:
58:e6:b6:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 12:50:29 2025 by rpki-client