Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/0nCCSC3jIA4FtUJpFXhtsrFG7Qg.roa
File: 0nCCSC3jIA4FtUJpFXhtsrFG7Qg.roa (raw, json)
Hash identifier: 5DaOp8ZEA0DdA9vlG0RLC+R1LA0L0gjUqxRcz3w4hyE=
Subject key identifier: D2:70:82:48:2D:E3:20:0E:05:B5:42:69:15:78:6D:B2:B1:46:ED:08
Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Certificate serial: 019420D631100CF659773C32D97298E1FE49
Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/0nCCSC3jIA4FtUJpFXhtsrFG7Qg.roa
Signing time: Wed 01 Jan 2025 07:48:15 +0000
ROA not before: Wed 01 Jan 2025 07:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213014
IP address blocks: 91.236.75.0/24 maxlen: 24
2a0d:f407:1021::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 21:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:31:10:0c:f6:59:77:3c:32:d9:72:98:e1:fe:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Validity
Not Before: Jan 1 07:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d27082482de3200e05b5426915786db2b146ed08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7e:9f:0f:bf:ee:1f:a8:16:f0:f9:80:39:ca:
8b:5e:1e:08:58:e1:b3:03:3f:fa:6e:a1:73:78:ea:
cf:72:49:8b:bb:d4:67:91:67:eb:98:c2:c3:ed:27:
7e:dc:99:5a:ba:2b:5d:86:b3:f6:39:82:1e:e5:cb:
18:4f:d5:76:7f:cb:f3:ed:ab:2c:e5:28:46:e2:af:
4b:18:17:e0:c3:8c:3b:c8:0f:1f:56:34:8c:0d:31:
c3:bf:73:ea:0f:c1:49:6d:18:e1:c0:b9:48:ab:e0:
84:d7:3b:ec:96:21:cb:a9:bb:6e:b1:7c:d8:aa:34:
ca:1d:a2:00:05:3f:27:9c:7e:e9:e3:0d:e5:c8:99:
6b:f7:3c:19:43:b1:50:ef:05:76:d5:8d:89:0a:4a:
fe:8f:ce:2f:f5:a0:b6:7e:ac:6d:80:74:72:15:a3:
3f:48:95:38:8b:f9:f4:0f:46:90:ba:db:e0:93:df:
d5:a0:d0:82:61:17:03:80:ff:e6:11:34:d1:34:3f:
04:07:00:1d:16:2b:63:e5:97:74:6d:e5:d6:2e:bd:
b8:c3:8c:fc:11:51:03:5e:2e:e4:08:69:40:a1:17:
a5:31:92:94:9e:22:25:3d:22:f0:2f:f9:d8:b1:14:
54:bd:06:e8:67:95:50:9c:f8:5b:0d:c2:64:d7:12:
05:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:70:82:48:2D:E3:20:0E:05:B5:42:69:15:78:6D:B2:B1:46:ED:08
X509v3 Authority Key Identifier:
keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/0nCCSC3jIA4FtUJpFXhtsrFG7Qg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.75.0/24
IPv6:
2a0d:f407:1021::/48
Signature Algorithm: sha256WithRSAEncryption
4c:89:94:45:3b:09:82:4e:30:b6:84:1e:f0:b2:27:3b:2c:10:
43:6b:fc:53:cb:20:73:1a:9d:b2:de:33:54:2d:92:db:ea:d7:
cb:68:b0:01:10:f3:a0:3f:a3:6e:b9:42:b4:e7:50:69:09:96:
42:13:52:e6:5d:9e:1b:7b:5d:a3:69:d1:cc:f3:be:56:d4:9b:
ca:bc:19:d6:11:46:17:0b:a9:06:db:2f:78:53:da:5a:99:42:
1c:2f:6d:18:0d:fa:49:c5:17:08:ea:06:71:b8:8e:35:73:78:
bd:ad:7e:55:bc:b2:b1:6c:2e:6f:cd:d2:47:bf:f8:0a:f8:e9:
9a:59:ca:24:1f:06:69:87:04:75:47:0e:7e:4a:f6:e8:cd:72:
6f:19:fa:65:75:19:e5:bf:35:bd:28:32:89:a5:6d:30:80:ad:
51:66:d1:94:22:a4:24:34:79:31:4c:be:2d:22:40:e0:61:db:
6f:62:ed:5a:fe:71:cf:92:93:16:06:e4:c3:2c:c2:ca:bb:5b:
63:8d:3a:aa:21:d6:f7:63:b4:4d:85:bd:2b:88:83:4d:07:bd:
51:1a:aa:f2:72:6f:3b:e0:33:51:90:89:0a:84:5c:19:3a:bd:
b8:60:08:f6:0b:06:55:9a:9b:f9:62:2d:a7:82:49:bf:d8:4e:
56:6e:ec:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:02:02 2025 by rpki-client