Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/DpaFmJAPai0xaXP7QAreQeSbrjY.roa
File: DpaFmJAPai0xaXP7QAreQeSbrjY.roa (raw, json)
Hash identifier: FyuIYwr801YWvdCNbt/J8XAVUeBVWYj34IWltEFHHsg=
Subject key identifier: 0E:96:85:98:90:0F:6A:2D:31:69:73:FB:40:0A:DE:41:E4:9B:AE:36
Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Certificate serial: 019420D629ED0563786923CE3B757B676085
Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/DpaFmJAPai0xaXP7QAreQeSbrjY.roa
Signing time: Wed 01 Jan 2025 07:48:13 +0000
ROA not before: Wed 01 Jan 2025 07:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 64267
IP address blocks: 91.223.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 12:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:29:ed:05:63:78:69:23:ce:3b:75:7b:67:60:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Validity
Not Before: Jan 1 07:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0e968598900f6a2d316973fb400ade41e49bae36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:56:1a:2b:92:7c:26:60:7d:a6:7b:d5:f6:ef:
37:94:b5:c1:48:fe:f9:bd:fd:43:d2:0e:4d:87:1c:
e4:68:4d:34:72:26:2b:4d:1b:20:7c:e2:dd:5a:c8:
97:22:8c:68:de:88:6d:f2:ef:fb:b2:c1:3f:a5:fa:
6d:b8:e0:b5:13:b9:cc:13:67:76:16:0a:96:26:01:
e2:5f:9f:66:51:c8:03:f9:48:d0:6c:d8:14:94:07:
14:67:a0:e8:9d:fc:b8:a1:03:83:07:af:a7:43:f3:
e2:61:e8:aa:d3:a4:1e:6d:d1:d7:f4:6d:a7:91:47:
55:06:54:0c:af:b6:77:b3:c1:97:07:41:58:14:b7:
19:7c:ac:45:28:30:7f:cb:49:0e:ac:88:7b:10:29:
5f:b8:23:00:f8:fe:3c:05:1d:86:e1:2f:9a:0c:94:
ef:46:f6:21:f2:e0:9d:21:c1:a5:f7:cb:c1:b5:90:
c4:e0:4f:c3:b5:86:d4:69:80:42:eb:14:15:2b:ce:
1b:b1:a8:53:f9:d5:c0:d5:b0:e6:60:6b:5d:14:d8:
9d:38:4d:a0:9b:90:c1:54:4b:65:88:3b:f7:9f:28:
8a:9b:08:ab:b7:3e:95:36:fe:15:2e:5c:10:b4:92:
c5:07:d2:90:78:c2:e7:17:c3:ae:5d:e2:d6:0e:ac:
fb:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:96:85:98:90:0F:6A:2D:31:69:73:FB:40:0A:DE:41:E4:9B:AE:36
X509v3 Authority Key Identifier:
keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/DpaFmJAPai0xaXP7QAreQeSbrjY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.67.0/24
Signature Algorithm: sha256WithRSAEncryption
60:03:3b:a9:9a:66:60:df:1f:f8:14:63:3e:29:61:5c:0f:10:
57:d8:cc:7b:aa:2f:73:a5:52:6a:4c:aa:88:e3:14:3d:5e:2c:
d2:82:2d:a0:d4:59:4d:c7:26:38:1d:0e:00:85:de:3a:a4:cc:
bc:6e:4f:31:be:2b:37:d6:ba:12:42:e9:e7:60:48:41:54:26:
4e:fe:3e:7d:f2:97:1d:60:45:7c:a0:45:d4:9a:28:2a:8e:ab:
fc:6f:20:86:6d:b1:14:a8:52:e5:52:ec:b3:cf:dc:84:e5:df:
be:46:bd:42:bf:30:d6:e5:12:b8:f7:ad:5d:a2:1a:19:24:f8:
21:4e:81:11:3b:74:12:0b:2d:31:a8:eb:c1:ff:ac:48:7f:cb:
30:51:f6:1d:42:82:05:b5:2d:51:ca:56:7c:2d:f0:17:e5:4b:
9a:05:cd:cb:9a:ef:6d:56:e4:c5:eb:d4:db:ed:0b:19:bf:ad:
89:40:c2:08:79:a0:62:4f:fc:65:06:f0:40:91:28:d1:72:ac:
08:3d:54:71:b6:76:d3:aa:13:5a:12:3e:77:5f:42:5f:67:01:
a4:bc:6d:47:98:76:de:ff:50:15:c1:dd:df:60:25:a2:36:ec:
60:57:e1:04:32:72:cd:a7:fb:23:bf:86:30:54:3d:56:5f:d5:
c1:56:bf:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:26:44 2025 by rpki-client