Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/Cy35oxIBw3su2liG61xuPEUmvjI.roa
File: Cy35oxIBw3su2liG61xuPEUmvjI.roa (raw, json)
Hash identifier: 2IrXlMCQpECjm4Y6ZOTZrh47ViIm4Ji7SwFI+6InbKc=
Subject key identifier: 0B:2D:F9:A3:12:01:C3:7B:2E:DA:58:86:EB:5C:6E:3C:45:26:BE:32
Certificate issuer: /CN=9ea1425225410c93211d08758fcdaf0f7aa1ccaa
Certificate serial: 01951DD9B8A06C52FC90B74B61930F6BCEFE
Authority key identifier: 9E:A1:42:52:25:41:0C:93:21:1D:08:75:8F:CD:AF:0F:7A:A1:CC:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nqFCUiVBDJMhHQh1j82vD3qhzKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/Cy35oxIBw3su2liG61xuPEUmvjI.roa
Signing time: Wed 19 Feb 2025 10:56:02 +0000
ROA not before: Wed 19 Feb 2025 10:56:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1820
IP address blocks: 91.247.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nqFCUiVBDJMhHQh1j82vD3qhzKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:1d:d9:b8:a0:6c:52:fc:90:b7:4b:61:93:0f:6b:ce:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ea1425225410c93211d08758fcdaf0f7aa1ccaa
Validity
Not Before: Feb 19 10:56:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0b2df9a31201c37b2eda5886eb5c6e3c4526be32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:70:a0:64:8e:00:e1:08:95:b6:04:f9:4c:aa:
a1:d7:4c:8f:fe:bf:07:d7:fd:70:a4:0a:8e:24:17:
11:10:35:84:72:95:b9:2f:8e:20:9c:9a:a6:4d:a6:
7c:79:cd:26:f4:94:e6:32:56:13:43:78:b1:36:41:
f4:88:1b:9d:a9:2f:da:df:48:28:7c:51:58:7f:0b:
a2:b7:79:24:ec:4a:b2:50:ec:68:76:41:63:5e:70:
8a:3c:88:af:a8:d4:d6:8b:2a:23:d7:b6:3f:78:54:
35:38:87:a1:28:d7:ce:30:2f:cd:9f:93:41:36:7e:
ee:94:9e:de:e2:a4:7b:cf:00:f3:63:d0:53:99:20:
4b:78:46:a1:71:08:f4:d9:98:fa:83:d6:bb:a3:32:
27:bd:b8:c4:77:df:8c:53:d6:0c:3d:54:b9:0b:ea:
f9:ae:96:e9:c6:7e:b8:5c:0f:56:9d:97:af:92:07:
73:7e:93:57:c4:e0:0a:fd:13:8c:7b:9b:9d:90:ea:
92:dc:8b:8c:3d:ff:fb:fe:c0:34:a0:6c:28:de:19:
91:86:d9:cf:d5:64:6b:38:e8:9e:c4:52:8b:ca:01:
2b:f9:06:ae:67:41:95:39:b0:30:07:a3:e3:1c:8f:
ae:f4:78:ee:d6:3e:c3:8a:25:28:a1:f1:ef:79:53:
2b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:2D:F9:A3:12:01:C3:7B:2E:DA:58:86:EB:5C:6E:3C:45:26:BE:32
X509v3 Authority Key Identifier:
keyid:9E:A1:42:52:25:41:0C:93:21:1D:08:75:8F:CD:AF:0F:7A:A1:CC:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nqFCUiVBDJMhHQh1j82vD3qhzKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/Cy35oxIBw3su2liG61xuPEUmvjI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.247.38.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:fd:59:4a:48:aa:04:5f:aa:7b:9f:0f:d0:53:71:b1:c6:f0:
20:eb:0a:29:8c:83:84:2d:1a:11:9d:c9:12:4d:44:41:20:9e:
fc:98:bb:0e:24:75:dc:1b:35:e9:ac:41:c0:75:29:d0:81:c9:
be:7c:4f:61:cf:27:9d:2a:be:95:14:60:3d:ae:09:13:77:ab:
c4:b3:76:59:68:6a:fc:c0:c8:28:0d:1c:fe:0e:f9:2c:02:52:
be:fc:23:87:78:03:64:bc:d2:91:c9:dc:d4:53:82:99:2b:40:
60:26:23:f3:39:d0:c2:98:27:7c:14:05:11:a2:10:10:aa:ef:
05:b7:d1:08:b9:00:4d:ab:e4:9a:f6:35:18:ed:29:80:fc:6e:
ed:82:3c:f0:af:0f:51:ae:51:a3:2e:eb:69:9c:47:88:10:82:
6b:40:21:d3:3d:f1:a4:3c:6b:28:e9:c5:e9:76:9f:8a:f1:e1:
c6:83:85:12:0b:82:4d:5b:8a:f6:da:dd:7c:b9:e1:a9:be:75:
fb:7f:e2:29:ea:5e:68:e5:54:a1:f5:d0:07:25:92:a6:6e:16:
58:47:8e:50:8d:9f:fb:54:44:3e:bb:82:db:93:af:bb:c6:96:
a5:15:75:05:92:db:cb:b6:31:4f:7e:b7:fb:89:fd:cb:4d:56:
45:40:c6:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:48:55 2025 by rpki-client