Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/QaI9DSrZz7ee9hIU4DnZspjDIV0.roa
File: QaI9DSrZz7ee9hIU4DnZspjDIV0.roa (raw, json)
Hash identifier: Z9nnRdcq5IZHSc4H5xkykoFIJ1oSyMHuKk3P+4Nf+Ko=
Subject key identifier: 41:A2:3D:0D:2A:D9:CF:B7:9E:F6:12:14:E0:39:D9:B2:98:C3:21:5D
Certificate issuer: /CN=035e5285dedc35ab63527048b366ee553806ce04
Certificate serial: 01941FFA0FE2538EA3A0C7EF835FC3B9012A
Authority key identifier: 03:5E:52:85:DE:DC:35:AB:63:52:70:48:B3:66:EE:55:38:06:CE:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A15Shd7cNatjUnBIs2buVTgGzgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/QaI9DSrZz7ee9hIU4DnZspjDIV0.roa
Signing time: Wed 01 Jan 2025 03:47:49 +0000
ROA not before: Wed 01 Jan 2025 03:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31463
IP address blocks: 91.213.208.0/24 maxlen: 24
91.213.215.0/24 maxlen: 24
91.213.217.0/24 maxlen: 24
91.213.220.0/24 maxlen: 24
2a0f:64c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/A15Shd7cNatjUnBIs2buVTgGzgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:0f:e2:53:8e:a3:a0:c7:ef:83:5f:c3:b9:01:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=035e5285dedc35ab63527048b366ee553806ce04
Validity
Not Before: Jan 1 03:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=41a23d0d2ad9cfb79ef61214e039d9b298c3215d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0b:2f:5f:4f:73:42:ae:eb:6d:ff:0b:4b:72:
53:d3:a8:bb:c8:d6:83:56:16:78:d9:42:a1:8f:0c:
b1:3b:ca:32:05:5c:1b:af:57:d5:40:e7:69:fa:0b:
b3:4d:16:fb:17:71:1e:95:2c:5e:a2:b6:94:ec:02:
4c:53:c2:b4:ab:68:2a:0e:34:c5:4d:47:f2:7e:ff:
1d:03:91:b6:5f:c2:12:b8:a8:58:21:67:b1:f5:86:
63:cc:b5:b1:d5:a8:80:ab:a7:de:f5:00:19:16:46:
0e:16:18:09:1d:3b:36:92:77:35:b3:9b:79:75:e5:
22:88:0f:a3:a7:cf:79:53:09:06:57:d7:b6:b5:83:
68:50:99:79:b1:0f:3b:56:43:5f:c9:43:ec:38:b9:
52:65:89:97:a8:2a:44:1a:f1:bd:04:63:6b:78:49:
9d:33:e8:ef:45:7a:76:1d:e3:3c:77:48:71:12:88:
d4:f4:8e:54:10:95:a3:ec:5e:1c:6b:b7:98:cd:36:
61:52:bd:0d:6a:1e:a8:fe:28:d8:af:8c:a7:7b:b0:
27:b4:82:1c:f2:02:32:d7:cd:bb:f5:a3:ac:fa:60:
9d:a0:7d:44:c9:ef:29:22:b4:0b:bf:1a:1e:aa:3a:
ae:86:28:20:fc:b0:fe:ac:40:fb:e2:bb:33:88:08:
ba:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:A2:3D:0D:2A:D9:CF:B7:9E:F6:12:14:E0:39:D9:B2:98:C3:21:5D
X509v3 Authority Key Identifier:
keyid:03:5E:52:85:DE:DC:35:AB:63:52:70:48:B3:66:EE:55:38:06:CE:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A15Shd7cNatjUnBIs2buVTgGzgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/QaI9DSrZz7ee9hIU4DnZspjDIV0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.208.0/24
91.213.215.0/24
91.213.217.0/24
91.213.220.0/24
IPv6:
2a0f:64c0::/29
Signature Algorithm: sha256WithRSAEncryption
05:f1:ce:c8:10:2a:80:e3:4d:25:43:cb:d6:52:e5:ee:4c:0a:
bb:4f:3e:1e:87:b8:15:3f:7d:6c:9a:3a:ee:20:07:4c:07:af:
a6:cd:94:2d:60:51:3c:c9:7a:33:f8:47:bb:7a:e5:0d:25:4c:
3c:15:8c:f5:c6:2e:73:07:ea:7b:c8:24:ec:53:b5:48:df:f5:
3e:ce:67:17:5f:e7:45:24:42:78:2a:fb:29:26:eb:18:ab:18:
16:78:52:67:1e:44:51:e1:89:52:7b:6a:8e:4c:dd:37:79:be:
5a:dd:8a:7d:aa:03:9a:a9:f2:63:1e:af:2d:05:73:6c:92:7f:
e9:10:3b:20:e5:9d:11:cc:6e:f3:02:06:6c:6a:56:af:3f:d8:
e3:7e:1d:86:05:7f:c6:06:0c:e3:92:bf:40:b4:e3:e6:37:8e:
f4:47:18:b6:80:52:35:39:31:35:ef:4a:89:fb:c4:12:9a:64:
e0:e5:f8:da:2d:74:0e:d3:f9:6b:e8:09:bd:ec:17:29:b4:1f:
e6:e1:d1:5a:d3:05:f4:e4:60:78:f8:b5:8c:b8:c6:01:4e:3e:
a7:cb:07:9f:0b:5e:97:84:df:28:3c:ac:da:d5:77:cd:de:c5:
08:5f:6d:4e:be:8f:1c:a2:47:7c:c2:54:e8:96:01:69:8b:1d:
99:85:db:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:55:55 2025 by rpki-client