Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/UR9eQe3KGZ-9c60OTO6AJ5Nv5N4.roa
File: UR9eQe3KGZ-9c60OTO6AJ5Nv5N4.roa (raw, json)
Hash identifier: i7xKIbibG1Wf9vR46/89Xb0uAuY5HlesJatHG5Hh1rk=
Subject key identifier: 51:1F:5E:41:ED:CA:19:9F:BD:73:AD:0E:4C:EE:80:27:93:6F:E4:DE
Certificate issuer: /CN=39eea846551c6e419b947e0da107eecb0070419a
Certificate serial: 01954EB1577437BD175A57FAEFD726382B98
Authority key identifier: 39:EE:A8:46:55:1C:6E:41:9B:94:7E:0D:A1:07:EE:CB:00:70:41:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oe6oRlUcbkGblH4NoQfuywBwQZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/UR9eQe3KGZ-9c60OTO6AJ5Nv5N4.roa
Signing time: Fri 28 Feb 2025 22:33:19 +0000
ROA not before: Fri 28 Feb 2025 22:33:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1836
IP address blocks: 91.229.80.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oe6oRlUcbkGblH4NoQfuywBwQZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 10:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:4e:b1:57:74:37:bd:17:5a:57:fa:ef:d7:26:38:2b:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39eea846551c6e419b947e0da107eecb0070419a
Validity
Not Before: Feb 28 22:33:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=511f5e41edca199fbd73ad0e4cee8027936fe4de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:fe:2c:2d:11:56:62:4a:72:c9:37:28:e2:c5:
4b:5f:d2:e0:30:0d:12:f0:04:11:b2:80:6c:76:b2:
2b:61:67:4c:d5:d0:04:48:ad:8d:9c:58:12:27:18:
8d:ad:0b:c6:3a:be:ae:ec:13:4f:cf:8e:64:81:08:
d2:58:8a:cc:1d:4e:d3:a3:ca:de:7f:f0:1d:5b:5e:
35:f4:3a:76:66:e3:a4:fd:5e:bc:6c:ba:b2:e5:d5:
1f:5e:9a:ce:17:e4:8b:a8:9a:92:b2:5b:c4:6f:ab:
94:e4:69:19:3d:b1:bb:ab:a2:eb:1c:54:bc:7a:ce:
fa:60:ed:47:62:a8:a1:0c:59:d4:fc:ac:5f:c8:55:
93:f2:ad:9a:ef:2d:71:09:0d:80:7b:96:cc:68:fe:
e2:50:17:b7:f8:57:34:14:b1:1e:b2:41:28:f1:a8:
4e:a3:d7:ee:d7:7d:f3:29:2a:18:27:61:b1:44:8a:
18:92:99:20:f9:33:e9:27:69:0d:d0:0a:2d:03:2b:
34:a5:72:f1:69:12:e0:c6:85:c1:db:fe:45:74:5e:
a7:d2:ed:01:73:75:66:8d:26:92:04:07:cd:33:a2:
28:80:42:0e:af:f0:e6:e2:2e:fc:40:69:6e:04:a2:
0d:43:6a:c1:cd:1e:c2:8b:b0:4f:6e:4e:c2:d2:9b:
21:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:1F:5E:41:ED:CA:19:9F:BD:73:AD:0E:4C:EE:80:27:93:6F:E4:DE
X509v3 Authority Key Identifier:
keyid:39:EE:A8:46:55:1C:6E:41:9B:94:7E:0D:A1:07:EE:CB:00:70:41:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oe6oRlUcbkGblH4NoQfuywBwQZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/UR9eQe3KGZ-9c60OTO6AJ5Nv5N4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.229.80.0/22
Signature Algorithm: sha256WithRSAEncryption
32:e9:02:04:b2:5e:e1:ee:17:fc:eb:3e:a0:89:9c:37:66:f8:
ba:80:c5:3b:b5:79:a9:45:0f:dd:ba:ee:b5:54:a3:86:63:1a:
ad:7d:7c:d2:02:40:ab:c5:20:2c:e7:bd:64:05:ce:71:9e:f7:
60:d1:da:7f:20:18:de:cd:7f:64:c4:e8:03:a7:56:27:d4:34:
a3:1d:d7:49:91:80:94:61:2e:5b:7b:22:cc:05:98:69:59:95:
60:8d:ed:eb:88:46:e5:32:61:3d:6e:f0:a6:56:75:45:2a:24:
b7:4a:de:a9:76:73:c7:48:75:21:b9:4e:46:1f:1d:07:90:20:
d7:62:aa:11:6f:89:78:04:60:8b:26:46:fc:0c:0f:61:d8:8e:
4f:7f:db:be:0a:7b:2a:88:64:c2:d8:3a:73:b1:be:aa:16:05:
c4:17:63:7b:3c:5f:f6:da:b2:a3:49:28:0b:69:d2:64:bd:01:
c8:a5:2e:f8:c1:74:78:b7:78:c3:e4:c1:2c:72:6a:60:eb:a0:
36:93:36:90:d0:ba:98:20:ce:2e:ae:c4:86:4b:68:45:e0:1c:
5a:21:f8:fc:92:41:51:fd:ef:47:6b:6e:ef:1d:83:b6:b6:ab:
8f:3f:ab:0b:48:2e:9c:30:52:b0:82:ec:61:db:6b:93:14:5c:
2d:2a:6a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 22:02:01 2025 by rpki-client