Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/d92557-8c46-482c-91a8-c1e974bed12e/1/EDb9Liv3zA_92bId7joWHYrQzoo.roa
File: EDb9Liv3zA_92bId7joWHYrQzoo.roa (raw, json)
Hash identifier: A16x8qUxqiR7ERWaWAaG6LaaDTVQHFQ/x2nUxjREXXk=
Subject key identifier: 10:36:FD:2E:2B:F7:CC:0F:FD:D9:B2:1D:EE:3A:16:1D:8A:D0:CE:8A
Certificate issuer: /CN=51bfb46353bfcccff9412dcbdd480f19b4c98397
Certificate serial: 01942068650EE6055B32ED90094D7F52421A
Authority key identifier: 51:BF:B4:63:53:BF:CC:CF:F9:41:2D:CB:DD:48:0F:19:B4:C9:83:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/d92557-8c46-482c-91a8-c1e974bed12e/1/EDb9Liv3zA_92bId7joWHYrQzoo.roa
Signing time: Wed 01 Jan 2025 05:48:19 +0000
ROA not before: Wed 01 Jan 2025 05:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57305
IP address blocks: 91.227.212.0/22 maxlen: 22
195.149.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/d92557-8c46-482c-91a8-c1e974bed12e/1/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/d92557-8c46-482c-91a8-c1e974bed12e/1/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 18:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:65:0e:e6:05:5b:32:ed:90:09:4d:7f:52:42:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51bfb46353bfcccff9412dcbdd480f19b4c98397
Validity
Not Before: Jan 1 05:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1036fd2e2bf7cc0ffdd9b21dee3a161d8ad0ce8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:79:4f:c0:8a:08:67:e0:f5:47:48:bb:41:7a:
4b:97:13:34:b3:38:4f:91:0c:75:d1:f8:5a:54:53:
71:2f:29:4a:25:59:13:d9:a6:4a:c6:45:2b:fb:53:
e5:1e:84:89:1b:8f:5a:d7:e0:af:e6:4d:9e:00:09:
37:ca:dc:15:3a:57:65:ea:30:c3:73:ed:f9:40:ec:
66:aa:65:ae:4e:2f:67:9f:4a:23:09:cf:30:65:bf:
82:57:4d:50:21:56:f8:b6:d4:6a:fa:33:85:2d:57:
9d:7d:13:4a:01:ac:7a:ea:9c:6f:e0:29:87:63:8f:
f9:98:e6:2a:67:a2:0f:a9:0a:0d:bb:fe:15:5b:65:
b3:9f:d1:7e:12:76:d2:b9:18:f6:c1:98:65:d0:d6:
5a:a1:d3:67:59:81:a4:22:7a:d7:d2:47:bb:ec:72:
d5:85:27:59:34:81:aa:da:ce:fa:b2:dd:80:1c:da:
bc:6e:f1:59:bc:50:bc:c2:b5:eb:01:ee:3d:d2:0b:
7b:71:53:8d:a0:8b:58:9a:fa:a4:77:eb:62:ee:81:
48:dc:c8:97:31:25:a2:68:6a:15:9a:6a:07:0d:5b:
c1:2e:06:25:43:9c:4c:d5:67:d6:fe:6c:0a:94:42:
53:b7:ec:ee:fc:ed:ed:30:8c:98:28:7e:26:8b:65:
7b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:36:FD:2E:2B:F7:CC:0F:FD:D9:B2:1D:EE:3A:16:1D:8A:D0:CE:8A
X509v3 Authority Key Identifier:
keyid:51:BF:B4:63:53:BF:CC:CF:F9:41:2D:CB:DD:48:0F:19:B4:C9:83:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/d92557-8c46-482c-91a8-c1e974bed12e/1/EDb9Liv3zA_92bId7joWHYrQzoo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/d92557-8c46-482c-91a8-c1e974bed12e/1/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.227.212.0/22
195.149.100.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:b6:3a:e6:9c:a9:d3:67:c7:76:52:69:d5:58:ad:bc:06:e6:
14:38:cf:ac:ba:fc:e1:51:6f:8c:fe:cb:b0:22:42:1d:0d:17:
f2:c4:22:c6:eb:a2:c1:db:07:df:ef:e3:5a:1a:a8:53:13:ce:
71:f2:26:78:f8:54:8b:46:47:a0:59:ba:f0:5b:29:14:4b:02:
e7:b4:a4:6c:37:bb:38:ff:07:05:78:84:04:f3:30:e6:e5:c1:
42:66:de:56:08:e0:0e:66:a8:9c:9a:e1:0f:55:6c:36:37:cb:
26:51:00:53:e4:c4:59:86:b1:86:30:fe:fe:ad:5a:e1:0b:6f:
a6:18:22:b2:0c:d0:89:12:26:99:f6:3f:10:1e:8d:0d:81:f1:
3e:c3:e3:d7:07:1c:6d:08:c6:f4:ed:50:38:f0:d0:d9:32:0f:
82:e6:64:2c:f4:69:e0:00:a4:48:9d:36:7b:e2:83:98:fb:6b:
bc:c6:35:16:af:37:48:83:9b:c7:eb:25:17:f0:d6:a6:fa:af:
43:cf:07:5b:b4:2c:c8:b1:4b:c4:2c:0a:70:21:55:0f:e0:3e:
27:72:53:99:73:bf:72:da:ea:78:47:57:62:3a:6e:fa:22:20:
65:80:e0:07:6d:bc:83:fe:37:87:57:6b:d3:36:af:c2:44:8a:
f8:61:05:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:51:11 2025 by rpki-client