Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/e0042c-ebd2-4a8d-9e67-aed164832a8b/1/mPtwMPDBjS-jkWgS9uuTF9_ZOaw.roa
File: mPtwMPDBjS-jkWgS9uuTF9_ZOaw.roa (raw, json)
Hash identifier: 2rJnzrY1kifgjd6LuERI+YOBEpbALMoWfYZ9TooQij0=
Subject key identifier: 98:FB:70:30:F0:C1:8D:2F:A3:91:68:12:F6:EB:93:17:DF:D9:39:AC
Certificate issuer: /CN=935c7b762919cf36dc14263f5e5955e8ffa35d3b
Certificate serial: 01942143AF1121EE0D65E96B1149EA5D8B0A
Authority key identifier: 93:5C:7B:76:29:19:CF:36:DC:14:26:3F:5E:59:55:E8:FF:A3:5D:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k1x7dikZzzbcFCY_XllV6P-jXTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/e0042c-ebd2-4a8d-9e67-aed164832a8b/1/mPtwMPDBjS-jkWgS9uuTF9_ZOaw.roa
Signing time: Wed 01 Jan 2025 09:47:51 +0000
ROA not before: Wed 01 Jan 2025 09:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8917
IP address blocks: 91.230.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/e0042c-ebd2-4a8d-9e67-aed164832a8b/1/k1x7dikZzzbcFCY_XllV6P-jXTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/e0042c-ebd2-4a8d-9e67-aed164832a8b/1/k1x7dikZzzbcFCY_XllV6P-jXTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/k1x7dikZzzbcFCY_XllV6P-jXTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 18:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:af:11:21:ee:0d:65:e9:6b:11:49:ea:5d:8b:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=935c7b762919cf36dc14263f5e5955e8ffa35d3b
Validity
Not Before: Jan 1 09:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=98fb7030f0c18d2fa3916812f6eb9317dfd939ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:9b:b9:bb:1c:8e:6b:ea:70:95:0c:41:91:f2:
73:81:12:a3:8c:c9:18:e2:2c:0a:da:4c:e6:42:56:
4a:e0:83:cc:25:83:69:eb:8c:a6:6e:56:6e:df:7f:
5a:2d:cd:c6:47:fd:a6:87:cc:fd:89:33:2f:73:65:
c9:bf:70:c2:cd:a4:be:49:f8:f2:66:9e:03:55:f9:
63:b6:5c:14:a7:95:33:59:5c:81:32:0e:1f:43:3a:
ce:ef:e5:58:86:32:dd:0c:e9:ee:7a:d7:98:7f:75:
b4:db:77:ca:d4:a2:19:a2:97:0e:6e:b7:6f:e9:6a:
6b:df:40:9a:13:bd:4f:a7:24:41:6b:35:c8:4c:25:
79:d4:18:4f:27:63:e4:7f:0c:93:f8:6b:01:32:aa:
eb:24:c3:ed:5e:82:e3:d0:76:27:4e:21:44:ed:35:
e2:77:22:04:73:61:04:00:99:9c:1c:76:7c:27:ad:
ef:cd:d1:98:0e:a5:77:39:b4:b8:18:b7:e2:c9:2a:
30:22:7c:90:43:47:e3:f5:d4:3d:56:97:88:5a:cd:
ea:58:3e:e8:20:39:37:9a:18:d6:ec:40:c5:b1:cd:
ca:7b:0c:e7:a9:eb:4a:06:02:80:ea:18:13:16:c8:
5a:83:ce:27:ee:92:74:40:a4:c0:90:57:67:24:c6:
ad:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:FB:70:30:F0:C1:8D:2F:A3:91:68:12:F6:EB:93:17:DF:D9:39:AC
X509v3 Authority Key Identifier:
keyid:93:5C:7B:76:29:19:CF:36:DC:14:26:3F:5E:59:55:E8:FF:A3:5D:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1x7dikZzzbcFCY_XllV6P-jXTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e0042c-ebd2-4a8d-9e67-aed164832a8b/1/mPtwMPDBjS-jkWgS9uuTF9_ZOaw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e0042c-ebd2-4a8d-9e67-aed164832a8b/1/k1x7dikZzzbcFCY_XllV6P-jXTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.230.214.0/24
Signature Algorithm: sha256WithRSAEncryption
61:fa:fd:49:51:a0:d9:95:60:34:02:6d:7f:7b:2b:72:03:1c:
29:60:46:8d:e9:72:bb:17:0f:42:a4:b3:b3:00:15:5e:64:52:
ef:eb:84:20:50:f1:9a:bb:8d:45:36:1c:1a:f4:fa:32:09:84:
db:f7:17:ec:5f:7b:23:6b:10:d4:78:8b:f7:be:8f:3b:59:74:
05:77:71:cf:cb:67:14:74:c2:9d:7d:9c:ab:eb:bf:cf:4d:71:
4f:a9:51:90:52:4f:79:1c:80:81:b3:84:cc:23:0d:a3:fb:24:
6a:49:b0:08:53:d9:ce:ea:19:6f:5b:9d:23:96:eb:75:fc:f4:
6d:bc:f1:f8:0f:04:b5:c6:6e:c2:24:2a:35:7a:24:12:dc:07:
50:b6:81:16:52:a4:d3:86:db:81:e5:4b:36:d8:c5:47:74:48:
1d:eb:63:4c:28:4a:43:f9:9c:f5:ed:a6:ce:0d:45:2a:20:68:
87:02:0e:a9:19:f6:de:05:5c:c2:ad:a5:2c:50:9e:24:5c:f5:
f6:c7:7e:31:36:7a:c9:14:1a:07:e0:1f:6e:3e:4e:1d:07:23:
95:0d:50:52:b9:20:b0:8d:37:8f:2b:dd:cb:71:1d:e8:d6:bf:
91:9e:bd:70:25:15:34:ac:0c:3b:2f:72:c4:5f:36:ef:0d:08:
7e:56:34:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:41:56 2025 by rpki-client