Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/lZ_8Gy-p9dJBOR2jnQXGL1gKT24.roa
File: lZ_8Gy-p9dJBOR2jnQXGL1gKT24.roa (raw, json)
Hash identifier: gojO/FGnNBUfGiI8/IbdnMShaLKaR6WR/+GNSoRF7Bk=
Subject key identifier: 95:9F:FC:1B:2F:A9:F5:D2:41:39:1D:A3:9D:05:C6:2F:58:0A:4F:6E
Certificate issuer: /CN=e38aabea8ee29bf7c915bc3ef0bbacc27d0ecede
Certificate serial: 019424B25D91201A54730FC68368198B47C9
Authority key identifier: E3:8A:AB:EA:8E:E2:9B:F7:C9:15:BC:3E:F0:BB:AC:C2:7D:0E:CE:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/44qr6o7im_fJFbw-8Luswn0Ozt4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/lZ_8Gy-p9dJBOR2jnQXGL1gKT24.roa
Signing time: Thu 02 Jan 2025 01:47:36 +0000
ROA not before: Thu 02 Jan 2025 01:47:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15404
IP address blocks: 91.208.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/44qr6o7im_fJFbw-8Luswn0Ozt4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/44qr6o7im_fJFbw-8Luswn0Ozt4.mft
rsync://rpki.ripe.net/repository/DEFAULT/44qr6o7im_fJFbw-8Luswn0Ozt4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 13:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:5d:91:20:1a:54:73:0f:c6:83:68:19:8b:47:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e38aabea8ee29bf7c915bc3ef0bbacc27d0ecede
Validity
Not Before: Jan 2 01:47:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=959ffc1b2fa9f5d241391da39d05c62f580a4f6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:58:16:24:da:4c:4a:3e:59:08:47:a4:73:6a:
8e:0c:86:8c:36:c2:73:01:95:54:a8:40:12:1f:65:
de:19:2e:9f:5c:70:d5:f9:13:1d:33:f8:db:ad:f2:
ae:71:76:c6:75:87:d3:5e:05:d7:74:0c:0f:0c:f3:
95:3f:59:d5:24:60:43:5e:f5:de:33:d7:2e:b0:73:
41:fe:97:cc:1f:dc:64:fe:fc:b2:f9:5d:69:1d:14:
2a:68:9c:fe:65:40:6e:3e:ba:38:a1:25:7c:32:6e:
6c:24:33:3d:35:3a:e1:5a:1f:5a:a6:17:9a:00:f7:
e5:1b:cc:c3:d2:1b:bb:aa:4d:9e:bc:38:8a:00:25:
4c:b6:e4:64:0e:ea:d7:3c:7a:f5:bd:40:4a:b1:eb:
bf:f9:ac:9a:2b:b8:52:09:b0:19:ac:75:01:b0:61:
06:f4:8b:26:1b:b4:fc:7c:a6:9d:ef:a4:db:7a:3b:
aa:78:d5:0a:c0:60:12:ef:5b:65:22:00:3e:45:bf:
85:19:a3:3b:c6:ea:ea:be:ed:1e:9c:f3:3e:17:e0:
03:3d:a6:e2:e1:d7:df:46:89:10:ef:79:fa:09:73:
ce:78:52:37:18:70:3f:46:40:e3:04:7f:3f:d0:26:
01:10:fa:e3:a6:1c:dc:19:80:15:53:36:8e:0f:fa:
44:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:9F:FC:1B:2F:A9:F5:D2:41:39:1D:A3:9D:05:C6:2F:58:0A:4F:6E
X509v3 Authority Key Identifier:
keyid:E3:8A:AB:EA:8E:E2:9B:F7:C9:15:BC:3E:F0:BB:AC:C2:7D:0E:CE:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/44qr6o7im_fJFbw-8Luswn0Ozt4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/lZ_8Gy-p9dJBOR2jnQXGL1gKT24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/44qr6o7im_fJFbw-8Luswn0Ozt4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.124.0/24
Signature Algorithm: sha256WithRSAEncryption
56:f3:e6:76:c4:05:fa:ec:22:7e:3c:04:9a:38:41:57:05:0f:
19:3f:9c:06:86:32:97:17:75:ff:e9:5d:a7:8c:9e:3e:1e:5e:
f4:ab:24:fb:41:70:04:66:4c:5c:5e:5c:38:ce:d2:59:7a:50:
ee:b6:76:67:29:9c:a9:34:6f:d3:8e:29:c2:42:f3:fd:22:4a:
99:34:65:69:e8:08:6f:9d:56:9e:e9:d9:ba:0e:44:65:ef:94:
42:18:bf:9b:45:85:25:e6:3d:1d:4c:7a:4c:2c:94:43:e7:8b:
25:34:cf:33:d4:94:bc:b9:58:fb:be:b7:4b:56:4b:36:2f:56:
37:64:94:31:4c:e4:96:30:9a:e9:9d:d3:e6:bc:fc:20:4d:a3:
21:bc:18:5f:43:e6:c8:6c:50:5e:d4:b4:ec:1d:4a:bf:6f:c9:
05:61:6e:68:a8:aa:3f:ab:7f:77:1c:0b:3a:df:71:64:a4:51:
5b:8d:b8:02:66:d8:1e:de:9b:3b:c4:6a:12:d3:3c:45:63:d9:
fe:5a:48:fd:a6:ca:aa:6f:5a:e9:23:80:08:3e:d1:ea:dc:ef:
94:45:25:60:40:67:aa:1c:c4:f6:5a:22:b3:55:0b:5b:fd:09:
54:67:e2:fb:35:32:e7:40:98:46:25:bb:72:50:3c:66:be:4d:
d4:90:4c:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:23:34 2025 by rpki-client