Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/ay-9TuQv4NBBhfLPirWdhwTU6aU.roa
File: ay-9TuQv4NBBhfLPirWdhwTU6aU.roa (raw, json)
Hash identifier: /TV01OKxsZryh7q9+Tt7pDnXawnXcjSi58aGMMVoj6c=
Subject key identifier: 6B:2F:BD:4E:E4:2F:E0:D0:41:85:F2:CF:8A:B5:9D:87:04:D4:E9:A5
Certificate issuer: /CN=b1bc850d17ca6d3c7b4d00e501e2d356f08a585e
Certificate serial: 019421B1BA3D50A82D358A3341616FAAF48E
Authority key identifier: B1:BC:85:0D:17:CA:6D:3C:7B:4D:00:E5:01:E2:D3:56:F0:8A:58:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sbyFDRfKbTx7TQDlAeLTVvCKWF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/ay-9TuQv4NBBhfLPirWdhwTU6aU.roa
Signing time: Wed 01 Jan 2025 11:48:03 +0000
ROA not before: Wed 01 Jan 2025 11:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 91.228.72.0/24 maxlen: 24
91.228.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/sbyFDRfKbTx7TQDlAeLTVvCKWF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:ba:3d:50:a8:2d:35:8a:33:41:61:6f:aa:f4:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1bc850d17ca6d3c7b4d00e501e2d356f08a585e
Validity
Not Before: Jan 1 11:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6b2fbd4ee42fe0d04185f2cf8ab59d8704d4e9a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8f:aa:f4:4c:e2:d2:4d:67:aa:b5:5a:3c:bf:
e4:06:a9:2f:77:59:4b:4f:0c:b2:96:7c:0c:dd:da:
a5:d4:78:88:54:86:68:37:0b:a5:40:5c:19:1a:65:
04:f9:22:ad:e5:8f:1f:32:fb:62:a8:d9:2e:40:11:
03:a3:02:08:6b:5f:b1:18:38:4b:71:bd:52:4e:cd:
cb:cc:d3:95:1c:62:81:ec:2a:17:5a:eb:c7:67:87:
ce:dc:fa:13:5a:70:e1:a4:c0:b7:8c:50:c3:e9:e4:
69:a3:30:6b:cd:78:79:ab:e9:48:6a:a7:5d:bf:3e:
d1:43:47:5d:05:2d:fb:ff:4e:a7:85:80:ce:51:84:
64:62:d5:35:dd:37:f7:5a:3a:bc:86:17:39:5c:2a:
85:46:45:c7:cc:60:fe:38:5d:51:c2:d9:dc:86:f9:
c7:3b:be:dd:69:03:02:03:a4:65:bd:37:df:eb:c2:
70:bc:be:ad:bb:cc:bb:e5:61:7f:b6:45:dd:13:79:
94:7c:02:c9:ff:bc:b3:56:bf:7a:57:c0:a2:a8:08:
ab:6a:63:bb:88:67:b0:31:80:08:14:71:ca:6b:87:
45:dd:8b:cb:cc:9c:65:70:be:e5:03:fd:c4:cd:bb:
8f:91:fd:88:4a:2d:24:d6:e3:2e:91:04:d2:87:7e:
a6:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:2F:BD:4E:E4:2F:E0:D0:41:85:F2:CF:8A:B5:9D:87:04:D4:E9:A5
X509v3 Authority Key Identifier:
keyid:B1:BC:85:0D:17:CA:6D:3C:7B:4D:00:E5:01:E2:D3:56:F0:8A:58:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sbyFDRfKbTx7TQDlAeLTVvCKWF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/ay-9TuQv4NBBhfLPirWdhwTU6aU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.72.0/24
91.228.74.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:76:ee:36:de:90:4d:75:5b:62:34:de:0f:7b:89:73:0b:30:
e2:f0:2f:83:8e:57:60:77:0b:e2:0f:50:f2:77:01:a1:8c:5d:
1e:14:4a:20:5c:43:51:87:26:77:8f:97:d7:42:e0:71:c8:29:
a8:b8:41:0c:72:a5:fd:e0:d8:5e:20:70:85:b0:56:e9:1d:9c:
19:54:02:2b:5b:ce:33:90:28:26:cf:7e:ce:67:70:73:42:df:
67:38:04:91:97:a4:3b:59:1a:fe:a5:f4:b9:97:4f:93:0b:05:
80:3b:a6:3d:49:fd:25:af:33:0d:48:6b:0a:df:8b:d5:b1:ab:
62:79:bf:fc:1d:72:56:b9:9a:03:a8:23:b0:2e:6d:31:d5:73:
75:80:58:05:b0:4c:b4:aa:0a:fc:6d:d5:b7:47:8f:6e:98:8c:
5d:9e:0a:c0:b9:29:7b:9e:9e:f3:e4:7c:b8:f9:69:22:40:3c:
1c:6b:86:3c:a7:00:34:2b:4d:4c:b7:28:96:2d:be:62:22:c0:
75:61:86:1d:5d:d3:99:c4:ed:0d:2c:1e:9b:0d:96:b5:48:18:
c6:a4:c8:c9:e4:2b:9e:6b:8b:00:77:b5:c9:f5:49:1e:73:00:
d5:a1:ab:50:71:04:1f:85:29:df:98:e2:9b:3e:f7:0d:38:32:
db:3f:dd:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:42:10 2025 by rpki-client