Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/s65Swz-UF9qOSTPVx8k4BeI2hLo.roa
File: s65Swz-UF9qOSTPVx8k4BeI2hLo.roa (raw, json)
Hash identifier: w368cQlhvJWkhi8lfudkt5F70hELf6zepKAdhLBClHI=
Subject key identifier: B3:AE:52:C3:3F:94:17:DA:8E:49:33:D5:C7:C9:38:05:E2:36:84:BA
Certificate issuer: /CN=41741c05d4ad7ed690e571ef5ed0f87522da47d7
Certificate serial: 019427B635FFF467F35E298CE61D7427B59E
Authority key identifier: 41:74:1C:05:D4:AD:7E:D6:90:E5:71:EF:5E:D0:F8:75:22:DA:47:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXQcBdStftaQ5XHvXtD4dSLaR9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/s65Swz-UF9qOSTPVx8k4BeI2hLo.roa
Signing time: Thu 02 Jan 2025 15:50:40 +0000
ROA not before: Thu 02 Jan 2025 15:50:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21500
IP address blocks: 91.211.12.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/QXQcBdStftaQ5XHvXtD4dSLaR9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:35:ff:f4:67:f3:5e:29:8c:e6:1d:74:27:b5:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41741c05d4ad7ed690e571ef5ed0f87522da47d7
Validity
Not Before: Jan 2 15:50:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b3ae52c33f9417da8e4933d5c7c93805e23684ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e4:34:6b:34:a6:b5:82:a9:77:c4:e0:17:51:
5b:93:7d:a8:16:19:0c:d6:ce:ee:b1:db:eb:1b:9b:
d8:3b:1c:cd:64:e4:80:0c:4a:e7:78:cf:1e:db:1a:
c8:53:74:de:80:91:70:3b:71:58:97:9a:e7:54:38:
bc:04:20:93:f2:41:96:ed:03:a2:9e:22:dc:4e:73:
d5:5a:7c:f7:c3:d9:f0:3a:b6:e2:6e:6b:91:2c:20:
e0:19:aa:9e:96:1d:2f:0f:4d:d4:57:1b:e8:14:a2:
ec:3c:e8:2e:87:44:95:2c:40:1a:f2:16:a2:b3:93:
05:3c:af:76:cb:09:55:77:5d:b3:29:35:24:b2:6c:
67:23:1a:94:b2:c9:d0:7d:5c:31:21:a7:3b:90:ba:
b1:77:a2:53:55:fe:6f:cc:40:62:54:c0:1e:d2:e2:
29:bb:9b:1e:85:57:1e:8c:ab:86:90:0d:24:4d:75:
2b:62:a3:f1:f7:00:4a:69:91:36:6a:ba:14:37:be:
f2:36:72:fa:9a:a6:df:20:a6:e9:36:19:48:d1:c7:
7b:53:d9:52:0a:21:54:76:67:65:0a:24:c7:78:37:
c0:fc:bf:d6:02:49:16:bb:cb:c8:7e:05:3f:12:88:
d7:34:e5:af:0e:bd:f6:11:18:16:04:c4:e4:a3:c1:
7a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:AE:52:C3:3F:94:17:DA:8E:49:33:D5:C7:C9:38:05:E2:36:84:BA
X509v3 Authority Key Identifier:
keyid:41:74:1C:05:D4:AD:7E:D6:90:E5:71:EF:5E:D0:F8:75:22:DA:47:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXQcBdStftaQ5XHvXtD4dSLaR9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/s65Swz-UF9qOSTPVx8k4BeI2hLo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.211.12.0/22
Signature Algorithm: sha256WithRSAEncryption
23:bd:02:ee:49:18:2a:10:0f:a3:f3:75:66:f1:0c:47:b7:f6:
f3:6b:d0:6b:cf:2e:47:86:d7:3b:30:88:ec:92:87:02:30:d0:
f6:8b:27:c0:f4:c2:2c:b0:a4:bd:76:1b:90:12:8a:d8:49:e1:
1a:35:7e:88:1c:98:d4:d8:c2:73:57:8c:37:1a:3d:eb:0d:6e:
12:fa:d5:fb:6e:6d:14:84:e4:56:22:80:53:5f:66:48:43:e3:
02:ef:a6:1e:dc:25:f5:be:2b:28:ce:32:23:e6:92:49:24:b6:
df:f0:98:1b:c1:06:da:e8:4a:36:ca:da:b4:0e:8a:de:8d:00:
ce:d9:c3:dd:a8:c8:34:40:b8:6d:db:b5:21:55:ed:58:e5:78:
6b:fd:13:80:9a:4a:79:f6:20:65:e6:a4:46:4e:13:30:e4:3e:
5a:1b:26:4d:69:0f:42:8d:7b:14:f1:da:e4:38:b6:23:09:43:
92:05:21:54:83:3d:b6:dc:a6:0d:fb:08:36:db:b8:c2:c2:6a:
4b:90:e6:06:c3:7a:5a:fc:b5:0c:7a:f4:f5:94:17:3e:0e:33:
3d:7b:fd:7a:7c:4a:79:5c:43:63:59:42:cf:b8:a4:2a:4f:3b:
79:53:b4:68:e1:58:1f:ff:b4:21:77:ff:04:03:74:64:c8:45:
f0:4e:04:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:20:04 2025 by rpki-client