Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/l0ahmTF7VU-jM66pydmyaaFWBpI.roa
File: l0ahmTF7VU-jM66pydmyaaFWBpI.roa (raw, json)
Hash identifier: kRKJwUHD3kMQk4tSNCj0K9HqnVNFjpJ2azvHqDtCdr0=
Subject key identifier: 97:46:A1:99:31:7B:55:4F:A3:33:AE:A9:C9:D9:B2:69:A1:56:06:92
Certificate issuer: /CN=ccf2474de84116752b9080a7a0db322535c56026
Certificate serial: 019422FC498596C18A2BEF20A01722BE0F64
Authority key identifier: CC:F2:47:4D:E8:41:16:75:2B:90:80:A7:A0:DB:32:25:35:C5:60:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPJHTehBFnUrkICnoNsyJTXFYCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/l0ahmTF7VU-jM66pydmyaaFWBpI.roa
Signing time: Wed 01 Jan 2025 17:49:06 +0000
ROA not before: Wed 01 Jan 2025 17:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57944
IP address blocks: 91.236.248.0/22 maxlen: 24
91.236.248.0/24 maxlen: 24
91.236.250.0/24 maxlen: 24
91.236.251.0/24 maxlen: 24
2001:67c:440::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zPJHTehBFnUrkICnoNsyJTXFYCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 20:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:49:85:96:c1:8a:2b:ef:20:a0:17:22:be:0f:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccf2474de84116752b9080a7a0db322535c56026
Validity
Not Before: Jan 1 17:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9746a199317b554fa333aea9c9d9b269a1560692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:32:89:d2:ac:b9:81:0f:a4:c4:4b:18:2c:9a:
ec:29:ca:5a:65:64:b5:45:d8:c1:ce:53:e4:25:bc:
07:56:1d:46:78:98:38:50:45:88:3d:9a:69:a3:c3:
db:41:17:66:88:f0:98:30:a2:d3:4c:c0:eb:91:c4:
d4:ea:4b:77:3d:9e:33:56:1e:b6:60:28:81:ba:84:
e6:ae:f1:07:f7:4c:e4:f7:99:dd:ff:f0:d9:76:a7:
95:2b:3e:93:f8:2a:d2:d5:06:23:51:2b:66:21:22:
d2:8d:7c:4b:0c:cc:e2:32:42:e3:4c:81:59:0a:61:
04:8d:ad:62:18:45:b7:ec:a5:bd:3f:6c:4a:cf:c5:
79:05:99:45:d7:40:d1:81:29:22:28:d7:a2:ad:ff:
5b:dc:5e:d2:ba:54:2c:4c:2f:04:39:15:86:60:26:
99:7c:53:ab:4e:9c:f1:11:e4:a5:04:50:3d:e0:17:
95:bc:08:55:88:20:32:2c:61:dd:aa:fb:c6:e2:dc:
6c:3a:e4:ac:14:1c:a3:9f:8b:da:0d:51:c7:ad:7f:
c5:2a:de:94:6e:20:dc:af:7d:d5:8f:8e:f6:9a:c0:
c5:16:1e:27:7e:ee:1f:4e:91:da:0b:8b:3e:a3:4e:
ee:d8:68:82:bc:74:14:4e:61:31:98:b5:e2:2d:f1:
50:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:46:A1:99:31:7B:55:4F:A3:33:AE:A9:C9:D9:B2:69:A1:56:06:92
X509v3 Authority Key Identifier:
keyid:CC:F2:47:4D:E8:41:16:75:2B:90:80:A7:A0:DB:32:25:35:C5:60:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPJHTehBFnUrkICnoNsyJTXFYCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/l0ahmTF7VU-jM66pydmyaaFWBpI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.248.0/22
IPv6:
2001:67c:440::/48
Signature Algorithm: sha256WithRSAEncryption
97:e5:75:be:6b:71:87:ea:eb:c9:9c:27:3c:4f:e3:26:d4:f7:
0b:6c:02:6e:2e:22:c8:0d:a3:cc:82:e6:ff:e7:1c:c7:67:5d:
f3:17:bb:e9:cc:43:3c:ff:3e:2b:9c:67:7d:6e:6a:55:05:7f:
cd:c0:2a:4d:04:97:17:aa:a9:a3:ca:19:31:4d:53:25:78:85:
3b:35:0c:f3:85:53:bd:41:46:b9:cf:97:1d:0e:af:a4:f8:b5:
cf:58:e4:e0:b2:57:de:d0:37:59:7d:28:9d:aa:66:34:ea:64:
79:d1:28:37:81:21:a0:ec:7e:1c:7e:4d:61:02:62:f3:2b:22:
7c:4a:c5:6f:15:87:d1:68:bf:fd:31:f5:7d:5e:a1:06:6f:3b:
27:96:ae:3d:a0:9b:ea:70:74:2b:63:31:2c:e7:7d:95:2e:b4:
8e:92:00:3e:43:c7:6b:54:c0:23:f7:d4:0b:a7:b5:fe:80:47:
07:fe:4d:7d:5b:e9:e6:ab:1a:bd:0c:f3:ec:6f:26:5f:36:9e:
b4:15:6d:79:00:19:4f:7e:cb:f0:fe:05:f7:61:33:53:e6:95:
66:45:65:88:e9:f9:f6:13:93:c3:5d:f3:82:73:77:9c:ce:7c:
6e:e4:5f:59:5e:6e:da:b9:68:54:bf:f7:59:ed:ec:94:e1:ad:
03:fc:b2:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:10:45 2025 by rpki-client