Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/a_ivjW0ZGGTiDvZcTfc91f_pyXs.roa
File: a_ivjW0ZGGTiDvZcTfc91f_pyXs.roa (raw, json)
Hash identifier: W9scHoBGox42TFL0zLwjs6jy/UbNIHRPLGTm7dHLpDs=
Subject key identifier: 6B:F8:AF:8D:6D:19:18:64:E2:0E:F6:5C:4D:F7:3D:D5:FF:E9:C9:7B
Certificate issuer: /CN=73bbc213c6f90bd8f007139eae6fe0cafa435ece
Certificate serial: 0194258EF9A85ED81006674F8D1BCC45F912
Authority key identifier: 73:BB:C2:13:C6:F9:0B:D8:F0:07:13:9E:AE:6F:E0:CA:FA:43:5E:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c7vCE8b5C9jwBxOerm_gyvpDXs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/a_ivjW0ZGGTiDvZcTfc91f_pyXs.roa
Signing time: Thu 02 Jan 2025 05:48:34 +0000
ROA not before: Thu 02 Jan 2025 05:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50599
IP address blocks: 91.224.60.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/c7vCE8b5C9jwBxOerm_gyvpDXs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:f9:a8:5e:d8:10:06:67:4f:8d:1b:cc:45:f9:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73bbc213c6f90bd8f007139eae6fe0cafa435ece
Validity
Not Before: Jan 2 05:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6bf8af8d6d191864e20ef65c4df73dd5ffe9c97b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:70:17:f2:9d:d3:c8:07:db:3a:a2:22:a4:7a:
46:cd:dc:9a:5d:be:24:88:53:0d:f1:0a:92:65:59:
84:a1:df:fb:81:79:5c:21:eb:10:54:f3:e0:9e:09:
35:74:25:fd:f8:4e:75:cc:07:94:e9:d2:75:2f:f9:
57:3f:07:a0:6a:8c:03:ba:d6:33:0b:8e:a8:61:f0:
8b:83:ff:5f:f1:de:70:a4:30:a9:62:da:64:de:3e:
f6:85:12:3a:31:e0:49:cd:8c:fe:ac:5d:54:3e:7b:
6a:ed:dd:3c:bb:c5:f0:94:1f:d6:96:fb:b3:83:6a:
57:2f:ce:b8:61:f4:1f:bc:25:93:a6:1c:a0:40:e5:
1a:cf:55:23:4e:f1:50:b6:a2:34:0d:65:13:ed:b5:
e2:d6:bd:53:54:67:41:0d:1c:a8:3c:e0:41:b7:9e:
ae:90:ac:9a:60:f8:65:97:19:be:69:c8:94:aa:cf:
ac:45:3e:1f:4b:9c:81:e8:3b:0d:b9:83:f0:32:b9:
23:03:70:3e:9a:f2:c3:b0:e6:ed:9d:0a:6e:bf:8d:
17:6a:a4:b7:12:60:42:94:c5:7a:dc:98:a8:8a:96:
c5:57:36:db:66:40:07:a6:ad:2c:e4:04:77:6d:20:
34:01:9c:b1:5e:ba:54:89:7f:b1:17:c5:9b:58:11:
bb:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:F8:AF:8D:6D:19:18:64:E2:0E:F6:5C:4D:F7:3D:D5:FF:E9:C9:7B
X509v3 Authority Key Identifier:
keyid:73:BB:C2:13:C6:F9:0B:D8:F0:07:13:9E:AE:6F:E0:CA:FA:43:5E:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7vCE8b5C9jwBxOerm_gyvpDXs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/a_ivjW0ZGGTiDvZcTfc91f_pyXs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.224.60.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:cf:c9:a6:94:40:40:f0:27:cf:4b:e0:d7:7e:42:4a:f4:18:
a2:6d:03:47:6e:59:9b:f5:4f:ab:70:a1:90:68:b2:16:b0:e8:
d6:74:3e:ec:09:04:d2:ee:d4:4a:e4:c3:3e:11:17:76:37:8a:
48:b0:65:a7:45:e5:1e:08:41:b4:52:7c:ed:f7:89:13:e1:5f:
3d:4a:80:c0:f2:3b:cd:65:16:51:cb:b1:12:4d:30:86:b5:20:
e3:46:76:b4:5e:04:94:54:f3:67:cb:82:7b:0b:5e:cf:7e:9d:
2d:52:d9:94:49:27:79:a2:63:86:ae:6a:09:59:cc:f9:ea:36:
9c:b2:2c:d5:39:38:21:d9:3b:5f:e6:40:b8:6d:18:f8:21:08:
d1:9b:c8:85:ec:ea:4e:33:90:6f:dd:90:3f:40:a9:fe:cb:5a:
f5:38:7c:61:38:d5:ce:b5:b2:27:b5:9e:c2:6c:3f:0e:c3:ba:
4f:95:2b:ad:ce:46:aa:0f:30:8f:db:21:6a:9b:26:2f:28:c5:
e6:35:9c:71:6f:b7:c3:82:75:c1:8d:0f:d0:e9:ce:22:07:f1:
65:aa:82:fa:b6:17:d5:af:24:bd:f1:2b:ca:cb:f9:0e:00:84:
52:12:bf:58:a0:57:58:87:e4:49:92:11:83:fc:03:f4:e4:38:
4f:58:1d:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:33:54 2025 by rpki-client