Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/1-odAb-HXEiGLPx5y_PADnZMBf0g.roa
File: 1-odAb-HXEiGLPx5y_PADnZMBf0g.roa (raw, json)
Hash identifier: 4z0B6lGqXvXr1EDmabK3iy+SlaX1WPh7Y1Hx0zBd0iM=
Subject key identifier: FA:87:40:6F:E1:D7:12:21:8B:3F:1E:72:FC:F0:03:9D:93:01:7F:48
Certificate issuer: /CN=5d325befd8b7e85e347104206d8c0ab8a6e0fb4e
Certificate serial: 0194221FF329600A6E791FB70F8ECB1CB715
Authority key identifier: 5D:32:5B:EF:D8:B7:E8:5E:34:71:04:20:6D:8C:0A:B8:A6:E0:FB:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTJb79i36F40cQQgbYwKuKbg-04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/1-odAb-HXEiGLPx5y_PADnZMBf0g.roa
Signing time: Wed 01 Jan 2025 13:48:26 +0000
ROA not before: Wed 01 Jan 2025 13:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15576
IP address blocks: 91.199.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.mft
rsync://rpki.ripe.net/repository/DEFAULT/XTJb79i36F40cQQgbYwKuKbg-04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:f3:29:60:0a:6e:79:1f:b7:0f:8e:cb:1c:b7:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d325befd8b7e85e347104206d8c0ab8a6e0fb4e
Validity
Not Before: Jan 1 13:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fa87406fe1d712218b3f1e72fcf0039d93017f48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:8d:b8:ae:55:45:5a:ef:fb:53:71:4e:5b:f5:
b4:73:db:7c:f4:23:ea:0c:98:15:ef:5b:35:de:e2:
cf:b6:25:8d:ec:f2:33:56:51:c2:82:53:9c:19:af:
cf:e3:78:05:68:ca:c2:04:84:7c:a7:fe:27:1c:61:
82:29:62:81:a8:4d:0a:81:07:22:06:b6:26:1e:d1:
5d:51:2d:25:61:77:40:cc:c2:54:8e:23:2c:6e:11:
9d:ef:99:ed:bb:fe:79:67:0d:4d:13:c5:cd:e5:87:
db:17:4a:c0:53:46:19:7e:9d:0e:b5:f0:e2:55:2d:
6c:79:6d:51:3f:de:2f:84:8c:8b:a3:e1:eb:86:95:
75:4b:d3:9c:85:47:9e:01:6e:87:98:38:58:cf:40:
0d:0d:0e:b4:e0:dd:55:b3:45:18:cc:16:03:b7:91:
d1:0f:d1:1f:0e:4b:01:03:e3:fe:c2:d0:b3:5b:e5:
58:4c:a8:9b:bd:b9:1c:e5:68:fb:d8:0e:85:be:e6:
9c:24:61:19:45:90:8d:4b:0f:e2:e4:98:44:1a:9d:
30:2a:94:1b:fe:6b:44:b8:64:eb:45:cf:23:61:5b:
5d:a1:f9:72:d1:5e:02:a4:57:53:ba:53:6b:45:f6:
fa:29:6d:3c:ba:ba:7b:46:1a:6f:85:49:ae:c6:e9:
92:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:87:40:6F:E1:D7:12:21:8B:3F:1E:72:FC:F0:03:9D:93:01:7F:48
X509v3 Authority Key Identifier:
keyid:5D:32:5B:EF:D8:B7:E8:5E:34:71:04:20:6D:8C:0A:B8:A6:E0:FB:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTJb79i36F40cQQgbYwKuKbg-04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/1-odAb-HXEiGLPx5y_PADnZMBf0g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.198.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:47:df:f7:45:28:be:cd:11:50:47:8d:9e:d2:09:5b:d5:0e:
8e:a3:a4:a2:2b:4c:9b:51:39:67:ed:7c:f8:01:84:da:79:17:
52:6d:0c:9f:9f:98:66:51:6b:da:bd:9a:d8:4d:ea:ad:b7:0d:
a0:d2:66:62:b8:5d:dd:25:3f:cd:1a:f2:24:b1:12:58:af:4a:
23:8d:a0:43:89:05:0f:27:e3:1a:33:0a:29:0c:1b:ce:ac:82:
76:5e:40:bb:d0:6a:c9:6d:3b:16:42:ec:43:18:f9:89:71:df:
69:12:73:c1:aa:79:68:e2:15:14:e5:57:ba:a7:7d:ff:26:9f:
49:6b:5d:15:94:9c:17:2b:2d:de:5b:d7:cb:c3:59:52:1f:90:
d8:f1:10:b9:8e:21:44:76:87:07:f5:0b:a0:5c:e5:10:23:b0:
b0:b4:4e:9d:60:b8:d3:d7:86:1c:ad:f7:19:39:a5:2a:49:be:
81:53:c0:ee:3b:4e:c5:48:c0:cc:f4:55:58:35:02:69:90:51:
6b:1a:11:e6:c7:6a:5d:f5:1c:66:72:cb:d6:b6:19:aa:b1:e7:
fb:1b:1d:33:21:13:35:a6:97:c5:82:d5:0d:d2:c6:29:cf:22:
77:a9:05:ec:f8:21:ea:24:f5:ed:d1:40:19:51:0a:92:72:95:
13:2c:c5:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 09:35:21 2025 by rpki-client