Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/jYkkOan7rTEgW-xkhgkb5i-JxFw.roa
File: jYkkOan7rTEgW-xkhgkb5i-JxFw.roa (raw, json)
Hash identifier: poFVw3UULivKuh4VYtXegnU+ipzV9NTFXG8a9hkIz1A=
Subject key identifier: 8D:89:24:39:A9:FB:AD:31:20:5B:EC:64:86:09:1B:E6:2F:89:C4:5C
Certificate issuer: /CN=a1b81756b6110f2a75495c74c820e0e734ee8a6c
Certificate serial: 019421B1C497005F7483E6480A1345273609
Authority key identifier: A1:B8:17:56:B6:11:0F:2A:75:49:5C:74:C8:20:E0:E7:34:EE:8A:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/obgXVrYRDyp1SVx0yCDg5zTuimw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/jYkkOan7rTEgW-xkhgkb5i-JxFw.roa
Signing time: Wed 01 Jan 2025 11:48:05 +0000
ROA not before: Wed 01 Jan 2025 11:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6830
IP address blocks: 91.238.60.0/24 maxlen: 24
91.247.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.mft
rsync://rpki.ripe.net/repository/DEFAULT/obgXVrYRDyp1SVx0yCDg5zTuimw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 01:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:c4:97:00:5f:74:83:e6:48:0a:13:45:27:36:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1b81756b6110f2a75495c74c820e0e734ee8a6c
Validity
Not Before: Jan 1 11:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8d892439a9fbad31205bec6486091be62f89c45c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:14:47:2d:13:b2:f1:bc:70:40:90:2a:9d:78:
8f:71:2b:15:16:72:b0:52:13:06:7c:e1:c4:24:55:
8c:f3:04:b2:0f:78:b2:07:d8:c8:75:c2:d0:65:4d:
09:7b:1b:34:5b:37:f2:ae:f5:e2:b9:0e:30:57:20:
bd:19:a8:d5:72:ef:63:23:37:49:05:1a:b4:10:b0:
34:b3:57:9f:98:a1:ee:59:7e:52:0e:39:f3:96:92:
2f:0e:f1:bc:c1:e7:62:49:66:28:1c:21:b8:d9:04:
06:b3:22:47:73:e9:13:fc:d6:f9:b9:3d:7c:1f:1a:
22:df:0c:2f:21:84:f4:0d:34:a3:87:3a:fd:a3:7d:
d0:f6:ee:51:a5:53:f6:73:e4:fa:a6:f3:b6:8a:35:
45:c8:f0:02:60:56:8e:1f:c2:1f:68:26:56:33:6d:
6b:cb:19:36:73:33:c0:16:5b:58:8b:ec:1e:fa:bc:
f5:04:34:08:db:5b:8f:a5:85:74:ed:b0:f2:55:fb:
c6:eb:6b:14:e7:72:1d:4a:a1:c5:80:57:25:1f:b2:
29:f2:e1:f9:e5:70:c5:00:c0:4f:42:fa:d5:71:f2:
d8:c0:44:1e:9d:4c:a4:77:39:28:1a:77:10:b2:ac:
a9:23:d5:18:df:36:2b:14:33:74:9d:8f:5f:69:91:
db:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:89:24:39:A9:FB:AD:31:20:5B:EC:64:86:09:1B:E6:2F:89:C4:5C
X509v3 Authority Key Identifier:
keyid:A1:B8:17:56:B6:11:0F:2A:75:49:5C:74:C8:20:E0:E7:34:EE:8A:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obgXVrYRDyp1SVx0yCDg5zTuimw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/jYkkOan7rTEgW-xkhgkb5i-JxFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.238.60.0/24
91.247.147.0/24
Signature Algorithm: sha256WithRSAEncryption
69:e3:3b:63:d2:ef:90:f3:d9:ff:e1:48:49:53:5d:26:04:a8:
54:db:43:19:8a:2b:53:aa:70:c3:57:48:c5:9c:f5:49:3f:c6:
80:47:7e:f4:9d:13:f0:9e:38:c0:45:44:c0:df:50:ec:47:2e:
2b:f8:48:ed:9b:a7:c4:c5:34:e3:08:aa:98:b6:2f:ad:91:6e:
9b:46:fd:26:84:99:97:fe:1c:bf:65:11:23:ee:ea:bc:00:8b:
33:1e:74:07:27:39:86:d6:11:c5:ae:87:ad:60:53:d2:8b:1b:
f4:ce:f2:7e:be:39:2d:ab:75:ce:c6:7b:69:ac:7d:b3:8f:36:
62:b0:c5:8b:b3:af:bb:8d:ab:99:52:1d:f9:c0:4a:11:70:f5:
90:0d:2c:a8:e3:db:71:21:55:a5:a8:91:cd:86:c0:db:97:ae:
1d:85:a4:92:7e:41:82:4d:b0:d2:d4:51:6f:45:7b:08:1c:82:
22:96:65:b1:28:9d:db:1c:40:8b:d6:53:4a:26:85:00:45:b8:
ba:f2:a3:9d:f9:b5:eb:cf:2d:a2:49:01:bb:31:7d:9c:50:ac:
bd:08:d5:8c:09:e6:4e:3a:5d:f0:3f:b0:56:33:89:83:3d:89:
5e:73:c3:76:72:92:89:db:1a:2d:e1:4d:df:d9:89:e2:b1:0b:
d6:64:5e:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:22:14 2025 by rpki-client