Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/O_hdcVHlxOZo_l-7xdIRhesWw_A.roa
File: O_hdcVHlxOZo_l-7xdIRhesWw_A.roa (raw, json)
Hash identifier: mfR5DtCjLIjJTqw++nVFAPPeJtIg5fCaC2S+CCvWR50=
Subject key identifier: 3B:F8:5D:71:51:E5:C4:E6:68:FE:5F:BB:C5:D2:11:85:EB:16:C3:F0
Certificate issuer: /CN=a9a28417c1e1b68f69be1d3ec812037097619ccd
Certificate serial: 019427B6934AF5A8752B463C580CFC5D7528
Authority key identifier: A9:A2:84:17:C1:E1:B6:8F:69:BE:1D:3E:C8:12:03:70:97:61:9C:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qaKEF8Hhto9pvh0-yBIDcJdhnM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/O_hdcVHlxOZo_l-7xdIRhesWw_A.roa
Signing time: Thu 02 Jan 2025 15:51:04 +0000
ROA not before: Thu 02 Jan 2025 15:51:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44157
IP address blocks: 91.201.80.0/24 maxlen: 24
91.201.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qaKEF8Hhto9pvh0-yBIDcJdhnM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:93:4a:f5:a8:75:2b:46:3c:58:0c:fc:5d:75:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9a28417c1e1b68f69be1d3ec812037097619ccd
Validity
Not Before: Jan 2 15:51:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3bf85d7151e5c4e668fe5fbbc5d21185eb16c3f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:9b:d6:eb:ef:6f:0e:67:05:0a:12:1b:39:67:
df:b9:1f:2e:7e:87:5d:92:69:a0:87:9c:70:fc:63:
7a:06:5f:98:35:d5:a3:b3:07:67:79:2a:e0:02:01:
12:cb:07:5e:b9:5f:3f:b3:ca:9b:0e:83:aa:e1:0f:
5c:7b:6f:52:6d:77:89:e5:6a:53:5b:81:90:b8:a3:
d1:e7:3d:7c:27:97:0f:ed:38:d4:ba:d0:bf:fb:58:
3d:a1:d1:f6:e7:03:2c:61:5e:c8:b9:70:e7:22:46:
74:56:06:b0:2d:5e:3f:69:df:6d:8a:8f:45:35:2a:
9d:01:ed:f0:d3:44:0d:d9:86:27:b4:e5:f7:34:62:
97:8e:45:56:1c:95:cc:a1:7d:3c:87:cc:b7:36:34:
cc:42:56:92:48:9f:bb:cb:89:54:d5:f9:54:7c:5b:
80:e1:b6:1d:58:3a:6a:e7:7c:1d:49:31:5e:9e:7c:
43:78:17:4e:88:21:61:f9:7b:ef:78:5a:f1:c6:5a:
28:b1:0b:e7:c9:75:20:1e:ba:4e:9d:37:01:e4:0d:
d5:2e:a6:ed:56:2a:14:05:5e:e7:b5:b1:5f:25:6a:
db:97:85:e1:4c:de:99:8a:67:59:8f:fc:a9:bd:fd:
ca:98:ac:df:c2:34:79:17:5d:7a:e4:63:72:50:cf:
56:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:F8:5D:71:51:E5:C4:E6:68:FE:5F:BB:C5:D2:11:85:EB:16:C3:F0
X509v3 Authority Key Identifier:
keyid:A9:A2:84:17:C1:E1:B6:8F:69:BE:1D:3E:C8:12:03:70:97:61:9C:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qaKEF8Hhto9pvh0-yBIDcJdhnM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/O_hdcVHlxOZo_l-7xdIRhesWw_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.201.80.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:43:57:4f:9b:2d:6f:b0:b4:46:37:73:75:dc:41:87:52:ea:
d1:78:4a:9c:8b:78:a8:4e:dc:80:ae:c9:6a:61:e6:0f:11:f4:
a1:c2:8b:a2:3b:f6:d6:7d:f4:e1:0d:48:2f:72:d3:99:ab:e8:
f9:ff:a7:5d:73:42:a8:94:4b:82:f8:d5:18:45:de:29:68:43:
14:3e:e5:25:c8:f1:9e:9d:36:2e:c8:18:19:bb:95:55:6b:d3:
e5:cc:75:bd:57:1a:fb:a4:49:bd:0a:65:ae:20:61:a4:5d:d9:
0c:fb:48:21:66:e4:27:cd:45:fe:3e:5b:94:e9:7c:44:30:97:
8b:ec:9b:41:23:fa:09:71:eb:24:d9:c6:13:b7:5d:70:a6:e4:
b9:7d:f7:6f:9c:9f:36:78:e6:02:98:f5:c6:db:f6:58:16:09:
0d:67:27:9e:92:e0:91:30:e0:82:ba:ee:f9:13:ac:41:f2:4e:
5e:52:6c:05:85:77:7d:1b:2c:2f:67:cf:c7:a7:f4:4d:71:67:
15:9f:74:27:b9:39:f6:c3:49:95:6c:5d:20:95:54:ce:88:6a:
e2:93:76:83:28:93:99:5d:4e:cd:37:8f:14:46:4b:f7:ad:86:
38:07:df:31:92:f9:6e:82:cb:aa:c0:8f:eb:69:d3:3c:a9:4a:
75:05:19:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 22:00:29 2025 by rpki-client