Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/01cb70-518b-441b-b3da-646d7eee0a0f/1/eVNnviqiIdPY1BUvp61D_AbFKTc.roa
File: eVNnviqiIdPY1BUvp61D_AbFKTc.roa (raw, json)
Hash identifier: zPSI/g0bx6X/hvEByyb1M6C4zHIhQAKfdMZa4T5kVWA=
Subject key identifier: 79:53:67:BE:2A:A2:21:D3:D8:D4:15:2F:A7:AD:43:FC:06:C5:29:37
Certificate issuer: /CN=a8fb831f5bd6c0c20b8e09be511c21be7dc5deba
Certificate serial: 01942067CE4AD6FD2C4965A4CBA130DC29EA
Authority key identifier: A8:FB:83:1F:5B:D6:C0:C2:0B:8E:09:BE:51:1C:21:BE:7D:C5:DE:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qPuDH1vWwMILjgm-URwhvn3F3ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/01cb70-518b-441b-b3da-646d7eee0a0f/1/eVNnviqiIdPY1BUvp61D_AbFKTc.roa
Signing time: Wed 01 Jan 2025 05:47:41 +0000
ROA not before: Wed 01 Jan 2025 05:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56845
IP address blocks: 91.228.40.0/24 maxlen: 24
91.228.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/01cb70-518b-441b-b3da-646d7eee0a0f/1/qPuDH1vWwMILjgm-URwhvn3F3ro.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/01cb70-518b-441b-b3da-646d7eee0a0f/1/qPuDH1vWwMILjgm-URwhvn3F3ro.mft
rsync://rpki.ripe.net/repository/DEFAULT/qPuDH1vWwMILjgm-URwhvn3F3ro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:ce:4a:d6:fd:2c:49:65:a4:cb:a1:30:dc:29:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8fb831f5bd6c0c20b8e09be511c21be7dc5deba
Validity
Not Before: Jan 1 05:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=795367be2aa221d3d8d4152fa7ad43fc06c52937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:90:f8:df:98:e4:d8:2e:72:e2:76:47:ab:12:
4f:66:9b:a5:4b:13:10:53:bf:19:cf:82:35:1c:1c:
15:c1:7d:c2:3f:14:ec:a7:d8:9a:92:c5:69:b5:fa:
cd:12:53:72:a7:5a:13:4f:6f:33:b0:7b:a1:f1:dd:
30:4e:52:bd:2e:7c:57:5d:69:5d:0c:6c:e8:95:2b:
c4:be:a8:42:0f:61:3f:11:2f:aa:ee:4e:0e:7c:d1:
33:9f:62:68:e2:03:df:36:a7:c9:62:67:f5:36:d7:
52:f4:cb:17:46:e2:06:c3:cf:d8:aa:94:8c:49:01:
ad:d8:3c:3a:bd:bc:29:cd:e0:35:5f:e2:a6:0e:9f:
48:6b:1d:75:48:de:9c:b0:fe:44:01:32:54:5e:2f:
fc:66:b2:af:b9:d4:92:2e:7a:c6:2e:ba:2d:7b:b9:
c5:9b:15:17:18:a5:af:c3:df:71:c0:4a:13:18:c0:
53:f9:71:82:a6:18:36:4f:1f:31:d5:53:6d:2a:58:
3b:cd:b4:bd:ba:49:9a:ac:d2:34:4d:5f:1d:e8:e3:
fd:72:01:a7:67:89:40:84:62:30:21:57:8e:9c:ad:
25:82:23:c0:ae:b8:2b:ac:f2:58:f1:0a:74:1a:ad:
15:b4:3d:50:c9:9e:73:e4:20:5f:e0:30:f1:37:0c:
46:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:53:67:BE:2A:A2:21:D3:D8:D4:15:2F:A7:AD:43:FC:06:C5:29:37
X509v3 Authority Key Identifier:
keyid:A8:FB:83:1F:5B:D6:C0:C2:0B:8E:09:BE:51:1C:21:BE:7D:C5:DE:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qPuDH1vWwMILjgm-URwhvn3F3ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/01cb70-518b-441b-b3da-646d7eee0a0f/1/eVNnviqiIdPY1BUvp61D_AbFKTc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/01cb70-518b-441b-b3da-646d7eee0a0f/1/qPuDH1vWwMILjgm-URwhvn3F3ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.40.0/23
Signature Algorithm: sha256WithRSAEncryption
8d:c9:e9:7f:14:20:88:70:75:e4:e4:2f:70:e6:39:da:fb:e6:
0b:84:79:69:9a:55:d7:29:2f:d0:52:17:ea:b0:fa:09:20:80:
e4:ec:9f:a9:5c:5a:8a:8f:32:99:63:bb:2a:db:55:22:d2:81:
ac:91:8e:76:cb:a7:44:09:a2:79:ee:40:89:75:4c:f4:5c:53:
4c:ff:a3:a4:fd:23:b4:78:6d:8e:85:5d:e0:b8:30:8d:b1:4c:
05:74:e6:67:01:34:9c:3a:4d:78:7c:42:fa:b5:0e:cd:71:d8:
9f:12:61:bd:1f:f6:f9:73:ed:a1:e0:76:a4:0a:8b:cf:b2:14:
54:a9:87:0f:60:bc:8f:7f:06:2c:a4:1f:b7:52:47:c0:9c:ef:
84:56:7b:f0:68:f7:03:7d:9c:67:22:a9:aa:e0:d9:19:49:ae:
6d:e0:ac:42:51:b1:73:c3:df:dc:4d:81:36:9f:28:b3:c2:b0:
ba:15:25:37:07:b5:e7:5d:bc:c8:17:fb:f2:bf:da:fc:e5:bf:
b2:90:d0:32:a8:d2:27:85:ad:c0:71:6b:57:76:ab:e5:4b:a0:
26:15:0a:43:49:a1:fc:3c:8f:7f:38:75:79:69:c4:22:88:16:
9c:96:44:86:0d:66:f5:24:63:90:c5:4c:2f:d3:b5:0b:f2:04:
f6:a6:d3:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 10:05:30 2025 by rpki-client