Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/5ae8bf-f999-4c74-9f46-325627c466e2/1/lqeFydVXrdHwpq6mWSJTL5OgZAY.roa
File: lqeFydVXrdHwpq6mWSJTL5OgZAY.roa (raw, json)
Hash identifier: YaK2y/qIg0D8N7eA9vbxZ0CRyImPi+H1Zg28ZURYmRg=
Subject key identifier: 96:A7:85:C9:D5:57:AD:D1:F0:A6:AE:A6:59:22:53:2F:93:A0:64:06
Certificate issuer: /CN=b1b201363ccc556bec88702569d8d381a0e89566
Certificate serial: 0194236A3FF65D121C4424ED2EFD9428FE6D
Authority key identifier: B1:B2:01:36:3C:CC:55:6B:EC:88:70:25:69:D8:D3:81:A0:E8:95:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sbIBNjzMVWvsiHAladjTgaDolWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/5ae8bf-f999-4c74-9f46-325627c466e2/1/lqeFydVXrdHwpq6mWSJTL5OgZAY.roa
Signing time: Wed 01 Jan 2025 19:49:13 +0000
ROA not before: Wed 01 Jan 2025 19:49:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50945
IP address blocks: 91.216.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/5ae8bf-f999-4c74-9f46-325627c466e2/1/sbIBNjzMVWvsiHAladjTgaDolWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/5ae8bf-f999-4c74-9f46-325627c466e2/1/sbIBNjzMVWvsiHAladjTgaDolWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sbIBNjzMVWvsiHAladjTgaDolWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 11:58:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:3f:f6:5d:12:1c:44:24:ed:2e:fd:94:28:fe:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1b201363ccc556bec88702569d8d381a0e89566
Validity
Not Before: Jan 1 19:49:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=96a785c9d557add1f0a6aea65922532f93a06406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:76:3f:04:62:f5:73:5d:1d:af:18:a5:6e:ce:
e7:e8:5a:49:a2:44:2a:36:63:01:7d:00:dd:8e:ee:
18:32:8f:3c:61:10:4e:14:72:ad:33:33:61:d4:cd:
8c:84:5a:6c:3c:bf:bd:7f:d7:9d:51:c4:a2:1a:3b:
b8:a7:b7:8d:9a:01:51:db:07:7a:b4:85:4c:0c:11:
81:ad:6b:1b:9a:aa:ea:a2:b7:aa:13:03:b6:70:2d:
30:5a:31:5b:ff:56:04:1b:fa:9a:94:fe:c2:24:d9:
ac:a4:b1:34:20:96:15:49:73:76:bd:99:21:30:d1:
3a:20:e4:e7:be:d9:3f:1e:65:59:11:46:38:dc:9d:
53:6e:e7:75:01:e5:9c:d6:66:bc:b7:9f:73:a8:f0:
fc:1f:36:85:e6:e5:14:f9:98:af:34:6a:62:18:b5:
32:5b:7c:9f:af:09:a8:c0:73:11:d6:c2:92:d9:03:
d8:8c:b7:ae:28:b6:85:51:92:0d:1f:e6:b6:ab:ff:
81:2e:b4:c6:2d:9a:9b:ec:ca:73:ba:75:17:c4:3b:
43:d6:da:05:4e:ad:87:8e:29:22:1b:23:e5:ea:32:
22:71:2a:76:fa:86:32:ba:fe:67:c3:56:94:7d:ae:
a4:1e:7e:dc:36:78:f4:42:ba:4f:13:3f:6a:48:49:
53:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:A7:85:C9:D5:57:AD:D1:F0:A6:AE:A6:59:22:53:2F:93:A0:64:06
X509v3 Authority Key Identifier:
keyid:B1:B2:01:36:3C:CC:55:6B:EC:88:70:25:69:D8:D3:81:A0:E8:95:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sbIBNjzMVWvsiHAladjTgaDolWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/5ae8bf-f999-4c74-9f46-325627c466e2/1/lqeFydVXrdHwpq6mWSJTL5OgZAY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/5ae8bf-f999-4c74-9f46-325627c466e2/1/sbIBNjzMVWvsiHAladjTgaDolWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.52.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:bf:a1:3f:c3:0b:c2:d2:b5:c6:bd:d1:54:c1:78:94:84:ec:
ae:8b:a0:be:56:5f:bc:04:bf:c4:40:af:85:c9:17:08:73:d6:
32:01:50:94:ab:ae:e6:51:13:43:95:52:07:3c:1f:bc:13:56:
d2:d9:e4:3b:cb:ee:69:f1:8b:34:8c:c2:60:9d:fb:cf:38:4b:
3b:3d:82:62:3f:bc:61:fa:f9:23:bd:6d:c0:b3:1d:0a:1c:09:
93:a4:05:cd:f0:39:df:f8:28:48:34:58:8f:58:ee:0a:b3:28:
28:4f:f5:10:65:37:d4:27:f6:81:da:c4:23:38:a2:27:56:0b:
29:34:c4:6e:07:6d:e8:85:1e:67:46:a0:ac:27:65:35:a1:c6:
e8:19:c7:15:d2:3d:e5:a6:6a:df:ad:77:76:a3:a1:15:71:a0:
46:b6:8f:e8:76:e6:4d:b1:b7:0c:d5:9a:10:2a:81:76:1a:b5:
92:8e:86:73:da:6c:d1:f9:ba:c9:bb:c2:af:2f:ee:6c:ad:31:
4d:47:1c:f6:2d:ce:8e:b1:a2:87:ee:7a:7f:bb:6e:e9:d7:4d:
ef:d0:88:49:d3:18:2b:92:e6:3e:ae:b3:ec:b8:55:4b:a4:e3:
95:67:b3:51:13:1e:9e:78:d7:87:82:a7:af:27:42:6b:bf:b8:
7e:44:bb:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 9 17:59:31 2025 by rpki-client