Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/7206c7-ff26-40ce-be71-231ac6ed9785/1/slxq6aORhvR8ox82bJzLl-kYQrU.roa
File: slxq6aORhvR8ox82bJzLl-kYQrU.roa (raw, json)
Hash identifier: ZHj8y1bs7bZjE7NP/f98Eczzt5W05lwyMtCauXhXnlo=
Subject key identifier: B2:5C:6A:E9:A3:91:86:F4:7C:A3:1F:36:6C:9C:CB:97:E9:18:42:B5
Certificate issuer: /CN=cf368592163a49ad38ffad1d419a7752b333da77
Certificate serial: 019424B3DFA318533E49CE69563BA573C682
Authority key identifier: CF:36:85:92:16:3A:49:AD:38:FF:AD:1D:41:9A:77:52:B3:33:DA:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zzaFkhY6Sa04_60dQZp3UrMz2nc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/7206c7-ff26-40ce-be71-231ac6ed9785/1/slxq6aORhvR8ox82bJzLl-kYQrU.roa
Signing time: Thu 02 Jan 2025 01:49:15 +0000
ROA not before: Thu 02 Jan 2025 01:49:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56717
IP address blocks: 91.227.7.0/24 maxlen: 24
2001:67c:2c04::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/7206c7-ff26-40ce-be71-231ac6ed9785/1/zzaFkhY6Sa04_60dQZp3UrMz2nc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/7206c7-ff26-40ce-be71-231ac6ed9785/1/zzaFkhY6Sa04_60dQZp3UrMz2nc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zzaFkhY6Sa04_60dQZp3UrMz2nc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:df:a3:18:53:3e:49:ce:69:56:3b:a5:73:c6:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf368592163a49ad38ffad1d419a7752b333da77
Validity
Not Before: Jan 2 01:49:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b25c6ae9a39186f47ca31f366c9ccb97e91842b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c0:81:53:f8:8f:e2:08:f1:b0:01:a0:a5:23:
b0:3f:93:5a:05:9c:2b:73:4b:28:d3:30:ae:10:ec:
65:a9:1d:0e:a3:d8:4d:92:09:32:bd:72:03:ca:6b:
95:30:8d:dc:d0:8f:4e:7a:c8:c4:c0:4f:a6:84:60:
73:04:49:78:6f:cf:b1:55:0f:bb:6f:8a:25:7f:e1:
00:4c:82:eb:d2:31:ef:41:76:0a:ad:67:69:2e:30:
91:c4:0b:2e:09:b7:40:96:8a:9d:e8:0f:91:59:d4:
76:33:e6:43:de:42:dc:2c:fc:c3:5c:89:f2:be:f1:
20:d9:5b:3d:6d:82:b5:d4:2c:63:f8:28:6f:a6:09:
f5:a0:da:7b:3e:2c:e4:97:c9:22:b4:65:1e:ba:0e:
8e:06:7c:72:8e:63:bb:5d:c8:38:3d:21:bd:ea:a4:
4e:7c:84:69:c4:30:3b:ac:ae:65:40:ee:b6:69:ad:
26:76:21:d2:d3:cb:3e:bc:2a:0a:eb:03:96:40:69:
6d:4e:43:d3:09:77:48:70:c5:ac:9d:8d:1c:5a:75:
81:ff:ae:7a:89:1e:c9:31:a3:e8:7c:f3:04:e0:31:
52:c4:ce:b3:56:1b:93:8b:ce:98:a4:51:51:8b:35:
95:14:94:1c:71:d9:45:97:50:5d:29:2d:bc:c9:03:
0d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:5C:6A:E9:A3:91:86:F4:7C:A3:1F:36:6C:9C:CB:97:E9:18:42:B5
X509v3 Authority Key Identifier:
keyid:CF:36:85:92:16:3A:49:AD:38:FF:AD:1D:41:9A:77:52:B3:33:DA:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zzaFkhY6Sa04_60dQZp3UrMz2nc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/7206c7-ff26-40ce-be71-231ac6ed9785/1/slxq6aORhvR8ox82bJzLl-kYQrU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/7206c7-ff26-40ce-be71-231ac6ed9785/1/zzaFkhY6Sa04_60dQZp3UrMz2nc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.227.7.0/24
IPv6:
2001:67c:2c04::/48
Signature Algorithm: sha256WithRSAEncryption
07:87:65:48:be:64:4d:0c:66:b2:7a:72:f1:7b:9b:17:9b:29:
e3:bb:1a:72:20:d3:2f:01:f8:21:4e:bc:c6:f1:95:9b:1f:6f:
af:2e:58:ae:1d:cf:51:26:cc:77:ed:0a:f8:b5:c1:ed:8a:f7:
55:77:18:e2:3d:32:73:b6:07:86:f1:70:5e:5f:91:7b:b2:3e:
0b:a7:7e:03:3d:48:f9:e4:2b:24:6c:19:c0:0a:20:39:e0:2f:
93:64:90:97:1d:86:6c:47:6a:ff:34:2f:71:a4:4b:c4:a5:b9:
dc:d0:01:53:33:95:e1:da:c0:69:fe:bf:b2:b3:f6:b5:68:5d:
cc:4a:08:77:b0:4f:30:2d:6a:a5:c2:78:ea:29:e2:aa:df:c3:
59:ac:fa:a0:87:44:10:df:83:d4:e4:e3:ff:c6:0b:54:e9:54:
2f:d1:5d:3b:8d:59:c1:30:7a:e2:dc:f3:6d:e8:e2:5c:69:26:
61:96:9f:dd:03:cb:98:bf:be:83:0e:18:20:f4:c4:f6:d0:01:
c7:5d:72:62:6c:97:a6:0d:d1:39:3e:3f:29:0d:09:11:c8:33:
60:03:69:0e:52:6a:8b:6e:4c:51:e0:f3:29:62:f1:51:c9:77:
1f:17:a9:73:68:d7:7a:d2:d7:a9:95:6c:b2:ba:90:42:de:49:
46:3f:9b:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:51:19 2025 by rpki-client