Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/pOqffGGCQYYN_siJmYMpXmSRmg0.roa
File: pOqffGGCQYYN_siJmYMpXmSRmg0.roa (raw, json)
Hash identifier: Acfh5YPvoqcizngQKdjsqWY7Hx9vwBTM5cRSt1VSioY=
Subject key identifier: A4:EA:9F:7C:61:82:41:86:0D:FE:C8:89:99:83:29:5E:64:91:9A:0D
Certificate issuer: /CN=0170a169b6cd411022279e9ff997f134ff54ab1c
Certificate serial: 01942521E338C15FC1B9FFC4691C3BF29275
Authority key identifier: 01:70:A1:69:B6:CD:41:10:22:27:9E:9F:F9:97:F1:34:FF:54:AB:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/pOqffGGCQYYN_siJmYMpXmSRmg0.roa
Signing time: Thu 02 Jan 2025 03:49:25 +0000
ROA not before: Thu 02 Jan 2025 03:49:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198381
IP address blocks: 91.126.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 02:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:e3:38:c1:5f:c1:b9:ff:c4:69:1c:3b:f2:92:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0170a169b6cd411022279e9ff997f134ff54ab1c
Validity
Not Before: Jan 2 03:49:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a4ea9f7c618241860dfec8899983295e64919a0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:25:04:c1:49:2b:3f:d0:d6:0d:93:89:cd:ba:
bd:e2:89:e8:13:10:1c:99:2e:69:df:0c:fc:34:ff:
80:af:a6:29:9e:6f:96:c2:65:22:f2:59:b7:45:53:
15:2f:18:78:73:65:15:fb:77:da:20:63:84:47:15:
85:ab:11:52:47:8a:31:4d:75:68:a6:97:47:5e:db:
a7:17:5f:19:12:10:0b:e4:a4:cd:6a:19:85:70:49:
21:d4:6c:c2:94:19:48:0b:58:55:41:04:15:87:88:
bf:32:5c:2c:de:c8:bc:78:dc:1c:ab:ae:17:f1:d0:
34:02:cd:56:63:ed:1a:b3:f4:9d:64:cd:3a:0a:af:
47:c6:d5:fd:e4:c3:46:2b:d2:40:4f:3b:14:81:4f:
52:61:9c:ca:f8:20:1f:61:71:e5:92:37:e4:44:c2:
37:90:62:56:8f:e7:f5:06:6e:ec:d9:f4:7c:4e:aa:
16:91:0f:0f:91:43:6c:c2:83:2e:2e:ae:59:9c:37:
43:eb:d7:a2:36:bc:ec:10:4b:6b:4f:78:e6:30:12:
4b:63:9a:0d:7f:33:88:77:74:0a:3c:65:bd:e8:17:
d6:42:60:12:b8:f2:8c:86:82:52:55:4a:8f:a8:ad:
86:4a:82:5e:56:a8:28:0c:57:dc:70:ed:d1:03:cb:
cc:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:EA:9F:7C:61:82:41:86:0D:FE:C8:89:99:83:29:5E:64:91:9A:0D
X509v3 Authority Key Identifier:
keyid:01:70:A1:69:B6:CD:41:10:22:27:9E:9F:F9:97:F1:34:FF:54:AB:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/pOqffGGCQYYN_siJmYMpXmSRmg0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.126.178.0/24
Signature Algorithm: sha256WithRSAEncryption
45:44:fd:0f:6e:38:be:31:97:85:ff:d6:46:d6:42:21:65:b2:
ba:2d:a1:8b:55:17:85:c7:25:45:ef:b5:43:30:ce:2a:9d:0e:
a1:0c:c3:8c:44:d5:b0:f4:8b:1e:41:93:c8:89:a3:20:3c:11:
89:a1:7e:8f:d0:06:da:e9:16:ce:6c:bc:74:00:70:b0:46:4c:
1e:e8:39:5a:8f:9a:f5:6b:76:7f:e4:4b:1e:88:75:ba:61:ac:
63:d2:d6:2c:6d:db:cc:f8:af:57:ad:69:af:08:58:c5:c7:dc:
4a:4e:21:c3:b9:d1:7d:65:b9:b0:4b:e4:e8:7d:b3:ce:a7:7d:
2f:11:17:2f:b5:f5:88:bf:5b:87:b7:01:1b:fb:c2:d0:5e:d1:
0d:6d:9e:1d:03:75:43:e8:80:f7:78:84:d2:09:4b:9f:2e:98:
1a:db:3a:d0:98:71:bb:34:1c:a3:87:16:6d:7a:5b:23:d1:cc:
49:70:2a:be:d8:cb:9c:2a:38:3c:b9:80:d8:5e:5a:21:d7:b1:
ba:c9:af:31:6b:3d:70:2b:e3:62:b4:f6:60:49:aa:a3:06:fe:
be:aa:44:08:97:c4:4c:d2:13:52:f7:73:4c:9c:05:02:ec:4a:
2f:6d:08:cd:fd:31:a6:8a:8f:e8:fd:8e:14:19:24:b8:de:0e:
53:92:9a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:25:46 2025 by rpki-client