Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/sbB_qhcZ5C6QsaRQey8d6Z2fiqQ.roa
File: sbB_qhcZ5C6QsaRQey8d6Z2fiqQ.roa (raw, json)
Hash identifier: UF7xshn/lezkLw7gZiOHSmc0ml+xgRop+HTs7XfValk=
Subject key identifier: B1:B0:7F:AA:17:19:E4:2E:90:B1:A4:50:7B:2F:1D:E9:9D:9F:8A:A4
Certificate issuer: /CN=2ebb3624b82f0e1e538b00919f442d200c7e3cd2
Certificate serial: 019427487D34B1EBFD661615FF07F51967C6
Authority key identifier: 2E:BB:36:24:B8:2F:0E:1E:53:8B:00:91:9F:44:2D:20:0C:7E:3C:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/sbB_qhcZ5C6QsaRQey8d6Z2fiqQ.roa
Signing time: Thu 02 Jan 2025 13:50:49 +0000
ROA not before: Thu 02 Jan 2025 13:50:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57146
IP address blocks: 91.231.4.0/23 maxlen: 24
91.231.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:7d:34:b1:eb:fd:66:16:15:ff:07:f5:19:67:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ebb3624b82f0e1e538b00919f442d200c7e3cd2
Validity
Not Before: Jan 2 13:50:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b1b07faa1719e42e90b1a4507b2f1de99d9f8aa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:29:f0:f0:80:e9:36:47:79:1c:10:db:ce:c0:
be:e2:98:c4:d7:05:67:b4:af:5e:0d:63:bd:ea:fa:
5f:3b:fe:8f:3e:fc:00:5a:52:7c:f0:cd:2b:33:42:
94:9a:23:09:04:dd:49:fe:8b:c7:c0:d1:65:00:3f:
9e:81:1b:47:27:50:0f:e1:ab:8a:14:29:87:17:64:
3f:ec:75:76:cf:75:df:42:9c:7c:00:cc:4a:74:0c:
34:f4:f8:19:f3:3f:6b:be:c1:ab:f2:0f:58:61:82:
39:a2:6e:3e:f1:c5:73:93:0c:18:ea:90:11:97:1a:
57:fa:72:8a:40:2f:1d:0e:02:62:af:bb:3d:e9:98:
79:e6:f2:07:f8:6f:64:7b:11:8b:19:9b:05:ca:3f:
32:78:90:0f:33:38:3e:e9:b6:57:20:61:d5:b4:9a:
d6:cd:3b:08:04:c1:4a:a7:9d:4d:8c:05:85:28:84:
1c:48:03:3a:aa:b4:34:d3:55:0b:57:31:ee:6b:fc:
3d:b1:f2:ce:29:cf:ab:b4:11:4b:83:2d:1f:38:63:
69:df:5f:1a:57:e5:e7:48:56:5e:6b:d5:f0:82:d3:
9f:c6:0c:d7:18:74:5d:21:d9:03:01:a4:7f:89:dd:
bf:7a:f5:60:da:0d:34:72:12:81:28:3b:69:c9:a0:
7a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:B0:7F:AA:17:19:E4:2E:90:B1:A4:50:7B:2F:1D:E9:9D:9F:8A:A4
X509v3 Authority Key Identifier:
keyid:2E:BB:36:24:B8:2F:0E:1E:53:8B:00:91:9F:44:2D:20:0C:7E:3C:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/sbB_qhcZ5C6QsaRQey8d6Z2fiqQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.231.4.0-91.231.6.255
Signature Algorithm: sha256WithRSAEncryption
29:d1:b5:46:85:1e:11:5c:26:a7:e2:d0:f8:7a:b5:c3:1d:12:
6b:1c:1c:be:9f:dc:71:c2:de:06:b2:57:c7:22:cd:6e:c9:c5:
c2:ca:10:a8:12:72:a6:c7:49:19:49:94:79:15:81:00:f6:aa:
02:1e:22:a7:1b:8f:15:14:5d:2f:5c:6c:ce:c2:7c:79:4d:11:
d1:01:5c:66:44:dc:6b:7c:f3:e2:ea:f6:f0:56:55:56:d2:96:
7e:66:b7:9b:bf:13:2e:c3:a6:47:6c:b3:08:fc:56:63:b1:e5:
2c:71:a8:10:9d:bd:28:85:ee:c9:99:b2:2c:59:7c:66:fd:32:
5f:16:fc:82:e9:3a:f4:40:f3:d4:d9:26:5d:cc:d0:56:25:d1:
75:ba:50:10:8d:7d:6f:d5:59:ff:c4:71:86:b7:59:a0:cf:61:
b5:c0:5f:d6:36:a0:a4:8e:34:f4:89:58:8f:17:92:7b:8d:64:
4b:12:db:aa:e8:b3:fc:4e:cf:b3:6a:cf:21:ac:1c:ba:5f:89:
bc:bc:4c:88:f1:cc:8d:52:44:de:bc:3f:8d:ac:9c:5d:5c:87:
45:1d:83:f8:df:5d:c9:da:7f:6f:19:cd:e5:c3:4b:91:47:3a:
0e:a5:e3:af:20:c1:df:3d:47:1c:9c:62:95:4c:fe:cf:ab:bb:
52:cb:93:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 10:06:14 2025 by rpki-client