Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/1de86c-5f1e-402e-9ef4-637b261ab179/1/tQFFGYfebId9C-wg4RS84BnFaNo.roa
File: tQFFGYfebId9C-wg4RS84BnFaNo.roa (raw, json)
Hash identifier: nMK/gVKD2fq6p/yTSA4UB4aZvcBtj7xYtsaQACWORBw=
Subject key identifier: B5:01:45:19:87:DE:6C:87:7D:0B:EC:20:E1:14:BC:E0:19:C5:68:DA
Certificate issuer: /CN=93a989c17b2da0c5143155820ebc56bfe73a3adf
Certificate serial: 019425FDEECE78D1634D64038049328C048E
Authority key identifier: 93:A9:89:C1:7B:2D:A0:C5:14:31:55:82:0E:BC:56:BF:E7:3A:3A:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k6mJwXstoMUUMVWCDrxWv-c6Ot8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/1de86c-5f1e-402e-9ef4-637b261ab179/1/tQFFGYfebId9C-wg4RS84BnFaNo.roa
Signing time: Thu 02 Jan 2025 07:49:46 +0000
ROA not before: Thu 02 Jan 2025 07:49:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201884
IP address blocks: 91.103.248.0/24 maxlen: 24
91.103.249.0/24 maxlen: 24
91.103.250.0/24 maxlen: 24
91.103.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/1de86c-5f1e-402e-9ef4-637b261ab179/1/k6mJwXstoMUUMVWCDrxWv-c6Ot8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/1de86c-5f1e-402e-9ef4-637b261ab179/1/k6mJwXstoMUUMVWCDrxWv-c6Ot8.mft
rsync://rpki.ripe.net/repository/DEFAULT/k6mJwXstoMUUMVWCDrxWv-c6Ot8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:ee:ce:78:d1:63:4d:64:03:80:49:32:8c:04:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93a989c17b2da0c5143155820ebc56bfe73a3adf
Validity
Not Before: Jan 2 07:49:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b501451987de6c877d0bec20e114bce019c568da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:70:8e:25:ce:30:55:73:94:c0:e8:56:a1:2c:
bb:10:9e:56:e2:f0:c6:b3:78:29:08:a4:5e:bc:d5:
2d:3b:1f:9c:2c:30:85:98:9d:74:b4:05:38:be:20:
c5:f5:e0:33:ff:11:ef:12:30:85:8a:db:07:99:e7:
9a:5b:55:92:bf:f8:31:24:01:a9:0e:26:a5:ad:bb:
19:6c:44:68:fb:6d:1e:44:69:20:c4:38:fe:ca:44:
34:01:4f:75:16:15:2a:af:21:89:65:6e:62:a4:40:
89:17:57:5a:3e:de:ba:dd:e2:41:bb:c0:94:3a:a2:
9b:1f:a6:e3:f8:a0:71:4d:ff:46:c5:9f:f8:f0:7b:
25:e6:2f:b0:da:d5:c5:01:9e:ca:3a:e8:d7:f0:39:
81:a2:71:f2:e0:91:73:4e:d5:56:13:ba:99:5d:0f:
54:ee:d6:99:83:92:b9:01:31:b4:60:cd:27:52:c4:
e3:e9:f1:ee:68:e3:ff:a0:9b:ad:a3:68:91:df:12:
0a:e6:d3:84:dc:c1:15:62:65:5f:f0:05:16:bf:70:
e0:b7:17:92:c0:17:b4:3e:ab:f6:97:f9:d0:dc:04:
d6:df:f8:56:14:45:05:4f:e3:9d:8e:b7:b3:4e:aa:
e3:83:12:10:87:ca:28:27:e7:b9:40:81:c5:cb:3a:
8e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:01:45:19:87:DE:6C:87:7D:0B:EC:20:E1:14:BC:E0:19:C5:68:DA
X509v3 Authority Key Identifier:
keyid:93:A9:89:C1:7B:2D:A0:C5:14:31:55:82:0E:BC:56:BF:E7:3A:3A:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k6mJwXstoMUUMVWCDrxWv-c6Ot8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1de86c-5f1e-402e-9ef4-637b261ab179/1/tQFFGYfebId9C-wg4RS84BnFaNo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1de86c-5f1e-402e-9ef4-637b261ab179/1/k6mJwXstoMUUMVWCDrxWv-c6Ot8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.103.248.0/22
Signature Algorithm: sha256WithRSAEncryption
51:82:5e:87:d2:a4:6a:e3:74:3d:df:bd:83:15:e6:48:77:37:
67:47:34:dc:ce:cc:17:fd:42:7d:d1:8b:7d:a0:ae:77:55:31:
ee:c7:98:1c:53:64:c1:23:09:15:3d:45:cd:04:41:ef:a5:9d:
1d:7c:8f:93:0e:6c:93:7e:a8:84:b0:9e:00:c1:32:ad:c2:52:
8b:84:e7:0a:2f:52:03:f3:72:50:75:7b:f8:ff:29:b9:b2:f2:
2c:93:fa:3c:70:cd:cf:f4:78:04:a0:a2:14:b2:b2:d6:a9:64:
37:f2:4f:68:6c:f6:7c:3a:05:ff:13:c3:05:f6:22:6e:f7:f2:
85:47:d1:36:29:e3:3f:f5:5c:39:ff:ef:ef:0e:23:64:bb:35:
ba:1a:82:06:92:0b:47:a0:fc:c0:7d:49:69:d8:ad:4f:33:36:
33:6e:eb:45:86:b9:44:41:d9:2f:9c:9a:d1:ce:bc:6c:2f:7a:
50:42:9f:c8:a7:6f:9d:ea:e8:fe:e9:75:7c:33:9e:83:63:ef:
74:0e:1e:b0:c0:76:e1:37:1e:ed:50:19:6e:bc:ad:1e:20:a3:
68:91:7b:c3:6c:bf:34:c9:4f:0a:de:7a:e1:d8:8d:af:c0:d9:
20:d6:03:c0:fa:2a:d0:ac:a4:d5:a3:e3:0e:00:8c:df:12:69:
f0:55:55:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:33:11 2025 by rpki-client