Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/k6i7u8WuObtkxep-v_Uv09c-Kz0.roa
File: k6i7u8WuObtkxep-v_Uv09c-Kz0.roa (raw, json)
Hash identifier: 6p49x3ghN8NL1doQbzg+n72QXzGfpF6yIn9tkRi+oGs=
Subject key identifier: 93:A8:BB:BB:C5:AE:39:BB:64:C5:EA:7E:BF:F5:2F:D3:D7:3E:2B:3D
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 01944A64C5C2E026FF901592B7C4B0EB017E
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/k6i7u8WuObtkxep-v_Uv09c-Kz0.roa
Signing time: Thu 09 Jan 2025 09:28:25 +0000
ROA not before: Thu 09 Jan 2025 09:28:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212115
IP address blocks: 91.148.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 05:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:4a:64:c5:c2:e0:26:ff:90:15:92:b7:c4:b0:eb:01:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Jan 9 09:28:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=93a8bbbbc5ae39bb64c5ea7ebff52fd3d73e2b3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ef:8e:37:d4:9a:48:4c:40:5f:d1:1e:c6:30:
2e:a7:c1:67:9a:2e:9b:21:dd:e1:4c:d7:29:e8:b3:
8c:d1:e2:47:24:73:0c:aa:11:ee:85:a4:23:60:c3:
2d:a9:64:bd:29:d1:c6:6d:7f:1e:02:3e:31:c7:9b:
cb:f9:54:2f:10:77:d6:97:7c:fc:3a:bb:db:e1:56:
3c:56:54:a7:39:c1:97:a4:5c:41:f5:3a:4f:4d:22:
d5:a7:cb:cd:11:13:aa:6b:9c:40:3c:27:67:35:1f:
a7:71:04:f8:e0:f9:c3:d5:99:f2:b2:6d:b9:1b:a2:
fe:52:71:07:cc:33:e5:5e:3d:41:5e:0a:18:9b:aa:
75:5b:ca:b8:8a:9d:06:ca:2e:8c:e9:cd:4b:c5:42:
b6:29:8f:fc:40:dd:51:4a:30:66:96:cd:f0:bd:1c:
1e:f4:e8:36:b5:7e:20:da:64:6e:67:07:b3:1a:c0:
9b:13:57:f6:bf:1a:80:78:8b:47:90:e6:25:74:69:
60:53:5c:e7:06:5a:f4:b3:35:5c:76:90:6c:d2:90:
e7:8a:7a:f1:64:32:13:d5:4a:0b:d0:dd:fd:0f:d6:
9f:11:3a:86:c9:91:52:f9:a5:3f:0d:6f:22:4d:67:
4a:e7:ab:0d:65:8a:ce:af:11:cb:68:35:03:d0:a1:
32:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:A8:BB:BB:C5:AE:39:BB:64:C5:EA:7E:BF:F5:2F:D3:D7:3E:2B:3D
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/k6i7u8WuObtkxep-v_Uv09c-Kz0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.148.130.0/24
Signature Algorithm: sha256WithRSAEncryption
37:95:4a:d8:0c:a0:67:59:43:ae:88:f8:0d:7e:37:41:f4:7f:
ce:5f:96:fa:7c:cd:91:bf:ec:a1:f5:1d:1d:e3:83:62:10:56:
dd:c5:0a:8c:62:c7:3c:01:68:af:fa:53:f6:99:a7:64:e7:ac:
ad:fc:6b:48:13:c3:f4:7d:6e:68:12:a5:96:23:a2:26:cc:78:
b5:41:bc:47:87:1d:74:e5:f5:75:ec:87:e0:80:d2:c4:ba:fc:
5f:5b:18:9a:91:be:60:02:fb:38:51:36:c4:5f:2c:23:e6:ab:
24:16:92:32:2e:44:e9:b5:81:ea:5e:c9:f8:32:04:69:4d:a8:
99:24:fc:54:dd:c2:3c:38:5e:7d:7d:ba:77:95:5c:2d:29:a8:
d6:f4:27:0a:dd:fb:03:1b:34:6a:1e:d5:04:b8:a5:ec:0e:0f:
ff:17:e8:64:91:ff:30:a1:c1:79:bf:b3:53:77:71:43:54:fb:
ab:77:3e:b8:0a:0d:45:af:5a:30:c0:46:ac:50:e3:b7:5a:15:
d8:95:a4:93:f5:bb:1b:1c:b2:6c:bd:94:4c:cf:d9:6c:45:aa:
3c:1b:a6:1a:a5:7d:21:47:fd:05:a9:f9:50:e1:94:a0:94:58:
80:f9:87:cb:9c:b6:64:0f:ce:a5:dd:c5:05:ae:68:a5:de:47:
e9:21:4c:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:04:46 2025 by rpki-client