Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/c1f7da-cf2e-410a-8a96-75361ac20d5e/1/ClkZ4Qkjsm6jhcM9mc5q3RhM28g.roa
File: ClkZ4Qkjsm6jhcM9mc5q3RhM28g.roa (raw, json)
Hash identifier: nT6gO3pCu1NkBlvtxFQSUnCbFnHbtIhkaEeCEOJ+PkU=
Subject key identifier: 0A:59:19:E1:09:23:B2:6E:A3:85:C3:3D:99:CE:6A:DD:18:4C:DB:C8
Certificate issuer: /CN=78decead419807747c92ace69448113ff0928b85
Certificate serial: 019736C87DE0B99E8948DB44EAFA32B8F65D
Authority key identifier: 78:DE:CE:AD:41:98:07:74:7C:92:AC:E6:94:48:11:3F:F0:92:8B:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eN7OrUGYB3R8kqzmlEgRP_CSi4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/c1f7da-cf2e-410a-8a96-75361ac20d5e/1/ClkZ4Qkjsm6jhcM9mc5q3RhM28g.roa
Signing time: Tue 03 Jun 2025 17:13:18 +0000
ROA not before: Tue 03 Jun 2025 17:13:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51463
IP address blocks: 91.224.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/c1f7da-cf2e-410a-8a96-75361ac20d5e/1/eN7OrUGYB3R8kqzmlEgRP_CSi4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/c1f7da-cf2e-410a-8a96-75361ac20d5e/1/eN7OrUGYB3R8kqzmlEgRP_CSi4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/eN7OrUGYB3R8kqzmlEgRP_CSi4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 14:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:36:c8:7d:e0:b9:9e:89:48:db:44:ea:fa:32:b8:f6:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78decead419807747c92ace69448113ff0928b85
Validity
Not Before: Jun 3 17:13:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0a5919e10923b26ea385c33d99ce6add184cdbc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bb:46:a1:59:72:e6:6a:d5:9f:6e:70:47:2b:
f1:35:87:3c:4e:fe:23:9c:79:f7:fd:4e:06:f4:8e:
ff:58:5e:7f:fa:3d:1f:6f:35:c5:c6:ba:dd:34:d2:
2c:8c:c9:46:af:32:4e:1a:fc:9e:6d:e0:73:59:51:
33:d4:9b:94:29:71:81:70:fb:a4:05:09:7a:8c:8b:
67:b5:3a:5d:41:f6:db:a3:d2:1c:f5:fd:db:87:6a:
02:9c:fb:72:73:8b:09:cc:e9:39:d8:3c:4a:10:1d:
bd:15:3e:d5:eb:3c:10:b5:1c:f6:d5:26:3c:db:ff:
df:8e:13:c6:c8:0c:9b:f9:89:ee:e7:2f:dd:be:83:
2f:ad:ae:64:b3:11:e3:01:e7:2c:54:3d:f8:16:30:
5a:ae:3a:df:57:b6:1a:3e:2f:eb:ad:57:54:a4:7b:
de:8f:58:b7:af:ad:60:f7:5b:30:70:98:cb:76:ef:
b0:06:40:d9:5d:b7:69:9d:ef:43:16:98:33:ff:a1:
dc:cd:cc:f8:02:7c:0a:2a:36:b9:58:a6:8f:a7:86:
90:eb:8a:87:41:1c:f4:a9:e9:31:fb:58:af:1b:3c:
15:9f:b2:e5:1e:36:0a:3c:15:88:15:d3:8e:73:ff:
9c:ca:00:18:dd:6a:41:0a:6a:cf:b0:b0:34:28:39:
df:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:59:19:E1:09:23:B2:6E:A3:85:C3:3D:99:CE:6A:DD:18:4C:DB:C8
X509v3 Authority Key Identifier:
keyid:78:DE:CE:AD:41:98:07:74:7C:92:AC:E6:94:48:11:3F:F0:92:8B:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eN7OrUGYB3R8kqzmlEgRP_CSi4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c1f7da-cf2e-410a-8a96-75361ac20d5e/1/ClkZ4Qkjsm6jhcM9mc5q3RhM28g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c1f7da-cf2e-410a-8a96-75361ac20d5e/1/eN7OrUGYB3R8kqzmlEgRP_CSi4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.224.91.0/24
Signature Algorithm: sha256WithRSAEncryption
47:b9:26:3e:26:de:f1:c5:3a:e9:b0:39:10:0e:fc:0b:0e:a1:
34:6c:8c:42:aa:d8:d7:07:bb:7c:ec:2d:37:40:43:2d:3a:2b:
8d:d8:63:7d:93:a5:b9:6e:bf:a2:70:9f:24:92:5e:ed:f7:f7:
2b:0e:ba:d0:4c:0a:2b:47:2d:14:b2:24:34:85:03:15:af:65:
3f:6c:e0:6b:8c:c1:a0:16:c8:6d:5e:76:aa:0a:ba:74:17:54:
5c:b6:44:31:59:4e:e9:b1:1e:d8:7d:e1:8c:ee:55:4b:09:a2:
48:d2:ed:10:12:a0:e2:c1:ac:7c:47:81:fc:ed:4a:6b:08:7a:
96:3f:07:41:5d:d4:4d:de:10:ba:7d:68:82:6b:ba:f5:cd:4b:
91:1a:e6:bf:ef:cf:79:40:e5:97:36:e9:9c:12:68:82:54:c3:
c0:97:ce:fa:fa:c1:be:aa:a0:9c:c8:6d:2f:fe:c5:95:d7:dd:
a8:bd:c4:1b:05:a8:c7:73:d3:99:9e:9b:ed:6d:31:3d:ee:bf:
6c:09:e9:a8:0e:8d:dd:66:f7:6b:af:47:2d:29:43:19:33:37:
37:3a:19:f0:1c:6d:fa:61:10:b3:4c:b3:48:c2:08:77:24:3f:
28:3b:d7:27:f8:ca:a4:29:39:3b:98:d7:e5:d6:67:7e:70:ef:
b3:91:09:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 20:39:12 2025 by rpki-client