Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/SEKUolAV0iu3R-IgPv3RZKJdkfk.roa
File: SEKUolAV0iu3R-IgPv3RZKJdkfk.roa (raw, json)
Hash identifier: I0/mJpzn8H5+HldryccT4hrHNERf/SEflySzK0d1dmo=
Subject key identifier: 48:42:94:A2:50:15:D2:2B:B7:47:E2:20:3E:FD:D1:64:A2:5D:91:F9
Certificate issuer: /CN=45effe98c24c3d6d6087c8d1d3f901b8ccd40088
Certificate serial: 0194610A2E81A6335B0F6ED82B7B8AE3C6C8
Authority key identifier: 45:EF:FE:98:C2:4C:3D:6D:60:87:C8:D1:D3:F9:01:B8:CC:D4:00:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Re_-mMJMPW1gh8jR0_kBuMzUAIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/SEKUolAV0iu3R-IgPv3RZKJdkfk.roa
Signing time: Mon 13 Jan 2025 19:00:44 +0000
ROA not before: Mon 13 Jan 2025 19:00:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212150
IP address blocks: 91.217.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/Re_-mMJMPW1gh8jR0_kBuMzUAIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/Re_-mMJMPW1gh8jR0_kBuMzUAIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Re_-mMJMPW1gh8jR0_kBuMzUAIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:61:0a:2e:81:a6:33:5b:0f:6e:d8:2b:7b:8a:e3:c6:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45effe98c24c3d6d6087c8d1d3f901b8ccd40088
Validity
Not Before: Jan 13 19:00:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=484294a25015d22bb747e2203efdd164a25d91f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:22:94:0c:3e:8f:ce:c2:6f:eb:06:dc:a2:6b:
dc:d0:83:19:00:38:b4:ae:fb:a6:f1:19:c6:71:45:
80:9d:0e:ba:7e:b0:60:73:bf:7c:de:08:66:96:90:
bb:de:84:66:24:1f:d6:4d:79:62:6b:1b:15:a0:49:
e8:fb:ef:c4:78:57:0d:e6:4d:45:82:4b:49:c0:db:
69:99:0c:bb:5d:c8:45:89:89:17:32:10:c8:db:53:
28:f3:a6:fd:91:f8:ef:81:a8:04:a5:61:ef:ab:62:
42:41:3d:ca:b1:71:b3:47:f3:0e:44:41:5e:f0:47:
ee:89:16:26:69:f9:a5:28:0d:86:42:ef:f1:e4:10:
34:87:f1:2f:2f:53:2a:37:b9:a1:0f:38:ea:13:8d:
42:ef:94:81:19:de:ee:de:8c:15:5b:32:5c:c7:16:
ff:e3:e3:51:36:8a:e2:fb:60:ba:5d:93:8c:52:c2:
fd:da:50:24:05:47:6b:ef:dd:e6:53:f4:5e:60:ae:
8c:d8:34:5f:2b:21:d2:fd:dd:c6:2c:f7:ff:d0:5c:
35:54:d6:0c:3f:21:95:de:88:c2:ba:38:c4:95:25:
e8:db:34:af:8f:82:c4:a3:c2:de:4e:cc:c2:68:57:
2e:b6:ab:04:cd:ae:a8:2d:ac:92:bf:0e:95:5d:78:
21:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:42:94:A2:50:15:D2:2B:B7:47:E2:20:3E:FD:D1:64:A2:5D:91:F9
X509v3 Authority Key Identifier:
keyid:45:EF:FE:98:C2:4C:3D:6D:60:87:C8:D1:D3:F9:01:B8:CC:D4:00:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Re_-mMJMPW1gh8jR0_kBuMzUAIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/SEKUolAV0iu3R-IgPv3RZKJdkfk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/Re_-mMJMPW1gh8jR0_kBuMzUAIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.149.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:cf:13:e8:d6:6c:73:e3:67:41:f2:ce:46:9e:94:93:1f:b8:
1e:b2:33:7e:a4:1f:47:1f:f2:25:eb:ac:99:8e:06:8e:f4:29:
0d:98:54:5a:54:2a:66:b7:43:b6:54:33:8a:16:3d:26:35:9a:
68:3f:ff:5c:ad:ac:2e:34:f2:5a:84:c1:95:5a:6b:c6:23:3e:
cc:71:50:c9:f2:e4:d0:1a:f1:96:04:8d:64:c0:8a:a1:c3:6a:
94:8a:ec:00:a4:27:a2:46:0a:7a:b4:11:94:a8:be:c7:d1:00:
74:71:57:0f:5b:bd:40:5f:f8:99:a9:2c:11:e8:0b:78:2f:71:
1e:79:5d:20:03:8d:26:be:98:d0:c4:51:36:25:4e:e0:78:e1:
a7:44:f4:57:77:12:6c:1c:c8:7e:ac:66:2a:0d:bf:bc:72:9f:
dc:83:6b:c5:ec:73:c6:03:d3:b1:cd:6c:94:bf:bb:c3:fa:c5:
24:ce:a5:56:83:a8:d4:21:2f:b3:6a:f1:bd:0e:85:2c:6e:d7:
33:1c:7f:96:47:1b:5f:3a:62:ae:db:01:19:be:07:bc:f6:0a:
e6:ac:8e:26:a8:15:2f:08:f3:56:ea:0e:df:b0:01:ee:c8:04:
37:ff:a6:91:8f:87:2a:12:27:7a:ff:d6:ac:cb:85:9f:16:3b:
72:88:cc:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:16:34 2025 by rpki-client