Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/gl18mKpO2JmUfkGnm0eQydlc6tI.roa
File: gl18mKpO2JmUfkGnm0eQydlc6tI.roa (raw, json)
Hash identifier: OH9VSaC9xrFx/iWwi8X6+CuDn8+UvNS7uG5JY4B0Oao=
Subject key identifier: 82:5D:7C:98:AA:4E:D8:99:94:7E:41:A7:9B:47:90:C9:D9:5C:EA:D2
Certificate issuer: /CN=1e5b334965788794d6f147a2f004d13be3257dc4
Certificate serial: 01942068313F1B7F79912103C3CECDA312A0
Authority key identifier: 1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/gl18mKpO2JmUfkGnm0eQydlc6tI.roa
Signing time: Wed 01 Jan 2025 05:48:06 +0000
ROA not before: Wed 01 Jan 2025 05:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62240
IP address blocks: 91.193.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 01:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:31:3f:1b:7f:79:91:21:03:c3:ce:cd:a3:12:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e5b334965788794d6f147a2f004d13be3257dc4
Validity
Not Before: Jan 1 05:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=825d7c98aa4ed899947e41a79b4790c9d95cead2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:65:cf:d8:99:13:32:41:81:91:6e:5c:10:d0:
e6:e4:79:bb:51:5f:ef:c5:75:bf:12:47:71:7b:79:
1e:42:18:a1:e0:00:8a:60:a0:cb:e4:9f:36:11:77:
70:21:e6:ce:af:8c:c8:94:4c:45:a9:74:0c:de:63:
df:4b:11:e0:34:ec:b4:31:d4:2c:57:4d:62:fc:e7:
9f:d6:29:07:6b:ee:09:f6:64:da:23:46:3e:30:6a:
9f:e7:58:9b:24:6e:3d:7d:98:30:33:ec:cd:ad:a6:
e5:74:8c:4a:3a:3d:70:54:15:56:c9:d5:0c:0d:bb:
6b:61:58:99:6f:e9:4b:2d:ae:70:18:42:01:01:a9:
40:80:7f:1c:68:92:f0:60:21:54:d2:e5:2a:59:97:
1a:55:52:70:0e:e1:08:c4:2b:f3:ce:03:fd:62:f8:
ba:7a:1b:fd:bc:85:80:e7:46:13:3d:69:2a:15:0c:
54:b1:6c:93:6d:54:f8:ae:bf:7b:7e:fa:75:f1:9e:
d7:19:49:b2:b1:8c:a1:a9:45:0f:79:18:7f:e5:be:
11:52:5e:aa:ed:0e:95:47:b5:42:5e:52:01:e4:fd:
14:54:16:0d:35:a5:3a:4f:5e:ca:de:c1:f7:b3:94:
dd:fd:65:7e:9e:0d:04:42:18:eb:48:d6:63:8f:4b:
7f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:5D:7C:98:AA:4E:D8:99:94:7E:41:A7:9B:47:90:C9:D9:5C:EA:D2
X509v3 Authority Key Identifier:
keyid:1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/gl18mKpO2JmUfkGnm0eQydlc6tI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.193.232.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:7c:47:4b:68:86:6d:69:9b:a8:78:d6:49:f3:7a:3d:8c:e6:
83:e6:41:12:3d:7c:02:bd:57:75:33:aa:eb:85:a9:28:0c:0f:
6e:bf:19:5a:fc:00:b8:5a:11:26:1d:98:34:6c:a3:47:8c:f2:
f2:56:56:a6:d6:33:91:92:2d:b3:b1:16:4c:89:bf:f5:be:0b:
73:5d:02:d7:0e:b9:c0:9f:03:89:fa:ef:12:8a:3d:b7:a9:ee:
37:18:50:d7:6f:a7:b2:23:58:08:62:51:92:df:23:57:ef:1a:
87:d0:53:32:19:33:9b:a4:08:24:99:b4:bd:63:c9:98:d0:63:
bb:e4:4b:69:eb:dd:0f:14:13:6d:1b:8c:b4:97:23:38:f6:c3:
83:05:98:a5:cf:68:9f:c1:3b:53:19:c8:0f:10:a0:5f:ba:43:
14:d6:ab:fc:f9:a8:c9:d5:34:e4:51:8c:de:0b:a8:ec:93:65:
db:eb:7e:7c:28:e8:00:2a:a8:39:5e:1e:fb:3f:74:9c:51:f4:
4a:c5:1b:d8:e3:4e:99:fd:fd:fd:32:28:f4:8c:5f:60:0f:aa:
14:67:4e:9a:a9:8b:79:93:01:85:b5:c3:60:7e:ef:e7:fd:c6:
6d:10:9e:d8:38:f0:05:8d:b4:77:d5:57:70:9b:53:8a:f4:50:
b2:c1:64:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:52:56 2025 by rpki-client