Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/g6TuPyfjfZm3a1iJ6jmpBrCZOyg.roa
File: g6TuPyfjfZm3a1iJ6jmpBrCZOyg.roa (raw, json)
Hash identifier: CNlUV4jR+NQLLp2J8IPpPlsmA4JKIepJsPSZTdBGAho=
Subject key identifier: 83:A4:EE:3F:27:E3:7D:99:B7:6B:58:89:EA:39:A9:06:B0:99:3B:28
Certificate issuer: /CN=571cb51cba68eb7ef9867a75d17ab28018196aa1
Certificate serial: 019427483C122C861EB624495D578C3460FA
Authority key identifier: 57:1C:B5:1C:BA:68:EB:7E:F9:86:7A:75:D1:7A:B2:80:18:19:6A:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/g6TuPyfjfZm3a1iJ6jmpBrCZOyg.roa
Signing time: Thu 02 Jan 2025 13:50:32 +0000
ROA not before: Thu 02 Jan 2025 13:50:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57844
IP address blocks: 91.210.120.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:3c:12:2c:86:1e:b6:24:49:5d:57:8c:34:60:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=571cb51cba68eb7ef9867a75d17ab28018196aa1
Validity
Not Before: Jan 2 13:50:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=83a4ee3f27e37d99b76b5889ea39a906b0993b28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a4:cf:a9:3e:c9:37:94:52:1b:cb:2a:02:01:
26:8f:33:f8:ec:a2:e1:96:fb:ce:78:09:7c:ff:04:
09:64:02:0f:6e:b0:23:f1:e1:7e:63:06:8d:b2:e0:
15:93:02:0f:ec:52:25:09:18:2f:97:7b:d9:1f:82:
1d:5d:cc:10:ee:c5:6f:4a:6c:42:25:62:3a:6c:9c:
56:fa:90:55:c0:7b:de:eb:d3:a6:1c:e7:08:b3:9d:
5d:ee:1a:84:9b:dd:87:20:ae:0a:29:31:e6:03:b8:
72:55:1e:b3:8d:08:00:d0:ea:57:08:57:9e:1c:9f:
fd:14:14:72:1a:8a:47:92:e9:0e:f6:24:60:32:29:
ca:81:85:e2:0b:71:24:46:a2:88:bf:16:e9:3b:a6:
e4:40:52:3d:6a:2e:d0:70:17:2e:9d:c2:1a:8f:00:
bd:e8:b7:93:ff:9c:9d:cf:68:73:41:ee:db:c4:dd:
97:35:b5:d6:e4:4c:e5:f3:c9:31:95:86:f7:cb:b3:
f8:aa:34:19:d4:6f:b7:28:cc:de:87:43:52:52:94:
84:47:71:12:aa:8f:ee:9b:c9:df:72:7c:76:1d:3d:
60:03:3b:ba:24:5e:6f:7e:6d:4b:f1:26:52:9d:6b:
41:fd:65:12:f1:14:19:ca:32:8c:a1:bd:4e:ba:a4:
9e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:A4:EE:3F:27:E3:7D:99:B7:6B:58:89:EA:39:A9:06:B0:99:3B:28
X509v3 Authority Key Identifier:
keyid:57:1C:B5:1C:BA:68:EB:7E:F9:86:7A:75:D1:7A:B2:80:18:19:6A:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/g6TuPyfjfZm3a1iJ6jmpBrCZOyg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.210.120.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:46:98:40:c0:d6:5c:a6:47:71:1f:51:21:00:25:f1:c7:fc:
5a:f9:28:7f:67:b3:f6:27:cd:d9:9c:2a:85:ed:c7:b3:b2:06:
cf:3a:74:56:6e:ba:4c:cb:e4:51:8c:d3:98:82:c1:c0:a8:09:
74:4b:74:df:8c:a4:ae:6a:48:af:0f:44:10:3f:37:89:c5:8f:
bb:78:6b:29:a8:44:90:95:6a:66:10:f5:a7:1d:02:c3:82:88:
e8:82:0a:32:9b:9b:a7:f2:83:f6:92:22:03:45:8e:19:48:cd:
34:ab:d7:3b:f8:b6:8c:a1:36:89:f4:bc:63:a7:60:67:7c:bb:
bc:60:a8:e5:ad:3b:f4:20:9b:bc:6e:c1:1f:1b:58:c0:23:f0:
b1:f2:7c:5c:60:82:b3:92:d5:c4:0f:13:69:dc:c7:3a:14:37:
f9:6e:1f:af:c4:1e:4f:ca:22:09:ba:02:b4:83:5a:12:00:d1:
02:b7:a9:36:06:7e:fa:3b:20:bb:48:b0:3a:b5:6b:98:9a:7f:
6e:04:2b:78:ab:cd:fb:e5:2d:02:75:49:33:1f:d0:87:1a:70:
9d:10:3b:a3:54:b3:2f:46:52:fe:d6:c5:73:b0:18:2c:4d:02:
7a:64:47:da:db:f7:ce:9e:97:72:49:db:8f:32:d5:22:60:c4:
64:4b:92:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 10:22:32 2025 by rpki-client