Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/MIKj6NwkBoijX5RCu9BLUoczIOA.roa
File: MIKj6NwkBoijX5RCu9BLUoczIOA.roa (raw, json)
Hash identifier: TpSQaRTCbf9UYf4e5y2oNI5uWSWIkWo+nLWFnRcfelo=
Subject key identifier: 30:82:A3:E8:DC:24:06:88:A3:5F:94:42:BB:D0:4B:52:87:33:20:E0
Certificate issuer: /CN=391a0ecc2b9beaba9eb76d5519fe787b4033fc12
Certificate serial: 019435A786A2E6F8063C3D60A2A388AE8449
Authority key identifier: 39:1A:0E:CC:2B:9B:EA:BA:9E:B7:6D:55:19:FE:78:7B:40:33:FC:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORoOzCub6rqet21VGf54e0Az_BI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/MIKj6NwkBoijX5RCu9BLUoczIOA.roa
Signing time: Sun 05 Jan 2025 08:49:18 +0000
ROA not before: Sun 05 Jan 2025 08:49:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204717
IP address blocks: 91.132.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ORoOzCub6rqet21VGf54e0Az_BI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:35:a7:86:a2:e6:f8:06:3c:3d:60:a2:a3:88:ae:84:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=391a0ecc2b9beaba9eb76d5519fe787b4033fc12
Validity
Not Before: Jan 5 08:49:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3082a3e8dc240688a35f9442bbd04b52873320e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c2:f2:fd:8e:f0:fd:3c:88:af:9c:26:99:2f:
90:48:c6:b1:96:42:10:df:5e:14:b0:b9:b4:9d:bd:
98:d9:14:5e:12:e7:88:a5:04:98:19:2b:e7:fa:c5:
fa:c2:85:46:94:b9:2c:ce:e4:7d:7e:a6:24:91:cb:
d4:cf:f4:70:26:e9:7a:22:7b:c1:1c:df:c2:8b:61:
df:f5:26:a2:e1:61:b7:6c:1b:98:05:aa:79:f8:f1:
bf:91:6a:0d:ac:8c:6d:35:52:ab:77:e0:8f:7a:8f:
dd:23:84:94:90:38:d6:d9:8b:53:44:90:bd:a7:35:
e6:0c:72:8c:f0:a3:e4:ab:28:b4:6c:6e:15:9b:9d:
d1:32:90:9f:43:33:ce:a4:5c:74:70:9f:10:90:1e:
e8:d6:0b:6e:0b:50:68:1e:54:6d:d0:98:1a:98:d6:
6f:33:b3:a5:c8:ca:b7:2a:1c:a2:32:d8:f9:a8:8f:
fc:b4:ff:28:72:84:9f:03:09:75:91:58:af:ed:19:
60:b7:82:b5:be:b0:e0:8b:83:43:5c:20:61:de:d1:
95:d1:f4:d7:11:16:4a:94:e2:9b:6d:b9:df:18:e6:
db:69:ff:01:71:74:36:8a:86:15:a7:bc:75:4a:1f:
d5:4b:b8:8a:1b:5a:85:9f:b7:ba:8b:a7:5e:eb:02:
66:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:82:A3:E8:DC:24:06:88:A3:5F:94:42:BB:D0:4B:52:87:33:20:E0
X509v3 Authority Key Identifier:
keyid:39:1A:0E:CC:2B:9B:EA:BA:9E:B7:6D:55:19:FE:78:7B:40:33:FC:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORoOzCub6rqet21VGf54e0Az_BI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/MIKj6NwkBoijX5RCu9BLUoczIOA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.132.7.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:f7:85:23:ba:1c:d7:40:c7:88:b9:8d:e3:ee:87:31:3b:22:
6a:cd:47:de:9a:99:95:84:5f:50:a3:de:64:4e:fd:01:2d:af:
81:8a:1c:eb:46:8d:47:3a:d5:9e:1a:57:77:a8:2b:be:59:4d:
44:1c:69:8d:c9:63:8f:3f:dc:23:45:64:22:25:ab:94:19:2d:
38:42:bc:4c:7f:ae:2e:89:10:42:4f:f0:46:79:b6:e8:0a:e3:
5a:f9:ce:2e:fe:8a:83:83:7e:22:2d:9e:ce:cd:8a:63:f7:76:
24:a9:d6:df:dd:fd:18:f2:36:91:d9:80:36:b8:f3:91:56:6d:
f2:1f:78:3a:d7:9b:c2:ac:35:7b:f6:a3:52:69:1e:40:a6:ef:
dd:8b:a2:1c:7e:38:32:b3:34:5a:cb:04:5e:02:6c:65:72:51:
c1:88:bf:fd:6f:96:e2:6b:bd:dd:03:37:e6:5c:07:df:73:73:
84:e1:6f:43:db:85:c0:4c:53:8a:91:ef:69:d5:fe:e2:b4:46:
b8:bb:a1:50:73:64:e6:e5:89:f9:52:bb:f3:c1:1b:85:04:14:
7c:56:ca:f7:f5:37:14:11:c9:5a:6c:f3:d8:35:23:67:f0:09:
fb:41:37:84:df:2f:a4:9e:b3:1c:c6:82:06:0a:3b:a2:7e:f5:
2b:2f:3c:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:23:36 2025 by rpki-client