Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/9QFSU2nrdAfZNtnWmvhk9yKDce0.roa
File: 9QFSU2nrdAfZNtnWmvhk9yKDce0.roa (raw, json)
Hash identifier: m13xJAIZK/DHIgwjDc0amhOCNUaYgt4i8B8tGB4QnZI=
Subject key identifier: F5:01:52:53:69:EB:74:07:D9:36:D9:D6:9A:F8:64:F7:22:83:71:ED
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 0194258FA1E2314BBE4E9C10620C78EED532
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/9QFSU2nrdAfZNtnWmvhk9yKDce0.roa
Signing time: Thu 02 Jan 2025 05:49:17 +0000
ROA not before: Thu 02 Jan 2025 05:49:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201814
IP address blocks: 91.234.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:a1:e2:31:4b:be:4e:9c:10:62:0c:78:ee:d5:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Jan 2 05:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f501525369eb7407d936d9d69af864f7228371ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7a:06:c0:17:45:c5:24:d0:7c:64:11:27:71:
20:35:8e:bf:e9:46:b9:34:90:41:9a:32:87:83:4f:
64:b4:e7:7d:30:f1:22:40:0d:a6:05:f8:e8:28:dc:
07:5b:c2:52:1a:83:c0:b1:e1:03:73:fb:e1:d4:19:
d8:7c:c7:c5:e6:41:44:a3:9e:08:da:02:2c:97:9d:
91:89:ae:bc:b1:8f:4f:28:36:ca:28:90:81:ac:4b:
86:3c:04:15:7c:c7:b6:44:72:d4:ed:9d:42:4b:97:
72:89:db:65:cf:5a:72:82:41:15:a7:cf:c0:ae:1d:
b0:f1:06:2b:bb:d1:38:b8:9e:da:aa:aa:ec:ab:ce:
ae:97:a1:24:5d:90:8c:6a:bf:71:3c:96:59:0f:58:
96:5a:f4:f5:cb:4e:0a:8b:0a:e4:7c:39:e4:92:c7:
2d:35:3f:36:05:12:58:f0:e5:d4:52:63:f9:76:d9:
25:66:71:6a:ac:21:ff:78:5c:94:8e:ed:43:f6:6a:
e9:4b:a3:1d:d2:11:d8:ef:ac:27:38:b7:97:57:ab:
e7:f6:50:49:2f:60:57:78:bc:ef:b4:d5:24:0c:3e:
3e:21:8e:67:79:e1:cc:ca:03:2a:b3:f6:3f:55:f4:
9a:2c:73:4f:42:52:2a:11:a0:bf:97:04:40:75:d4:
3c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:01:52:53:69:EB:74:07:D9:36:D9:D6:9A:F8:64:F7:22:83:71:ED
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/9QFSU2nrdAfZNtnWmvhk9yKDce0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.234.255.0/24
Signature Algorithm: sha256WithRSAEncryption
57:4f:b7:6b:72:af:08:56:6c:57:23:3e:1a:e7:ee:98:02:2a:
67:57:2f:12:4f:de:01:83:6c:f4:f0:fc:24:23:aa:22:72:b0:
57:74:b6:af:f1:37:94:be:02:66:ac:b9:d7:be:14:c8:9e:88:
04:9d:e1:78:fd:5c:1f:c2:47:ae:22:cc:a5:71:6a:0b:05:0c:
19:db:38:25:a6:a1:ec:05:15:4a:7f:e7:01:f7:35:18:2e:66:
5b:0b:8c:a6:4b:2d:e4:b0:2b:ff:96:0e:88:b2:4a:9f:e3:4a:
31:72:77:e1:8f:c3:74:71:07:4a:f2:30:95:20:81:1b:df:62:
90:1a:d5:2e:60:45:14:7e:a9:9b:18:5c:e2:ca:7f:b2:45:bf:
01:84:f8:20:fa:ea:75:6d:95:cb:8d:6a:a4:62:97:87:84:88:
f5:f8:33:5e:3e:92:34:5c:df:54:6f:bd:9d:ed:90:02:bb:4e:
a8:1d:2c:58:f2:69:31:14:80:03:fa:68:4b:ca:46:1e:6e:07:
b8:23:e4:77:88:e6:b4:a7:2c:73:d5:71:a5:7f:83:a5:be:d9:
b3:44:5a:0f:eb:1a:c7:99:f9:b2:25:4c:90:4f:05:ef:be:a7:
fb:90:27:f6:bb:21:31:50:35:1f:a6:a9:05:7f:fc:a3:d2:e1:
64:8e:a2:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:53:43 2025 by rpki-client