Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/AuIUSKV86C7BXB3cKTMOXDDJDxg.roa
File: AuIUSKV86C7BXB3cKTMOXDDJDxg.roa (raw, json)
Hash identifier: zV0DboRCqeI5iUfqxHmafkMKaUmCDd/7aboDtWeZ6H0=
Subject key identifier: 02:E2:14:48:A5:7C:E8:2E:C1:5C:1D:DC:29:33:0E:5C:30:C9:0F:18
Certificate issuer: /CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Certificate serial: 01953CCD9C82C61894B37CB2C4E71A156CB8
Authority key identifier: C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/AuIUSKV86C7BXB3cKTMOXDDJDxg.roa
Signing time: Tue 25 Feb 2025 11:11:02 +0000
ROA not before: Tue 25 Feb 2025 11:11:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29208
IP address blocks: 91.108.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:3c:cd:9c:82:c6:18:94:b3:7c:b2:c4:e7:1a:15:6c:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Validity
Not Before: Feb 25 11:11:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=02e21448a57ce82ec15c1ddc29330e5c30c90f18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:70:b5:32:d6:b3:45:d8:8b:17:d3:59:c6:bc:
44:f1:12:f5:0d:c0:0d:73:00:35:90:95:4f:ea:61:
4f:ec:30:3b:df:7a:b9:cb:ab:6c:8a:29:ff:22:fe:
e7:7d:ac:b7:9a:ed:67:ba:e4:23:af:0b:9a:51:eb:
35:b4:e6:83:ff:cc:19:64:04:16:56:cc:ae:67:22:
46:42:13:2e:af:85:28:da:f9:34:90:c5:8c:5f:d1:
79:c5:99:e7:08:c9:55:91:7e:a2:03:aa:ad:b1:00:
57:ba:77:11:55:4e:0b:bf:8c:32:ad:df:3f:0b:91:
3a:64:4e:25:0c:31:aa:db:b7:e2:a6:ec:b5:b8:c9:
ab:40:65:5d:38:d3:ed:af:55:41:06:81:3f:f6:75:
a6:f8:0f:2f:42:59:29:82:1e:68:32:8f:1d:7d:3a:
58:73:47:64:34:51:02:dd:29:30:a7:f4:36:b5:01:
7b:01:3d:4e:e8:2b:f0:1b:e6:b1:93:77:71:53:84:
6d:ef:a7:47:08:c4:b3:42:aa:94:d7:71:c0:1b:34:
ee:21:f1:98:fa:59:6f:af:b3:49:d6:2d:11:03:4b:
2d:28:38:7b:18:66:d9:e9:e5:fb:10:27:c3:80:15:
fb:4e:34:c4:dd:d9:0f:e9:b5:97:09:41:31:46:5c:
52:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:E2:14:48:A5:7C:E8:2E:C1:5C:1D:DC:29:33:0E:5C:30:C9:0F:18
X509v3 Authority Key Identifier:
keyid:C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/AuIUSKV86C7BXB3cKTMOXDDJDxg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.239.0/24
Signature Algorithm: sha256WithRSAEncryption
12:2d:a0:4b:27:e9:89:38:e0:52:5c:02:3a:69:46:97:ff:16:
94:69:2f:e5:a4:91:36:c7:6e:f1:db:19:93:f6:49:4a:24:cf:
7d:12:5c:1d:84:54:3a:ce:06:6a:1b:51:50:70:24:40:d9:29:
0d:28:40:20:dc:6c:70:e0:88:ce:fd:fe:09:6e:ee:96:4c:81:
de:d2:57:6b:75:5b:c4:15:24:93:fe:76:86:5c:79:b9:f8:01:
21:8f:bc:06:b3:27:71:19:7f:8b:35:81:7e:90:f8:a1:e4:f8:
1e:58:2d:61:f6:23:81:98:ad:64:64:24:35:4a:cf:43:99:fd:
2a:88:89:0d:87:bb:e7:9c:ef:44:ea:6a:f2:b6:c1:5c:99:00:
dc:dc:7c:97:c1:9a:2b:16:87:ff:78:e2:94:81:4f:23:03:9d:
ef:e5:ed:dc:37:5c:8f:a9:c5:e4:27:31:1f:4d:b8:3b:1b:b5:
b8:a9:14:36:04:5b:d8:cb:82:ed:5c:4b:c5:3e:13:e3:0c:ba:
b1:7c:b5:b4:82:d1:66:51:f9:c5:7c:79:11:e9:b9:d3:ca:a3:
b1:6c:35:9b:4e:10:fe:ca:e0:0c:d9:9b:40:b3:35:1a:14:fb:
b0:f3:9b:58:d4:e9:c7:02:75:e0:be:32:75:9b:ef:ba:02:fd:
8e:6e:69:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:53:22 2025 by rpki-client