Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/1iYEgcqm-mVKBLd2WjzT59pt1Xw.roa
File: 1iYEgcqm-mVKBLd2WjzT59pt1Xw.roa (raw, json)
Hash identifier: ewHcbw+PNeGShWbnRhXrGjXtzrFjBvJAIqeP6DT6ZjQ=
Subject key identifier: D6:26:04:81:CA:A6:FA:65:4A:04:B7:76:5A:3C:D3:E7:DA:6D:D5:7C
Certificate issuer: /CN=1904ce28eae682c97acd2d862fee2897c3b096fd
Certificate serial: 019424B3F485477D52D8B2595A41898E0294
Authority key identifier: 19:04:CE:28:EA:E6:82:C9:7A:CD:2D:86:2F:EE:28:97:C3:B0:96:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQTOKOrmgsl6zS2GL-4ol8Owlv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/1iYEgcqm-mVKBLd2WjzT59pt1Xw.roa
Signing time: Thu 02 Jan 2025 01:49:20 +0000
ROA not before: Thu 02 Jan 2025 01:49:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60258
IP address blocks: 185.91.208.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GQTOKOrmgsl6zS2GL-4ol8Owlv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 10:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:f4:85:47:7d:52:d8:b2:59:5a:41:89:8e:02:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1904ce28eae682c97acd2d862fee2897c3b096fd
Validity
Not Before: Jan 2 01:49:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d6260481caa6fa654a04b7765a3cd3e7da6dd57c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:71:71:02:73:bb:9b:7a:41:28:2a:4e:d8:0d:
84:43:07:f7:33:06:0f:90:f7:25:2c:01:42:42:e9:
91:93:e0:9d:84:54:26:61:71:0b:51:4c:e5:5f:0c:
e1:2e:62:4b:e1:a9:c4:73:02:2b:be:6b:59:46:ba:
fc:fd:11:85:f4:35:ad:e5:49:db:c9:66:6a:e6:54:
31:64:30:35:10:18:f5:bd:cb:cc:eb:ed:bc:35:bd:
df:ba:c0:27:36:be:07:fe:26:61:56:54:e1:ee:3e:
5f:11:81:61:0a:95:31:19:5d:09:9d:d5:08:db:10:
13:1a:2a:8e:6a:19:39:a6:45:ba:b3:5d:14:46:06:
4b:30:af:3f:26:7f:aa:d4:01:7e:09:90:56:51:42:
61:03:3d:23:d3:d3:68:51:4e:c8:6c:af:52:2a:d5:
62:cd:f6:80:32:95:37:9d:9a:fc:ce:29:c7:c7:16:
db:c9:44:7e:ab:46:5c:c5:82:26:2f:8d:af:e9:f2:
db:12:05:ae:74:c8:dd:57:55:ec:fe:d4:41:35:01:
53:2a:00:ce:9c:28:d9:89:fb:d8:74:ce:cd:ba:b4:
f1:ea:0d:d0:2c:2b:0e:9d:1a:88:e3:74:df:ca:cc:
ba:ec:2b:db:89:ea:81:c8:8b:78:b4:d5:68:40:d8:
7d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:26:04:81:CA:A6:FA:65:4A:04:B7:76:5A:3C:D3:E7:DA:6D:D5:7C
X509v3 Authority Key Identifier:
keyid:19:04:CE:28:EA:E6:82:C9:7A:CD:2D:86:2F:EE:28:97:C3:B0:96:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQTOKOrmgsl6zS2GL-4ol8Owlv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/1iYEgcqm-mVKBLd2WjzT59pt1Xw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.91.208.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:e8:3e:84:af:88:74:45:da:70:33:28:c4:52:33:0b:64:03:
1e:ad:23:50:f7:40:11:f1:50:00:d7:7d:4e:b1:ed:05:a0:73:
82:e9:ba:8f:46:00:c9:49:b8:58:de:69:1d:34:bd:c5:e6:d9:
40:40:ac:91:3f:e1:b8:ab:14:c0:00:f2:f0:38:4a:78:a6:e9:
7f:7e:10:0c:6d:c4:85:28:eb:ad:95:5e:51:87:bd:0a:f4:61:
fa:ab:6f:80:c9:24:fd:e1:5f:17:25:8a:08:0e:65:3f:c3:9f:
df:5a:91:9b:ce:db:88:23:34:dc:08:7d:31:59:1d:aa:fd:00:
79:2a:a0:ac:4b:d4:d5:7d:3d:36:f2:eb:90:aa:e5:90:43:70:
4c:48:f5:b0:33:b3:33:dc:5c:4f:bf:43:2d:06:f5:ce:f1:5e:
4e:40:a0:6a:7e:db:6d:ee:f6:27:49:35:e2:15:bd:06:c6:99:
01:f9:32:b4:15:6c:38:fc:2b:59:5d:ae:6d:2d:70:83:05:a6:
e3:76:f3:e4:36:76:ba:04:f1:33:fa:8c:9e:8f:46:dd:57:6a:
77:e9:6d:80:54:ee:c9:c0:86:70:2c:d5:02:47:5f:c6:2e:ce:
0b:bf:d6:02:0a:b3:8f:6b:58:b6:99:2c:74:a8:34:25:9d:61:
57:cc:64:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 20:52:13 2025 by rpki-client