Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/ac1738-6c67-4204-8901-74748bc93bca/1/pXEOVL3s29ntjLGWnEad02SClcY.roa
File: pXEOVL3s29ntjLGWnEad02SClcY.roa (raw, json)
Hash identifier: 5uijVm/LhBI/XgHLC1W0ZRQPeN6iEyHoyVbJwCUVIKs=
Subject key identifier: A5:71:0E:54:BD:EC:DB:D9:ED:8C:B1:96:9C:46:9D:D3:64:82:95:C6
Certificate issuer: /CN=6b5635dd380215a03c9307da56206c566b38a3cf
Certificate serial: 019427480872ACC8DACC4BF62C7FE8EDBA2E
Authority key identifier: 6B:56:35:DD:38:02:15:A0:3C:93:07:DA:56:20:6C:56:6B:38:A3:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1Y13TgCFaA8kwfaViBsVms4o88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/ac1738-6c67-4204-8901-74748bc93bca/1/pXEOVL3s29ntjLGWnEad02SClcY.roa
Signing time: Thu 02 Jan 2025 13:50:19 +0000
ROA not before: Thu 02 Jan 2025 13:50:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51419
IP address blocks: 91.217.16.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/ac1738-6c67-4204-8901-74748bc93bca/1/a1Y13TgCFaA8kwfaViBsVms4o88.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/ac1738-6c67-4204-8901-74748bc93bca/1/a1Y13TgCFaA8kwfaViBsVms4o88.mft
rsync://rpki.ripe.net/repository/DEFAULT/a1Y13TgCFaA8kwfaViBsVms4o88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 13:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:08:72:ac:c8:da:cc:4b:f6:2c:7f:e8:ed:ba:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5635dd380215a03c9307da56206c566b38a3cf
Validity
Not Before: Jan 2 13:50:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a5710e54bdecdbd9ed8cb1969c469dd3648295c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:27:8a:a4:cc:77:db:6b:dd:2e:d2:02:42:a2:
1f:13:c4:20:2a:30:34:76:43:a6:3b:79:f5:da:41:
54:d2:fc:5c:82:6e:1a:67:bf:fb:1b:3c:17:94:5d:
29:2f:42:93:fc:ab:32:94:25:e1:a1:9d:79:43:4f:
6e:8b:7c:ba:ac:3b:6d:40:70:aa:4d:5a:5d:7b:26:
a7:6f:85:80:91:45:42:37:46:64:86:86:68:fe:f9:
24:14:73:88:e8:82:9f:87:84:a2:83:71:80:a4:fa:
0b:48:27:4e:93:37:e9:97:d7:d6:19:eb:9c:a9:0b:
51:e4:b8:1a:f8:eb:47:19:7b:60:ee:69:12:bf:e2:
de:13:a2:6f:60:47:a0:92:8f:1d:e9:e4:5b:cf:64:
66:b1:3b:96:f2:a4:61:c7:07:b7:6a:ed:01:32:b8:
15:11:33:ff:d4:f5:d4:f0:15:ea:89:24:01:47:eb:
79:6a:22:f9:4c:ea:ce:d0:2d:96:3e:38:9c:ca:e0:
68:31:ff:fa:84:85:52:07:de:58:7b:1b:b4:38:5d:
bc:8e:08:1c:89:37:9c:61:05:23:08:c3:1b:cf:ae:
eb:70:8f:e8:cc:a6:47:7e:d6:d8:99:8d:5d:a5:3c:
dc:3c:e6:5e:51:ab:85:ce:62:b4:17:86:aa:ce:55:
3f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:71:0E:54:BD:EC:DB:D9:ED:8C:B1:96:9C:46:9D:D3:64:82:95:C6
X509v3 Authority Key Identifier:
keyid:6B:56:35:DD:38:02:15:A0:3C:93:07:DA:56:20:6C:56:6B:38:A3:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1Y13TgCFaA8kwfaViBsVms4o88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ac1738-6c67-4204-8901-74748bc93bca/1/pXEOVL3s29ntjLGWnEad02SClcY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ac1738-6c67-4204-8901-74748bc93bca/1/a1Y13TgCFaA8kwfaViBsVms4o88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.16.0/23
Signature Algorithm: sha256WithRSAEncryption
69:75:2b:50:4f:fc:df:84:32:e7:8a:11:c8:74:e5:1a:f7:b8:
02:71:85:bc:48:d4:c9:03:21:46:67:39:f6:09:f2:fd:27:04:
e6:19:e1:9a:6e:33:aa:9b:30:e1:aa:6c:86:d3:a4:39:ac:e6:
cb:ae:00:52:1c:8f:35:d7:6c:3b:3e:ec:b5:46:87:c3:47:45:
5c:55:2e:56:9d:6f:73:c1:99:46:ea:3c:6b:43:1c:8a:31:b2:
c7:a5:3c:a1:ae:35:2d:7d:01:2c:fe:f6:bb:af:62:2e:af:8d:
9e:f1:b2:4f:7f:8d:19:c5:06:1f:f4:e5:a5:10:9b:22:c6:39:
41:49:f0:92:02:bc:72:06:11:34:c9:21:7d:01:9f:58:8f:cd:
57:e9:2b:3c:2a:48:50:7c:50:27:f8:3c:b0:5a:2b:8c:29:f7:
cf:ba:8b:ad:57:44:f0:bf:e1:d4:d7:6e:0c:26:15:b6:36:fa:
0b:dc:12:71:e2:83:65:89:a5:91:57:6e:b4:28:64:ab:f5:67:
08:cf:a4:24:23:60:c3:ce:dd:f4:0d:80:ee:8f:e6:cd:d5:f6:
bb:ef:17:f7:91:4f:8f:a0:0d:09:08:00:cf:65:15:68:28:8e:
9e:77:9a:eb:5c:45:26:b2:3b:fc:be:44:a8:38:de:0c:1d:28:
e7:76:1d:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 9 18:28:30 2025 by rpki-client