Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/aC_hdK5CbbWAdY5r2a47t0lmkv0.roa
File: aC_hdK5CbbWAdY5r2a47t0lmkv0.roa (raw, json)
Hash identifier: OC741thwNdbktYi4ltIPLb7G2UMVurZWZKeSAWhRUXM=
Subject key identifier: 68:2F:E1:74:AE:42:6D:B5:80:75:8E:6B:D9:AE:3B:B7:49:66:92:FD
Certificate issuer: /CN=950082a85946722c7fc1c864f0fbd80dc54dcd29
Certificate serial: 019427B5C4946E1CB555A8F6EDC9F7C96214
Authority key identifier: 95:00:82:A8:59:46:72:2C:7F:C1:C8:64:F0:FB:D8:0D:C5:4D:CD:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lQCCqFlGcix_wchk8PvYDcVNzSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/aC_hdK5CbbWAdY5r2a47t0lmkv0.roa
Signing time: Thu 02 Jan 2025 15:50:11 +0000
ROA not before: Thu 02 Jan 2025 15:50:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 91.240.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/lQCCqFlGcix_wchk8PvYDcVNzSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 12:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:c4:94:6e:1c:b5:55:a8:f6:ed:c9:f7:c9:62:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=950082a85946722c7fc1c864f0fbd80dc54dcd29
Validity
Not Before: Jan 2 15:50:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=682fe174ae426db580758e6bd9ae3bb7496692fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:2b:b7:4b:4b:80:c0:76:34:af:c4:f1:92:49:
31:8a:76:6b:7d:c4:36:3b:c4:57:54:0f:b7:91:79:
32:ba:33:d7:32:cc:5f:a3:75:f7:57:9f:8f:bf:bf:
a2:88:00:2d:be:c1:35:9c:77:bd:24:8c:e4:38:17:
86:4d:24:af:38:38:7f:e2:86:b2:01:df:cc:75:a9:
14:43:e0:c3:30:b1:11:44:f2:03:71:a5:9e:a7:cc:
0d:3c:11:af:b5:c0:86:5e:23:e2:c7:8c:d1:9e:5e:
29:90:f5:fe:38:ad:a0:f3:29:b2:74:3f:9a:1e:4f:
93:6e:c9:d3:a0:b8:57:66:c9:14:47:b8:82:2e:82:
c7:98:57:24:2a:c4:3f:f3:84:49:d8:d9:31:4b:b6:
89:d1:56:6f:f4:a1:10:f1:38:31:30:c4:2c:47:c4:
85:af:91:dc:a5:2f:f5:cf:e4:fb:87:1b:30:31:c6:
dd:bb:f2:e2:ce:9c:2f:a6:af:e2:f7:23:b8:ba:71:
30:6a:e7:04:0a:d3:e1:1b:60:3a:24:08:39:41:45:
17:8a:3a:d4:8d:35:26:8b:86:60:46:b3:79:55:35:
3e:8f:57:2a:a6:f5:6b:72:5e:24:c3:ab:8a:7a:5d:
b8:06:23:86:8b:06:ea:79:cc:62:c0:6a:f2:bd:79:
c3:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:2F:E1:74:AE:42:6D:B5:80:75:8E:6B:D9:AE:3B:B7:49:66:92:FD
X509v3 Authority Key Identifier:
keyid:95:00:82:A8:59:46:72:2C:7F:C1:C8:64:F0:FB:D8:0D:C5:4D:CD:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lQCCqFlGcix_wchk8PvYDcVNzSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/aC_hdK5CbbWAdY5r2a47t0lmkv0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.240.233.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:ef:53:4e:f8:50:d2:49:f4:e8:c0:d9:fb:72:05:eb:4a:2b:
64:d3:a4:d2:75:e9:0a:5c:51:1f:0b:b3:8a:b4:43:6c:01:fc:
2f:e2:73:a2:ef:da:30:f4:0f:e1:64:cc:cf:7c:8a:14:f8:33:
d6:43:87:47:74:74:fe:d5:5b:df:69:15:df:b7:76:8b:4e:a9:
ad:34:8d:1d:74:78:f6:26:0e:2b:7b:87:a6:cd:b6:9e:19:e6:
cd:1f:94:b8:17:28:38:fc:84:fd:30:fd:c6:46:82:e7:a1:e2:
4c:07:be:72:5c:8e:ff:d4:2a:59:63:f1:16:80:10:71:5c:1e:
7e:2f:7a:27:cf:44:d6:22:c4:3d:24:ca:f8:a2:b5:15:71:b7:
03:d2:7a:29:5b:b8:7d:82:a6:53:a8:13:72:44:89:6e:c8:3f:
ac:48:8f:e5:f1:69:8c:38:68:ae:8a:11:6d:ab:11:e7:10:8b:
26:36:0a:48:74:6a:43:b8:72:fa:4e:17:61:f5:ae:dd:ce:a7:
bd:18:97:cf:e5:dc:8f:07:39:d8:30:de:f8:9e:ac:70:85:b7:
80:a4:5f:e0:7f:b8:87:fe:50:f2:82:72:96:92:5e:7c:29:88:
b2:0c:07:86:99:38:36:87:47:fd:c9:21:7d:97:7e:4d:df:ff:
24:35:d5:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:22:37 2025 by rpki-client