Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/Y_oNEiPJWS2zLwFvLL35UCRFKWA.roa
File: Y_oNEiPJWS2zLwFvLL35UCRFKWA.roa (raw, json)
Hash identifier: q2i0iB2Ep81QHqaDB0CnMDZLGuww93ap90YlQXqqvaU=
Subject key identifier: 63:FA:0D:12:23:C9:59:2D:B3:2F:01:6F:2C:BD:F9:50:24:45:29:60
Certificate issuer: /CN=fb4abe13942abe420f20dc149fdc57df4045c143
Certificate serial: 0194206803B34A00A3A908B902773E1491B4
Authority key identifier: FB:4A:BE:13:94:2A:BE:42:0F:20:DC:14:9F:DC:57:DF:40:45:C1:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-0q-E5QqvkIPINwUn9xX30BFwUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/Y_oNEiPJWS2zLwFvLL35UCRFKWA.roa
Signing time: Wed 01 Jan 2025 05:47:55 +0000
ROA not before: Wed 01 Jan 2025 05:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197323
IP address blocks: 91.220.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-0q-E5QqvkIPINwUn9xX30BFwUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 17:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:03:b3:4a:00:a3:a9:08:b9:02:77:3e:14:91:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb4abe13942abe420f20dc149fdc57df4045c143
Validity
Not Before: Jan 1 05:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=63fa0d1223c9592db32f016f2cbdf95024452960
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:6b:a6:1d:6e:8f:9d:23:aa:64:08:6a:fe:12:
1a:ee:74:21:89:b5:de:ab:0f:ed:72:e8:20:bf:ac:
ae:44:53:a6:c8:51:5c:67:64:1d:40:6a:30:95:6d:
8c:9b:a1:96:80:31:38:16:bd:9a:30:0f:86:4b:70:
ef:2d:70:ab:81:60:94:e2:85:68:78:09:e3:45:db:
a3:54:bc:86:53:bb:ac:d2:9c:06:18:e0:39:34:17:
e1:f0:b2:2d:e4:06:17:ae:fa:b5:97:4b:36:7e:9c:
bc:ee:f7:b5:5e:e2:d6:cc:44:bc:85:2b:68:20:92:
35:d0:42:a3:21:b1:7b:d4:44:09:3b:91:60:6b:41:
1f:34:5e:01:fd:e9:de:cc:1b:1c:a1:89:9e:07:c0:
ab:7e:a9:ed:fb:05:65:3d:db:99:21:df:ad:ea:75:
38:4d:1d:ee:24:86:c5:5d:a2:2a:c8:20:79:63:13:
6e:37:90:3a:52:e6:2c:1a:b7:12:86:c1:2b:c6:92:
4d:11:52:26:4f:4e:57:94:6c:b4:7c:1d:99:6a:88:
1f:8a:d1:bb:66:c2:e9:e3:39:dd:53:54:9b:a4:b8:
44:12:55:8f:e7:1d:97:8b:cf:e7:76:b7:f5:e2:d0:
eb:91:7b:2d:35:a8:15:b6:f1:ee:f7:2c:21:40:2d:
1d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:FA:0D:12:23:C9:59:2D:B3:2F:01:6F:2C:BD:F9:50:24:45:29:60
X509v3 Authority Key Identifier:
keyid:FB:4A:BE:13:94:2A:BE:42:0F:20:DC:14:9F:DC:57:DF:40:45:C1:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-0q-E5QqvkIPINwUn9xX30BFwUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/Y_oNEiPJWS2zLwFvLL35UCRFKWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.47.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:e8:d2:ca:ed:32:f1:b8:22:96:23:de:bb:23:03:a1:83:63:
3c:e0:ba:9e:f7:7a:01:c7:a9:e4:49:55:87:4d:5c:37:ff:87:
1c:37:ca:a4:84:6a:d3:35:c1:8c:a9:ef:bb:17:87:47:46:be:
d8:47:77:23:c5:c0:7c:ab:9f:f7:a6:45:6c:d6:76:74:d8:0e:
91:f6:b2:da:f3:5a:27:dc:e2:99:d4:5d:10:c6:21:36:ec:8f:
83:70:09:51:8a:be:1d:f0:d5:1a:64:32:1b:12:bd:d4:b8:82:
74:a5:cb:29:69:34:85:54:6c:3d:83:e6:66:6a:6c:b1:16:e3:
41:18:6c:2c:f7:52:b6:f3:65:e2:07:fb:28:91:a8:a2:e6:6f:
74:d0:42:e7:45:e8:a1:f6:8e:a1:0c:8d:55:c2:6a:bb:86:e6:
14:88:fd:bb:0a:9f:ff:39:71:8b:83:e5:c2:b9:50:bc:75:31:
61:69:f7:a4:15:9e:00:69:05:48:6a:3a:9e:05:a4:dd:0c:a9:
ac:92:36:f3:04:ea:6d:f6:11:31:d8:10:b7:c9:89:b7:5f:c2:
f9:e1:8f:59:88:57:c5:fe:30:ce:7d:56:1f:64:58:c8:9c:a6:
a2:14:c0:d8:f2:93:ff:25:e6:a2:16:c2:fc:84:53:eb:31:3a:
84:1f:ea:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:42:10 2025 by rpki-client