Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/tmeZ0Ov1HvxadlJQTOHPYduqrcA.roa
File: tmeZ0Ov1HvxadlJQTOHPYduqrcA.roa (raw, json)
Hash identifier: 5a1G608q0BN2ymFOZ4ty/8IB/CrBTEemrLvT6asz5iY=
Subject key identifier: B6:67:99:D0:EB:F5:1E:FC:5A:76:52:50:4C:E1:CF:61:DB:AA:AD:C0
Certificate issuer: /CN=6de2aab077c9eef103f97984f309d891e5a19983
Certificate serial: 019420D646797249BAA2B16F20030FB4165B
Authority key identifier: 6D:E2:AA:B0:77:C9:EE:F1:03:F9:79:84:F3:09:D8:91:E5:A1:99:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/beKqsHfJ7vED-XmE8wnYkeWhmYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/tmeZ0Ov1HvxadlJQTOHPYduqrcA.roa
Signing time: Wed 01 Jan 2025 07:48:21 +0000
ROA not before: Wed 01 Jan 2025 07:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200590
IP address blocks: 91.147.98.0/24 maxlen: 24
91.147.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/beKqsHfJ7vED-XmE8wnYkeWhmYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 10:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:46:79:72:49:ba:a2:b1:6f:20:03:0f:b4:16:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6de2aab077c9eef103f97984f309d891e5a19983
Validity
Not Before: Jan 1 07:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b66799d0ebf51efc5a7652504ce1cf61dbaaadc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b9:07:ec:25:ce:2c:90:ce:d3:bf:b7:3d:cd:
e2:5e:38:1e:eb:8b:3a:b1:ae:16:26:11:7a:40:ee:
2b:82:32:0e:2c:2a:37:1f:ec:3c:9e:86:9a:e7:62:
05:a8:da:ae:34:62:61:5d:9e:57:ef:15:3f:9c:b0:
ae:13:32:00:e2:47:d3:b1:71:9f:aa:57:9a:17:95:
29:66:ba:21:21:9e:49:e8:47:8d:42:d7:47:a3:5a:
88:2a:55:f7:54:90:79:e5:01:80:00:d3:a5:e4:cb:
47:1d:de:73:0b:f1:a5:ba:12:d8:25:cd:84:9c:ef:
4f:33:b1:3b:4b:fe:a4:67:91:a8:08:78:d8:5e:4a:
86:22:d4:5d:f3:5f:90:c4:cc:fe:13:a4:fe:7f:7f:
8b:51:a4:bb:96:ca:86:af:c6:af:f0:67:72:ee:74:
08:c7:ce:56:91:ab:0f:40:94:e8:9d:41:36:df:f4:
48:1c:98:43:b2:5f:24:f0:52:aa:2f:1d:06:cd:db:
8c:c8:e0:46:dc:18:8b:48:bc:d4:a2:f2:3b:f6:1d:
42:01:90:5f:f9:76:06:68:75:0a:bf:71:55:18:cc:
a2:80:d3:cc:ed:78:c6:a1:29:8c:75:e3:d9:2e:f4:
9e:9a:de:b3:29:9a:7c:38:66:be:2c:6f:a4:3d:cc:
c5:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:67:99:D0:EB:F5:1E:FC:5A:76:52:50:4C:E1:CF:61:DB:AA:AD:C0
X509v3 Authority Key Identifier:
keyid:6D:E2:AA:B0:77:C9:EE:F1:03:F9:79:84:F3:09:D8:91:E5:A1:99:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/beKqsHfJ7vED-XmE8wnYkeWhmYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/tmeZ0Ov1HvxadlJQTOHPYduqrcA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.147.98.0/23
Signature Algorithm: sha256WithRSAEncryption
49:fc:8b:64:45:51:8a:26:d3:a8:1d:60:db:75:ec:9e:54:d9:
be:ee:e9:c8:88:c0:03:13:0b:dd:58:5d:21:1c:e5:b3:16:bd:
60:17:8e:8c:1c:f7:de:ba:b4:72:98:5b:09:e8:c2:7c:67:8d:
c3:4f:7e:70:40:c7:69:10:c6:06:95:0c:77:ae:2f:90:d8:30:
3d:12:68:e3:ee:16:de:a1:29:4e:45:bb:78:bd:0e:6d:66:8b:
c2:c8:54:ee:51:33:19:91:a5:e5:70:41:7b:69:83:b4:b5:2d:
82:7b:4d:be:5c:bf:a8:4a:b5:62:70:20:a6:43:d4:7f:e6:d4:
34:98:a0:6c:cb:d1:d6:2a:31:19:78:48:c9:7a:12:e5:60:f4:
f2:f5:8f:66:8c:b2:e0:39:ea:18:2d:72:6c:83:29:51:36:43:
9b:68:4c:0c:32:15:14:6c:75:b4:0b:ad:17:62:1a:90:84:ba:
4a:3d:4e:36:1a:0c:01:f8:72:66:c5:a3:e5:22:26:03:ec:90:
f9:9d:38:b0:0d:3d:f9:4d:ec:49:67:b3:53:9b:f3:a2:6e:7a:
0f:d3:59:27:43:dd:cf:a3:e9:f4:c0:7a:f8:44:39:d1:80:e0:
fa:93:33:18:44:38:ee:91:55:15:f0:26:b6:b5:b7:46:11:0a:
2c:79:e2:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:20:44 2025 by rpki-client