Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8fc397-ab83-4fec-b6c4-a50a880aa7fc/1/sG880b_RPrGdA8qdnVRGDqdPZs8.roa
File: sG880b_RPrGdA8qdnVRGDqdPZs8.roa (raw, json)
Hash identifier: FkxQnvLlTo8fZxDMmVUsA4H8Po5+5uIaGq9jK/9F1N0=
Subject key identifier: B0:6F:3C:D1:BF:D1:3E:B1:9D:03:CA:9D:9D:54:46:0E:A7:4F:66:CF
Certificate issuer: /CN=e1087e2f0df296fe11e76ee4c1017bcf1205b2f0
Certificate serial: 01942444BE492FEDBE017F38A2BC7905B0CC
Authority key identifier: E1:08:7E:2F:0D:F2:96:FE:11:E7:6E:E4:C1:01:7B:CF:12:05:B2:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Qh-Lw3ylv4R527kwQF7zxIFsvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc397-ab83-4fec-b6c4-a50a880aa7fc/1/sG880b_RPrGdA8qdnVRGDqdPZs8.roa
Signing time: Wed 01 Jan 2025 23:47:52 +0000
ROA not before: Wed 01 Jan 2025 23:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3303
IP address blocks: 91.212.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc397-ab83-4fec-b6c4-a50a880aa7fc/1/4Qh-Lw3ylv4R527kwQF7zxIFsvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc397-ab83-4fec-b6c4-a50a880aa7fc/1/4Qh-Lw3ylv4R527kwQF7zxIFsvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Qh-Lw3ylv4R527kwQF7zxIFsvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:be:49:2f:ed:be:01:7f:38:a2:bc:79:05:b0:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1087e2f0df296fe11e76ee4c1017bcf1205b2f0
Validity
Not Before: Jan 1 23:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b06f3cd1bfd13eb19d03ca9d9d54460ea74f66cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:aa:2d:8a:53:51:48:5c:9a:a8:f9:70:20:4f:
f8:af:da:b0:18:9b:ee:38:2a:69:0d:48:63:76:9d:
14:74:d7:12:3e:9e:c3:82:5d:95:a9:8f:ab:a8:88:
2f:0b:21:a0:f5:83:75:7c:a0:a1:8e:3a:eb:f5:dd:
84:6e:24:03:d0:d6:c8:36:24:4f:9a:19:93:12:01:
3c:98:56:b5:0b:f9:be:93:80:03:a1:f0:cb:63:6c:
7e:79:87:0b:14:b3:21:b8:d8:fe:88:34:16:7f:a8:
55:d1:9f:70:27:6d:6b:5d:26:54:8f:b9:56:35:2b:
62:dc:56:1b:a3:96:a9:19:e8:55:0c:2e:3a:1b:16:
1d:f0:aa:b6:65:da:f6:6e:d8:3f:fa:ae:e6:49:14:
45:83:f2:81:08:01:7c:b1:38:b3:56:38:8c:22:cd:
05:16:5a:32:96:26:f1:61:27:7f:07:82:4e:39:52:
0a:09:f9:c0:25:ea:7a:84:4c:ed:bd:76:24:1c:43:
4c:b5:a3:99:cf:97:44:e1:ff:0d:8c:eb:d7:b0:33:
9d:05:bd:2e:8e:55:74:1f:f3:fe:fb:a3:f8:d1:77:
02:59:97:4d:25:f5:14:e7:d5:89:26:91:b0:1c:64:
43:35:f7:de:e9:2f:0a:d2:25:7a:91:19:a2:f1:7b:
ce:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:6F:3C:D1:BF:D1:3E:B1:9D:03:CA:9D:9D:54:46:0E:A7:4F:66:CF
X509v3 Authority Key Identifier:
keyid:E1:08:7E:2F:0D:F2:96:FE:11:E7:6E:E4:C1:01:7B:CF:12:05:B2:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Qh-Lw3ylv4R527kwQF7zxIFsvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc397-ab83-4fec-b6c4-a50a880aa7fc/1/sG880b_RPrGdA8qdnVRGDqdPZs8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc397-ab83-4fec-b6c4-a50a880aa7fc/1/4Qh-Lw3ylv4R527kwQF7zxIFsvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.117.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:c7:be:eb:03:21:da:68:76:8d:c0:6f:48:65:78:86:07:83:
4e:7e:1c:01:1b:67:0e:c3:4f:f9:41:fe:7e:dd:f5:9e:bc:47:
cd:f1:20:0c:27:9c:88:4b:96:02:30:48:2f:2c:cb:f4:6f:97:
a6:15:2c:a2:ac:8a:7b:00:0e:2e:8a:b4:90:12:83:67:78:f8:
a6:aa:1a:f6:89:60:1e:94:8b:84:dc:7f:a6:78:a9:29:32:d2:
c5:d6:aa:fa:8d:9e:a8:b6:3c:d1:06:f1:72:2e:23:a3:b2:9c:
fe:db:4b:7d:3c:84:09:f1:ba:98:93:6d:77:9c:73:c2:75:36:
08:15:9d:70:52:7c:ff:6f:81:a8:54:38:d9:21:e6:fd:14:6b:
0e:0a:df:30:40:e9:e3:2a:d0:8d:03:b7:4c:9b:15:76:0d:83:
35:77:c8:ae:53:25:87:d0:ab:ed:46:81:96:11:2d:ec:2c:62:
ab:9b:70:1b:13:0c:f4:b6:a3:a2:7b:1b:dd:60:8c:c1:4f:a4:
fb:06:da:dc:0f:4b:b6:34:d3:51:44:70:68:e5:89:fb:db:4c:
3f:39:8f:5d:27:03:c7:54:5b:8f:cd:89:62:d5:08:b0:11:38:
06:5f:6f:1d:2e:61:bd:76:aa:27:ec:bf:b2:2a:08:53:21:7f:
a0:3a:4c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:32:31 2025 by rpki-client