Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/SkASK4zN7bPehdagCz89JkwUfsA.roa
File: SkASK4zN7bPehdagCz89JkwUfsA.roa (raw, json)
Hash identifier: d1RW1sYrndntlpLL9/PiKBPVX2QhXX5rJ7D+z0FCw9w=
Subject key identifier: 4A:40:12:2B:8C:CD:ED:B3:DE:85:D6:A0:0B:3F:3D:26:4C:14:7E:C0
Certificate issuer: /CN=90620638ca1d835650e08ddcf363f10789b53057
Certificate serial: 0194228DC4DF76CAD01A5A2A4D5F7FE876BB
Authority key identifier: 90:62:06:38:CA:1D:83:56:50:E0:8D:DC:F3:63:F1:07:89:B5:30:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kGIGOModg1ZQ4I3c82PxB4m1MFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/SkASK4zN7bPehdagCz89JkwUfsA.roa
Signing time: Wed 01 Jan 2025 15:48:23 +0000
ROA not before: Wed 01 Jan 2025 15:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56440
IP address blocks: 91.224.158.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kGIGOModg1ZQ4I3c82PxB4m1MFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 15:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:c4:df:76:ca:d0:1a:5a:2a:4d:5f:7f:e8:76:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90620638ca1d835650e08ddcf363f10789b53057
Validity
Not Before: Jan 1 15:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4a40122b8ccdedb3de85d6a00b3f3d264c147ec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b2:d2:9f:47:92:dc:55:38:ba:f6:18:8d:42:
90:92:32:55:d9:34:3b:f4:77:c2:d8:32:53:e5:e5:
8a:66:c2:7a:e1:60:44:51:9e:f7:ee:a2:40:52:33:
55:03:38:81:68:f5:17:94:08:12:b5:0a:82:91:96:
d7:e6:fe:82:e6:e2:a4:dc:b7:39:3b:48:f3:50:50:
94:f8:8b:00:4b:46:96:fb:33:b4:c4:78:96:d2:1c:
66:48:cc:b7:f5:5c:a5:ca:4d:61:bd:88:27:c9:8f:
1a:fd:36:5f:da:0c:ce:f1:77:42:96:a8:c0:7b:d8:
70:44:3e:96:94:82:91:8a:ff:13:4d:8f:71:60:96:
48:d1:dc:7a:04:2d:7c:6a:75:6c:29:77:56:3a:29:
ec:45:a2:1f:5a:6e:1b:16:70:fc:45:3b:f6:ba:39:
62:ef:e0:c2:d1:01:69:44:46:4b:b4:29:41:39:d4:
3a:49:11:1b:5e:46:ef:fb:f0:48:c8:bc:1c:84:6d:
8b:98:dd:d4:e4:7a:34:fd:55:1b:40:8a:63:a9:2f:
c9:44:b2:d6:71:39:81:ba:f3:d8:94:c5:24:f1:2a:
7b:36:a9:72:18:bb:d0:fc:53:ea:dc:ac:df:14:bb:
fa:a5:d7:2c:66:0b:98:3c:12:3e:17:64:41:16:9c:
0d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:40:12:2B:8C:CD:ED:B3:DE:85:D6:A0:0B:3F:3D:26:4C:14:7E:C0
X509v3 Authority Key Identifier:
keyid:90:62:06:38:CA:1D:83:56:50:E0:8D:DC:F3:63:F1:07:89:B5:30:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGIGOModg1ZQ4I3c82PxB4m1MFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/SkASK4zN7bPehdagCz89JkwUfsA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.224.158.0/23
Signature Algorithm: sha256WithRSAEncryption
97:b3:63:cf:a1:11:39:ba:f4:6f:4a:72:d2:ab:05:d6:5b:b5:
92:79:37:44:ed:d5:78:c8:4d:a9:9a:ab:1d:59:0e:de:54:99:
b3:90:41:d3:cf:8e:55:b2:e7:b9:e8:30:ce:53:37:02:1f:9b:
1a:1a:81:b5:7a:18:7f:70:5f:7a:10:4b:c1:d7:ee:ec:a8:b7:
ce:0d:13:9a:fd:f1:7c:b7:10:30:5b:44:35:ae:b9:23:a8:47:
05:1a:45:e1:f4:6a:fa:25:ff:e7:9a:c3:cd:b8:49:a3:52:67:
cc:6e:82:3c:0a:5e:9c:b5:8e:ce:8e:64:3f:69:f6:46:72:6e:
d1:22:77:c3:32:d9:85:fc:66:5d:37:7f:a5:14:88:69:2d:c8:
a2:18:b7:89:a9:be:aa:27:34:77:ff:d3:d1:a7:85:33:d3:d6:
47:0d:56:78:b8:b8:cd:78:76:f9:70:f6:24:d3:b6:28:ac:89:
0b:07:4b:7b:35:96:a2:8a:8c:49:df:1e:d3:d7:94:03:7b:77:
d2:a0:8b:6f:e8:f4:28:e7:6e:da:61:cc:57:63:04:e1:c6:fc:
ab:9f:b0:48:dd:bc:55:b4:98:f6:19:85:f2:91:73:15:04:04:
dc:85:e3:dc:8e:df:ef:73:78:3d:98:41:e9:46:e9:3e:eb:b5:
77:a8:4d:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 20:17:31 2025 by rpki-client