Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/8af8af-59a4-420c-9e3e-d482da9804d7/1/_a9iaZrjBk-wbx-ww9Y6UH5mTzg.roa
File: _a9iaZrjBk-wbx-ww9Y6UH5mTzg.roa (raw, json)
Hash identifier: 5gzPI03HllGyMTQY0xFdUnePky078f9CBw1LIzGaktA=
Subject key identifier: FD:AF:62:69:9A:E3:06:4F:B0:6F:1F:B0:C3:D6:3A:50:7E:66:4F:38
Certificate issuer: /CN=b29bc7a6493d38178dd7f5e9c490c8ef3a8a598b
Certificate serial: 01946A17E74079810BC4507E993B9A287CE8
Authority key identifier: B2:9B:C7:A6:49:3D:38:17:8D:D7:F5:E9:C4:90:C8:EF:3A:8A:59:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/spvHpkk9OBeN1_XpxJDI7zqKWYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/8af8af-59a4-420c-9e3e-d482da9804d7/1/_a9iaZrjBk-wbx-ww9Y6UH5mTzg.roa
Signing time: Wed 15 Jan 2025 13:12:18 +0000
ROA not before: Wed 15 Jan 2025 13:12:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198241
IP address blocks: 91.223.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/8af8af-59a4-420c-9e3e-d482da9804d7/1/spvHpkk9OBeN1_XpxJDI7zqKWYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/8af8af-59a4-420c-9e3e-d482da9804d7/1/spvHpkk9OBeN1_XpxJDI7zqKWYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/spvHpkk9OBeN1_XpxJDI7zqKWYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6a:17:e7:40:79:81:0b:c4:50:7e:99:3b:9a:28:7c:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b29bc7a6493d38178dd7f5e9c490c8ef3a8a598b
Validity
Not Before: Jan 15 13:12:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fdaf62699ae3064fb06f1fb0c3d63a507e664f38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ba:82:ba:bb:ba:75:29:3e:d0:b4:ef:2e:48:
b5:54:3d:24:b9:0a:64:51:71:5a:95:6f:0d:6c:a9:
b3:5b:28:11:39:6d:95:78:a0:62:66:a5:d1:91:eb:
57:e7:e0:08:a8:c7:b0:7d:61:62:c6:5a:dd:f0:1f:
42:23:14:d9:98:60:96:77:96:ea:cb:d3:55:7c:65:
00:a2:f2:0b:ab:11:cd:6c:e4:9c:e5:3b:a4:7f:9a:
29:dc:97:f8:21:e2:a8:64:8f:27:f9:63:ea:be:5d:
66:16:02:e2:b2:fa:54:1c:d4:f0:43:c0:b0:6b:c0:
d8:f8:61:ce:47:b1:2d:0e:ad:80:32:88:4d:79:6e:
d4:65:08:58:72:16:11:b7:4a:f2:ba:b6:bd:e1:78:
82:a5:2a:83:b0:dd:20:d4:c2:58:74:60:2a:19:ab:
5f:12:58:fc:08:1d:5d:fc:e7:31:1b:ac:f7:5e:e0:
91:79:64:0a:18:97:8f:5b:d5:28:6a:f0:5c:4f:c7:
3b:41:8b:f3:0a:c5:27:0f:a9:5c:86:ce:e5:d6:1b:
a7:09:ee:8b:67:77:da:fa:8b:71:98:cf:66:28:ed:
12:ba:46:9b:32:8e:46:15:11:62:d5:cf:ee:a1:d9:
b4:b2:41:cd:81:17:96:d1:83:91:3b:5a:08:28:8c:
bd:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:AF:62:69:9A:E3:06:4F:B0:6F:1F:B0:C3:D6:3A:50:7E:66:4F:38
X509v3 Authority Key Identifier:
keyid:B2:9B:C7:A6:49:3D:38:17:8D:D7:F5:E9:C4:90:C8:EF:3A:8A:59:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/spvHpkk9OBeN1_XpxJDI7zqKWYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/8af8af-59a4-420c-9e3e-d482da9804d7/1/_a9iaZrjBk-wbx-ww9Y6UH5mTzg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/8af8af-59a4-420c-9e3e-d482da9804d7/1/spvHpkk9OBeN1_XpxJDI7zqKWYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.135.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:ba:ff:8b:3a:e2:f4:bb:40:ba:7b:13:68:1c:51:ce:68:15:
31:0f:55:31:ae:32:80:9f:e0:0c:c7:ef:70:e9:56:c6:e5:07:
8d:47:53:12:a7:67:ba:b8:97:b5:6f:c0:2d:e4:8b:35:a6:04:
1d:14:26:51:7b:1e:6a:19:62:0e:8f:76:06:0d:d1:8f:16:27:
52:ed:04:c2:34:d3:3d:75:7b:5a:96:d0:7a:cd:a6:95:44:fb:
9b:7f:f6:f0:d6:67:cf:52:26:20:15:50:41:9b:e1:7b:8c:e1:
d6:99:af:84:c9:33:7b:ec:f4:e9:0a:fd:75:64:f3:aa:e6:79:
2f:7c:a7:18:19:08:d4:94:ea:7c:b9:9f:c7:19:5a:d6:0b:ee:
23:dc:3f:03:36:66:34:b7:fa:63:ae:67:32:14:56:92:7b:31:
84:1f:fa:57:5a:03:fb:27:9f:7b:44:8a:1b:64:84:54:96:68:
c8:97:fb:e0:57:30:ba:0e:eb:06:fd:2a:90:25:fb:23:ac:3b:
8f:92:0d:10:f2:0c:be:75:11:33:40:51:10:85:38:9b:05:94:
d2:1e:c6:09:87:31:d6:96:6f:09:48:da:77:e2:6a:2a:a5:e1:
ab:d0:48:e5:c8:91:b5:06:c2:52:d2:45:9c:83:81:de:ba:58:
25:07:77:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 10:05:58 2025 by rpki-client