Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/l-8L9wVjtXMNnDKiGH1zdKvOuYc.roa
File: l-8L9wVjtXMNnDKiGH1zdKvOuYc.roa (raw, json)
Hash identifier: nBkBluTNUREBdIijySnHRU5IOfDXkAtF0rCyhddkb6A=
Subject key identifier: 97:EF:0B:F7:05:63:B5:73:0D:9C:32:A2:18:7D:73:74:AB:CE:B9:87
Certificate issuer: /CN=99a2c2ecf58c44b35a0da2957ff4dca2e60b686a
Certificate serial: 0194266B711B50EFECCC12845238DBB48CE9
Authority key identifier: 99:A2:C2:EC:F5:8C:44:B3:5A:0D:A2:95:7F:F4:DC:A2:E6:0B:68:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maLC7PWMRLNaDaKVf_TcouYLaGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/l-8L9wVjtXMNnDKiGH1zdKvOuYc.roa
Signing time: Thu 02 Jan 2025 09:49:23 +0000
ROA not before: Thu 02 Jan 2025 09:49:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8315
IP address blocks: 91.230.170.0/23 maxlen: 24
91.230.176.0/22 maxlen: 24
91.230.178.0/24 maxlen: 24
185.194.84.0/23 maxlen: 24
194.213.114.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/maLC7PWMRLNaDaKVf_TcouYLaGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:71:1b:50:ef:ec:cc:12:84:52:38:db:b4:8c:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a2c2ecf58c44b35a0da2957ff4dca2e60b686a
Validity
Not Before: Jan 2 09:49:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=97ef0bf70563b5730d9c32a2187d7374abceb987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a6:3b:d7:f2:91:3c:38:b5:c0:a2:fe:0b:27:
46:32:8a:df:f0:fa:5b:88:46:05:3a:48:e2:f3:6c:
31:58:91:e2:fc:35:26:4b:79:d9:ec:18:81:9c:e2:
fd:c3:95:e5:9e:ec:bb:6f:8a:fd:48:a8:b0:0d:6b:
5b:0b:4c:4d:00:8e:5b:9b:80:22:c5:af:3c:44:c6:
77:28:d0:3d:98:11:1a:f8:3d:ff:f6:08:91:5c:c6:
c3:c8:be:7a:74:3e:fb:bb:17:78:df:6d:01:2a:25:
50:05:4a:fc:b1:7a:0c:f1:c1:48:4a:d4:3f:12:ad:
9e:d9:bf:f8:0b:27:6f:47:35:9c:d2:37:da:81:72:
7f:fa:f3:04:cd:22:5d:bc:55:e8:ad:f8:12:a0:c4:
3a:3b:33:b3:65:39:e3:24:29:b6:08:d1:76:25:d6:
54:48:5f:1f:6b:91:a6:93:bd:aa:f7:3f:3b:0f:a0:
2b:f6:df:5c:bb:f0:8d:10:04:88:19:48:d2:f9:89:
d6:f5:6a:e7:c3:43:91:b2:e7:2f:93:72:ce:20:84:
bd:0f:e9:2b:49:b4:22:e1:9b:c9:c2:b2:c7:f0:77:
94:9b:24:3a:72:e3:a9:41:66:5e:25:b5:45:ee:7f:
aa:29:e0:76:31:c6:d3:ca:bb:39:dc:2b:21:5e:0b:
a7:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:EF:0B:F7:05:63:B5:73:0D:9C:32:A2:18:7D:73:74:AB:CE:B9:87
X509v3 Authority Key Identifier:
keyid:99:A2:C2:EC:F5:8C:44:B3:5A:0D:A2:95:7F:F4:DC:A2:E6:0B:68:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maLC7PWMRLNaDaKVf_TcouYLaGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/l-8L9wVjtXMNnDKiGH1zdKvOuYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.230.170.0/23
91.230.176.0/22
185.194.84.0/23
194.213.114.0/23
Signature Algorithm: sha256WithRSAEncryption
60:91:0a:bc:0e:66:e3:5a:37:66:4c:e7:89:9a:bf:a5:8f:c4:
4b:2d:b7:bc:af:4d:ba:cd:9d:09:cb:0c:fc:35:c3:f1:66:9c:
55:d0:09:84:e0:1a:ca:8d:00:89:9c:e8:c2:fe:94:c8:25:8d:
98:d7:ce:80:c7:28:68:65:d7:6e:63:4e:46:62:96:3e:e6:d5:
af:6c:a2:50:56:37:9a:e1:64:a8:bd:39:9f:a7:69:1e:ac:59:
c6:ab:d7:df:b6:06:b7:00:ae:56:6d:dd:14:3c:d3:67:23:96:
0f:4a:2c:92:63:14:fa:08:56:41:c2:2e:34:10:c1:2d:ba:f0:
84:72:bd:0a:31:99:36:ee:b1:f7:d1:31:f0:e3:e3:6a:68:1b:
af:86:77:52:1a:16:0c:7f:94:71:07:56:0f:69:ae:ca:cb:42:
a6:99:0a:a5:b8:72:7b:16:ba:77:c9:c8:85:42:a6:6c:df:25:
db:38:12:50:dd:5a:24:97:0a:dc:20:d2:9e:f0:d6:63:15:47:
64:85:bb:59:7b:e5:2a:bc:5f:4a:a1:67:5b:29:09:80:80:da:
b8:16:2b:ed:9c:c0:37:ec:38:b9:fa:02:19:ed:bb:ac:19:62:
b2:3b:ae:98:ee:78:4e:7e:b9:6c:e4:c9:06:16:45:ee:db:f6:
4c:73:33:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 22:14:14 2025 by rpki-client