Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/SU7ZLAjAJKIawhecxRDYISHoM5I.roa
File: SU7ZLAjAJKIawhecxRDYISHoM5I.roa (raw, json)
Hash identifier: AzADrs/HQRSdaq4djQaamxj/C3LgFFh+XBozivMTMAM=
Subject key identifier: 49:4E:D9:2C:08:C0:24:A2:1A:C2:17:9C:C5:10:D8:21:21:E8:33:92
Certificate issuer: /CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Certificate serial: 01941FFA442DDA1D70E458623342E794E0CD
Authority key identifier: C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/SU7ZLAjAJKIawhecxRDYISHoM5I.roa
Signing time: Wed 01 Jan 2025 03:48:02 +0000
ROA not before: Wed 01 Jan 2025 03:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5511
IP address blocks: 91.108.88.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 00:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:44:2d:da:1d:70:e4:58:62:33:42:e7:94:e0:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Validity
Not Before: Jan 1 03:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=494ed92c08c024a21ac2179cc510d82121e83392
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:c3:06:da:38:ee:56:8c:93:e0:33:60:e0:de:
51:9c:d6:b8:2b:c0:58:37:4a:4f:8c:e0:16:36:0e:
bf:43:50:c9:f3:2f:60:06:d3:52:8a:ba:57:f1:9f:
c8:11:d5:e4:e7:6c:98:29:7b:89:9d:f0:6d:5c:b9:
9a:34:ad:4e:b9:88:97:39:5b:fa:ed:b5:2b:b3:da:
ba:5e:c5:d6:0a:db:be:f1:20:50:80:31:ec:8d:5c:
81:91:ac:68:5b:ea:45:06:1b:bd:1e:9c:cb:75:e0:
03:98:1e:21:0c:74:10:78:c6:71:d0:e3:e9:63:fd:
13:e4:a9:4b:b7:28:b4:a0:e9:38:ef:39:93:cc:ce:
b3:16:db:4f:cc:10:4b:0d:f0:61:0f:32:e5:5e:5c:
79:e6:45:a0:ee:cb:6f:9d:3e:5d:58:fb:60:63:fd:
ad:5a:01:83:00:76:b6:c2:bc:e1:7e:f7:8b:cc:62:
39:93:21:49:fd:09:41:38:71:3e:41:bb:91:10:4d:
86:76:bd:99:32:68:cd:ab:4c:0b:bb:44:e4:07:be:
b1:8d:5c:76:93:55:7b:fc:c2:ae:6c:8d:3d:f7:15:
be:e9:b5:fa:4a:8a:a5:b3:0e:35:94:e3:b6:d8:ac:
f7:ac:fa:94:f5:70:7e:f1:c8:67:a2:8f:d2:6c:9b:
4c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:4E:D9:2C:08:C0:24:A2:1A:C2:17:9C:C5:10:D8:21:21:E8:33:92
X509v3 Authority Key Identifier:
keyid:C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/SU7ZLAjAJKIawhecxRDYISHoM5I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.88.0/21
Signature Algorithm: sha256WithRSAEncryption
57:bd:c0:2a:c6:96:01:29:67:b5:ca:d9:0a:7a:91:f8:a0:b8:
ec:53:0c:42:b9:e9:cc:97:e0:c5:f8:1e:96:c9:62:cf:fc:48:
70:00:2c:55:b8:37:7a:bd:f2:f1:53:41:d9:6a:80:7d:25:b5:
9d:cb:b2:50:6e:44:ed:12:4e:58:8c:c8:71:19:9c:5e:96:a5:
c4:66:91:b8:3d:8f:34:29:37:45:9a:19:6e:27:31:52:0a:20:
ae:de:70:55:fa:db:85:cc:17:37:d1:1d:39:12:8b:e2:3e:18:
22:15:61:2e:89:43:7e:42:60:29:92:ff:51:56:7f:2d:b0:10:
7d:7d:d8:f7:85:c8:66:b0:82:80:48:b1:0c:41:25:a5:11:b8:
67:73:b7:6f:ea:9e:56:c8:45:58:2a:83:6c:b3:7f:5f:32:71:
b1:1d:e0:68:29:f2:e6:b2:c1:da:80:cf:a2:87:28:83:47:fa:
f6:a5:68:f4:69:b3:15:7a:83:23:d5:9b:0c:fc:5f:30:aa:7a:
55:41:53:2f:a3:06:d1:36:b2:18:f7:54:d8:c2:4c:5a:3b:55:
90:5a:ee:95:63:7e:e8:40:f7:58:81:9f:e2:22:77:bb:86:c1:
e8:2f:77:c4:8a:b7:d5:3b:7e:97:08:e1:4f:f8:86:5a:d3:85:
f2:90:b4:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:15:46 2025 by rpki-client