Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/fc87fa-cbfa-4f3c-88d3-ba922bb1ebb4/1/m3ntsGfgdnDGCMt-rflzxFG_JnA.roa
File: m3ntsGfgdnDGCMt-rflzxFG_JnA.roa (raw, json)
Hash identifier: q9gBjMOYNP/zGmo2wuYydWBWqzVkvYiKaSBdRO8K4Uw=
Subject key identifier: 9B:79:ED:B0:67:E0:76:70:C6:08:CB:7E:AD:F9:73:C4:51:BF:26:70
Certificate issuer: /CN=8ef66691ad3a41652f5bd8596230b3ac743d2a2c
Certificate serial: 0194244538CAE0AED6D4C91B6DC2555FF08E
Authority key identifier: 8E:F6:66:91:AD:3A:41:65:2F:5B:D8:59:62:30:B3:AC:74:3D:2A:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jvZmka06QWUvW9hZYjCzrHQ9Kiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/fc87fa-cbfa-4f3c-88d3-ba922bb1ebb4/1/m3ntsGfgdnDGCMt-rflzxFG_JnA.roa
Signing time: Wed 01 Jan 2025 23:48:23 +0000
ROA not before: Wed 01 Jan 2025 23:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48031
IP address blocks: 91.210.28.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/fc87fa-cbfa-4f3c-88d3-ba922bb1ebb4/1/jvZmka06QWUvW9hZYjCzrHQ9Kiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/fc87fa-cbfa-4f3c-88d3-ba922bb1ebb4/1/jvZmka06QWUvW9hZYjCzrHQ9Kiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jvZmka06QWUvW9hZYjCzrHQ9Kiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:38:ca:e0:ae:d6:d4:c9:1b:6d:c2:55:5f:f0:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ef66691ad3a41652f5bd8596230b3ac743d2a2c
Validity
Not Before: Jan 1 23:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9b79edb067e07670c608cb7eadf973c451bf2670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ee:18:ff:f4:bf:07:35:c8:54:f9:02:fe:6d:
58:aa:04:f7:19:c6:79:db:ca:b7:84:0c:e8:00:b7:
61:49:2c:a8:cf:f2:0f:b1:07:76:de:3a:49:0f:2c:
56:6b:e7:fd:c1:31:53:38:20:12:7c:08:c8:6c:53:
03:a3:94:97:c7:63:85:ee:bd:99:93:c1:e5:36:85:
20:b8:50:ff:6c:0a:9d:5f:3f:5a:30:d7:09:bf:62:
f4:b3:81:4e:73:8b:19:b0:34:db:19:91:4d:a8:bc:
55:2c:61:c6:cb:1a:fe:02:23:a5:49:58:98:9b:f2:
9c:7e:09:2d:e4:74:a3:48:ab:8e:ed:4e:bb:20:6b:
8b:03:c4:5e:a6:3a:7d:b4:ea:43:d5:c3:fd:8b:c6:
fd:59:41:d2:b9:08:15:44:77:51:66:06:ac:da:77:
00:eb:e0:72:e3:b0:39:b7:7f:1a:83:a8:09:67:f6:
4d:aa:56:d5:83:83:9b:bc:04:5e:63:92:3f:8f:c4:
d7:d7:01:e9:30:e7:77:38:14:a7:cb:e6:3c:b9:8d:
fb:34:6d:e2:81:91:de:09:b1:84:53:10:4a:0a:13:
e5:c7:43:80:56:a8:36:8f:8d:ee:5d:5e:c7:35:46:
3e:1c:1e:b7:7d:b6:03:4a:c4:b2:43:5e:c8:23:26:
ac:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:79:ED:B0:67:E0:76:70:C6:08:CB:7E:AD:F9:73:C4:51:BF:26:70
X509v3 Authority Key Identifier:
keyid:8E:F6:66:91:AD:3A:41:65:2F:5B:D8:59:62:30:B3:AC:74:3D:2A:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvZmka06QWUvW9hZYjCzrHQ9Kiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/fc87fa-cbfa-4f3c-88d3-ba922bb1ebb4/1/m3ntsGfgdnDGCMt-rflzxFG_JnA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/fc87fa-cbfa-4f3c-88d3-ba922bb1ebb4/1/jvZmka06QWUvW9hZYjCzrHQ9Kiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.210.28.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:2b:80:17:30:37:bd:8d:10:46:06:a4:2d:c8:19:a8:7b:61:
1c:a1:aa:4c:06:31:bc:6e:7c:80:b5:1d:d8:96:aa:a6:15:02:
2f:ad:d6:d0:73:7a:57:fb:24:50:9f:9c:f9:48:f5:60:9c:1e:
77:66:d1:ba:b5:bb:24:4f:46:22:40:53:4a:2d:74:07:28:f4:
20:38:a1:77:6a:9e:9f:1d:05:56:9a:3d:59:17:ee:a2:46:09:
87:07:ee:c2:99:f2:49:fd:54:9a:2e:7b:3f:07:3e:d3:09:75:
0c:2e:5d:31:62:92:61:23:74:72:c8:46:ac:33:6d:72:6d:f4:
e5:07:7a:d1:c2:52:a4:e0:05:dc:b5:5f:54:6f:c2:65:88:e3:
d2:9d:8a:11:e4:2d:ad:12:d7:58:62:36:bc:28:47:de:6b:c0:
ed:a0:5f:89:ce:c5:4c:b7:ae:26:9b:92:6d:5d:b6:16:13:9e:
2d:20:1a:9e:11:e5:96:f7:7a:1e:bc:d6:9b:ab:d0:c0:56:3a:
c7:26:39:53:66:80:22:20:65:eb:00:79:b0:cf:dd:b3:66:8f:
26:d0:20:b6:c8:e7:53:c0:4a:77:0d:31:15:93:51:74:ec:c4:
8a:1d:c0:88:83:b4:73:5d:b9:f1:29:8b:e6:66:98:6c:f6:4e:
32:ca:89:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:37:51 2025 by rpki-client