Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/71897e-5f6f-449d-b82c-a25ef4420a2a/1/9Vm6E83e5XfSlTSJaJsgPOsbxg8.roa
File: 9Vm6E83e5XfSlTSJaJsgPOsbxg8.roa (raw, json)
Hash identifier: VGm9skjMPVUUg6edMcPusOOmF7cXf1kchI2oKrFFOoI=
Subject key identifier: F5:59:BA:13:CD:DE:E5:77:D2:95:34:89:68:9B:20:3C:EB:1B:C6:0F
Certificate issuer: /CN=b7c558c42c43ad59406ea446c9eefed42a491eec
Certificate serial: 019424B393ED6227DA5A1DD3D6D272E5FD38
Authority key identifier: B7:C5:58:C4:2C:43:AD:59:40:6E:A4:46:C9:EE:FE:D4:2A:49:1E:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t8VYxCxDrVlAbqRGye7-1CpJHuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/71897e-5f6f-449d-b82c-a25ef4420a2a/1/9Vm6E83e5XfSlTSJaJsgPOsbxg8.roa
Signing time: Thu 02 Jan 2025 01:48:56 +0000
ROA not before: Thu 02 Jan 2025 01:48:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43464
IP address blocks: 91.195.4.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/71897e-5f6f-449d-b82c-a25ef4420a2a/1/t8VYxCxDrVlAbqRGye7-1CpJHuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/71897e-5f6f-449d-b82c-a25ef4420a2a/1/t8VYxCxDrVlAbqRGye7-1CpJHuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/t8VYxCxDrVlAbqRGye7-1CpJHuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 18:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:93:ed:62:27:da:5a:1d:d3:d6:d2:72:e5:fd:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7c558c42c43ad59406ea446c9eefed42a491eec
Validity
Not Before: Jan 2 01:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f559ba13cddee577d2953489689b203ceb1bc60f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:70:bb:0b:4d:28:9d:91:20:c8:22:3b:88:de:
86:ce:7e:35:64:18:4c:8e:76:51:4b:8c:f0:24:45:
1c:71:78:0b:10:20:4a:e2:9a:bc:48:e5:75:b9:15:
2d:9e:a5:6c:08:d6:14:58:a8:70:c7:a4:b5:a2:ea:
03:2e:c3:b1:9f:19:66:a4:a4:e5:22:77:f7:3b:67:
87:de:08:22:75:29:7a:bd:45:b4:0b:06:b0:8e:a3:
00:89:a5:56:79:ea:2c:d5:45:70:dc:82:d2:f2:92:
de:e7:b5:5c:16:57:dd:89:84:2f:24:42:8d:5e:48:
3e:19:3e:f9:1a:b0:1b:3c:17:af:b9:f7:46:af:bb:
9b:8b:de:b9:ec:fb:79:d7:04:a2:6b:c7:d6:ad:e0:
82:9c:e8:9a:04:17:9a:75:d6:32:c3:30:e9:16:88:
61:12:40:29:24:2d:f1:e5:29:51:82:88:78:f0:43:
38:19:92:18:e4:de:01:73:f8:95:f3:da:d6:8e:d1:
9e:fa:11:ae:b1:66:0a:f3:0b:cb:43:5b:08:7a:b0:
39:b7:57:d6:79:0b:8c:54:ff:3b:7c:6d:c5:62:28:
0a:ce:df:c0:31:8c:08:a4:14:06:9b:a8:3f:13:c5:
d0:eb:2d:72:cc:84:78:1d:2f:78:06:e3:27:ba:62:
5f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:59:BA:13:CD:DE:E5:77:D2:95:34:89:68:9B:20:3C:EB:1B:C6:0F
X509v3 Authority Key Identifier:
keyid:B7:C5:58:C4:2C:43:AD:59:40:6E:A4:46:C9:EE:FE:D4:2A:49:1E:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t8VYxCxDrVlAbqRGye7-1CpJHuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/71897e-5f6f-449d-b82c-a25ef4420a2a/1/9Vm6E83e5XfSlTSJaJsgPOsbxg8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/71897e-5f6f-449d-b82c-a25ef4420a2a/1/t8VYxCxDrVlAbqRGye7-1CpJHuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.195.4.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:9a:1c:8b:56:d6:22:3b:72:02:1d:a5:d1:d1:a5:50:71:65:
f7:ca:b1:5b:d9:42:97:ea:bd:61:82:62:2c:54:f4:a2:cc:8d:
14:1b:fc:1b:45:e9:c5:44:0b:83:5c:93:39:e1:b2:f5:c1:09:
46:13:3b:ec:81:f8:c6:b0:5b:97:e0:4b:f1:c8:fa:26:18:ee:
9c:63:dc:29:ee:25:c8:16:be:bd:ec:b9:74:59:25:ee:47:74:
97:ce:7f:93:22:33:ff:d2:6b:91:66:75:19:ef:4b:64:cd:6d:
a5:50:34:e0:b5:96:67:da:53:27:1d:ed:54:30:c9:93:2f:50:
f6:58:97:8f:8c:06:51:54:ad:ce:6c:7b:23:51:67:46:76:87:
0a:a3:55:84:10:f1:98:60:8f:95:c7:bb:f5:b9:3e:f1:8c:fd:
41:03:c9:dd:99:04:aa:89:e9:b4:9f:41:05:43:aa:52:53:50:
3e:62:53:38:11:f2:e4:36:bd:b0:4c:bd:8d:2d:9d:f8:84:06:
2c:0b:6a:7c:6b:6a:f2:7c:e5:44:05:90:9f:c0:6f:50:2e:d0:
7f:b4:45:c5:fe:4b:13:00:16:3a:51:cf:0e:f9:87:75:1c:54:
a0:59:dd:24:f5:a5:ce:a1:18:5c:ee:fb:7f:22:cd:e3:68:26:
82:01:80:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:12:49 2025 by rpki-client