Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/3jGH9AQ5aWB2kYRZEpoWn64dzqI.roa
File: 3jGH9AQ5aWB2kYRZEpoWn64dzqI.roa (raw, json)
Hash identifier: mK77SHrTSUU+2PPMNJ5ZxTHh7M0JMXsgDTv7jrMi+AM=
Subject key identifier: DE:31:87:F4:04:39:69:60:76:91:84:59:12:9A:16:9F:AE:1D:CE:A2
Certificate issuer: /CN=a6ac6d069d8fb732f4fe92b4e13cd7dc4d393a42
Certificate serial: 019685DB662FD512FA53471FB2F4ACF5A9A2
Authority key identifier: A6:AC:6D:06:9D:8F:B7:32:F4:FE:92:B4:E1:3C:D7:DC:4D:39:3A:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqxtBp2PtzL0_pK04TzX3E05OkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/3jGH9AQ5aWB2kYRZEpoWn64dzqI.roa
Signing time: Wed 30 Apr 2025 08:41:10 +0000
ROA not before: Wed 30 Apr 2025 08:41:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213551
IP address blocks: 91.239.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pqxtBp2PtzL0_pK04TzX3E05OkI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 20:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:db:66:2f:d5:12:fa:53:47:1f:b2:f4:ac:f5:a9:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6ac6d069d8fb732f4fe92b4e13cd7dc4d393a42
Validity
Not Before: Apr 30 08:41:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=de3187f40439696076918459129a169fae1dcea2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:fd:77:28:2b:38:16:14:b2:fa:d2:06:85:e5:
d7:b5:89:43:9a:22:b8:c3:93:90:07:95:44:5f:2c:
db:db:bc:8a:fb:e7:82:58:74:e6:b2:c8:06:4c:f2:
0b:ae:9b:84:d7:73:4a:22:50:f6:42:fe:8e:d8:ae:
55:08:56:69:2a:0d:f0:20:3e:7f:ca:56:ab:25:97:
5b:9d:59:89:ee:5b:dc:0b:a6:d1:3b:ca:5b:51:52:
fc:f8:12:95:6b:61:d6:86:52:c4:77:66:d2:83:14:
ed:63:dc:fa:8c:b9:7f:85:d2:74:3c:4d:58:f6:2f:
09:6c:6b:05:c5:a9:70:6c:bf:9f:f9:16:bd:4f:4d:
fb:a4:b1:b8:8d:d6:f2:ef:a6:06:fc:30:3c:95:d4:
bf:4c:86:2b:c5:2b:fa:35:ac:33:a1:2d:cd:c8:97:
bf:0b:18:e0:ee:9a:f3:81:32:a5:d3:33:8b:53:a4:
e4:ce:4e:7c:e8:98:03:d5:e2:84:f3:c1:d8:cb:f4:
49:8b:dd:cb:c5:08:de:da:14:0b:f2:f5:de:ec:bb:
90:0b:c6:48:5a:66:13:b0:5a:11:24:58:41:21:6a:
6f:69:d5:d4:07:9b:86:9b:eb:b8:bb:60:0d:18:47:
4f:9e:7e:1b:4a:c3:cb:76:f5:07:37:79:c7:eb:68:
18:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:31:87:F4:04:39:69:60:76:91:84:59:12:9A:16:9F:AE:1D:CE:A2
X509v3 Authority Key Identifier:
keyid:A6:AC:6D:06:9D:8F:B7:32:F4:FE:92:B4:E1:3C:D7:DC:4D:39:3A:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqxtBp2PtzL0_pK04TzX3E05OkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/3jGH9AQ5aWB2kYRZEpoWn64dzqI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.210.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:2d:0b:a4:24:b3:4a:c1:d2:8f:93:39:a1:92:3e:f6:a5:b7:
d2:5e:9d:b0:78:7a:cc:5a:e6:d6:8c:ee:fc:50:d9:1e:5b:7e:
20:11:10:25:70:67:b9:cd:9d:e7:95:01:8a:c7:95:90:74:cd:
0c:9f:e4:de:c0:01:1c:2d:c3:30:18:7b:59:a2:10:4d:82:39:
6e:05:b4:94:5f:56:2f:81:89:0a:3d:42:6c:fc:63:cf:01:fa:
01:1d:5f:a3:49:98:50:d7:f0:f6:1c:83:e1:3d:60:81:81:d1:
84:46:d9:13:bc:88:3b:28:53:f4:fe:9b:ce:02:80:d5:f3:da:
19:72:45:cc:83:20:39:a6:9c:c6:c0:a0:a2:1c:25:63:fb:b9:
7f:82:83:dd:ff:c6:34:f7:a1:3d:12:3b:a7:65:3d:a8:df:bf:
75:ba:43:07:8d:2c:a7:cd:cd:53:c5:c4:af:55:a1:86:b0:35:
c6:2b:e6:f6:91:a1:b3:13:09:13:c4:cd:3f:40:ad:47:a7:88:
2f:7c:32:7d:a4:69:57:80:de:c4:81:83:29:38:03:8f:82:7a:
2d:ea:d4:9f:63:3b:72:bc:50:74:b0:c9:2f:d1:5b:f9:4f:59:
6c:b6:91:76:f6:99:0a:1e:8f:a8:a3:79:ea:4d:b8:a2:6c:f3:
2d:fe:91:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 03:06:34 2025 by rpki-client