Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/4f76b4-7d56-47a0-ac5b-653f239fe9a0/1/4QAgbyzrWTtNFmDHZVfy8v4-TWM.roa
File: 4QAgbyzrWTtNFmDHZVfy8v4-TWM.roa (raw, json)
Hash identifier: l1Vu320yqEJQLez1ywKptqLv6GIVlLha6DdA7Wb0GGo=
Subject key identifier: E1:00:20:6F:2C:EB:59:3B:4D:16:60:C7:65:57:F2:F2:FE:3E:4D:63
Certificate issuer: /CN=5a5e66b2759e50bb69bb0a4409eeb3ba48c46c56
Certificate serial: 0196AB8C2423822B6C768A9D116C459D890E
Authority key identifier: 5A:5E:66:B2:75:9E:50:BB:69:BB:0A:44:09:EE:B3:BA:48:C4:6C:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wl5msnWeULtpuwpECe6zukjEbFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/4f76b4-7d56-47a0-ac5b-653f239fe9a0/1/4QAgbyzrWTtNFmDHZVfy8v4-TWM.roa
Signing time: Wed 07 May 2025 16:20:10 +0000
ROA not before: Wed 07 May 2025 16:20:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202391
IP address blocks: 91.237.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/4f76b4-7d56-47a0-ac5b-653f239fe9a0/1/Wl5msnWeULtpuwpECe6zukjEbFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/4f76b4-7d56-47a0-ac5b-653f239fe9a0/1/Wl5msnWeULtpuwpECe6zukjEbFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wl5msnWeULtpuwpECe6zukjEbFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ab:8c:24:23:82:2b:6c:76:8a:9d:11:6c:45:9d:89:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a5e66b2759e50bb69bb0a4409eeb3ba48c46c56
Validity
Not Before: May 7 16:20:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e100206f2ceb593b4d1660c76557f2f2fe3e4d63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:bc:be:8f:86:63:e1:90:34:50:bb:53:99:ef:
67:f5:68:c4:ae:07:75:04:35:6a:74:ad:4f:26:3e:
3e:4b:41:bf:20:bc:a0:d8:a5:98:07:ed:ec:19:43:
49:15:5a:89:f4:98:f6:ea:44:03:ba:e5:8d:b5:91:
05:c1:9e:73:d1:72:86:a0:cc:81:d0:a5:4b:d8:d5:
db:5d:6b:3c:1c:a1:17:78:e7:8b:4b:ae:17:79:db:
d0:3c:f9:fd:07:9d:06:19:6b:02:b7:67:bf:cf:52:
1a:e0:96:22:1b:d7:05:12:8b:32:56:29:27:ca:c4:
08:2f:08:0a:de:2e:92:08:9e:17:da:53:8f:46:02:
b3:0e:1d:cc:c1:dc:ef:9a:54:e9:c9:d1:5c:d7:81:
ed:82:e8:b1:28:7f:dc:db:93:8a:ff:07:7e:dd:6f:
ed:de:1f:62:d4:24:8f:dd:07:40:7b:ad:86:9b:b3:
23:8c:94:a3:2b:7b:f0:fd:be:69:da:10:90:7f:34:
22:e6:7a:2c:74:ce:25:ab:87:a1:5e:fd:5b:0a:4d:
60:bc:0b:30:f7:7b:ee:7a:6e:44:2a:b8:97:d1:41:
e1:d7:e4:71:87:6c:93:9e:25:79:47:77:03:ab:ec:
b0:58:fc:cf:56:13:20:09:f6:f0:46:2a:18:a3:79:
e0:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:00:20:6F:2C:EB:59:3B:4D:16:60:C7:65:57:F2:F2:FE:3E:4D:63
X509v3 Authority Key Identifier:
keyid:5A:5E:66:B2:75:9E:50:BB:69:BB:0A:44:09:EE:B3:BA:48:C4:6C:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wl5msnWeULtpuwpECe6zukjEbFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/4f76b4-7d56-47a0-ac5b-653f239fe9a0/1/4QAgbyzrWTtNFmDHZVfy8v4-TWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/4f76b4-7d56-47a0-ac5b-653f239fe9a0/1/Wl5msnWeULtpuwpECe6zukjEbFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.237.254.0/24
Signature Algorithm: sha256WithRSAEncryption
55:a6:93:5e:24:4a:0e:eb:25:3c:ca:7f:88:b9:7d:61:e3:9a:
b3:c3:0a:51:9d:39:e9:be:ee:be:45:2b:18:6f:04:c9:58:6f:
dc:2b:c8:3c:ca:5b:d3:67:82:dd:53:bf:92:58:a4:71:21:d8:
92:fa:03:c9:b2:8c:cc:5c:4c:d6:72:38:1f:5e:1c:4e:45:6c:
cd:4a:31:2b:30:fe:56:9a:f9:8c:9a:f8:e7:ff:73:95:1c:0f:
73:65:e7:ef:ff:ed:20:77:40:db:6f:83:42:1e:d5:b1:36:50:
5c:ba:60:1b:9a:9e:02:33:0c:f8:4d:7c:6a:a4:c3:e3:4d:c5:
70:c0:a3:f4:a2:ba:16:da:a5:a3:1e:22:ae:97:02:52:17:1d:
4f:87:50:7f:37:76:c8:b0:03:4b:86:14:f8:91:c2:26:eb:aa:
fc:c9:73:48:3a:92:41:ef:53:83:ff:91:31:9c:ad:c3:a0:58:
bf:31:3e:92:61:cf:2b:34:3f:63:9a:c2:32:79:61:b3:5d:5e:
7d:d3:af:76:09:6a:43:9b:1e:fd:d3:20:85:c2:d4:a9:a0:b1:
d2:88:6c:8d:2a:b0:bf:00:3d:a6:3a:d8:ab:0e:9b:9d:00:66:
3e:bb:d3:58:6b:7b:71:f6:87:e4:7c:9d:d1:39:3c:8d:3b:5a:
a9:4c:2f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 15:40:39 2025 by rpki-client