Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/RVYgvNvLSEwae2gfgrn4pSY99rQ.roa
File: RVYgvNvLSEwae2gfgrn4pSY99rQ.roa (raw, json)
Hash identifier: 7zxbVWcnsKTEz5YJl0Lu/xSHIaOqwlZhiMmkg2NjjQI=
Subject key identifier: 45:56:20:BC:DB:CB:48:4C:1A:7B:68:1F:82:B9:F8:A5:26:3D:F6:B4
Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial: 019663FA9B9FD0AA8D53D89528E04D07E788
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/RVYgvNvLSEwae2gfgrn4pSY99rQ.roa
Signing time: Wed 23 Apr 2025 18:48:10 +0000
ROA not before: Wed 23 Apr 2025 18:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51076
IP address blocks: 91.192.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 23:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:63:fa:9b:9f:d0:aa:8d:53:d8:95:28:e0:4d:07:e7:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Validity
Not Before: Apr 23 18:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=455620bcdbcb484c1a7b681f82b9f8a5263df6b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:02:ac:1d:07:b0:eb:2a:90:fd:a1:66:c3:95:
ae:80:0f:d1:91:de:14:9b:58:db:0d:c2:f7:08:91:
41:95:ee:7c:73:55:72:b6:b1:1c:ce:66:6a:ff:a4:
fa:c1:b3:8c:ff:30:73:a2:07:a3:1c:16:d8:7a:2e:
fd:6a:01:f9:7c:a0:36:21:a2:06:8a:db:42:02:e2:
67:40:f1:94:a7:9f:a0:e1:c5:0e:76:31:2e:8b:ff:
d3:87:80:f3:e4:3d:2d:74:e3:cb:a4:b7:a3:c3:97:
e6:66:f5:81:a6:b9:31:bf:8d:0f:ed:c4:7d:51:33:
2f:ca:94:0d:9e:bd:82:ee:0a:5b:5a:da:0d:1a:ab:
6e:cf:78:57:0b:39:4a:79:ec:9f:56:7d:a0:46:7b:
b1:6d:0b:e0:b8:b1:93:57:b1:01:e8:b2:c1:0f:67:
f5:c8:24:be:73:4c:4b:28:22:35:8f:53:cb:79:e6:
9a:84:92:43:f8:4f:2f:22:f6:16:15:22:31:e3:c7:
43:50:31:14:80:8d:73:12:6d:7c:5e:3d:49:de:fa:
9a:9c:16:61:f1:05:65:49:ff:b5:de:84:d8:6b:e6:
09:f0:30:16:4d:5e:a4:1a:aa:06:e0:73:a0:8b:df:
19:83:74:17:2d:86:ee:bc:7d:23:da:b3:d3:0e:54:
ab:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:56:20:BC:DB:CB:48:4C:1A:7B:68:1F:82:B9:F8:A5:26:3D:F6:B4
X509v3 Authority Key Identifier:
keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/RVYgvNvLSEwae2gfgrn4pSY99rQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.192.94.0/24
Signature Algorithm: sha256WithRSAEncryption
96:61:28:ea:5c:92:98:89:1e:08:de:10:b7:5a:d2:bb:2b:60:
da:da:dc:3e:8c:ac:4f:b9:4f:16:10:81:22:a6:7f:3c:7b:a9:
b3:1f:83:0d:b1:3e:22:3d:3e:81:8e:df:35:62:09:e7:d5:68:
0b:f0:f9:a5:22:44:71:0d:98:8d:34:30:28:a0:b1:27:5a:c7:
e0:40:a9:b1:b0:67:09:6e:ee:46:c5:9d:e5:8c:74:63:3f:db:
49:8b:fb:37:7c:6e:0b:0f:bd:04:06:13:90:1a:4b:d9:8f:4c:
1b:84:61:3c:b9:f5:e2:66:39:17:25:64:8e:52:a5:6e:62:02:
a9:98:24:2e:55:8e:20:f1:c2:ea:4c:ed:af:e7:d2:39:5e:97:
89:58:42:1c:c5:2c:31:3b:59:5b:53:7b:25:65:d5:d5:2c:ab:
6d:66:6e:bf:e3:97:25:0f:df:8e:0b:2e:f4:72:34:c6:8b:24:
d2:7b:27:dd:8f:71:48:7f:e7:ae:dd:cd:4e:b7:eb:9b:61:43:
54:29:f8:19:2b:c5:c7:36:8f:a0:1e:66:32:be:21:5c:6c:66:
e9:30:d6:a1:22:a3:e1:7a:7c:fa:36:82:4f:8a:e3:bf:b4:b3:
f5:34:fc:a2:cf:56:ed:1a:e0:65:68:0b:b8:1d:82:76:22:a2:
22:5d:6b:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 08:37:34 2025 by rpki-client