Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/zg4MjXATnC0iLIUH-MKaHL7sg6w.roa
File: zg4MjXATnC0iLIUH-MKaHL7sg6w.roa (raw, json)
Hash identifier: UiidXY2RTo7YfVgqJA3FQpeWQuCf9FUQ5InMtkG9nzo=
Subject key identifier: CE:0E:0C:8D:70:13:9C:2D:22:2C:85:07:F8:C2:9A:1C:BE:EC:83:AC
Certificate issuer: /CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Certificate serial: 0197871DC0155C2E6DDD1F8CB3B086B2EFF9
Authority key identifier: 27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/zg4MjXATnC0iLIUH-MKaHL7sg6w.roa
Signing time: Thu 19 Jun 2025 07:36:03 +0000
ROA not before: Thu 19 Jun 2025 07:36:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208972
IP address blocks: 91.102.160.0/23 maxlen: 23
91.102.164.0/24 maxlen: 24
91.102.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 02:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:87:1d:c0:15:5c:2e:6d:dd:1f:8c:b3:b0:86:b2:ef:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Validity
Not Before: Jun 19 07:36:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ce0e0c8d70139c2d222c8507f8c29a1cbeec83ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:79:58:bd:12:67:33:97:fd:de:6f:93:24:75:
d7:b6:31:cb:ad:30:21:08:71:50:a7:95:22:ec:5d:
1d:58:c9:74:fe:f0:33:31:a0:00:82:b3:46:dc:de:
d8:ac:02:d8:39:a3:be:e2:d9:9d:4d:05:cd:27:31:
40:72:f1:03:49:f3:98:85:48:34:8f:8a:4c:21:30:
d8:14:a9:90:e7:10:1e:ed:01:e6:d0:97:ae:68:71:
74:3d:c7:06:78:9f:48:1f:a2:e1:07:1c:f8:42:9f:
0e:4e:db:9e:04:64:47:5e:5a:21:4b:92:c8:74:b8:
ce:ac:c6:11:2c:89:cb:fb:0f:ed:05:63:04:46:c1:
16:40:a7:34:73:8f:c5:9f:12:e0:42:1e:40:45:df:
1d:e4:1d:a7:f7:c4:5a:af:ff:67:69:46:12:12:d4:
b9:31:dc:12:97:cc:f0:0f:65:53:2f:25:0d:5e:e0:
f8:6a:be:f3:7f:f0:74:a7:af:d3:3c:8f:81:48:da:
36:61:1a:3c:d8:d6:da:9e:21:c6:24:71:70:73:dc:
ff:47:56:7c:da:d6:36:34:a4:95:d7:4b:fd:1d:8d:
41:69:36:af:70:37:7c:fa:e2:0f:4e:93:2a:19:24:
d8:ab:ac:35:fc:0a:a9:04:15:a1:25:e0:91:8c:57:
72:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:0E:0C:8D:70:13:9C:2D:22:2C:85:07:F8:C2:9A:1C:BE:EC:83:AC
X509v3 Authority Key Identifier:
keyid:27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/zg4MjXATnC0iLIUH-MKaHL7sg6w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.102.160.0/23
91.102.164.0/24
91.102.167.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:4f:7a:43:4a:cf:b5:51:8f:64:75:69:8e:9c:3d:6f:0f:28:
f4:42:5a:d0:b5:b6:bc:6f:98:9a:3d:62:6e:59:62:e8:c3:48:
f6:a6:5a:87:b7:81:57:05:98:84:9b:db:98:20:0a:51:4b:49:
0c:19:78:5b:42:9d:16:5a:88:07:13:eb:de:98:67:2f:2b:4a:
9a:d1:9f:62:4e:f4:58:1e:68:c0:ae:d2:b5:ae:7e:d6:70:a6:
e3:b0:a4:e6:e6:77:aa:e6:fa:da:52:05:85:49:69:49:fb:74:
b7:c6:bd:5a:55:76:d9:30:90:5a:da:b2:5e:8f:66:38:ef:42:
a9:62:c1:45:81:3c:a8:a2:7b:ff:3f:4f:0f:98:ed:1d:b0:3c:
3b:73:42:17:e7:f7:8b:90:f8:07:45:ed:8e:fc:16:83:3c:17:
13:4f:d9:23:81:b1:d3:87:9a:b5:d4:ca:e3:43:c6:28:76:01:
3d:0e:36:0c:d2:15:e3:de:b6:86:47:56:fc:2d:2a:d1:42:d7:
df:ea:b4:bd:fe:5d:1a:6f:d6:45:90:5b:f1:20:45:89:ae:9b:
5e:15:e4:a2:e7:cb:74:a3:ee:4f:f1:e1:c4:e9:f8:ec:fe:48:
65:e6:3e:0a:f6:49:9f:a7:85:31:aa:ec:4b:0b:83:73:60:ba:
58:6b:5f:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:12:11 2025 by rpki-client