Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/62FFRbLMZiAc_YdwN0J8zGIbHPQ.roa
File: 62FFRbLMZiAc_YdwN0J8zGIbHPQ.roa (raw, json)
Hash identifier: CNhEA8oMJlI+Kr9kCi3nuWGoLgttS1CSckkHhL7fMBY=
Subject key identifier: EB:61:45:45:B2:CC:66:20:1C:FD:87:70:37:42:7C:CC:62:1B:1C:F4
Certificate issuer: /CN=1e5b334965788794d6f147a2f004d13be3257dc4
Certificate serial: 0196A09B8B22A30561436EE4BCD733A15E09
Authority key identifier: 1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/62FFRbLMZiAc_YdwN0J8zGIbHPQ.roa
Signing time: Mon 05 May 2025 13:21:10 +0000
ROA not before: Mon 05 May 2025 13:21:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212384
IP address blocks: 91.193.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 19:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:9b:8b:22:a3:05:61:43:6e:e4:bc:d7:33:a1:5e:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e5b334965788794d6f147a2f004d13be3257dc4
Validity
Not Before: May 5 13:21:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eb614545b2cc66201cfd877037427ccc621b1cf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:0c:94:ae:3c:f0:2e:47:f6:f0:ea:20:5b:4b:
ad:ff:30:a0:12:1b:39:57:af:41:3f:91:49:4a:9b:
83:77:76:c4:fb:1c:ff:7e:02:c8:b2:20:bd:d9:d2:
38:ae:2a:42:6a:e3:af:6f:97:eb:55:7f:9c:16:80:
ca:de:cd:4b:44:d5:78:db:fe:7b:40:02:62:2d:42:
a1:9e:c8:ab:55:ea:59:2b:1f:ea:2e:dc:eb:07:eb:
5a:64:7d:45:74:92:23:76:d9:0e:c2:83:7f:55:e7:
59:7d:61:04:97:56:26:d5:62:be:25:c8:07:5f:e6:
7a:d2:20:5b:77:45:eb:7a:1a:a2:3c:ba:98:63:cb:
35:9f:9b:3a:60:53:b0:f4:96:a7:6e:fc:8a:28:14:
ff:55:e4:e2:48:4b:4a:3d:7d:eb:51:bd:00:66:08:
27:71:c7:ff:dc:5a:01:e5:e7:c3:9c:1d:15:c8:ff:
af:27:21:02:dd:90:80:ef:73:f7:b5:21:ba:9f:fc:
89:c3:4c:1c:b5:2c:ed:7e:7a:ab:bc:e1:64:fc:1e:
65:0d:35:73:d1:db:e1:b4:62:3c:78:3c:9f:84:6d:
4d:1a:ef:ae:a6:8f:3a:47:8e:01:48:65:51:df:38:
13:c2:dd:65:3c:a7:6f:e2:12:55:bc:91:93:29:af:
58:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:61:45:45:B2:CC:66:20:1C:FD:87:70:37:42:7C:CC:62:1B:1C:F4
X509v3 Authority Key Identifier:
keyid:1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/62FFRbLMZiAc_YdwN0J8zGIbHPQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.193.234.0/24
Signature Algorithm: sha256WithRSAEncryption
58:bc:b4:b1:48:fc:40:d6:86:22:b8:f8:4f:10:77:9a:1c:7f:
04:ea:41:34:86:04:fb:0a:ba:53:cf:d5:a7:61:c7:16:02:f4:
c3:ba:75:08:ee:8d:2f:c9:c6:cb:08:8f:f7:83:25:5b:2e:cf:
e3:59:9a:1f:e0:0a:c4:33:60:35:63:de:ca:4c:d7:99:f0:0a:
26:ee:b8:19:a9:eb:b4:e1:48:3e:f0:73:c6:85:8e:b5:49:5b:
bc:ea:c9:41:92:76:44:a5:ff:f0:26:f3:9c:6d:50:c3:e7:24:
8e:8f:3a:2d:a1:c3:5d:e4:26:f7:56:a4:4d:48:d3:61:9b:9d:
8f:9b:e2:f4:2a:92:97:07:75:77:df:14:6f:0b:42:24:7a:90:
06:ef:1f:b1:94:81:38:5e:aa:40:9a:07:52:ae:a9:84:f7:7f:
61:fb:43:25:a4:18:97:7d:9f:e3:69:f8:32:c5:6e:34:b2:f9:
5c:90:18:28:5e:ef:ee:e2:da:ac:b0:1f:a6:e7:1e:33:33:cf:
9e:28:67:28:14:77:ab:6b:5b:99:0b:5c:7c:a1:39:8d:ab:ba:
46:19:bd:f5:b3:6d:fb:18:d6:0c:f0:d1:69:19:be:e2:f0:1f:
2f:22:2c:b7:81:9f:d2:53:2a:ab:ef:a9:75:55:77:77:07:e3:
4e:77:75:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:32:24 2025 by rpki-client