Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/A_elPY7zPzPBy98o20Zvw2Pf34s.roa
File: A_elPY7zPzPBy98o20Zvw2Pf34s.roa (raw, json)
Hash identifier: 7IEfyja20k0JOW6h30shZ5sYEGCCL8982cOL8o5c1oE=
Subject key identifier: 03:F7:A5:3D:8E:F3:3F:33:C1:CB:DF:28:DB:46:6F:C3:63:DF:DF:8B
Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839
Certificate serial: 0196443B79A7DD9711D4361814438D37E1A0
Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/A_elPY7zPzPBy98o20Zvw2Pf34s.roa
Signing time: Thu 17 Apr 2025 14:51:10 +0000
ROA not before: Thu 17 Apr 2025 14:51:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215730
IP address blocks: 91.200.14.0/24 maxlen: 24
91.200.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:3b:79:a7:dd:97:11:d4:36:18:14:43:8d:37:e1:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839
Validity
Not Before: Apr 17 14:51:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=03f7a53d8ef33f33c1cbdf28db466fc363dfdf8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:85:c1:d7:8b:9f:0c:f6:97:35:7c:21:6d:38:
56:d1:4a:9c:52:25:e5:c8:c0:08:47:c0:04:54:35:
dd:96:1e:3d:29:31:c2:dc:b7:f2:8f:32:9b:ac:dd:
95:c4:1f:50:04:0a:a1:6c:db:4e:56:72:4d:c6:ee:
88:89:5d:0e:8c:d0:f4:9b:ac:10:f7:fc:56:38:a5:
f0:cd:d9:76:5c:fa:53:16:51:bc:46:74:ee:8a:a7:
6c:e0:81:c8:0d:4f:86:7a:a4:fc:73:2b:b6:11:cf:
46:87:d5:e3:af:4e:5d:a9:56:3c:56:bf:8e:25:4d:
eb:f4:8f:6b:a8:33:48:79:a2:8f:83:1d:48:50:b2:
a9:2b:7f:d9:37:f6:b6:84:43:e0:42:fe:a8:62:c1:
e9:53:84:1b:7e:f1:05:61:ad:33:af:70:e6:ad:fb:
80:9b:c3:0e:a0:56:ff:5a:c1:4b:cf:0f:7c:7c:ce:
24:86:e5:84:87:e2:88:fd:2f:e1:5d:3e:83:01:bc:
33:f9:85:3f:68:97:7c:43:85:99:50:02:be:89:53:
43:97:bf:3d:85:e6:a6:4a:30:c9:79:00:de:93:a1:
18:ec:b7:ec:f4:0c:a2:79:24:a7:af:06:52:97:c6:
af:cf:57:01:a3:53:85:49:5b:34:94:49:b4:cf:9a:
26:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:F7:A5:3D:8E:F3:3F:33:C1:CB:DF:28:DB:46:6F:C3:63:DF:DF:8B
X509v3 Authority Key Identifier:
keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/A_elPY7zPzPBy98o20Zvw2Pf34s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.200.14.0/23
Signature Algorithm: sha256WithRSAEncryption
0e:fd:31:5a:ac:de:18:5d:bc:7a:f6:ad:15:09:59:7a:d4:28:
f9:aa:86:8d:f9:c4:e6:2d:be:fd:b2:8e:f5:86:e2:a7:53:89:
92:e2:6b:69:2c:b1:4f:52:67:2b:82:7a:0f:c1:95:95:ce:20:
08:3c:73:0a:5c:01:c9:47:05:be:b7:0b:05:8c:60:cf:fb:5b:
71:af:71:3b:ee:1b:dd:8e:66:dd:17:12:39:33:7c:29:2a:7c:
22:45:99:d4:bd:a7:73:b5:38:5a:28:02:93:ff:67:e4:76:59:
3e:c9:ee:84:9d:91:ec:1c:4f:75:3b:6d:f9:6a:17:70:c9:14:
66:29:03:bb:14:03:9a:78:f5:9d:08:31:51:a9:64:ac:61:eb:
d0:8e:72:71:23:c5:0d:37:2a:34:e1:63:ef:0e:ad:e2:83:42:
f6:f9:5b:13:07:c0:53:03:2d:05:29:ad:56:72:d1:b0:fd:9f:
8e:07:59:84:68:b0:5a:12:c6:8a:29:a0:ab:55:c1:20:98:18:
0f:27:96:1c:07:5b:f3:2c:09:1f:29:f2:b2:d3:74:b5:50:e3:
44:94:42:e7:ad:ea:53:64:16:64:32:e3:87:2c:c3:32:65:df:
a4:4d:5b:d4:46:f6:34:54:22:8c:8e:c7:a4:6f:34:1a:ab:1b:
35:f9:9d:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:32:32 2025 by rpki-client