Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/OGdT4POvRKruGu3WkbDGyulN7-E.roa
File: OGdT4POvRKruGu3WkbDGyulN7-E.roa (raw, json)
Hash identifier: b9NvSjn/aHaqKwweHNflC1898I0DAuoT3bsiarDB3TM=
Subject key identifier: 38:67:53:E0:F3:AF:44:AA:EE:1A:ED:D6:91:B0:C6:CA:E9:4D:EF:E1
Certificate issuer: /CN=41741c05d4ad7ed690e571ef5ed0f87522da47d7
Certificate serial: 01964D9FA574D72896A6350406EB306B8E9F
Authority key identifier: 41:74:1C:05:D4:AD:7E:D6:90:E5:71:EF:5E:D0:F8:75:22:DA:47:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXQcBdStftaQ5XHvXtD4dSLaR9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/OGdT4POvRKruGu3WkbDGyulN7-E.roa
Signing time: Sat 19 Apr 2025 10:37:10 +0000
ROA not before: Sat 19 Apr 2025 10:37:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48471
IP address blocks: 91.211.12.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/QXQcBdStftaQ5XHvXtD4dSLaR9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 04:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:9f:a5:74:d7:28:96:a6:35:04:06:eb:30:6b:8e:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41741c05d4ad7ed690e571ef5ed0f87522da47d7
Validity
Not Before: Apr 19 10:37:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=386753e0f3af44aaee1aedd691b0c6cae94defe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:03:13:78:40:8d:fa:f3:b5:8c:10:6a:6b:23:
8c:d7:85:dd:fa:85:e9:a5:35:ea:5d:d9:c7:55:e9:
46:da:75:5c:0a:44:de:72:bb:22:8d:20:d7:81:ec:
ba:35:f5:4e:3a:ec:3a:5c:85:47:a6:30:27:ad:52:
2a:28:d9:63:c7:a8:e4:41:bb:86:a0:9c:80:77:15:
0b:61:f9:25:19:ac:4e:76:02:81:f3:48:95:6d:3c:
3f:1b:cc:93:e7:a8:e9:76:a8:bf:ae:2b:45:42:da:
be:36:37:64:3f:5e:c8:90:ce:ac:aa:e4:09:00:c0:
f9:36:79:0f:e9:1c:d6:40:4f:cd:dd:2f:5d:e1:b2:
57:f6:06:8c:08:42:06:11:39:0e:df:63:fa:07:29:
3d:6a:f2:0e:ea:17:8b:1d:89:8f:51:7d:a9:0b:7c:
46:cc:d9:25:e3:23:19:fd:63:23:80:a0:32:50:8f:
4f:82:83:6c:91:b3:75:e7:41:e6:a3:c2:cc:6d:ce:
4f:bf:69:ad:46:ff:b7:25:57:c9:ec:ac:c6:3f:64:
85:44:12:e8:d7:69:7b:d7:bb:a0:bf:96:ad:0f:48:
be:7f:be:6b:a0:e4:ae:85:64:6f:48:81:98:b9:d8:
0c:e6:31:3f:4b:c2:73:4e:82:ae:4e:4e:1b:4a:5a:
5e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:67:53:E0:F3:AF:44:AA:EE:1A:ED:D6:91:B0:C6:CA:E9:4D:EF:E1
X509v3 Authority Key Identifier:
keyid:41:74:1C:05:D4:AD:7E:D6:90:E5:71:EF:5E:D0:F8:75:22:DA:47:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXQcBdStftaQ5XHvXtD4dSLaR9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/OGdT4POvRKruGu3WkbDGyulN7-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.211.12.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:43:c7:d0:32:78:76:c4:07:3d:bb:e4:d5:93:05:fd:1d:a7:
85:25:9e:0a:af:bf:79:fc:ca:7c:a4:2f:4d:dd:8c:f2:2d:09:
e7:46:ea:6e:68:95:69:e0:7b:49:c2:05:ae:73:ec:17:68:14:
1b:bf:66:be:c3:c3:e3:80:6c:22:99:76:21:0a:9d:7e:3a:1d:
4b:7d:d1:45:02:66:3a:81:d2:1d:b2:eb:b3:2b:32:35:91:2f:
46:8e:9d:6a:60:e2:e9:8c:f4:db:b5:10:b1:8f:24:71:e2:f4:
02:2f:cb:a3:32:40:da:8a:b5:5b:64:07:9f:10:79:d2:54:55:
16:74:51:f4:59:db:34:36:3a:c1:f9:a2:02:2b:63:3e:ff:7d:
8a:50:d3:52:9c:5d:34:25:8c:8e:6b:1d:ac:24:25:01:74:b8:
a0:77:47:2d:f9:62:3e:1d:d2:1c:e3:ed:08:76:02:56:e9:97:
c0:44:5f:e2:61:27:1c:4b:fb:25:68:ad:1e:6c:8a:a1:9c:79:
e1:bc:12:91:da:99:f2:95:bb:0d:12:6c:d9:5d:df:fa:43:25:
fc:9f:95:54:ad:57:08:08:de:d1:50:8e:f7:1c:cd:46:dd:98:
6c:dd:7c:70:88:74:09:b1:bb:fa:cc:63:bf:4f:8c:1b:a8:a4:
86:95:6d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:07:36 2025 by rpki-client