Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/FstRBv2kO53NDHW81Q9Mg07SWg4.roa
File: FstRBv2kO53NDHW81Q9Mg07SWg4.roa (raw, json)
Hash identifier: +uStvYqgj5hn3d6BL0rwAnmTzIsGb1x7W+G4jAHTkdA=
Subject key identifier: 16:CB:51:06:FD:A4:3B:9D:CD:0C:75:BC:D5:0F:4C:83:4E:D2:5A:0E
Certificate issuer: /CN=0a81fe9059f6820bc18ad5802f2f1fca77d254b7
Certificate serial: 0195B3426E0E58869C2B91B729E9B9824E94
Authority key identifier: 0A:81:FE:90:59:F6:82:0B:C1:8A:D5:80:2F:2F:1F:CA:77:D2:54:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/FstRBv2kO53NDHW81Q9Mg07SWg4.roa
Signing time: Thu 20 Mar 2025 11:13:49 +0000
ROA not before: Thu 20 Mar 2025 11:13:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198560
IP address blocks: 91.236.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 14:13:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:b3:42:6e:0e:58:86:9c:2b:91:b7:29:e9:b9:82:4e:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a81fe9059f6820bc18ad5802f2f1fca77d254b7
Validity
Not Before: Mar 20 11:13:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=16cb5106fda43b9dcd0c75bcd50f4c834ed25a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:fd:9b:43:27:78:d4:4d:26:26:fd:b9:ef:ed:
62:3a:56:58:db:a8:05:00:18:c2:7a:6a:0e:c5:d8:
1f:41:26:55:9f:4e:45:9d:e2:10:f9:91:1f:e0:a3:
60:ba:74:d7:88:80:42:b2:a7:81:c9:62:05:74:2d:
27:d8:a7:c0:e5:d6:0b:f1:1e:42:72:a0:25:a9:12:
eb:f8:f5:18:db:e8:0f:5a:c8:79:75:b3:da:3c:36:
d1:be:17:d0:b0:d3:ff:48:c6:0d:4b:7d:dc:89:4d:
dd:5a:6c:15:91:ff:e2:51:45:bb:95:7e:42:6a:b6:
46:bb:e6:f2:7b:3a:21:41:ff:bb:c9:94:ac:35:e1:
87:3c:13:d5:0b:33:e6:aa:bf:89:f4:4b:86:df:fd:
ce:f5:09:1b:e0:93:cb:ce:5a:58:f2:e8:9f:cb:eb:
b8:ba:57:39:75:47:a8:e3:1d:ec:f9:6e:e3:ca:73:
fb:ec:d4:cb:8b:fc:3a:ae:a6:61:19:06:cb:e2:30:
b7:ff:3f:f5:47:1c:62:8b:b8:f5:f0:81:c1:fb:80:
04:52:57:1b:1c:b8:de:3f:56:fd:95:a4:95:d2:f8:
5b:9a:98:9a:93:e9:76:be:b0:7e:a5:7d:99:89:e6:
29:49:09:00:5d:f3:04:a0:35:98:4f:1a:2e:48:4d:
f4:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:CB:51:06:FD:A4:3B:9D:CD:0C:75:BC:D5:0F:4C:83:4E:D2:5A:0E
X509v3 Authority Key Identifier:
keyid:0A:81:FE:90:59:F6:82:0B:C1:8A:D5:80:2F:2F:1F:CA:77:D2:54:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/FstRBv2kO53NDHW81Q9Mg07SWg4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.128.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:a0:8b:c9:4e:5c:2a:74:de:03:87:c0:28:20:e4:df:53:32:
bc:9d:7b:41:7e:91:73:57:43:0d:6f:a6:9d:63:86:6b:7b:52:
cb:85:0a:81:ec:85:7f:66:1b:96:20:ad:1a:90:c4:ba:ce:94:
f3:f1:c6:94:88:e5:16:1a:38:85:8d:a8:4f:91:b1:44:90:97:
9a:60:8a:b0:f9:30:91:92:11:7c:02:f0:45:ed:01:26:cb:ce:
26:bd:02:3b:2c:57:b6:30:4d:55:d2:e1:2c:d5:d5:42:0f:da:
a9:ca:39:1c:50:f0:ab:50:0f:63:2d:d5:2a:95:1b:97:50:68:
8e:5e:db:c0:2c:7f:aa:12:e5:a8:b5:20:20:39:f2:08:f0:da:
26:e4:8f:5f:b5:90:34:01:a4:25:96:c7:9b:a5:82:bb:82:5a:
fd:8d:b3:cf:89:82:f1:76:00:db:97:da:e8:d3:e3:f6:98:fa:
49:2e:c2:9f:64:83:62:78:76:2f:d7:b6:ba:64:b0:e6:eb:ba:
1c:02:df:de:ae:e8:61:17:1d:41:d6:02:17:46:c3:3c:ba:5b:
19:c4:c0:2d:8b:be:e3:82:72:91:78:fc:95:44:dc:6b:1c:c5:
15:03:a2:ea:4c:63:95:f7:ba:fc:e4:4c:d0:b0:a6:70:ed:01:
c9:e1:28:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 23:02:55 2025 by rpki-client