Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c9242e-e424-4ed1-ac8b-c136405b7bb7/1/FfqUAa7-KKr54JP8aBzk5nNv21g.roa
File: FfqUAa7-KKr54JP8aBzk5nNv21g.roa (raw, json)
Hash identifier: PY8USvms98PE+f6r3SXsrpm0zwpXY4+1N+NCv5EFelE=
Subject key identifier: 15:FA:94:01:AE:FE:28:AA:F9:E0:93:FC:68:1C:E4:E6:73:6F:DB:58
Certificate issuer: /CN=486889ce4eb4fd747818248395de5fb93d1fe142
Certificate serial: 01956BE79957375C914F00FA0C78CC4BDEA1
Authority key identifier: 48:68:89:CE:4E:B4:FD:74:78:18:24:83:95:DE:5F:B9:3D:1F:E1:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SGiJzk60_XR4GCSDld5fuT0f4UI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c9242e-e424-4ed1-ac8b-c136405b7bb7/1/FfqUAa7-KKr54JP8aBzk5nNv21g.roa
Signing time: Thu 06 Mar 2025 14:41:34 +0000
ROA not before: Thu 06 Mar 2025 14:41:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199005
IP address blocks: 91.241.31.0/24 maxlen: 24
91.241.36.0/22 maxlen: 22
91.241.40.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c9242e-e424-4ed1-ac8b-c136405b7bb7/1/SGiJzk60_XR4GCSDld5fuT0f4UI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/c9242e-e424-4ed1-ac8b-c136405b7bb7/1/SGiJzk60_XR4GCSDld5fuT0f4UI.mft
rsync://rpki.ripe.net/repository/DEFAULT/SGiJzk60_XR4GCSDld5fuT0f4UI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:6b:e7:99:57:37:5c:91:4f:00:fa:0c:78:cc:4b:de:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=486889ce4eb4fd747818248395de5fb93d1fe142
Validity
Not Before: Mar 6 14:41:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=15fa9401aefe28aaf9e093fc681ce4e6736fdb58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d4:b5:41:82:a8:d9:b9:5b:c0:bb:92:27:61:
be:b7:84:49:8c:ba:c2:5b:9e:46:b0:b4:c7:3b:5c:
f8:d6:5a:eb:98:86:23:a7:6e:4f:a2:ea:71:b1:bd:
47:5b:b4:b8:48:25:8c:a6:fa:4c:cc:66:98:d0:90:
73:85:c1:b6:ee:9b:2a:ab:91:fc:7c:11:4e:9b:a4:
0a:7f:e7:e4:7d:a8:fa:02:4a:ee:91:4b:03:d8:ef:
29:e7:f1:e7:cd:ed:75:4d:0b:f8:5a:df:01:27:c0:
b9:51:1a:a6:c9:b6:05:04:49:e9:03:1f:11:96:5d:
5e:ad:71:55:ea:ee:5d:9c:92:35:fe:2c:bd:17:4b:
c8:38:07:96:1d:c9:88:f0:08:5f:83:03:55:00:e7:
91:10:37:26:7f:56:3b:c5:47:e3:49:32:f9:ad:90:
d7:a5:b5:fe:de:64:b2:01:ab:7c:a2:96:bd:da:85:
27:3c:f6:a6:79:c1:cc:25:ab:58:0a:33:de:6f:07:
ca:7a:9d:f5:ab:34:04:61:62:8d:1a:a4:0a:cc:9c:
65:06:03:14:e5:b5:b3:7a:8f:81:99:34:ba:ca:a0:
8b:ae:45:f9:b8:da:09:ae:0a:d7:74:97:d5:15:db:
5d:6c:2e:b8:81:29:46:c8:be:1c:6a:db:97:37:7b:
0c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:FA:94:01:AE:FE:28:AA:F9:E0:93:FC:68:1C:E4:E6:73:6F:DB:58
X509v3 Authority Key Identifier:
keyid:48:68:89:CE:4E:B4:FD:74:78:18:24:83:95:DE:5F:B9:3D:1F:E1:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SGiJzk60_XR4GCSDld5fuT0f4UI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c9242e-e424-4ed1-ac8b-c136405b7bb7/1/FfqUAa7-KKr54JP8aBzk5nNv21g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c9242e-e424-4ed1-ac8b-c136405b7bb7/1/SGiJzk60_XR4GCSDld5fuT0f4UI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.241.31.0/24
91.241.36.0-91.241.41.255
Signature Algorithm: sha256WithRSAEncryption
19:19:7c:ac:34:3e:03:0f:db:d2:f2:c4:cb:6a:77:f1:e4:1c:
de:e8:0d:51:fa:da:0b:44:91:5a:2d:4a:d2:39:c6:d5:cb:2c:
45:48:6f:41:63:b2:a4:47:ee:3e:4f:7b:77:47:c6:1c:02:d7:
81:57:00:91:9f:22:20:1e:ab:0d:e9:fa:0d:4c:06:5a:49:03:
13:29:ac:e5:46:9d:19:76:47:36:dc:3c:ff:b3:58:15:46:bb:
1c:b5:01:05:89:fd:68:24:fb:2d:28:4d:31:f9:7e:5b:d4:f4:
9d:f4:19:fc:e9:6d:1c:a3:8c:38:3d:77:c2:6e:fd:bf:86:69:
22:60:0a:1d:a3:64:53:76:ba:02:71:d7:bf:37:5a:ea:8e:a0:
1e:a7:b8:af:c5:d5:d0:b8:b2:f9:94:42:0d:51:ad:76:b2:6c:
4d:e5:4d:71:2f:a2:5d:65:19:00:6e:3a:65:76:d1:ff:58:af:
cd:7c:49:29:55:a9:13:dd:5e:90:53:bf:16:c2:c7:69:ea:b9:
64:70:55:3d:64:ba:29:04:91:43:70:7b:68:53:38:f3:e0:c0:
70:e2:18:41:dd:28:64:62:52:c2:e2:06:ae:8b:97:ec:c9:19:
c2:1f:0d:10:ec:89:05:6e:af:71:a6:d9:2b:c1:e4:af:9d:e6:
e5:37:ff:35
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 19 14:58:03 2025 by rpki-client