Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/fMybGYR-8tzcLwLk9F7xQBZ6-N4.roa
File: fMybGYR-8tzcLwLk9F7xQBZ6-N4.roa (raw, json)
Hash identifier: Y2XsWw7qdiuLK4RPieRUDih+9enRniyBYvTmKwdcDsA=
Subject key identifier: 7C:CC:9B:19:84:7E:F2:DC:DC:2F:02:E4:F4:5E:F1:40:16:7A:F8:DE
Certificate issuer: /CN=0f91e5b58da326e654e994fef2195276759579be
Certificate serial: 0194FF5586B645D9111A3F24ECD6D962D7BD
Authority key identifier: 0F:91:E5:B5:8D:A3:26:E6:54:E9:94:FE:F2:19:52:76:75:95:79:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5HltY2jJuZU6ZT-8hlSdnWVeb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/fMybGYR-8tzcLwLk9F7xQBZ6-N4.roa
Signing time: Thu 13 Feb 2025 12:43:02 +0000
ROA not before: Thu 13 Feb 2025 12:43:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214391
IP address blocks: 91.195.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5HltY2jJuZU6ZT-8hlSdnWVeb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ff:55:86:b6:45:d9:11:1a:3f:24:ec:d6:d9:62:d7:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f91e5b58da326e654e994fef2195276759579be
Validity
Not Before: Feb 13 12:43:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7ccc9b19847ef2dcdc2f02e4f45ef140167af8de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:25:a0:42:cb:6f:a3:77:e2:16:db:20:bb:6c:
f8:18:29:49:4d:e5:42:2d:5f:2b:d7:33:f2:9d:98:
39:34:69:c2:c4:e7:d6:12:11:b2:0a:b0:5f:31:fb:
32:89:16:75:af:7a:67:9a:d2:c1:c4:8a:79:96:5d:
47:4d:01:45:15:a5:52:a3:44:91:f6:2a:1c:97:e5:
06:db:5e:56:b3:c3:3d:67:af:a0:54:2a:dd:7a:fd:
6d:a0:79:66:c2:a7:05:00:f2:75:de:84:a2:8b:1a:
66:33:a6:eb:d3:5b:f5:63:22:2c:02:d1:fc:cf:3a:
cf:37:dc:c3:47:2f:2d:20:7e:40:94:34:50:2e:25:
b3:5e:02:5e:59:10:eb:97:5d:de:d2:b4:c3:9a:fb:
b3:7b:8d:74:5c:23:c6:fb:2b:52:f1:56:fd:55:72:
5d:ae:bb:9d:99:1b:35:a5:93:d4:b9:0c:e3:f0:c1:
a6:ec:ac:b4:82:41:fb:03:99:a0:e5:4c:fb:63:de:
cf:0b:eb:7b:ad:09:44:d7:d2:f1:5b:9c:4a:64:aa:
2e:ad:8f:0c:da:d7:5c:f4:9c:97:2b:9d:9b:c0:ce:
6b:36:f1:05:15:38:12:82:bf:f8:f0:32:0a:6a:8a:
3b:b8:b4:36:07:26:52:de:e3:77:a3:bf:e4:23:60:
cd:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:CC:9B:19:84:7E:F2:DC:DC:2F:02:E4:F4:5E:F1:40:16:7A:F8:DE
X509v3 Authority Key Identifier:
keyid:0F:91:E5:B5:8D:A3:26:E6:54:E9:94:FE:F2:19:52:76:75:95:79:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5HltY2jJuZU6ZT-8hlSdnWVeb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/fMybGYR-8tzcLwLk9F7xQBZ6-N4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.195.217.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:88:dd:5b:8b:9a:7f:75:3d:e6:2a:47:e1:ab:aa:0a:81:5d:
c0:80:15:03:52:aa:89:14:88:98:4d:c6:41:71:5c:c7:e2:e8:
ca:de:a7:6e:0e:2b:a5:f1:0f:3c:e4:56:ed:f8:e7:85:56:3e:
98:6a:04:69:e5:a5:1f:97:36:26:0e:1f:52:2f:28:5c:d5:2a:
c3:c5:da:6d:d4:10:d9:c2:1e:db:0a:fb:92:b5:48:cd:fc:d5:
2f:32:04:dc:29:28:90:35:eb:6a:f3:8e:ab:94:4d:79:e4:ae:
87:73:89:bb:03:53:d4:c2:e2:ea:0e:89:9f:ff:e2:ea:3b:6e:
47:a9:0d:27:eb:d3:33:66:b4:89:85:ee:c2:bc:a7:b0:f9:65:
ee:80:49:98:7f:1f:b7:98:fc:88:08:09:76:28:94:03:f6:49:
d2:12:f8:5d:c1:0e:6b:d6:a8:71:32:c3:86:8e:78:1b:88:60:
ba:e3:3d:2f:80:e1:d2:a5:d9:08:34:de:e9:2f:85:70:ff:4f:
82:f3:b4:ae:94:dc:24:da:d3:56:86:ab:2d:9c:bd:f1:9b:da:
ab:88:61:1c:49:ca:ae:e4:48:d1:7f:e9:08:87:67:d4:7d:9c:
c0:14:93:6c:23:b9:1f:4e:ea:e8:15:ef:cc:4a:bf:fa:88:93:
4b:58:15:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:29:48 2025 by rpki-client