Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/7edd9a-fb72-43d7-b252-4cd11e8b7497/1/fGbepzb9A-L4azmxjWxp1naTF6A.roa
File: fGbepzb9A-L4azmxjWxp1naTF6A.roa (raw, json)
Hash identifier: YEQd3tPPpxJq6x0hqnOfDaa3PQq/39+zTmClKwCJDxI=
Subject key identifier: 7C:66:DE:A7:36:FD:03:E2:F8:6B:39:B1:8D:6C:69:D6:76:93:17:A0
Certificate issuer: /CN=178c8f20c939aaa9c80cce6a0d1567183ca1c599
Certificate serial: 01942143FB999C86E0317713E055B6C0BE11
Authority key identifier: 17:8C:8F:20:C9:39:AA:A9:C8:0C:CE:6A:0D:15:67:18:3C:A1:C5:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F4yPIMk5qqnIDM5qDRVnGDyhxZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/7edd9a-fb72-43d7-b252-4cd11e8b7497/1/fGbepzb9A-L4azmxjWxp1naTF6A.roa
Signing time: Wed 01 Jan 2025 09:48:10 +0000
ROA not before: Wed 01 Jan 2025 09:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61317
IP address blocks: 91.199.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/7edd9a-fb72-43d7-b252-4cd11e8b7497/1/F4yPIMk5qqnIDM5qDRVnGDyhxZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/7edd9a-fb72-43d7-b252-4cd11e8b7497/1/F4yPIMk5qqnIDM5qDRVnGDyhxZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/F4yPIMk5qqnIDM5qDRVnGDyhxZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 09:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:fb:99:9c:86:e0:31:77:13:e0:55:b6:c0:be:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=178c8f20c939aaa9c80cce6a0d1567183ca1c599
Validity
Not Before: Jan 1 09:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7c66dea736fd03e2f86b39b18d6c69d6769317a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:52:dd:27:15:c9:c4:5c:1d:45:bb:ae:7a:5e:
e9:a8:be:3b:f9:44:30:2e:96:05:a9:1b:19:8d:49:
73:d5:d6:e6:05:c1:84:b7:2e:41:ac:b5:a1:5d:b9:
82:eb:39:89:6b:7a:6e:df:1d:34:4e:ea:bb:4b:2a:
ca:3d:6d:ca:e7:64:d9:b7:1c:28:85:a5:c3:c9:92:
53:fd:63:e4:e5:c1:1e:b4:81:2c:7e:a4:ab:ce:0b:
62:82:ff:2e:82:cb:22:ee:4c:aa:92:82:8a:e1:a8:
b3:46:5a:3d:1b:2c:77:3e:1a:29:66:f8:ca:38:22:
b0:40:0f:86:61:6a:7f:ba:67:c1:cc:99:f9:3b:71:
af:29:ff:6b:3e:58:62:45:f5:f8:ad:91:dd:6b:ac:
e4:77:80:87:e7:52:49:b1:38:b0:81:04:e6:2d:8e:
6e:e4:3c:01:02:62:3c:6c:dd:43:b0:ef:0b:10:7e:
03:f4:54:30:36:7f:73:57:1d:3b:5c:13:a7:c8:e5:
f3:6a:33:24:5f:f3:4d:3f:10:d9:35:79:65:ba:8d:
64:c7:d6:ed:fc:51:f4:36:05:4d:07:f6:1e:10:90:
55:d3:3e:02:4b:1f:53:8d:8b:c1:0a:3a:3d:81:94:
e6:9a:4c:da:2f:9e:41:53:99:44:05:1d:f8:4a:62:
6b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:66:DE:A7:36:FD:03:E2:F8:6B:39:B1:8D:6C:69:D6:76:93:17:A0
X509v3 Authority Key Identifier:
keyid:17:8C:8F:20:C9:39:AA:A9:C8:0C:CE:6A:0D:15:67:18:3C:A1:C5:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F4yPIMk5qqnIDM5qDRVnGDyhxZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/7edd9a-fb72-43d7-b252-4cd11e8b7497/1/fGbepzb9A-L4azmxjWxp1naTF6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/7edd9a-fb72-43d7-b252-4cd11e8b7497/1/F4yPIMk5qqnIDM5qDRVnGDyhxZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.74.0/24
Signature Algorithm: sha256WithRSAEncryption
32:91:d0:d2:b8:2a:a9:65:46:36:71:07:72:2e:37:68:e8:71:
60:93:3b:0e:89:c5:f8:43:ec:0c:54:3b:c5:14:a0:5e:90:e8:
81:06:b7:db:d1:bf:bf:26:b5:fa:43:a3:d6:ee:c0:96:24:a2:
d9:99:47:d3:39:2e:0d:f9:99:79:3e:4e:b8:23:b8:f9:88:22:
54:fa:76:b6:9b:57:78:80:95:f7:08:23:52:89:61:2e:4c:62:
7d:18:39:87:97:79:84:92:43:36:2e:11:a4:94:72:c8:78:b8:
93:63:3a:78:b3:db:ff:78:bf:80:16:7e:08:79:7f:49:12:75:
20:1d:36:de:ea:27:c3:4c:ef:db:53:fb:e2:fa:64:2c:aa:8c:
da:99:3d:92:82:a7:a2:92:9f:11:a7:31:5e:44:7d:59:eb:07:
3f:84:a9:1d:81:b4:e1:0e:50:1f:42:ad:f2:2e:d2:10:34:d1:
92:16:79:31:67:18:68:df:64:25:6e:6c:13:3d:60:7f:79:69:
6b:a8:34:b2:83:74:ea:6c:f3:56:8b:5a:ea:96:c4:91:cf:92:
9c:ba:a1:96:47:1e:2b:35:b1:86:fa:e1:8d:ae:49:95:da:44:
cf:3d:01:b6:94:88:e5:44:e8:82:b9:27:1b:b2:d1:dc:22:3f:
e9:ab:ac:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:36:56 2025 by rpki-client