Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/8f9bb8-90bc-4958-8f93-8700078552a3/1/bi2rgr1mwihMTviNCzdJhqMEHIE.roa
File: bi2rgr1mwihMTviNCzdJhqMEHIE.roa (raw, json)
Hash identifier: 9YBEOHgs2y2rTJyOfEqp4CwAwfBA0dewuMGVkGf2YyA=
Subject key identifier: 6E:2D:AB:82:BD:66:C2:28:4C:4E:F8:8D:0B:37:49:86:A3:04:1C:81
Certificate issuer: /CN=2fbeb5b53809c0ab1e4e017db4bf5078815ae66a
Certificate serial: 0196ED152E0F6EF23EF20891B61AD1DB8378
Authority key identifier: 2F:BE:B5:B5:38:09:C0:AB:1E:4E:01:7D:B4:BF:50:78:81:5A:E6:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L761tTgJwKseTgF9tL9QeIFa5mo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/8f9bb8-90bc-4958-8f93-8700078552a3/1/bi2rgr1mwihMTviNCzdJhqMEHIE.roa
Signing time: Tue 20 May 2025 09:45:10 +0000
ROA not before: Tue 20 May 2025 09:45:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47633
IP address blocks: 91.208.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/8f9bb8-90bc-4958-8f93-8700078552a3/1/L761tTgJwKseTgF9tL9QeIFa5mo.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/8f9bb8-90bc-4958-8f93-8700078552a3/1/L761tTgJwKseTgF9tL9QeIFa5mo.mft
rsync://rpki.ripe.net/repository/DEFAULT/L761tTgJwKseTgF9tL9QeIFa5mo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 07:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ed:15:2e:0f:6e:f2:3e:f2:08:91:b6:1a:d1:db:83:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fbeb5b53809c0ab1e4e017db4bf5078815ae66a
Validity
Not Before: May 20 09:45:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6e2dab82bd66c2284c4ef88d0b374986a3041c81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:e1:f6:15:67:2f:64:82:f9:09:38:d0:3f:8b:
4b:04:58:69:b8:fe:44:17:5e:ee:3b:b5:56:5f:8c:
85:a2:cc:51:48:da:dc:db:4d:8b:47:8a:4d:1d:e4:
c4:41:c0:f7:9b:7e:8b:bd:8c:4c:fb:cd:6c:49:95:
9f:55:30:36:d4:ff:9f:01:dc:22:d3:ff:f7:f3:04:
b3:71:09:8f:ea:cc:40:18:fa:eb:2b:87:e1:2f:d9:
05:eb:96:de:01:d0:21:48:45:c4:7b:87:95:0c:d9:
8e:9d:97:c3:4f:1c:76:00:1a:58:5b:48:0b:a1:8f:
1a:cf:b1:d1:b9:d5:8a:60:9a:b1:75:27:ea:db:7a:
8c:3e:e5:5d:d3:06:d9:68:2f:5b:71:cb:3e:b7:98:
8e:77:40:2d:6f:f7:07:d0:0a:3f:58:7d:56:45:fc:
01:2d:34:76:5d:24:1d:85:86:b2:b4:0d:5c:15:87:
af:9b:58:13:50:3a:68:86:89:35:59:c4:7c:02:88:
cb:80:3f:55:b1:06:9e:e1:ac:74:44:f7:7e:92:12:
8f:07:07:cb:2c:4d:86:a9:7c:31:24:16:31:c0:6d:
c1:15:a3:56:cd:48:eb:7f:78:dd:d9:c3:ed:09:5e:
43:f6:1d:d6:92:93:40:60:a3:4d:79:be:35:bd:6c:
a2:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:2D:AB:82:BD:66:C2:28:4C:4E:F8:8D:0B:37:49:86:A3:04:1C:81
X509v3 Authority Key Identifier:
keyid:2F:BE:B5:B5:38:09:C0:AB:1E:4E:01:7D:B4:BF:50:78:81:5A:E6:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L761tTgJwKseTgF9tL9QeIFa5mo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8f9bb8-90bc-4958-8f93-8700078552a3/1/bi2rgr1mwihMTviNCzdJhqMEHIE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8f9bb8-90bc-4958-8f93-8700078552a3/1/L761tTgJwKseTgF9tL9QeIFa5mo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.72.0/24
Signature Algorithm: sha256WithRSAEncryption
31:27:ea:64:d7:40:87:bd:d8:0f:8c:a2:97:4d:8d:97:e6:57:
36:b4:a0:dd:a0:ce:e4:7f:ba:2d:42:3c:75:f2:b2:7e:5e:6e:
34:3f:1e:e6:99:2b:3c:0b:60:ff:0a:a1:98:c5:fa:30:1c:cf:
c3:a9:60:4e:7b:51:66:1d:62:96:84:e6:65:77:5b:c6:e7:28:
bb:61:bc:8d:88:35:01:4d:5b:16:ad:ce:f9:a2:8e:0b:99:42:
f6:2e:7f:a7:dc:2f:3d:93:4b:ac:f8:b1:67:5f:81:bf:c3:80:
7e:46:fd:d4:72:85:92:65:53:f4:89:a1:58:b8:75:1b:e5:87:
a5:67:98:9a:13:8e:e0:48:10:f8:9e:ac:ca:b5:82:43:ce:e1:
db:23:13:be:d9:c2:26:4d:9a:84:13:1c:06:43:22:c6:22:b1:
89:13:eb:d2:1f:f0:59:2a:98:91:56:dd:5d:a0:60:44:5a:24:
26:b6:a4:b4:1e:dd:b5:98:60:d0:c9:12:b1:b4:27:52:62:e0:
b2:bb:cf:ff:85:45:99:ee:33:2c:17:5a:fa:0b:a2:a1:6d:48:
fb:6f:35:bc:04:11:de:67:47:f8:0c:2a:39:0e:57:8a:9b:5d:
b2:24:f7:1d:09:83:b9:b3:35:2d:63:5e:03:9c:f0:8c:a4:f8:
32:bd:c5:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 11:57:00 2025 by rpki-client