Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/fUwIM0sp1GFSdwqWjPbX7BRcPzQ.roa
File: fUwIM0sp1GFSdwqWjPbX7BRcPzQ.roa (raw, json)
Hash identifier: Xh0ESEMvO/UeKqHJNYyYyUnRbpIWXGZSxLiX7rQbHOo=
Subject key identifier: 7D:4C:08:33:4B:29:D4:61:52:77:0A:96:8C:F6:D7:EC:14:5C:3F:34
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 0194266B4D244D3D5ADCC945F533D5252524
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/fUwIM0sp1GFSdwqWjPbX7BRcPzQ.roa
Signing time: Thu 02 Jan 2025 09:49:13 +0000
ROA not before: Thu 02 Jan 2025 09:49:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 91.228.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:4d:24:4d:3d:5a:dc:c9:45:f5:33:d5:25:25:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Jan 2 09:49:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7d4c08334b29d46152770a968cf6d7ec145c3f34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5c:9f:3c:8e:24:8c:cf:04:a8:27:c4:a3:5f:
64:9f:d6:44:17:cb:71:c6:91:a7:8b:82:2b:28:69:
3e:a5:56:e8:03:c1:ff:c7:08:ee:26:eb:86:97:8d:
e4:b1:22:98:a3:33:80:79:1f:df:19:17:36:b0:f5:
4f:7f:a1:82:0f:95:16:9b:71:fc:70:4c:3e:d7:7f:
d1:4a:71:3b:71:28:80:b0:c9:2f:81:0c:f1:06:f9:
46:10:6f:7f:85:ad:8f:99:7a:19:e7:17:ed:3f:10:
96:06:0b:26:e9:a7:a3:ff:01:31:cf:7f:06:50:89:
a0:ee:2f:e4:ba:9e:71:d9:89:34:ff:8c:05:ee:36:
88:e1:2d:d3:fd:36:ef:08:d0:c0:5a:e7:6d:c3:bf:
4f:72:03:61:25:b0:b0:6c:c6:11:82:ad:00:1a:fd:
ba:47:b7:17:98:10:52:19:ad:d7:02:bc:0f:27:5e:
2f:d5:cf:2a:94:50:cf:fb:7a:7a:d8:7f:06:38:0f:
f9:e0:d4:5e:4b:b6:2d:aa:41:bc:7b:5b:61:1f:d4:
74:27:ba:d2:50:d9:3f:53:df:a9:c2:a7:e2:e3:22:
92:52:05:ab:9e:9e:eb:c0:a8:2c:87:80:5a:d7:aa:
89:ef:90:14:35:97:08:51:f7:9e:d9:af:bc:c6:85:
99:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:4C:08:33:4B:29:D4:61:52:77:0A:96:8C:F6:D7:EC:14:5C:3F:34
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/fUwIM0sp1GFSdwqWjPbX7BRcPzQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.13.0/24
Signature Algorithm: sha256WithRSAEncryption
22:b0:65:d8:87:94:36:49:58:fe:88:9d:1c:21:10:6d:bf:c2:
9c:21:14:e5:6b:54:4b:68:94:d8:d2:ce:ed:8c:2a:7e:7d:ef:
7b:89:10:23:b3:09:a1:22:53:bd:4b:a6:31:fc:4e:3b:25:0b:
0a:10:1b:d8:b3:bc:28:68:6d:7f:90:3b:19:12:f9:1f:df:d7:
f5:28:cf:2e:18:40:8b:7d:53:86:59:b5:07:5a:1d:13:48:54:
a5:ba:70:cc:57:23:0f:c6:47:f3:be:ad:94:f2:6e:ac:22:73:
1d:7c:e7:1a:a3:88:99:96:12:7c:87:5d:27:fb:fa:8a:a8:2b:
c6:31:68:85:2b:1a:a3:6d:0f:f9:e0:c1:be:ed:1b:04:b7:dc:
a1:7a:4a:23:89:47:2b:5f:2e:28:4f:ed:2b:22:4e:f6:55:a8:
7a:76:15:75:83:6d:8f:a9:65:c8:1b:66:43:19:4a:6a:73:97:
7f:b6:0b:fa:16:6d:1b:a9:6d:2a:c7:9d:64:34:e9:d4:68:41:
9d:3f:cb:5b:ea:0f:ba:a8:8a:93:f4:35:4f:00:52:14:8b:4e:
5b:47:27:5c:e4:56:4b:cf:4a:9b:f0:f4:37:d1:94:e7:e1:c5:
65:20:c4:64:81:ae:f4:53:ee:84:41:9e:b4:9d:a4:9b:61:12:
c2:d4:f0:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:15:27 2025 by rpki-client