Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/Fio9S4kkM_6MY_PyvY4nnlbZSX0.roa
File: Fio9S4kkM_6MY_PyvY4nnlbZSX0.roa (raw, json)
Hash identifier: MLkm/zb7dfsD7k0W1D+pAVDUongRrbvCkAFDtBq/FSI=
Subject key identifier: 16:2A:3D:4B:89:24:33:FE:8C:63:F3:F2:BD:8E:27:9E:56:D9:49:7D
Certificate issuer: /CN=77c2d8a60197fc7bde64fc3fad10eb2da4fe8779
Certificate serial: 0194266C47542B9FB15BD2CD64618C8CDAE1
Authority key identifier: 77:C2:D8:A6:01:97:FC:7B:DE:64:FC:3F:AD:10:EB:2D:A4:FE:87:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8LYpgGX_HveZPw_rRDrLaT-h3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/Fio9S4kkM_6MY_PyvY4nnlbZSX0.roa
Signing time: Thu 02 Jan 2025 09:50:17 +0000
ROA not before: Thu 02 Jan 2025 09:50:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204922
IP address blocks: 91.199.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/d8LYpgGX_HveZPw_rRDrLaT-h3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Mar 2025 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:47:54:2b:9f:b1:5b:d2:cd:64:61:8c:8c:da:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c2d8a60197fc7bde64fc3fad10eb2da4fe8779
Validity
Not Before: Jan 2 09:50:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=162a3d4b892433fe8c63f3f2bd8e279e56d9497d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3e:f3:2c:af:61:78:ce:a1:a1:cc:d7:60:2f:
9d:dc:86:1e:c6:64:4f:5b:52:e9:81:7c:eb:36:d1:
8f:07:40:60:a0:1d:fc:c5:15:22:a1:8d:2b:7f:cd:
e9:06:a4:97:d4:4c:4c:2c:5c:b0:ce:8e:45:45:f8:
1d:94:62:23:85:20:92:c9:ce:ee:af:7e:c9:ba:9a:
97:25:61:1a:94:db:a7:50:bf:71:b4:bb:e6:9d:38:
aa:8a:47:b8:b6:fe:61:f1:c1:7c:5a:6e:b0:2c:7f:
1d:a2:93:6d:98:60:37:80:4c:f9:ae:42:d6:b7:60:
63:b0:aa:07:dd:23:62:76:cd:dc:29:6d:01:be:72:
1b:42:af:d4:e7:b1:42:b9:e7:ec:83:ef:cc:a9:3b:
e8:93:1a:b2:16:64:ed:28:29:d2:9b:70:0c:fc:00:
54:83:0a:44:7f:a0:61:86:f0:32:fe:1b:75:bc:02:
a3:b8:5f:2c:53:0f:b4:fb:d9:ba:c8:33:ec:40:0d:
95:c2:30:be:15:94:16:3d:f2:a9:71:61:0c:13:2b:
19:45:08:ad:03:f8:b0:28:d8:3a:e2:14:93:b2:35:
2a:b2:64:69:a0:bb:aa:fb:4c:91:2f:e1:40:b8:f5:
b8:54:25:fd:c2:36:21:10:14:4b:ee:dc:f9:fb:f3:
a5:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:2A:3D:4B:89:24:33:FE:8C:63:F3:F2:BD:8E:27:9E:56:D9:49:7D
X509v3 Authority Key Identifier:
keyid:77:C2:D8:A6:01:97:FC:7B:DE:64:FC:3F:AD:10:EB:2D:A4:FE:87:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8LYpgGX_HveZPw_rRDrLaT-h3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/Fio9S4kkM_6MY_PyvY4nnlbZSX0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.113.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:c6:24:c3:60:21:25:37:af:cb:55:9d:b9:71:ea:f6:a6:59:
e8:9a:a3:a0:84:5b:5e:bd:c0:78:b3:35:bf:75:8f:2e:b4:48:
8b:af:61:99:9b:ed:86:e0:40:2b:51:de:98:51:dd:a0:be:42:
6e:c0:ce:39:4b:fc:ce:3c:f4:bf:c9:db:24:09:7f:da:2e:b9:
1e:c7:25:55:69:25:1f:0f:93:35:b9:39:49:99:a6:69:26:56:
74:ee:35:fa:61:21:a8:1e:b2:81:5a:bd:1c:d2:2f:ca:01:38:
9d:90:20:3f:7b:96:5a:ed:48:ca:0e:52:89:83:a4:cc:7b:a1:
7b:74:df:79:e2:62:35:29:fe:58:8e:33:ac:b3:7b:dc:1f:3a:
a2:6e:f2:7d:dd:2a:c6:56:87:b3:a0:49:1b:0f:61:89:ef:25:
fd:a1:ca:2d:6e:5f:d3:1f:da:fc:78:25:4a:ed:ea:30:f6:3b:
8d:4b:e5:a4:e1:78:02:9c:5d:d1:df:91:86:1b:bd:88:66:75:
14:45:12:09:0b:7a:fd:57:b1:05:9d:09:18:bb:1c:84:c7:6e:
ca:ae:6d:6c:30:e5:a2:75:29:31:d1:e3:97:b2:8d:11:51:d9:
3c:f8:74:80:a6:93:20:56:7e:63:71:39:63:cd:1e:7b:f5:e2:
45:cc:4a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 14:45:27 2025 by rpki-client