Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/f7kAf3KV7qb69Z3Irf9QrNtLyY0.roa
File: f7kAf3KV7qb69Z3Irf9QrNtLyY0.roa (raw, json)
Hash identifier: jPD7nunzn9cSBTS41yie793CY1UObq7bXZ4qPAfEbsY=
Subject key identifier: 7F:B9:00:7F:72:95:EE:A6:FA:F5:9D:C8:AD:FF:50:AC:DB:4B:C9:8D
Certificate issuer: /CN=fc48e6506ec6d53c5915dc8f29644485df92fce9
Certificate serial: 01942521F7846CA810BEE9BA6FD7D35CE212
Authority key identifier: FC:48:E6:50:6E:C6:D5:3C:59:15:DC:8F:29:64:44:85:DF:92:FC:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_EjmUG7G1TxZFdyPKWREhd-S_Ok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/f7kAf3KV7qb69Z3Irf9QrNtLyY0.roa
Signing time: Thu 02 Jan 2025 03:49:30 +0000
ROA not before: Thu 02 Jan 2025 03:49:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9208
IP address blocks: 91.220.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.mft
rsync://rpki.ripe.net/repository/DEFAULT/_EjmUG7G1TxZFdyPKWREhd-S_Ok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:f7:84:6c:a8:10:be:e9:ba:6f:d7:d3:5c:e2:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc48e6506ec6d53c5915dc8f29644485df92fce9
Validity
Not Before: Jan 2 03:49:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7fb9007f7295eea6faf59dc8adff50acdb4bc98d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a5:2c:9e:6c:5b:7d:ec:44:6f:83:36:60:46:
2a:ce:9a:e7:8b:3c:66:25:e2:cd:89:29:48:6b:08:
d8:28:06:19:c0:33:12:2b:2d:70:d6:67:6d:73:ac:
74:2e:2b:49:ec:49:3b:4a:86:94:b2:a6:bc:b1:9f:
a9:98:60:20:68:b0:78:89:6e:da:37:c6:0a:df:35:
18:ef:cd:a8:a4:62:26:af:9f:24:6f:dc:4c:ae:82:
47:02:53:13:88:15:11:0d:98:4b:3e:c6:3c:2e:ea:
98:e8:ec:6a:34:8a:5b:8e:70:df:74:b5:16:70:15:
48:d0:64:f4:b5:20:4a:0e:28:0b:4b:02:c6:28:0d:
c0:05:32:d1:59:5e:f6:50:e4:dc:99:30:7c:79:95:
1f:27:86:58:85:63:de:81:31:c1:cc:89:44:72:61:
86:6b:62:2a:7e:6c:5c:78:a7:15:a3:23:cb:03:c9:
24:a0:ae:bd:9f:c2:6b:59:78:21:ef:1d:d4:65:af:
2d:de:df:63:f0:73:d2:49:fd:82:5d:35:35:c3:4c:
11:67:c2:3f:47:55:ae:a2:41:1c:59:67:a9:e9:13:
06:d2:c2:54:1a:d1:e3:8f:2c:ba:db:56:40:21:35:
89:b8:3e:84:ff:f1:35:1c:ba:93:3f:97:65:57:63:
70:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:B9:00:7F:72:95:EE:A6:FA:F5:9D:C8:AD:FF:50:AC:DB:4B:C9:8D
X509v3 Authority Key Identifier:
keyid:FC:48:E6:50:6E:C6:D5:3C:59:15:DC:8F:29:64:44:85:DF:92:FC:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EjmUG7G1TxZFdyPKWREhd-S_Ok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/f7kAf3KV7qb69Z3Irf9QrNtLyY0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.68.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:bf:5d:b4:98:04:b7:59:15:65:26:95:18:dc:ec:1d:f5:27:
49:23:1b:06:2c:94:80:ec:8c:0c:71:2c:09:e7:85:6f:83:ee:
9a:ee:53:74:f7:53:dd:9f:82:6e:57:c0:0a:d6:8e:38:d2:01:
5e:48:f9:b9:dd:44:be:a3:4c:7f:b9:ea:cf:3e:cd:a7:13:9d:
c2:0a:34:da:32:a5:9b:1f:67:74:c8:6d:0a:db:4c:bc:4c:e6:
44:10:10:17:91:61:24:4f:60:97:61:4b:76:19:14:26:b8:25:
88:9a:ef:85:ab:76:39:6b:f3:91:21:d5:9a:b0:8f:5b:dc:0f:
b3:7b:99:a4:06:51:72:0a:e2:2f:a8:51:c6:e2:d5:17:14:35:
9b:8e:b5:dd:9e:a0:bb:0a:6d:21:b4:50:d2:3c:40:e0:47:f6:
7c:99:56:a2:eb:2a:b8:7a:bb:f8:af:89:20:de:d3:c3:ec:7b:
35:92:06:ca:1d:a2:a4:99:78:d4:43:92:c2:c8:79:fb:a1:b9:
c6:8f:cb:b9:d9:ad:4e:ce:b7:20:66:84:f7:b7:38:8c:d0:0e:
ab:f8:a5:68:e8:1d:12:8e:95:0b:7f:99:40:29:9c:76:69:81:
51:51:f4:f8:23:17:77:58:bc:49:39:ac:43:88:92:92:1b:53:
bc:01:7c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 12:49:58 2025 by rpki-client