Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/ceb60e-0d2a-4171-bcb5-df9d5fbdbc15/1/f1BUILnewKi0pPk0-cUIO9sX1N4.roa
File: f1BUILnewKi0pPk0-cUIO9sX1N4.roa (raw, json)
Hash identifier: upOHsTvU2HpEvGGaQw5H57ty1Pp8ZO03Lz1+b3tzvFA=
Subject key identifier: 7F:50:54:20:B9:DE:C0:A8:B4:A4:F9:34:F9:C5:08:3B:DB:17:D4:DE
Certificate issuer: /CN=9bd45e26079c31c85216b7300cd8e6330d43d5af
Certificate serial: 019734E0BDA0F2D2FE417DEADCE9BCA4B9CE
Authority key identifier: 9B:D4:5E:26:07:9C:31:C8:52:16:B7:30:0C:D8:E6:33:0D:43:D5:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9ReJgecMchSFrcwDNjmMw1D1a8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/ceb60e-0d2a-4171-bcb5-df9d5fbdbc15/1/f1BUILnewKi0pPk0-cUIO9sX1N4.roa
Signing time: Tue 03 Jun 2025 08:20:33 +0000
ROA not before: Tue 03 Jun 2025 08:20:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8962
IP address blocks: 91.213.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/ceb60e-0d2a-4171-bcb5-df9d5fbdbc15/1/m9ReJgecMchSFrcwDNjmMw1D1a8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/ceb60e-0d2a-4171-bcb5-df9d5fbdbc15/1/m9ReJgecMchSFrcwDNjmMw1D1a8.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9ReJgecMchSFrcwDNjmMw1D1a8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:34:e0:bd:a0:f2:d2:fe:41:7d:ea:dc:e9:bc:a4:b9:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd45e26079c31c85216b7300cd8e6330d43d5af
Validity
Not Before: Jun 3 08:20:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7f505420b9dec0a8b4a4f934f9c5083bdb17d4de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:4c:c0:a7:b6:bf:fb:a0:41:b8:66:bf:47:6d:
8f:2f:52:5a:dc:c0:77:14:b4:5b:59:43:75:7c:7d:
e6:60:d2:46:e3:d3:ae:41:07:9d:14:c2:51:57:4f:
d7:82:a5:22:c4:41:16:ed:4e:b0:9a:01:4f:09:e5:
b2:33:36:7f:57:12:91:58:94:dd:aa:10:6d:90:f4:
df:8d:97:25:09:cf:a1:e4:ae:b5:bf:5c:54:80:f7:
f4:ff:6a:8d:1e:72:dc:c9:63:b4:22:95:20:31:aa:
ed:5d:9a:b0:17:61:c9:a1:20:9d:36:29:9f:dd:f7:
c3:4b:21:95:19:90:8c:0e:64:5b:32:be:3a:e8:42:
0b:13:20:a9:c4:1b:5c:4d:ba:2b:12:2a:6e:f7:70:
47:9d:e9:d5:01:77:92:2c:7f:c1:c8:4c:99:3d:dd:
89:bb:5b:96:c9:60:f4:97:ca:cd:f1:c3:97:0f:bb:
6c:ee:d5:0c:6a:9e:b2:12:dc:4f:0f:b4:af:37:9c:
1e:47:d4:71:b6:23:e8:5b:2f:29:f6:5e:06:22:b2:
3c:68:df:af:61:0c:69:26:43:3a:7a:4e:4d:44:46:
c2:d2:7b:6c:c2:b5:1f:07:7f:cd:c0:20:75:e1:fe:
70:91:38:1d:c4:e6:47:25:84:c7:54:49:67:19:17:
d7:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:50:54:20:B9:DE:C0:A8:B4:A4:F9:34:F9:C5:08:3B:DB:17:D4:DE
X509v3 Authority Key Identifier:
keyid:9B:D4:5E:26:07:9C:31:C8:52:16:B7:30:0C:D8:E6:33:0D:43:D5:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9ReJgecMchSFrcwDNjmMw1D1a8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/ceb60e-0d2a-4171-bcb5-df9d5fbdbc15/1/f1BUILnewKi0pPk0-cUIO9sX1N4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/ceb60e-0d2a-4171-bcb5-df9d5fbdbc15/1/m9ReJgecMchSFrcwDNjmMw1D1a8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.170.0/24
Signature Algorithm: sha256WithRSAEncryption
62:7a:da:b1:11:a4:14:61:60:7c:cc:71:63:1d:34:93:ab:f1:
e1:76:56:aa:15:d0:be:6d:19:5c:13:26:0c:ee:d8:df:65:75:
6d:01:cf:3b:9b:ed:d9:9c:5f:1f:c5:8d:0a:b3:ad:e7:5d:d5:
4d:4c:9c:60:7c:f5:95:f5:24:2e:f4:9b:9c:3a:9e:27:52:cb:
08:d0:fb:cc:d5:9a:0f:d6:70:6a:95:2d:8a:2b:97:e6:f5:1f:
a3:91:f3:44:9d:5b:28:63:f0:c2:84:d5:80:a7:b5:22:6d:0c:
e3:38:e1:8f:06:76:55:85:55:46:f0:8e:fc:69:d8:52:12:5e:
6e:86:f9:fa:62:b9:80:19:1d:e1:14:31:86:ec:cf:bb:b0:b7:
5a:c1:94:1a:75:75:3c:c6:69:6f:43:9a:9e:ba:33:ff:71:51:
ef:be:1a:e7:42:0a:1e:13:9d:5b:9f:04:f0:df:35:00:39:11:
8f:b5:e9:91:cc:ec:e7:a6:34:18:90:f7:2b:b6:40:50:54:f6:
dd:22:dd:17:1c:fa:45:f9:0b:f6:19:1b:dd:e1:ce:d0:af:10:
0b:85:83:cf:a6:28:7a:e0:ec:6d:ec:ff:07:fd:b2:4b:7c:34:
ae:5a:a8:1c:cc:ad:ac:04:d7:14:c0:da:f8:8a:e4:12:05:3e:
03:6d:5c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:05:02 2025 by rpki-client