Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/840dc1-83fc-4f9d-be5e-1939883bb1f8/1/1-Umc9hOt2tpo1ZchNi7HZONvobM.roa
File: 1-Umc9hOt2tpo1ZchNi7HZONvobM.roa (raw, json)
Hash identifier: uKhjdfQ+p8B+ov8GKsdABY8fRu2epUYrzObWxrEfxuQ=
Subject key identifier: F9:49:9C:F6:13:AD:DA:DA:68:D5:97:21:36:2E:C7:64:E3:6F:A1:B3
Certificate issuer: /CN=f3b7dd54dab02fe8cde8a85e569f827088979419
Certificate serial: 019426D962869A65A973E406A1FEDCB1EB67
Authority key identifier: F3:B7:DD:54:DA:B0:2F:E8:CD:E8:A8:5E:56:9F:82:70:88:97:94:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87fdVNqwL-jN6KheVp-CcIiXlBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/840dc1-83fc-4f9d-be5e-1939883bb1f8/1/1-Umc9hOt2tpo1ZchNi7HZONvobM.roa
Signing time: Thu 02 Jan 2025 11:49:28 +0000
ROA not before: Thu 02 Jan 2025 11:49:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42791
IP address blocks: 91.213.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/840dc1-83fc-4f9d-be5e-1939883bb1f8/1/87fdVNqwL-jN6KheVp-CcIiXlBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/840dc1-83fc-4f9d-be5e-1939883bb1f8/1/87fdVNqwL-jN6KheVp-CcIiXlBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/87fdVNqwL-jN6KheVp-CcIiXlBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:62:86:9a:65:a9:73:e4:06:a1:fe:dc:b1:eb:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3b7dd54dab02fe8cde8a85e569f827088979419
Validity
Not Before: Jan 2 11:49:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f9499cf613addada68d59721362ec764e36fa1b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:23:be:4c:20:7e:e3:cd:89:4d:49:1a:b9:d9:
74:3a:be:ef:f4:22:3a:60:e6:89:8b:e8:fc:ca:d7:
69:a3:d6:13:e2:96:e2:dd:f4:63:ce:be:f2:fe:84:
e7:32:26:fd:db:ba:fc:c9:73:bb:7a:55:e2:b6:ff:
a0:a8:e7:32:59:f6:05:e6:23:07:1a:ec:4d:4b:27:
06:41:d8:58:56:e2:7d:03:92:b2:33:60:0b:9a:c8:
2d:24:64:ee:82:1e:19:54:6b:0a:40:71:96:f9:5d:
9d:76:fe:f6:bb:74:95:17:b2:f9:94:5f:03:72:9a:
aa:3f:7f:3d:91:85:56:d7:f3:91:dc:1d:12:94:2e:
dd:dc:b8:6d:de:c2:5b:7e:89:64:1b:cf:b4:61:e6:
a0:91:ed:89:d4:64:b6:70:52:93:84:95:69:2c:e0:
b3:3f:75:b2:f4:62:9c:b9:ac:e5:13:0a:fa:bd:f8:
a3:a4:d5:55:83:bc:8b:da:48:ab:9c:84:72:a4:4f:
07:6d:b4:ca:02:e3:88:d2:c0:71:39:98:f3:99:7c:
22:99:f5:68:f7:33:a2:ee:52:e4:83:c0:05:bb:3a:
dd:2c:7c:b8:11:6e:c6:b7:11:6c:c4:21:cb:ba:c2:
5f:00:a6:5c:94:42:0e:40:ab:ac:52:ed:0f:32:79:
4a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:49:9C:F6:13:AD:DA:DA:68:D5:97:21:36:2E:C7:64:E3:6F:A1:B3
X509v3 Authority Key Identifier:
keyid:F3:B7:DD:54:DA:B0:2F:E8:CD:E8:A8:5E:56:9F:82:70:88:97:94:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87fdVNqwL-jN6KheVp-CcIiXlBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/840dc1-83fc-4f9d-be5e-1939883bb1f8/1/1-Umc9hOt2tpo1ZchNi7HZONvobM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/840dc1-83fc-4f9d-be5e-1939883bb1f8/1/87fdVNqwL-jN6KheVp-CcIiXlBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.131.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:c5:2b:61:3f:2e:2a:a8:3f:78:cf:2d:4b:e0:ab:5b:77:37:
10:0e:d4:5b:44:05:d7:ac:0b:d0:f7:55:7f:e2:0f:c2:33:ad:
af:c3:41:58:f7:ca:c8:c2:5c:1a:87:9f:d2:54:92:75:2c:4b:
b4:bc:d9:16:a0:2f:78:21:fa:5f:86:9d:79:40:49:22:bb:97:
b4:45:d2:98:36:cf:f6:50:46:05:cb:5f:ad:0e:a8:79:0a:aa:
8a:e8:b0:d1:19:34:d2:43:d3:fc:63:b9:50:27:a6:31:d7:18:
97:ba:36:0b:11:d2:20:03:f7:6a:94:c0:a5:dd:14:4d:c8:62:
38:a5:ef:9f:31:f3:73:10:dc:de:47:8c:57:9d:1d:ff:e4:3e:
d6:7e:96:dd:cb:53:c0:73:f6:3d:15:9c:4a:c4:f7:e2:21:62:
74:90:eb:da:ce:cd:51:29:f2:cb:af:05:79:7f:a9:ff:d5:71:
ef:f9:8f:3e:2f:0f:08:b9:87:bc:09:1c:67:7f:d5:f8:ad:1e:
36:a4:6b:d4:3e:dc:b8:8d:70:14:ec:f3:15:27:23:98:92:8e:
94:07:d9:52:d5:30:8d:6b:2a:4a:02:64:56:e9:c6:50:e1:3d:
31:b4:dc:fe:ab:ac:e3:eb:91:e5:ae:e4:81:85:24:24:11:66:
de:5c:62:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 05:45:48 2025 by rpki-client