Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/F5ijuMA_Xb5WRen0Xi4Jo61niFU.roa
File: F5ijuMA_Xb5WRen0Xi4Jo61niFU.roa (raw, json)
Hash identifier: 7lkthzwPyq0Nlj6C7w8YmFjCDc9WUOXo1l3objgvoAw=
Subject key identifier: 17:98:A3:B8:C0:3F:5D:BE:56:45:E9:F4:5E:2E:09:A3:AD:67:88:55
Certificate issuer: /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Certificate serial: 019421B1D8E571CAD81DC83474A6479AB710
Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/F5ijuMA_Xb5WRen0Xi4Jo61niFU.roa
Signing time: Wed 01 Jan 2025 11:48:11 +0000
ROA not before: Wed 01 Jan 2025 11:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44768
IP address blocks: 91.120.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.mft
rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:d8:e5:71:ca:d8:1d:c8:34:74:a6:47:9a:b7:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Validity
Not Before: Jan 1 11:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1798a3b8c03f5dbe5645e9f45e2e09a3ad678855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:56:bd:77:2f:0e:eb:79:9f:c7:1f:34:b4:7d:
ad:2a:7b:93:be:0b:ab:b1:ba:4c:dd:a5:65:8a:da:
02:3d:88:21:29:1c:38:1c:93:ed:56:3c:35:26:fb:
88:c4:4b:ee:ba:79:7a:10:db:44:c7:f5:91:fa:6f:
c0:bc:43:55:0c:7b:2d:e7:89:47:63:ba:72:2c:a6:
de:9b:99:e8:cf:4f:df:5b:be:69:15:d5:d8:3c:7a:
03:4c:67:54:e8:7a:b5:06:73:f3:a0:da:31:02:e9:
4e:42:99:32:bc:07:48:88:eb:89:51:b0:87:47:82:
8c:b4:09:17:3b:af:ad:87:59:ba:0f:7e:0c:41:76:
f1:96:80:82:0d:b9:55:ed:92:b1:1d:9d:28:8c:30:
5b:80:cb:e9:b9:fb:88:15:63:7d:a6:a5:ee:6a:cf:
c2:de:81:fc:4c:0b:c3:6a:02:66:ce:45:b8:30:16:
f3:4b:16:3c:f7:d4:bb:5d:b5:6c:31:2e:db:8e:f8:
41:38:8e:f4:b9:81:ca:8a:53:c3:8d:01:0f:5d:bf:
1a:a1:8f:72:c3:70:18:0d:f4:e7:c8:a7:f1:eb:2f:
f2:cb:06:b6:61:35:b1:08:82:43:34:dd:a4:88:47:
7a:35:e6:b6:6f:17:49:1c:50:73:9d:68:cc:e1:e2:
7b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:98:A3:B8:C0:3F:5D:BE:56:45:E9:F4:5E:2E:09:A3:AD:67:88:55
X509v3 Authority Key Identifier:
keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/F5ijuMA_Xb5WRen0Xi4Jo61niFU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.120.29.0/24
Signature Algorithm: sha256WithRSAEncryption
57:04:88:62:ae:90:a1:4c:60:16:13:87:40:14:a0:12:08:c0:
15:a6:64:45:47:e9:10:bf:06:ac:22:01:04:6a:be:52:59:df:
2d:1a:44:89:ff:f4:2b:69:ba:ac:1c:55:cf:27:61:93:32:6c:
3c:91:7d:67:7e:f8:94:b6:2b:8e:c1:c2:eb:74:ea:bb:9f:4c:
c2:d2:b2:bd:47:cb:32:0d:d6:b3:c6:14:00:0c:04:e2:cf:e4:
87:8d:d5:24:3a:aa:70:34:2f:70:1a:ae:ce:ae:78:cf:3d:43:
1a:03:1d:6a:67:59:f7:c9:ee:43:be:3c:63:39:29:ef:68:04:
dc:47:f1:86:3c:af:92:ec:ef:dc:fc:5e:9d:b5:58:ec:25:d0:
b5:a7:99:63:7a:71:14:19:f6:fe:0b:92:5b:74:cf:43:54:74:
5f:3e:3b:78:af:3d:ba:ce:1d:c1:bc:a3:af:a4:93:99:5e:13:
74:37:f5:ad:9e:85:32:2e:e3:60:5b:65:d0:c7:d2:8f:87:d4:
93:80:ab:88:f2:74:52:c5:fa:d9:67:2e:45:fd:d3:e0:b9:ac:
90:4e:7e:e9:3f:37:4d:22:19:d7:20:28:a7:e5:bf:1e:05:3f:
70:50:48:59:21:8b:b3:0d:a3:da:59:1f:a2:cc:95:a7:c0:6b:
f8:38:71:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 16:22:20 2025 by rpki-client