Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/66908c-d5cb-47c8-bfce-c9c12b866078/1/fiJWC8ddg3-RMvnLmmNHKEtDpC4.roa
File: fiJWC8ddg3-RMvnLmmNHKEtDpC4.roa (raw, json)
Hash identifier: +jcPkN0cWNwP620eirlv12vXP4bDJPvRMmAHlZSYorg=
Subject key identifier: 7E:22:56:0B:C7:5D:83:7F:91:32:F9:CB:9A:63:47:28:4B:43:A4:2E
Certificate issuer: /CN=98fd440cbbb04b969b92bb6b39c0bbb41634cd12
Certificate serial: 0194258E4F40AC89FDA1FD28F5EF686B760A
Authority key identifier: 98:FD:44:0C:BB:B0:4B:96:9B:92:BB:6B:39:C0:BB:B4:16:34:CD:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mP1EDLuwS5abkrtrOcC7tBY0zRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/66908c-d5cb-47c8-bfce-c9c12b866078/1/fiJWC8ddg3-RMvnLmmNHKEtDpC4.roa
Signing time: Thu 02 Jan 2025 05:47:50 +0000
ROA not before: Thu 02 Jan 2025 05:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2914
IP address blocks: 91.212.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/66908c-d5cb-47c8-bfce-c9c12b866078/1/mP1EDLuwS5abkrtrOcC7tBY0zRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/66908c-d5cb-47c8-bfce-c9c12b866078/1/mP1EDLuwS5abkrtrOcC7tBY0zRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mP1EDLuwS5abkrtrOcC7tBY0zRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:4f:40:ac:89:fd:a1:fd:28:f5:ef:68:6b:76:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98fd440cbbb04b969b92bb6b39c0bbb41634cd12
Validity
Not Before: Jan 2 05:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7e22560bc75d837f9132f9cb9a6347284b43a42e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fb:19:9b:b9:da:7a:83:6a:64:79:18:fd:8e:
cd:4d:50:f2:7c:9b:c9:2d:4e:e4:a9:a2:01:b2:35:
6f:8a:bd:6c:af:99:76:10:4d:0c:68:6f:9e:13:dc:
f5:6e:65:65:28:74:56:0c:fd:92:5f:d7:f6:13:7d:
2d:43:6a:c2:a8:d5:69:5b:32:2d:1f:30:e2:7e:d2:
9b:8e:bd:77:66:57:1b:e4:37:a2:d4:4d:b2:1a:14:
d8:69:dc:f8:c1:8a:02:89:de:85:76:e5:fd:0a:8a:
f7:1a:ba:52:dc:31:78:bd:88:39:a5:a5:02:b8:bb:
f3:da:0a:fb:d0:95:94:47:a1:70:d8:84:f7:a0:c0:
ce:3b:a1:70:bc:4d:aa:80:89:ce:af:58:f1:ff:aa:
43:0e:b5:a9:a3:44:1f:5c:8c:7c:75:b2:cf:ea:54:
d0:55:f1:2b:46:2c:0e:34:f7:82:79:f5:21:ba:29:
85:f4:22:74:a8:1e:75:01:dc:24:e2:2b:54:c2:c8:
02:27:6b:f3:ed:03:7c:41:9c:22:87:89:b1:81:e5:
89:d5:e2:28:7e:71:7c:31:b3:19:20:7c:9b:a4:ec:
6e:98:b7:b6:8b:fc:8a:c8:70:42:76:b1:72:b8:1e:
2c:49:af:63:38:f5:69:20:56:53:72:90:b0:2a:32:
db:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:22:56:0B:C7:5D:83:7F:91:32:F9:CB:9A:63:47:28:4B:43:A4:2E
X509v3 Authority Key Identifier:
keyid:98:FD:44:0C:BB:B0:4B:96:9B:92:BB:6B:39:C0:BB:B4:16:34:CD:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mP1EDLuwS5abkrtrOcC7tBY0zRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/66908c-d5cb-47c8-bfce-c9c12b866078/1/fiJWC8ddg3-RMvnLmmNHKEtDpC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/66908c-d5cb-47c8-bfce-c9c12b866078/1/mP1EDLuwS5abkrtrOcC7tBY0zRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.152.0/24
Signature Algorithm: sha256WithRSAEncryption
25:e9:48:4b:d3:17:24:a5:78:73:31:62:1b:17:a4:6b:47:b0:
83:47:9d:e2:6d:33:9f:94:e5:5c:08:9b:e1:43:68:58:98:43:
c0:d6:1a:9b:19:e8:7c:4b:46:3d:f5:a8:f7:2d:b8:36:18:2c:
25:8a:bb:3e:1f:e8:bd:00:74:cc:99:75:aa:6d:79:ef:2a:8f:
71:c6:b3:51:f1:3e:5c:8a:54:de:f0:4f:a9:5e:04:e4:42:05:
11:33:28:b6:62:0c:e5:ca:fd:ad:bb:c6:0e:49:a7:df:06:4b:
bb:83:5e:c2:be:50:20:36:5e:95:e4:23:b6:3a:72:80:f0:06:
9c:41:08:c6:5d:b8:4a:69:ca:fd:d6:70:c6:92:bd:08:dc:bb:
25:cd:34:73:cf:9e:96:7d:ba:be:de:6c:c7:60:3c:ce:4f:2c:
ec:5c:90:bb:29:57:86:2a:80:e2:73:e7:70:55:44:44:a8:e5:
ce:6e:19:9e:e5:3a:f1:12:17:37:80:32:8e:cc:d5:44:79:eb:
84:1d:1d:c5:4e:6c:9a:f7:94:7e:0e:c8:9b:e7:7d:bc:e4:32:
57:bb:72:a6:fb:fb:dc:15:5a:6d:18:9a:3b:09:4a:8f:69:be:
ba:fd:49:be:01:82:01:86:74:18:c0:db:15:3f:53:e4:17:fc:
58:59:48:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:35:04 2025 by rpki-client