Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/fLXiRPdHI-7ZXM738GnPEvoiyOc.roa
File: fLXiRPdHI-7ZXM738GnPEvoiyOc.roa (raw, json)
Hash identifier: mxOqTfa0/eUKhzvYGP8+UstSP5NK5/GLU01oehfJvC8=
Subject key identifier: 7C:B5:E2:44:F7:47:23:EE:D9:5C:CE:F7:F0:69:CF:12:FA:22:C8:E7
Certificate issuer: /CN=24f51bbdf01088d34c6baaeef86bda25a9f02196
Certificate serial: 01942444F1898C3B82FFF42818C0832D6DC5
Authority key identifier: 24:F5:1B:BD:F0:10:88:D3:4C:6B:AA:EE:F8:6B:DA:25:A9:F0:21:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JPUbvfAQiNNMa6ru-GvaJanwIZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/fLXiRPdHI-7ZXM738GnPEvoiyOc.roa
Signing time: Wed 01 Jan 2025 23:48:05 +0000
ROA not before: Wed 01 Jan 2025 23:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 40676
IP address blocks: 91.205.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JPUbvfAQiNNMa6ru-GvaJanwIZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:f1:89:8c:3b:82:ff:f4:28:18:c0:83:2d:6d:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24f51bbdf01088d34c6baaeef86bda25a9f02196
Validity
Not Before: Jan 1 23:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7cb5e244f74723eed95ccef7f069cf12fa22c8e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e1:e2:37:93:47:9a:3f:d1:8f:df:ce:ef:7d:
81:20:ac:d5:9b:27:4b:c9:8d:0e:c1:99:6d:34:d8:
91:40:4f:43:fb:5a:1a:ad:4e:fe:b3:90:4a:70:51:
47:5a:30:7c:41:ec:8f:18:c3:6a:8e:a3:ee:f1:4b:
18:23:58:d7:e6:70:f7:05:69:30:1f:c4:ea:52:6a:
f0:48:f9:62:89:79:4d:43:88:74:be:9b:b7:f5:27:
94:d5:1f:8b:75:52:c5:ee:98:17:74:77:c9:bf:6e:
4e:03:77:15:27:ae:c5:db:51:20:dd:5d:ad:6d:f5:
7e:c8:e3:5a:da:a3:83:7d:54:77:df:cb:c2:cd:57:
77:87:74:ec:3e:4b:8b:4c:c0:48:13:3e:04:47:8a:
12:80:91:33:ea:14:be:a0:58:31:3a:88:6f:39:82:
40:5e:22:a7:d3:6d:70:76:c9:aa:02:98:80:1d:f8:
31:d7:59:fe:79:27:f7:f8:f1:02:e5:5b:2b:47:dd:
90:de:78:db:67:d1:06:0f:6f:35:de:a7:bc:99:83:
fc:b7:1a:cb:bd:06:42:0c:ee:17:77:db:f8:d4:69:
10:b4:ce:90:5b:6e:10:bf:9e:f6:e2:c2:65:7b:d9:
ae:f5:3c:e6:47:7b:a9:12:37:f0:8e:e8:44:ec:71:
e2:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:B5:E2:44:F7:47:23:EE:D9:5C:CE:F7:F0:69:CF:12:FA:22:C8:E7
X509v3 Authority Key Identifier:
keyid:24:F5:1B:BD:F0:10:88:D3:4C:6B:AA:EE:F8:6B:DA:25:A9:F0:21:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JPUbvfAQiNNMa6ru-GvaJanwIZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/fLXiRPdHI-7ZXM738GnPEvoiyOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.205.221.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:c6:e4:2f:f8:57:38:93:5e:09:0d:bc:87:d1:f9:e9:d7:61:
44:f1:b3:0c:35:d7:2a:8c:3a:da:af:f6:98:98:24:96:38:64:
26:2a:84:80:0f:a3:76:ce:c3:67:ee:f9:cd:84:ea:7d:30:41:
0b:c0:1b:24:dc:3f:d8:3b:49:f4:d6:6e:11:0b:7d:c1:19:35:
bf:83:26:b2:e2:6f:fd:b7:89:65:e6:e0:10:b3:97:ab:40:24:
5b:44:16:88:66:9f:b2:8d:8f:00:51:e2:6e:ab:23:c9:45:90:
dd:58:cc:35:36:12:68:62:94:ad:5f:41:58:74:d5:77:c0:1c:
5e:9f:2c:1f:76:50:ce:e3:19:5c:c8:20:da:45:7d:ba:25:c3:
43:90:95:7e:32:21:b1:65:a2:ea:d6:27:2a:96:f1:db:07:f9:
72:2d:a2:55:00:12:40:55:43:9c:af:b2:78:30:1c:23:13:25:
b3:76:09:f7:63:1a:62:65:0d:bc:8b:a4:e1:08:11:90:40:f5:
1c:74:fd:99:2d:94:4b:52:91:9a:77:3c:16:e8:09:6d:13:27:
06:e0:7d:ea:77:8a:b5:3d:9f:81:a9:0c:35:64:b6:ff:3e:07:
e8:a1:b3:f4:45:e8:d9:8b:07:6f:17:c1:f4:b8:ed:5d:3c:56:
3e:b7:e5:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:10:42 2025 by rpki-client