Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/fnuqhATdgk7065LZ-MFpw_mk_Sk.roa
File: fnuqhATdgk7065LZ-MFpw_mk_Sk.roa (raw, json)
Hash identifier: MF0/pFOYDoQu2nRxFXy3gK33SujqFiXhgPkh2E7fsqk=
Subject key identifier: 7E:7B:AA:84:04:DD:82:4E:F4:EB:92:D9:F8:C1:69:C3:F9:A4:FD:29
Certificate issuer: /CN=a389e7035b08e181a341f37eda7343d23f1cafa4
Certificate serial: 0194258F045129E2D38B678E44494D7A506D
Authority key identifier: A3:89:E7:03:5B:08:E1:81:A3:41:F3:7E:DA:73:43:D2:3F:1C:AF:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o4nnA1sI4YGjQfN-2nND0j8cr6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/fnuqhATdgk7065LZ-MFpw_mk_Sk.roa
Signing time: Thu 02 Jan 2025 05:48:37 +0000
ROA not before: Thu 02 Jan 2025 05:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49788
IP address blocks: 91.240.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/o4nnA1sI4YGjQfN-2nND0j8cr6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:04:51:29:e2:d3:8b:67:8e:44:49:4d:7a:50:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a389e7035b08e181a341f37eda7343d23f1cafa4
Validity
Not Before: Jan 2 05:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7e7baa8404dd824ef4eb92d9f8c169c3f9a4fd29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:12:c6:7d:4e:06:a8:1d:ea:f0:1b:27:ea:94:
cf:7c:cb:59:c1:33:84:ac:f3:db:63:68:3e:dc:dc:
28:e8:70:a3:63:ec:e7:4e:ed:a7:d3:ac:25:0c:1a:
83:06:06:bc:fc:8b:cb:ce:a7:4b:31:43:08:9d:dd:
63:6e:08:00:8a:59:53:8a:b7:56:2b:ae:7e:52:df:
c8:69:d7:b3:fd:3c:a2:91:53:ad:c9:57:6b:0a:33:
c2:2d:0d:c6:f1:e7:aa:8f:08:6d:2f:f6:a5:cc:e2:
80:0b:f6:6b:b6:05:56:fd:2e:ce:52:b9:34:40:2c:
af:d9:88:f0:19:d0:b4:e5:f3:7c:5f:ea:59:96:ae:
16:d1:6c:dc:48:3b:4b:62:29:27:98:e1:32:a7:7f:
ef:2e:dd:4f:50:4c:74:b3:13:f4:31:d0:d9:48:8b:
58:51:0d:b6:b1:d1:41:58:45:8e:25:ec:ad:f5:33:
0c:09:0b:89:bd:0e:28:d2:71:01:35:65:70:ec:2d:
ab:ee:b4:7c:d6:ce:0a:2c:04:a8:75:7a:8c:2f:f9:
be:f1:22:cf:f4:f7:aa:12:1b:62:e4:f5:87:e5:39:
f8:b0:eb:49:f6:a6:f2:ac:b1:a6:71:e2:74:57:77:
33:c7:86:9b:5e:d4:12:e4:65:07:f4:29:bb:ed:d0:
f6:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:7B:AA:84:04:DD:82:4E:F4:EB:92:D9:F8:C1:69:C3:F9:A4:FD:29
X509v3 Authority Key Identifier:
keyid:A3:89:E7:03:5B:08:E1:81:A3:41:F3:7E:DA:73:43:D2:3F:1C:AF:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o4nnA1sI4YGjQfN-2nND0j8cr6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/fnuqhATdgk7065LZ-MFpw_mk_Sk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.240.204.0/24
Signature Algorithm: sha256WithRSAEncryption
92:a2:ae:74:49:10:31:1b:97:f1:b8:16:6b:9e:9b:df:ca:b3:
c0:b7:4c:bf:dc:a7:a0:26:49:bc:2e:63:e0:de:7d:9c:22:d6:
44:26:ce:05:05:9c:23:96:8b:4a:20:8c:39:60:3f:55:ea:74:
a2:65:fd:87:a1:c5:40:18:de:9b:b7:ae:df:7f:79:b4:98:87:
a0:df:c0:10:d9:c3:ec:9d:96:b2:4e:99:f2:90:dc:9c:aa:3c:
87:93:89:55:37:9e:ca:25:71:6b:fd:d8:8e:ca:59:85:b7:3d:
11:97:59:ca:2b:48:02:81:5f:ae:9c:19:db:95:9b:c7:2d:6d:
05:20:08:b5:cb:5e:34:52:f3:ff:ca:12:c5:8d:ec:3b:d8:23:
83:a8:5f:80:31:e9:e9:c2:29:96:60:a6:0c:24:c1:1a:9b:e5:
45:91:e6:99:03:2b:aa:4d:e1:2f:e8:d8:cb:f9:b7:92:b2:07:
33:e5:4f:47:dd:dc:82:bd:3e:87:d7:3b:9c:21:4c:98:8e:7a:
16:93:60:65:d1:7f:04:26:53:f1:94:d1:4b:df:b5:d1:e9:a2:
fe:c9:d3:c3:9e:53:37:7c:f3:f7:38:25:78:5d:9f:1f:07:fd:
d2:3a:ca:4a:79:92:c6:43:12:dd:a8:0c:27:66:60:03:8b:af:
1d:b8:8f:03
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQljwRRKeLTi2eORElNelBtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzODllNzAzNWIwOGUxODFhMzQxZjM3ZWRhNzM0M2QyM2Yx
Y2FmYTQwHhcNMjUwMTAyMDU0ODM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZTdiYWE4NDA0ZGQ4MjRlZjRlYjkyZDlmOGMxNjljM2Y5YTRmZDI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+xLGfU4GqB3q8Bsn6pTPfMtZwTOE
rPPbY2g+3Nwo6HCjY+znTu2n06wlDBqDBga8/IvLzqdLMUMInd1jbggAillTirdW
K65+Ut/Iadez/TyikVOtyVdrCjPCLQ3G8eeqjwhtL/alzOKAC/ZrtgVW/S7OUrk0
QCyv2YjwGdC05fN8X+pZlq4W0WzcSDtLYiknmOEyp3/vLt1PUEx0sxP0MdDZSItY
UQ22sdFBWEWOJeyt9TMMCQuJvQ4o0nEBNWVw7C2r7rR81s4KLASodXqML/m+8SLP
9PeqEhti5PWH5Tn4sOtJ9qbyrLGmceJ0V3czx4abXtQS5GUH9Cm77dD2AQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH57qoQE3YJO9OuS2fjBacP5pP0pMB8GA1UdIwQY
MBaAFKOJ5wNbCOGBo0HzftpzQ9I/HK+kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzRubkExc0k0WUdqUWZOLTJuTkQwajhjcjZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9mMDUzY2QtMWQ3OS00M2ExLTlhYWIt
MGU3MjQxNmI0ZGM3LzEvZm51cWhBVGRnazcwNjVMWi1NRnB3X21rX1NrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9mMDUzY2QtMWQ3OS00M2ExLTlhYWItMGU3MjQxNmI0ZGM3
LzEvbzRubkExc0k0WUdqUWZOLTJuTkQwajhjcjZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW/DMMA0G
CSqGSIb3DQEBCwUAA4IBAQCSoq50SRAxG5fxuBZrnpvfyrPAt0y/3KegJkm8LmPg
3n2cItZEJs4FBZwjlotKIIw5YD9V6nSiZf2HocVAGN6bt67ff3m0mIeg38AQ2cPs
nZayTpnykNycqjyHk4lVN57KJXFr/diOylmFtz0Rl1nKK0gCgV+unBnblZvHLW0F
IAi1y140UvP/yhLFjew72CODqF+AMenpwimWYKYMJMEam+VFkeaZAyuqTeEv6NjL
+beSsgcz5U9H3dyCvT6H1zucIUyYjnoWk2Bl0X8EJlPxlNFL37XR6aL+ydPDnlM3
fPP3OCV4XZ8fB/3SOspKeZLGQxLdqAwnZmADi68duI8D
-----END CERTIFICATE-----
Generated at Sat Apr 5 08:56:07 2025 by rpki-client