Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Fkh2hiOOX1_9ZIsh1QOkg1uOFC8.roa
File: Fkh2hiOOX1_9ZIsh1QOkg1uOFC8.roa (raw, json)
Hash identifier: 4wHVTXOU9z+SM/PpUwslG9Qh7bHf21AbIIUgGIPuA60=
Subject key identifier: 16:48:76:86:23:8E:5F:5F:FD:64:8B:21:D5:03:A4:83:5B:8E:14:2F
Certificate issuer: /CN=2ebb3624b82f0e1e538b00919f442d200c7e3cd2
Certificate serial: 019427487D07DF01095FD832E2306E48E1E5
Authority key identifier: 2E:BB:36:24:B8:2F:0E:1E:53:8B:00:91:9F:44:2D:20:0C:7E:3C:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Fkh2hiOOX1_9ZIsh1QOkg1uOFC8.roa
Signing time: Thu 02 Jan 2025 13:50:49 +0000
ROA not before: Thu 02 Jan 2025 13:50:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31673
IP address blocks: 91.231.4.0/23 maxlen: 24
91.231.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:7d:07:df:01:09:5f:d8:32:e2:30:6e:48:e1:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ebb3624b82f0e1e538b00919f442d200c7e3cd2
Validity
Not Before: Jan 2 13:50:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=16487686238e5f5ffd648b21d503a4835b8e142f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d7:ac:8f:ab:c7:af:24:09:62:51:47:8f:e9:
ca:af:bd:c5:58:41:bc:ac:5c:a2:af:9d:42:b3:c9:
b2:8d:80:c0:82:e2:cc:a8:74:f1:98:60:d3:36:5d:
43:49:c2:be:f5:26:1c:47:5c:f7:6b:72:93:39:ac:
f9:8a:2f:93:7b:95:e1:fe:55:f1:94:fb:c4:60:95:
21:86:cc:67:92:be:64:23:63:b4:4f:53:83:ce:05:
10:33:b3:d2:04:21:46:44:a8:f4:0c:ba:e4:1f:f4:
cd:7a:dc:80:f0:fd:49:97:fc:2d:a3:8a:74:d2:b4:
cd:67:a4:7d:10:06:58:b0:bb:e9:3e:ac:1d:31:dd:
a9:79:d8:2c:2d:62:48:7d:dd:d6:24:d0:f9:e1:f3:
9a:d5:68:93:5e:52:c1:d5:25:96:2e:12:fd:a6:83:
19:38:3e:ad:79:f0:c2:6e:a3:d3:23:e5:5c:9d:21:
9d:41:19:76:e4:2d:5c:c7:c1:59:df:8a:8c:ca:ac:
4b:91:6b:76:94:df:4d:13:8d:a3:88:2b:15:4c:e2:
c8:01:35:13:5e:8f:82:56:ce:14:72:65:93:77:9d:
83:61:32:94:a2:78:3b:cd:6d:a3:7f:4b:f3:f6:60:
f7:68:9e:cf:c3:cf:6d:cb:7d:26:ba:42:5f:a0:e0:
4a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:48:76:86:23:8E:5F:5F:FD:64:8B:21:D5:03:A4:83:5B:8E:14:2F
X509v3 Authority Key Identifier:
keyid:2E:BB:36:24:B8:2F:0E:1E:53:8B:00:91:9F:44:2D:20:0C:7E:3C:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Fkh2hiOOX1_9ZIsh1QOkg1uOFC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/49bef1-401a-48d2-8746-267275e92570/1/Lrs2JLgvDh5TiwCRn0QtIAx-PNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.231.4.0-91.231.6.255
Signature Algorithm: sha256WithRSAEncryption
de:fa:81:1b:45:d4:3c:34:92:7f:e5:1e:2f:48:d3:fc:28:a8:
23:63:49:dd:cd:86:f6:bf:a5:1a:36:40:65:e8:8e:55:b1:9f:
83:9e:90:23:ea:ae:84:b5:91:7f:49:19:d5:5e:d7:b5:56:37:
e0:b9:11:c9:ef:ac:d4:8c:be:b2:85:0d:ba:0c:a5:1c:ee:f3:
7e:0b:35:fe:99:9b:a6:8a:25:d2:a7:19:34:d3:b7:00:9b:c3:
d8:56:1b:ad:39:6e:04:52:27:1e:b6:a5:0c:fb:03:2f:67:ac:
26:26:3e:18:ad:f4:1b:57:6b:da:f8:a1:5b:c0:6c:2a:2e:93:
a5:42:94:3d:9b:03:34:b2:2f:5f:4a:60:56:a0:f2:f0:cb:37:
26:9c:21:4a:42:b1:04:9a:64:36:7f:50:bb:fb:08:5e:26:71:
7e:35:a6:a8:2c:52:9c:36:88:6b:e9:45:de:66:7f:6c:5b:0e:
7f:73:3d:4e:a2:2a:89:22:29:e7:a3:7b:a2:17:a0:95:25:c5:
9d:e6:81:74:1a:d9:78:ce:4b:34:e3:97:f1:d4:08:08:a4:9e:
f9:d5:ec:c0:3b:e3:4b:59:28:0b:ca:bd:f0:d5:c2:0f:c0:4e:
0b:31:4c:76:95:8d:3c:b4:2f:41:78:4c:2c:83:a6:67:63:27:
36:37:a5:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:50:50 2025 by rpki-client