Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/fv5YNECYQOScxqIs8CQ4Mfvo6r4.roa
File: fv5YNECYQOScxqIs8CQ4Mfvo6r4.roa (raw, json)
Hash identifier: 1dbsSquUR6918Zz6dymdjZNTTgaYfI6MWJh2pSzjXy4=
Subject key identifier: 7E:FE:58:34:40:98:40:E4:9C:C6:A2:2C:F0:24:38:31:FB:E8:EA:BE
Certificate issuer: /CN=8b6e65b82fe4007e82fd2db134cf42c6aec4e0bc
Certificate serial: 01942369502BC2A34EF6A6E4F8FF355CFF4F
Authority key identifier: 8B:6E:65:B8:2F:E4:00:7E:82:FD:2D:B1:34:CF:42:C6:AE:C4:E0:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i25luC_kAH6C_S2xNM9Cxq7E4Lw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/fv5YNECYQOScxqIs8CQ4Mfvo6r4.roa
Signing time: Wed 01 Jan 2025 19:48:11 +0000
ROA not before: Wed 01 Jan 2025 19:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42586
IP address blocks: 91.225.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/i25luC_kAH6C_S2xNM9Cxq7E4Lw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/i25luC_kAH6C_S2xNM9Cxq7E4Lw.mft
rsync://rpki.ripe.net/repository/DEFAULT/i25luC_kAH6C_S2xNM9Cxq7E4Lw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 07:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:50:2b:c2:a3:4e:f6:a6:e4:f8:ff:35:5c:ff:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6e65b82fe4007e82fd2db134cf42c6aec4e0bc
Validity
Not Before: Jan 1 19:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7efe5834409840e49cc6a22cf0243831fbe8eabe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:86:61:26:48:f7:e8:9e:a4:b0:44:c1:fa:2c:
2e:d1:8c:8c:d0:93:76:59:78:d2:53:ee:99:e5:b0:
1e:d0:03:45:92:89:d3:e8:33:29:cd:03:1a:a1:1b:
35:49:74:19:0b:06:f4:9d:94:ef:fb:a2:24:a3:9e:
32:6b:d5:78:c2:00:14:e0:e5:a7:66:c2:2a:55:54:
47:01:41:18:92:8f:82:8d:8f:35:8c:be:3c:0d:57:
be:a9:9c:a1:e4:40:eb:58:2a:5c:6d:7f:60:33:8b:
05:8d:57:b2:18:2e:83:17:5d:81:78:da:a1:5f:43:
92:bc:99:9a:49:82:0e:7e:e0:e9:a8:65:b4:1e:01:
85:0f:69:d4:10:be:66:33:96:2e:23:8a:a9:dc:d1:
f0:32:29:9f:7b:01:92:f3:ea:5f:f4:db:d5:27:ee:
41:ff:62:34:20:cb:28:99:8c:36:57:09:6e:30:3a:
14:4e:ea:e4:4a:d2:9a:3c:d6:4c:c6:02:6a:4c:16:
6e:c6:04:3b:ee:b5:d5:bd:dd:b8:80:28:96:a8:59:
bf:cd:dd:23:33:0d:84:3a:7b:1b:c0:bc:9d:e5:e1:
3e:ba:1d:0c:4c:fd:f2:88:cb:87:1e:28:9f:84:1a:
e0:4a:8e:e5:33:73:6d:46:3c:d0:ef:38:a3:a6:6f:
a3:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:FE:58:34:40:98:40:E4:9C:C6:A2:2C:F0:24:38:31:FB:E8:EA:BE
X509v3 Authority Key Identifier:
keyid:8B:6E:65:B8:2F:E4:00:7E:82:FD:2D:B1:34:CF:42:C6:AE:C4:E0:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i25luC_kAH6C_S2xNM9Cxq7E4Lw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/fv5YNECYQOScxqIs8CQ4Mfvo6r4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/i25luC_kAH6C_S2xNM9Cxq7E4Lw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.225.52.0/24
Signature Algorithm: sha256WithRSAEncryption
35:32:80:d1:46:f5:68:40:09:d4:7e:da:b0:6e:55:25:23:a6:
90:31:28:67:e4:92:7b:53:3d:ba:56:d5:45:df:15:bd:10:24:
47:1b:3f:b6:8c:94:9b:3c:4d:bc:c9:e5:c6:42:9d:d0:e0:f7:
44:c2:e9:39:54:8f:86:c2:8c:bb:34:c7:a5:aa:5e:1f:7b:0f:
cf:76:b3:88:3e:a6:ce:27:58:47:db:ff:81:f9:ea:0b:21:ab:
ff:3b:a6:3f:b3:98:6a:aa:55:a8:3f:7f:40:90:4c:89:bf:e3:
e6:76:2d:e2:76:f6:f2:5d:4b:b2:d9:17:68:c0:66:3e:89:d6:
b7:d1:6a:90:03:f7:f8:68:78:ba:f5:ba:36:43:c2:24:c0:ee:
99:ce:3b:a3:9a:04:75:56:99:27:db:17:6f:06:cd:3e:17:f0:
a8:39:7b:1b:56:a1:94:1f:39:84:0d:81:01:ec:4f:14:fd:77:
09:e5:83:c3:d1:3a:6c:2d:ef:d1:06:b7:23:3a:6c:03:2b:4c:
f9:25:08:07:57:24:b2:e3:07:aa:c9:49:5b:0a:45:82:24:d4:
25:44:97:93:61:e6:39:49:85:99:22:96:62:a0:46:13:d4:ab:
c1:9f:b3:1f:ab:27:46:06:f3:32:e6:72:3a:a5:3b:42:36:20:
3b:58:4d:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 15:48:45 2025 by rpki-client