Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/F66nmw_9gnfRz1vGxzlxmQMgQys.roa
File: F66nmw_9gnfRz1vGxzlxmQMgQys.roa (raw, json)
Hash identifier: V2QUSY1nIUt0LG1yVgyvdzAwGo/lvS6oHhY3urqyJbE=
Subject key identifier: 17:AE:A7:9B:0F:FD:82:77:D1:CF:5B:C6:C7:39:71:99:03:20:43:2B
Certificate issuer: /CN=68cef722dabe5975ca4f9ba8616388ec6c656a20
Certificate serial: 019422FC32039D5293F4BFD1F93F9D9DD29F
Authority key identifier: 68:CE:F7:22:DA:BE:59:75:CA:4F:9B:A8:61:63:88:EC:6C:65:6A:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aM73Itq-WXXKT5uoYWOI7GxlaiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/F66nmw_9gnfRz1vGxzlxmQMgQys.roa
Signing time: Wed 01 Jan 2025 17:49:00 +0000
ROA not before: Wed 01 Jan 2025 17:49:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42910
IP address blocks: 91.240.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aM73Itq-WXXKT5uoYWOI7GxlaiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:32:03:9d:52:93:f4:bf:d1:f9:3f:9d:9d:d2:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68cef722dabe5975ca4f9ba8616388ec6c656a20
Validity
Not Before: Jan 1 17:49:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=17aea79b0ffd8277d1cf5bc6c73971990320432b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a5:b6:f7:a5:e0:3f:e7:c3:5c:b0:8f:f6:7e:
91:b2:d8:23:5d:af:e6:6d:2c:e5:22:9b:64:27:36:
cc:ea:64:08:c0:d0:df:ec:74:ce:d5:47:36:c4:73:
d3:6f:b3:62:10:ec:fa:a9:40:18:bc:17:47:d5:34:
a5:a4:1b:69:15:56:7a:94:33:54:2f:0d:b1:bb:53:
29:1e:18:d4:81:d0:80:a2:d1:e5:cc:19:86:bf:a1:
ee:4a:23:37:cf:a8:2a:6d:cc:2e:bc:a6:29:cf:65:
a9:04:7d:81:97:fd:06:64:ec:7b:76:97:82:0a:5b:
ce:9e:b2:67:ac:29:f8:6d:e9:e9:12:3f:9e:83:5e:
a7:34:f9:d4:fc:57:4c:eb:b0:d1:9d:f8:e4:bf:2b:
9a:60:c4:45:1f:d1:73:57:98:99:34:82:2f:7e:fa:
1d:75:c0:53:18:52:ec:ea:0b:70:d7:1d:03:7e:f4:
ed:c5:ab:e6:b1:19:41:7a:f9:72:4b:31:4b:e0:25:
3d:1a:92:5b:1c:87:d6:8c:8a:a1:a4:24:c3:63:58:
ca:db:b4:40:f1:e6:73:04:64:10:74:35:22:7b:0c:
06:9b:5d:d4:88:d4:4e:cb:7d:58:0a:57:f9:4f:e2:
94:5b:98:17:e0:3c:6c:11:1c:0b:05:f8:1f:d0:b8:
b8:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:AE:A7:9B:0F:FD:82:77:D1:CF:5B:C6:C7:39:71:99:03:20:43:2B
X509v3 Authority Key Identifier:
keyid:68:CE:F7:22:DA:BE:59:75:CA:4F:9B:A8:61:63:88:EC:6C:65:6A:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aM73Itq-WXXKT5uoYWOI7GxlaiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/F66nmw_9gnfRz1vGxzlxmQMgQys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.240.232.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:b0:63:20:3c:68:54:8a:cf:45:ec:71:df:cd:5b:c5:7e:46:
c8:75:5a:fb:74:7e:90:e9:63:1d:1d:bb:2c:a9:1a:c8:8a:90:
b2:83:0d:b6:13:06:8a:5c:e3:66:7b:3f:ce:92:7a:21:a4:c7:
05:60:f8:70:8a:31:22:30:85:d7:c5:58:9c:ef:0d:0d:41:75:
ce:32:fd:be:5a:21:1c:f4:5f:55:40:01:88:e1:6f:60:ac:a0:
95:15:c6:df:41:17:01:83:7a:dc:c6:0e:9c:cf:06:a0:15:3d:
76:e6:be:93:26:58:e4:23:82:bf:ac:4e:27:e7:94:a0:04:29:
b0:fb:30:4e:cc:52:94:c6:c4:84:11:46:40:6e:22:6a:08:b4:
bf:e3:9d:45:ff:dc:98:53:86:84:ef:09:ee:f9:66:d6:76:e6:
76:3c:65:3a:aa:b8:44:76:44:81:0e:ee:ec:93:e7:b4:b2:3b:
a0:e2:12:5f:b9:3b:b4:8f:9a:28:96:b4:4e:55:34:6e:ca:4d:
86:74:ba:72:6f:3f:1f:3a:17:65:2c:9d:51:a2:39:7f:35:7c:
d6:b0:49:83:08:d3:bc:40:6c:9e:82:e4:c6:86:80:7a:a6:23:
d4:54:35:ef:97:39:28:d2:c2:ff:95:79:98:9b:5c:8e:03:15:
f0:15:92:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:07:05 2025 by rpki-client