Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/f60EmIZKa-1VrYL_MeAVCpnK1Bw.roa
File: f60EmIZKa-1VrYL_MeAVCpnK1Bw.roa (raw, json)
Hash identifier: V7fZBYf3+IM758mKxyijYRokDtoZy64QV7izw1/QisI=
Subject key identifier: 7F:AD:04:98:86:4A:6B:ED:55:AD:82:FF:31:E0:15:0A:99:CA:D4:1C
Certificate issuer: /CN=fd8ec3435380e8ae15fc81cddcc94cee67d6b390
Certificate serial: 0194258FBF60DF51B60B623B410BF371D9B1
Authority key identifier: FD:8E:C3:43:53:80:E8:AE:15:FC:81:CD:DC:C9:4C:EE:67:D6:B3:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/f60EmIZKa-1VrYL_MeAVCpnK1Bw.roa
Signing time: Thu 02 Jan 2025 05:49:25 +0000
ROA not before: Thu 02 Jan 2025 05:49:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56998
IP address blocks: 91.229.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:bf:60:df:51:b6:0b:62:3b:41:0b:f3:71:d9:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd8ec3435380e8ae15fc81cddcc94cee67d6b390
Validity
Not Before: Jan 2 05:49:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7fad0498864a6bed55ad82ff31e0150a99cad41c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e5:16:cf:3e:ee:cf:9c:04:b1:6d:81:74:fb:
8e:2a:4f:13:de:64:1e:0a:2d:a4:25:45:ed:53:10:
3c:98:0c:2c:a8:cd:b2:67:aa:50:e5:2a:97:3e:66:
4a:0f:1a:be:25:0f:14:9e:d6:56:20:cb:b2:4a:6f:
6f:e0:14:7a:ea:98:07:54:7e:dc:bb:fc:03:73:58:
61:26:e5:dd:c1:34:3c:8b:d5:d7:3d:38:80:b4:cf:
96:6c:47:fa:5e:e9:20:47:6f:55:28:1e:b8:8a:46:
07:e6:9c:08:62:c1:b5:01:f2:7e:4e:30:2b:89:cb:
35:01:03:a4:ed:02:6d:6c:c5:46:ea:17:6f:a2:19:
91:b2:f8:b2:74:67:41:8e:ab:9a:e3:69:29:13:00:
0c:2a:a9:19:b9:26:59:8d:9c:3e:50:cc:33:6f:dd:
a5:90:34:b8:59:08:85:f4:9a:c9:8a:9c:9d:c4:b9:
0e:21:a8:fc:f6:07:34:2d:2a:6d:63:ed:44:5a:31:
cd:7f:04:7e:63:b7:d4:7c:91:2a:e5:04:a1:f9:a4:
f9:37:f5:3e:3b:fd:90:75:05:14:a1:8b:57:5c:d6:
7b:17:b5:53:44:6f:0a:c5:4e:cf:8c:5c:0c:69:b7:
16:82:db:44:5e:b0:cd:1b:a2:b9:9e:38:80:0c:ba:
34:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:AD:04:98:86:4A:6B:ED:55:AD:82:FF:31:E0:15:0A:99:CA:D4:1C
X509v3 Authority Key Identifier:
keyid:FD:8E:C3:43:53:80:E8:AE:15:FC:81:CD:DC:C9:4C:EE:67:D6:B3:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/f60EmIZKa-1VrYL_MeAVCpnK1Bw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.229.184.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:b9:bd:8e:97:86:5a:7e:16:eb:be:4a:c9:03:54:a9:71:23:
57:8a:59:fd:d8:9c:28:6e:e8:22:62:4d:10:a5:1c:3a:5b:3f:
d7:63:cc:2a:40:f6:06:a8:f0:ed:51:b8:51:8e:62:7c:aa:17:
64:2e:03:a6:83:34:3b:a3:40:5d:21:37:3b:8f:ec:74:d4:3f:
cf:4e:64:79:98:27:2c:fb:b8:be:d9:a3:54:40:ad:31:c6:dc:
9e:2f:01:ab:bb:7d:08:cc:62:7c:64:8d:5d:31:76:25:9e:90:
b3:c9:32:95:b3:50:d9:3f:0f:12:21:b3:de:96:d8:b0:a3:86:
60:be:30:b6:44:84:b1:28:db:e0:17:14:42:31:18:41:65:75:
1b:23:66:99:01:30:69:3c:51:2a:5b:ff:a4:03:aa:47:8b:8e:
aa:a2:a2:9e:aa:c9:bd:e5:26:db:a8:0b:10:bb:86:a6:35:9a:
36:8c:c7:5a:06:0c:14:ba:98:1d:8f:25:09:6c:ac:ab:65:c9:
e0:d8:62:46:c3:68:1e:99:f3:72:91:97:40:0a:3f:9f:cb:4d:
05:50:ce:ac:ab:61:e3:21:5b:d9:43:e5:bd:69:a1:2a:23:1d:
76:49:dd:1c:64:36:30:0d:de:d2:7a:7b:b4:84:70:2e:76:48:
e6:df:87:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:47:45 2025 by rpki-client