Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/8abb58-f30c-4f3b-b992-9becc136cc71/1/_M5AIVuzgXvHBKWny-Hh6G3pi1U.roa
File: _M5AIVuzgXvHBKWny-Hh6G3pi1U.roa (raw, json)
Hash identifier: kH4DLz70GCvpi7gNL0YvgZWTRLs57t6MIq2nfE5Mbu8=
Subject key identifier: FC:CE:40:21:5B:B3:81:7B:C7:04:A5:A7:CB:E1:E1:E8:6D:E9:8B:55
Certificate issuer: /CN=ece6498d174adf5c89a365c2d1e477dcf24f982e
Certificate serial: 019422FB22FC7D7361DE84071841345E16E4
Authority key identifier: EC:E6:49:8D:17:4A:DF:5C:89:A3:65:C2:D1:E4:77:DC:F2:4F:98:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7OZJjRdK31yJo2XC0eR33PJPmC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/8abb58-f30c-4f3b-b992-9becc136cc71/1/_M5AIVuzgXvHBKWny-Hh6G3pi1U.roa
Signing time: Wed 01 Jan 2025 17:47:51 +0000
ROA not before: Wed 01 Jan 2025 17:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49308
IP address blocks: 91.212.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/8abb58-f30c-4f3b-b992-9becc136cc71/1/7OZJjRdK31yJo2XC0eR33PJPmC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/8abb58-f30c-4f3b-b992-9becc136cc71/1/7OZJjRdK31yJo2XC0eR33PJPmC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/7OZJjRdK31yJo2XC0eR33PJPmC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:22:fc:7d:73:61:de:84:07:18:41:34:5e:16:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ece6498d174adf5c89a365c2d1e477dcf24f982e
Validity
Not Before: Jan 1 17:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fcce40215bb3817bc704a5a7cbe1e1e86de98b55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9a:99:cc:1a:39:da:e7:a2:e4:ca:5a:c5:a9:
6e:55:3b:3f:4b:fc:a1:6d:82:51:b6:78:fb:bc:3e:
2c:ba:e9:23:4b:df:0d:80:77:6d:9f:f6:e5:da:de:
9d:04:87:fd:ed:5d:dc:a0:7a:f4:09:e9:aa:e7:d2:
1e:b9:15:1c:75:76:6f:0b:2e:f3:6e:02:23:35:3d:
be:b5:2e:e1:df:39:e4:89:43:43:ab:0a:c4:67:96:
64:90:77:96:15:fc:99:1a:a6:06:21:2e:8e:a9:2e:
77:ab:0b:c2:c3:af:65:67:73:af:48:cd:ed:8d:c3:
0c:38:f3:d3:f6:bf:b1:dd:bb:5e:3a:2c:b4:14:df:
9d:54:cf:a3:ee:fe:37:fc:fa:ed:98:9c:9e:12:80:
ec:95:49:74:f0:62:83:af:95:84:b4:6a:96:2a:03:
fc:2e:ce:36:82:a9:0c:cc:66:84:09:20:cc:f7:60:
58:d9:ac:fe:3c:69:a6:f8:a3:43:fe:e4:e4:ad:fb:
fa:18:0c:78:4c:5b:43:91:8b:82:ae:46:1e:27:20:
c9:0e:31:1e:2f:c3:5a:1a:b0:18:6e:4b:ac:44:b1:
11:24:c4:88:fb:7f:a1:46:4f:f8:2c:73:1b:7d:97:
ee:e0:f5:c1:40:70:4d:16:7f:22:86:4e:7f:28:c2:
00:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:CE:40:21:5B:B3:81:7B:C7:04:A5:A7:CB:E1:E1:E8:6D:E9:8B:55
X509v3 Authority Key Identifier:
keyid:EC:E6:49:8D:17:4A:DF:5C:89:A3:65:C2:D1:E4:77:DC:F2:4F:98:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7OZJjRdK31yJo2XC0eR33PJPmC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8abb58-f30c-4f3b-b992-9becc136cc71/1/_M5AIVuzgXvHBKWny-Hh6G3pi1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8abb58-f30c-4f3b-b992-9becc136cc71/1/7OZJjRdK31yJo2XC0eR33PJPmC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.189.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:8a:e3:91:6f:77:b3:08:b2:d4:e1:e8:5b:c1:e0:09:2b:c6:
6b:de:74:d6:99:14:66:2e:4e:5c:36:52:1f:04:56:e5:31:47:
80:df:a8:86:12:60:d5:1d:a9:14:7a:2f:94:d2:e6:ab:13:1f:
b6:12:b4:55:56:9e:cc:6c:ce:cd:e3:b4:a6:03:54:bf:c3:fb:
2e:53:26:8b:52:67:16:6c:e7:e0:66:62:51:0a:b8:1c:71:2b:
de:b8:57:ee:1f:c3:4a:54:29:44:ad:db:12:2a:37:73:3c:77:
1d:c8:c3:0e:54:ad:22:15:99:f7:cc:6f:5c:8d:3a:16:12:ba:
be:a4:8a:66:dd:77:73:9b:26:3d:4e:e2:d3:2e:ee:26:52:74:
2f:10:c5:52:f5:cc:f3:a0:0c:d7:38:7e:53:7e:0c:07:c1:af:
6e:0b:82:58:99:64:f5:f0:86:8e:bd:0f:1f:85:53:2d:d2:40:
56:5b:ea:f8:30:77:6e:dc:ce:2e:19:c9:69:9a:44:55:24:29:
1d:eb:da:9b:41:ec:c2:e8:92:c2:64:89:b8:df:a1:ae:29:92:
ac:72:7e:96:97:de:41:be:7d:cb:fc:41:a2:e6:b1:46:cd:96:
1d:c0:e5:0d:ff:07:4f:9d:b1:03:ed:d5:3e:5f:7a:c4:d4:54:
0a:4a:6e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:35:56 2025 by rpki-client