Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/f7NzzdifL8oVbmQEX_FaWaX9d8Y.roa
File: f7NzzdifL8oVbmQEX_FaWaX9d8Y.roa (raw, json)
Hash identifier: f6fUQrnWj0Ply8n/xjNr8BkToE1SYVL6yBIWZoWRSsQ=
Subject key identifier: 7F:B3:73:CD:D8:9F:2F:CA:15:6E:64:04:5F:F1:5A:59:A5:FD:77:C6
Certificate issuer: /CN=745dba56cf1ffc2cfc1d05f4fa833117efd7c78a
Certificate serial: 0194266ABF7ED09FF68F5EAC5E8CBE19050A
Authority key identifier: 74:5D:BA:56:CF:1F:FC:2C:FC:1D:05:F4:FA:83:31:17:EF:D7:C7:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/f7NzzdifL8oVbmQEX_FaWaX9d8Y.roa
Signing time: Thu 02 Jan 2025 09:48:37 +0000
ROA not before: Thu 02 Jan 2025 09:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8075
IP address blocks: 91.242.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 15:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6a:bf:7e:d0:9f:f6:8f:5e:ac:5e:8c:be:19:05:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=745dba56cf1ffc2cfc1d05f4fa833117efd7c78a
Validity
Not Before: Jan 2 09:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7fb373cdd89f2fca156e64045ff15a59a5fd77c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:58:11:bf:d3:fb:42:9d:b6:d0:04:2c:f4:f7:
73:a1:af:bd:1b:3e:60:9a:1e:a1:2f:c5:0e:a0:69:
f1:1b:6a:f6:16:92:3c:47:f9:db:69:f6:6b:bf:c9:
4a:09:db:41:42:98:85:94:97:bc:9b:aa:1b:fa:f3:
28:87:43:b8:6b:75:b8:42:89:fd:62:57:21:59:78:
be:13:79:84:c2:12:5c:54:eb:6e:8c:2e:cd:57:2a:
9f:b0:62:1e:55:eb:7b:0c:ab:6e:f4:b9:3c:60:4d:
22:1b:f0:a4:11:ca:0c:d0:c2:2c:05:70:88:02:20:
32:b5:fb:53:d4:b2:a0:01:82:79:5d:1d:d8:9d:ad:
e5:0c:a3:7a:62:f1:cf:7d:bc:5f:42:3d:f5:9b:19:
b3:8c:90:96:35:48:2a:52:0b:8b:9f:2d:f6:f3:72:
ed:c1:29:4a:ad:a7:92:32:52:7b:86:c5:82:0f:a1:
69:42:7f:98:00:c3:a4:90:80:5b:07:7a:59:92:c8:
8f:b9:55:8e:08:42:4a:86:39:a2:90:44:87:3c:0c:
3c:a7:d6:4f:bd:66:99:ad:37:1a:23:c0:9f:2f:dd:
cc:9c:40:7a:5b:17:3c:55:9c:fa:12:54:ca:45:6d:
80:6a:f9:4f:d6:90:78:f4:83:be:9c:13:80:4d:10:
3c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:B3:73:CD:D8:9F:2F:CA:15:6E:64:04:5F:F1:5A:59:A5:FD:77:C6
X509v3 Authority Key Identifier:
keyid:74:5D:BA:56:CF:1F:FC:2C:FC:1D:05:F4:FA:83:31:17:EF:D7:C7:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/f7NzzdifL8oVbmQEX_FaWaX9d8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.222.0/24
Signature Algorithm: sha256WithRSAEncryption
69:c8:4c:27:94:70:31:9b:97:45:25:de:ed:6f:35:bc:2a:f8:
a4:55:11:09:21:0f:08:a1:c9:89:5c:76:0e:19:fa:d0:09:07:
ff:22:18:ca:ec:52:7f:93:55:3d:2c:54:97:a3:d7:06:f0:cb:
81:ae:6a:02:36:ee:85:03:bd:2e:48:ef:83:24:51:e7:31:cb:
c1:85:35:d7:7e:d2:4b:07:db:75:3c:c0:e2:95:b1:0f:76:9c:
d3:78:3e:a0:b8:80:5c:de:3e:e0:c4:96:d4:4f:78:43:7e:5e:
99:2c:37:1c:f0:b5:a0:6f:9a:7f:59:a2:81:6d:b3:90:79:bb:
84:82:a3:18:9c:40:90:99:24:41:f2:ef:c1:2f:fb:cf:f0:e4:
a7:e1:2a:df:68:69:1b:60:32:a7:e9:43:35:b8:ed:2e:77:63:
be:c1:13:3c:55:f1:ca:ae:61:2f:43:cb:df:f2:4b:c2:1c:64:
a7:be:65:1c:30:33:9a:ce:1d:fe:f3:d2:17:ec:96:f8:cc:84:
67:55:72:40:c0:a3:95:a6:ae:ad:dc:8b:03:47:92:f3:48:e1:
89:eb:72:6d:96:6a:e2:a6:59:ce:e6:4e:4f:61:b9:b6:94:ac:
75:43:3d:c1:52:bc:d2:1f:17:4e:54:40:e5:6e:ed:30:4d:de:
70:cd:38:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:58:25 2025 by rpki-client