Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2f07e0-075d-4548-9c9a-155b357bd880/1/fbUeFXfkxWs40ix5vT2S2k90Z-k.roa
File: fbUeFXfkxWs40ix5vT2S2k90Z-k.roa (raw, json)
Hash identifier: UcP80IpCz9vBYWCvKMhbqTO9Etv9kTfCKFjSdIAUqCo=
Subject key identifier: 7D:B5:1E:15:77:E4:C5:6B:38:D2:2C:79:BD:3D:92:DA:4F:74:67:E9
Certificate issuer: /CN=268bc79531f7d815d2b2b5229f9ac9f6f8bfebca
Certificate serial: 0196EDA353AB73FBC73A9BD11BCDAB807AC9
Authority key identifier: 26:8B:C7:95:31:F7:D8:15:D2:B2:B5:22:9F:9A:C9:F6:F8:BF:EB:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JovHlTH32BXSsrUin5rJ9vi_68o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/2f07e0-075d-4548-9c9a-155b357bd880/1/fbUeFXfkxWs40ix5vT2S2k90Z-k.roa
Signing time: Tue 20 May 2025 12:20:26 +0000
ROA not before: Tue 20 May 2025 12:20:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49611
IP address blocks: 91.213.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/2f07e0-075d-4548-9c9a-155b357bd880/1/JovHlTH32BXSsrUin5rJ9vi_68o.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/2f07e0-075d-4548-9c9a-155b357bd880/1/JovHlTH32BXSsrUin5rJ9vi_68o.mft
rsync://rpki.ripe.net/repository/DEFAULT/JovHlTH32BXSsrUin5rJ9vi_68o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 18:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ed:a3:53:ab:73:fb:c7:3a:9b:d1:1b:cd:ab:80:7a:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=268bc79531f7d815d2b2b5229f9ac9f6f8bfebca
Validity
Not Before: May 20 12:20:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7db51e1577e4c56b38d22c79bd3d92da4f7467e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1f:32:ab:4d:dc:6c:0d:a0:04:f1:b5:67:2e:
d0:5c:e0:65:2d:25:83:3f:90:85:d7:6d:9a:2c:26:
b6:ad:c6:f6:89:2a:d3:20:eb:e7:c0:b7:95:29:4e:
50:b6:43:46:33:db:a0:e4:8b:2b:e8:f0:7c:df:03:
09:ab:ee:85:8c:e0:22:c0:d4:63:a1:36:aa:7a:01:
b7:6f:26:44:e7:00:9f:e2:59:f7:9e:44:db:db:ec:
ef:b1:8e:ab:e1:cd:dd:88:de:a7:6e:93:2e:86:04:
66:e5:4b:c9:32:05:47:6a:a1:22:11:44:3c:7d:5c:
81:70:fd:1a:34:78:bb:e7:8b:46:9a:12:0e:02:b2:
53:f0:f2:c8:f1:05:0e:c5:d9:52:32:f0:ba:41:c0:
d1:04:9a:14:4c:a2:78:92:ee:11:79:c5:a0:45:37:
52:be:c2:58:73:7d:31:6c:d4:30:cb:cd:3c:99:63:
5e:f6:02:ac:a0:f1:95:7f:2c:4a:96:4f:18:40:6f:
65:80:53:a9:66:00:9a:ce:fd:4a:0c:22:50:a6:9e:
01:e2:4f:f6:46:61:f4:41:bc:98:69:45:d5:9b:45:
c4:bb:64:2f:45:f2:ef:9e:4b:82:36:23:a7:8f:73:
c0:61:04:41:79:0a:a4:3c:38:0c:f0:1b:7d:79:6e:
cc:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:B5:1E:15:77:E4:C5:6B:38:D2:2C:79:BD:3D:92:DA:4F:74:67:E9
X509v3 Authority Key Identifier:
keyid:26:8B:C7:95:31:F7:D8:15:D2:B2:B5:22:9F:9A:C9:F6:F8:BF:EB:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JovHlTH32BXSsrUin5rJ9vi_68o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2f07e0-075d-4548-9c9a-155b357bd880/1/fbUeFXfkxWs40ix5vT2S2k90Z-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2f07e0-075d-4548-9c9a-155b357bd880/1/JovHlTH32BXSsrUin5rJ9vi_68o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.58.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:0e:5c:eb:5a:36:3b:f7:3d:7e:7b:79:7f:c4:fa:75:c6:c8:
84:62:83:5c:26:01:36:21:6e:51:75:61:de:51:6f:c5:d4:41:
36:99:3e:57:29:6d:68:08:79:8b:88:9c:4a:41:b6:07:dc:3e:
d6:52:3c:70:cb:d7:b9:1c:10:3f:17:ce:7b:a3:15:28:02:6a:
80:9b:0d:6f:95:34:64:19:b5:32:4e:72:b6:c8:d0:f5:4d:d3:
dc:d2:ec:d4:fa:67:84:50:0c:fa:0a:17:ca:38:3d:c2:aa:4d:
58:28:35:91:84:e1:99:8e:3e:a0:6f:b4:7d:29:20:24:2a:5e:
5c:92:81:5d:d0:44:78:f2:39:a1:7d:06:de:9c:e0:97:b2:66:
b4:eb:7f:dd:67:be:78:dd:ea:26:16:4c:ca:65:e9:87:62:ea:
8a:bc:e5:84:6a:9d:95:07:8a:66:0b:27:2e:b2:3d:2f:b1:60:
bf:09:82:7c:bc:af:de:41:50:b7:dc:f7:a9:62:ca:97:4c:70:
60:7c:ae:35:6b:9b:82:0d:b6:9a:2a:e0:55:93:f8:64:a6:98:
23:c2:ce:9a:4b:4c:c2:72:55:d9:43:6b:b8:2a:98:54:c7:c5:
7d:b6:14:7d:2d:60:3a:66:7d:95:b5:c4:2a:a9:c0:1b:c9:3e:
c8:b0:1b:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 02:58:23 2025 by rpki-client