Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/fTlQ_aFq0HxtikyWXBVM7-ai5xg.roa
File: fTlQ_aFq0HxtikyWXBVM7-ai5xg.roa (raw, json)
Hash identifier: bP/GLXVxFeAxAAJqxWAhSYOyK1jAs2dAu7nJ/iPPogI=
Subject key identifier: 7D:39:50:FD:A1:6A:D0:7C:6D:8A:4C:96:5C:15:4C:EF:E6:A2:E7:18
Certificate issuer: /CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Certificate serial: 01977E312A925DDE343FA9BE36D57454F1F2
Authority key identifier: 27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/fTlQ_aFq0HxtikyWXBVM7-ai5xg.roa
Signing time: Tue 17 Jun 2025 14:00:40 +0000
ROA not before: Tue 17 Jun 2025 14:00:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56582
IP address blocks: 91.102.160.0/23 maxlen: 23
91.102.164.0/24 maxlen: 24
91.102.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7e:31:2a:92:5d:de:34:3f:a9:be:36:d5:74:54:f1:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Validity
Not Before: Jun 17 14:00:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7d3950fda16ad07c6d8a4c965c154cefe6a2e718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:ba:9a:c5:24:a5:79:09:01:37:27:f9:d6:c0:
bf:56:2b:0e:1c:5f:1c:cd:2f:3b:99:cc:55:3b:7a:
89:73:df:63:cb:a2:c3:69:57:b7:8f:b6:97:c4:15:
42:c7:50:3a:4e:01:24:c2:b4:e2:4b:10:dc:48:e0:
5f:02:6f:ef:ca:00:bb:eb:4e:aa:f6:8e:be:a0:1a:
20:eb:83:42:19:fe:60:20:37:be:c9:fd:98:ec:d9:
7e:88:e0:cc:62:9e:93:b4:be:2a:ad:5c:30:7a:d1:
51:b2:10:e3:3b:ae:9b:94:9c:c2:66:3c:27:81:0e:
25:2f:a8:86:02:4d:80:2e:78:aa:e8:84:e1:59:6e:
39:06:08:5a:e2:10:9d:fb:db:f8:ec:2d:67:eb:d3:
85:0b:49:66:ba:f0:54:f0:ce:0c:b2:80:02:1d:b8:
f4:10:a7:55:f6:29:b3:0f:b3:18:69:5e:51:00:bb:
e8:c8:1f:4e:a1:69:02:3f:d3:11:b5:dd:d5:c4:8d:
f8:75:a0:fe:91:c6:61:ee:99:1d:6b:19:a0:eb:98:
c4:43:88:23:3f:77:fd:dc:49:52:f9:c7:1a:e1:ce:
ac:ad:4b:95:a1:ac:49:eb:71:aa:7f:d1:ee:dd:ff:
00:7d:5f:f1:6d:a0:f6:4b:03:34:1e:16:47:4d:df:
ad:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:39:50:FD:A1:6A:D0:7C:6D:8A:4C:96:5C:15:4C:EF:E6:A2:E7:18
X509v3 Authority Key Identifier:
keyid:27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/fTlQ_aFq0HxtikyWXBVM7-ai5xg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.102.160.0/23
91.102.164.0/24
91.102.167.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:49:37:4a:27:6d:1b:2d:de:73:1a:9b:a7:83:05:a9:db:01:
90:fe:de:8c:17:86:0c:9d:0c:bd:01:be:52:67:64:f0:1a:b6:
36:7a:67:c7:20:66:25:9e:1e:23:75:d4:b9:86:4b:5a:f6:ee:
64:ce:77:08:b5:76:02:a1:cd:3c:4f:0f:c0:93:d6:c0:88:fa:
39:20:9a:6e:8e:35:b1:5c:80:3b:ab:5b:39:6a:6e:d3:ef:67:
f7:50:49:4f:36:79:23:59:51:c9:bf:d8:34:da:cd:be:cc:99:
91:9d:8a:3a:59:e1:06:98:9a:17:0d:82:d2:01:6f:33:3f:ba:
7c:0b:54:c0:48:10:bf:4a:c9:45:cd:7e:10:3b:4d:6c:22:50:
8e:18:0f:a8:ea:b3:8d:77:b8:a9:e6:55:4c:bb:1f:be:7e:e7:
fe:90:f8:9b:63:65:b3:03:91:85:27:44:4d:29:4d:58:2f:ef:
ca:ff:9c:de:91:c0:33:3b:ac:85:e8:1b:2f:4b:e5:58:bf:08:
3d:e5:bc:6e:f5:6e:42:24:64:22:bf:94:1a:bc:3d:d9:39:67:
cb:9c:bc:a7:d7:a5:28:a8:5d:ed:ae:ec:d3:34:7a:58:f6:4d:
7d:6e:c4:94:a8:f3:0f:01:e3:29:54:0c:8a:e1:a9:1d:20:eb:
3b:81:d8:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:30:46 2025 by rpki-client