Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/fCHzIX3PF5IX4vTpqhp12B4ANgE.roa
File: fCHzIX3PF5IX4vTpqhp12B4ANgE.roa (raw, json)
Hash identifier: 56hifj5pI9Tipd1DppPjnl4odiFdle6vhykV6J1DFck=
Subject key identifier: 7C:21:F3:21:7D:CF:17:92:17:E2:F4:E9:AA:1A:75:D8:1E:00:36:01
Certificate issuer: /CN=f7fdfc337d8ce0e05ef7f7b72af27eb61cd47037
Certificate serial: 019426D9268B72BFCC26A3BD29F2F0E9B828
Authority key identifier: F7:FD:FC:33:7D:8C:E0:E0:5E:F7:F7:B7:2A:F2:7E:B6:1C:D4:70:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9_38M32M4OBe9_e3KvJ-thzUcDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/fCHzIX3PF5IX4vTpqhp12B4ANgE.roa
Signing time: Thu 02 Jan 2025 11:49:12 +0000
ROA not before: Thu 02 Jan 2025 11:49:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9498
IP address blocks: 46.186.228.94/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9_38M32M4OBe9_e3KvJ-thzUcDc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 02:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:26:8b:72:bf:cc:26:a3:bd:29:f2:f0:e9:b8:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7fdfc337d8ce0e05ef7f7b72af27eb61cd47037
Validity
Not Before: Jan 2 11:49:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7c21f3217dcf179217e2f4e9aa1a75d81e003601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:77:57:1b:6b:2f:e1:da:31:e8:32:73:cd:08:
29:25:f7:ef:c3:cc:29:a1:5f:69:c6:cd:91:5f:83:
cb:32:00:e9:e7:ac:e9:7e:c9:95:85:9f:bf:ed:3d:
5c:1b:6b:96:47:88:1f:e3:1d:74:57:4c:ec:d7:4c:
90:1c:30:58:a6:75:28:6d:09:52:4c:f0:6d:30:3a:
1d:e5:f5:40:d7:55:ba:8b:17:0b:89:1a:49:6c:95:
ae:c7:7d:78:8d:43:0d:83:df:99:76:48:8c:fc:52:
8b:8c:d0:74:37:96:9a:3c:2b:30:3b:bb:ff:1b:d2:
4e:af:d8:9d:f5:02:ab:f0:c8:22:9d:c5:11:8c:1c:
39:ce:0c:50:ad:de:e6:5e:c8:4e:7a:e6:05:f8:e5:
79:32:5b:27:4a:43:ee:98:06:15:9c:d1:a9:00:d0:
bb:20:ec:c0:c7:d5:1a:6c:a0:1a:aa:2d:e0:cd:2d:
5a:04:4f:96:cc:b9:43:e9:86:59:a0:91:12:bb:4c:
66:89:5d:66:4d:4c:75:fd:d5:e2:37:c4:1a:39:3f:
9f:38:55:c2:07:b0:70:07:fe:17:88:ce:6f:e6:95:
eb:29:d5:4e:52:af:79:a2:68:89:b7:c3:cc:cf:dc:
c9:bf:d9:27:e5:fd:43:01:ad:6f:93:9d:2e:9f:0e:
42:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:21:F3:21:7D:CF:17:92:17:E2:F4:E9:AA:1A:75:D8:1E:00:36:01
X509v3 Authority Key Identifier:
keyid:F7:FD:FC:33:7D:8C:E0:E0:5E:F7:F7:B7:2A:F2:7E:B6:1C:D4:70:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9_38M32M4OBe9_e3KvJ-thzUcDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/fCHzIX3PF5IX4vTpqhp12B4ANgE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.186.228.94/32
Signature Algorithm: sha256WithRSAEncryption
3a:63:99:0b:ac:56:33:23:f0:e4:7d:06:69:a2:a1:fc:c9:56:
e2:57:32:9d:21:8d:1d:c4:f2:bc:1f:81:e6:a0:cd:45:54:14:
86:3c:61:97:0a:ff:c5:aa:fa:f8:c6:b5:6c:24:7e:c1:90:69:
1a:18:cf:26:96:12:8e:98:9a:57:f0:a1:50:60:42:d2:00:cb:
f2:d2:53:74:c7:8c:88:d8:38:48:d1:3e:05:a5:52:86:f9:5c:
ee:95:8b:fb:41:19:b7:5d:97:44:6a:81:b2:69:c1:a3:e6:d5:
7f:f1:dc:1e:ea:4c:59:fa:c1:b8:ee:f7:69:bc:93:53:84:60:
12:ad:20:a8:70:c4:ca:49:6f:b1:f8:4f:6f:08:71:4e:1e:f5:
55:4b:e8:b8:b2:09:1d:42:b4:16:be:ce:ae:37:97:14:ff:5a:
07:56:bb:da:a3:55:94:ba:94:a0:01:6c:97:64:53:11:13:42:
14:f1:ad:eb:ae:3e:8f:b6:b9:84:e2:22:d5:58:c1:18:38:4e:
be:8a:96:d9:24:11:27:ee:e4:88:4c:42:bc:ae:3f:a6:de:26:
2c:50:df:58:43:7f:a8:10:bd:3c:84:7f:7a:75:8a:4a:fb:8e:
2f:1d:87:6d:d8:8c:88:12:15:58:ac:62:f5:ee:ae:c8:32:42:
32:1d:ba:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:07:04 2025 by rpki-client