Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/FSDg66vVpoAQfgLFndvzXS6QypI.roa
File: FSDg66vVpoAQfgLFndvzXS6QypI.roa (raw, json)
Hash identifier: f2lIYz4qM+DqzctNkkX0uQ+qgRaGTeoZLKB9x8fFB3E=
Subject key identifier: 15:20:E0:EB:AB:D5:A6:80:10:7E:02:C5:9D:DB:F3:5D:2E:90:CA:92
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 01942143F43FE3B379BD04298C22C8047238
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/FSDg66vVpoAQfgLFndvzXS6QypI.roa
Signing time: Wed 01 Jan 2025 09:48:09 +0000
ROA not before: Wed 01 Jan 2025 09:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 996
IP address blocks: 80.71.150.0/24 maxlen: 24
80.71.152.0/24 maxlen: 24
80.71.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:f4:3f:e3:b3:79:bd:04:29:8c:22:c8:04:72:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Jan 1 09:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1520e0ebabd5a680107e02c59ddbf35d2e90ca92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6a:d3:3b:14:da:a5:05:e2:5c:fe:19:38:4e:
2b:d8:26:3a:84:d3:f5:7b:c6:88:e9:e3:58:cf:15:
cc:f7:4d:83:7c:21:13:d8:19:95:b2:22:7c:09:a0:
90:dc:84:a7:85:a8:b3:5b:d1:83:b0:09:d3:0d:65:
fb:96:b5:17:e5:4c:47:6c:4a:ae:20:95:8b:52:7b:
01:81:93:47:f8:c8:f3:6a:1c:3f:d5:2f:0b:49:69:
c9:61:d4:2e:8a:57:48:de:e8:e6:81:d2:75:89:54:
c2:e5:8b:42:74:92:ca:51:53:5b:bb:5b:08:41:20:
8f:45:7c:76:7c:b1:35:6d:81:33:ab:87:a9:49:25:
c4:0d:e4:0f:c5:0d:51:e4:9e:5a:fa:7a:74:20:f0:
84:59:be:5f:85:56:ab:68:2c:1c:fe:db:a1:28:c2:
ce:9c:ea:d9:47:75:ce:29:87:78:22:c7:aa:be:58:
56:44:e3:64:82:05:16:67:ae:98:33:09:f0:19:9a:
8c:c3:5f:ce:9e:21:fe:5c:d3:8f:08:18:9e:45:42:
67:2c:7b:4d:69:b0:de:36:86:17:e3:91:e2:97:e5:
6b:57:24:22:7a:f2:89:48:59:f9:89:b1:5a:d1:03:
b1:60:b9:e5:02:bb:19:2d:bd:0b:7e:bf:e5:44:79:
0f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:20:E0:EB:AB:D5:A6:80:10:7E:02:C5:9D:DB:F3:5D:2E:90:CA:92
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/FSDg66vVpoAQfgLFndvzXS6QypI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.150.0/24
80.71.152.0/24
80.71.159.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:7c:b6:43:be:ba:da:98:6f:34:1c:53:4e:d0:99:2f:1e:28:
11:95:92:e2:0d:5a:da:a2:0d:a7:ad:8d:1b:5e:f6:c2:d5:ad:
6c:41:fd:fe:71:8b:36:a1:d8:53:2c:3d:88:d6:9a:0f:62:52:
75:bb:ed:4b:7d:56:bb:cb:9f:e8:be:0a:30:33:ef:a7:51:8e:
88:48:03:c9:01:6f:27:6e:73:1e:f1:2a:be:66:33:ea:d7:b7:
1a:d9:45:0d:08:86:ff:46:22:cf:eb:3e:c9:88:34:55:97:33:
6d:b3:cf:18:09:e8:46:80:85:cd:f8:fb:ac:d0:99:bc:42:54:
b7:fa:20:27:bb:23:51:a3:39:4c:c3:b9:59:f7:06:cc:e1:30:
37:ab:76:65:7d:c8:82:b9:a4:35:63:30:21:0f:5b:57:73:f0:
22:78:9c:48:e3:46:ed:b3:fc:f3:14:1e:6f:12:c4:36:10:52:
a8:85:65:c9:f4:c5:ba:67:78:23:dd:60:1e:a6:93:8c:d1:f1:
23:ed:9c:fa:d0:5a:04:cc:80:4e:24:c4:14:5d:3a:17:97:f0:
4b:3d:d4:97:98:bc:ec:15:52:c5:95:3b:3b:0d:ec:fe:1b:5d:
4f:d6:94:24:a9:7f:6c:d7:da:50:9f:36:a6:44:c2:bf:85:f8:
20:db:b6:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:06:53 2025 by rpki-client