Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/ISNHkwTdIse1R5eVAbZVrpNzf7I.roa
File: ISNHkwTdIse1R5eVAbZVrpNzf7I.roa (raw, json)
Hash identifier: aWcNBCaUk6iVQl/ljrkexa0tplOypXs9VyEvekzMA3M=
Subject key identifier: 21:23:47:93:04:DD:22:C7:B5:47:97:95:01:B6:55:AE:93:73:7F:B2
Certificate issuer: /CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2
Certificate serial: 01941FFA42C9F19BFC86039109EE6C190F30
Authority key identifier: F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/ISNHkwTdIse1R5eVAbZVrpNzf7I.roa
Signing time: Wed 01 Jan 2025 03:48:02 +0000
ROA not before: Wed 01 Jan 2025 03:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 149428
IP address blocks: 147.185.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 06:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:42:c9:f1:9b:fc:86:03:91:09:ee:6c:19:0f:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2
Validity
Not Before: Jan 1 03:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2123479304dd22c7b547979501b655ae93737fb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0a:c3:53:8f:1d:36:6d:fc:89:9e:a0:d3:63:
d9:c2:1d:ff:9a:48:0d:06:3b:46:23:2c:69:2a:e0:
b7:89:77:d1:4a:0f:64:7d:8f:bc:93:d3:1c:15:27:
06:75:58:fc:37:95:52:d5:67:f2:b5:3c:49:67:05:
43:43:7a:6c:79:76:0a:1f:a0:61:48:1f:45:69:f9:
53:9c:68:85:a1:3f:19:ad:44:ef:58:5e:e3:ea:51:
83:ce:09:f6:d6:2c:6e:83:79:09:d8:2e:fb:3f:57:
3f:b5:77:26:7c:c4:c2:27:fa:19:cc:72:3f:bc:5e:
c1:85:32:05:b6:41:5e:de:43:99:70:bc:be:6b:62:
80:af:83:0e:e2:51:0a:fe:64:70:13:88:6e:72:69:
cc:4e:bb:28:dc:48:cf:33:e7:79:68:f9:c4:2c:1e:
ba:c4:b5:ec:1e:1e:c3:a9:dd:92:d6:b6:dd:40:e8:
dd:d2:eb:8c:3d:89:a0:07:aa:ba:82:81:91:09:2a:
be:cc:73:bc:b8:a3:7f:db:af:9a:5c:99:0b:d7:9b:
c1:70:fb:a4:d3:8a:8c:f4:a9:41:18:8b:e9:42:9d:
8f:ab:3c:86:cf:a8:a9:22:0d:be:f1:6d:0a:3e:1c:
e4:c6:f1:7f:c5:da:7c:4e:59:0c:57:48:d2:59:42:
56:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:23:47:93:04:DD:22:C7:B5:47:97:95:01:B6:55:AE:93:73:7F:B2
X509v3 Authority Key Identifier:
keyid:F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/ISNHkwTdIse1R5eVAbZVrpNzf7I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.185.226.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:5b:e9:87:86:e2:eb:83:2b:0f:9d:0c:7f:03:f8:71:1c:88:
7c:37:5b:ae:2f:f6:1b:85:05:60:50:4e:e1:e2:b6:ad:e6:43:
13:f2:9c:2a:f1:42:9f:58:11:36:85:0e:df:7a:9f:ee:6b:22:
44:ca:cc:e0:d5:00:30:3f:46:1f:83:c4:05:a9:80:1c:34:ee:
14:c3:d0:ef:0f:d7:18:ca:7f:bc:1b:69:3b:75:86:39:33:e0:
c2:7f:cf:42:d2:7b:47:5d:5a:c4:e9:61:38:dc:83:51:a7:2c:
bc:eb:d8:47:a7:80:53:54:8d:c7:1e:e0:b8:cd:85:dc:71:e6:
6f:fb:78:38:fb:5c:92:1b:f1:eb:0a:e9:45:9c:9c:1f:ed:70:
f5:0e:87:64:30:86:03:61:f2:3b:e8:0f:33:3a:aa:d5:95:57:
3e:11:3a:4f:ce:d5:e0:1a:0b:7c:32:95:11:34:82:f8:5b:b6:
bc:8b:9d:fe:8b:3c:36:6f:98:6c:fe:03:aa:d4:fd:c5:22:d4:
6d:8e:42:ed:70:e4:fc:c8:2d:ed:7f:50:c6:1b:3e:c8:ea:8b:
cb:e4:eb:cf:6b:b5:af:47:1f:b9:cd:02:a6:06:1e:0d:d0:cd:
f8:1b:94:4a:57:1c:14:f8:d9:86:84:4d:10:0a:c4:71:e6:95:
6e:97:28:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:33:04 2025 by rpki-client