Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/32yhRz_S8ITRiOsBYkmV4NnQCYc.roa
File: 32yhRz_S8ITRiOsBYkmV4NnQCYc.roa (raw, json)
Hash identifier: dVgxRZDbIbYdq2fLtDV8WTt0Yh4BvCJtbiIWE/I7V9o=
Subject key identifier: DF:6C:A1:47:3F:D2:F0:84:D1:88:EB:01:62:49:95:E0:D9:D0:09:87
Certificate issuer: /CN=fc44297e9271c6edf064915f6180ae12690dda8b
Certificate serial: 019420D652E79C533396C48DED6616493387
Authority key identifier: FC:44:29:7E:92:71:C6:ED:F0:64:91:5F:61:80:AE:12:69:0D:DA:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/32yhRz_S8ITRiOsBYkmV4NnQCYc.roa
Signing time: Wed 01 Jan 2025 07:48:24 +0000
ROA not before: Wed 01 Jan 2025 07:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20521
IP address blocks: 213.169.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.mft
rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 13:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:52:e7:9c:53:33:96:c4:8d:ed:66:16:49:33:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc44297e9271c6edf064915f6180ae12690dda8b
Validity
Not Before: Jan 1 07:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=df6ca1473fd2f084d188eb01624995e0d9d00987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6a:98:67:39:d2:56:64:8f:c6:a2:ef:8e:98:
bd:68:a8:4a:90:a8:70:d0:61:27:3c:29:ec:fb:18:
64:92:06:d9:a9:16:17:53:79:95:c7:17:1c:1a:0f:
d3:ef:7c:88:88:9e:e5:a4:16:37:80:a3:f6:f7:13:
ad:24:bb:c7:df:62:89:02:67:59:e8:2d:0b:41:cc:
8b:f8:52:33:c3:3a:86:de:5c:c0:5f:d6:6e:1d:46:
3c:d1:c1:88:cd:c8:a2:a9:38:05:67:35:30:54:96:
2a:73:d4:a6:42:76:22:5d:aa:4a:be:44:2f:8c:74:
99:0f:4f:eb:65:60:cf:fb:b3:35:e4:e8:ab:a8:cd:
f3:2e:62:44:cf:7a:4e:ba:a6:5d:4d:86:86:9a:30:
c2:3f:7f:60:73:a5:56:4f:96:d4:2a:2c:28:4e:68:
72:a7:d3:30:42:94:ec:d2:37:68:73:f6:ef:e4:d4:
39:27:fa:48:68:35:38:65:b5:b2:39:1e:e1:4a:f1:
3c:df:a0:01:4a:49:36:d3:13:bd:8d:7d:67:5e:e6:
c4:90:6f:e8:29:14:37:59:0a:d9:c7:3a:41:e9:76:
a7:f0:a1:b8:06:ba:10:a5:c0:a9:a5:4e:c1:b0:a3:
48:25:77:1d:04:08:8f:44:16:62:48:17:39:07:d4:
98:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:6C:A1:47:3F:D2:F0:84:D1:88:EB:01:62:49:95:E0:D9:D0:09:87
X509v3 Authority Key Identifier:
keyid:FC:44:29:7E:92:71:C6:ED:F0:64:91:5F:61:80:AE:12:69:0D:DA:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/32yhRz_S8ITRiOsBYkmV4NnQCYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.169.151.0/24
Signature Algorithm: sha256WithRSAEncryption
24:13:ea:d8:01:35:fc:3d:e2:46:2d:23:23:21:80:f3:75:c3:
e3:1a:f6:a2:fa:8e:56:9f:0c:fd:57:0a:38:27:73:94:de:8b:
9a:a1:f1:3d:61:b9:bd:04:52:be:4b:a8:68:5e:78:f3:a2:f8:
af:9f:e7:d4:83:9f:3c:49:35:40:b6:e0:45:14:01:39:05:4b:
92:6f:49:0a:25:d8:0b:eb:f9:b6:fc:70:4d:62:06:51:84:9e:
e1:b6:5d:88:2a:e3:62:b3:57:ff:6c:23:3e:58:63:a5:0b:18:
e0:fd:2a:05:55:80:3d:b8:49:05:5e:68:8e:e8:5f:64:6f:29:
14:74:9a:98:62:c7:10:a5:80:d6:e9:b3:e2:f1:d5:f1:05:b7:
52:6a:78:dd:1c:7d:c3:d5:90:86:20:08:7a:bb:43:ef:05:c8:
c8:cf:ec:88:28:30:ca:0b:da:41:2a:ad:91:c3:c1:cf:97:b7:
f6:58:05:06:73:14:e1:cf:37:45:3f:d9:6b:80:c5:97:7a:8b:
e9:36:a6:d6:e2:65:a0:81:e7:3d:16:30:e0:82:4b:c3:48:6d:
29:15:3f:bf:ca:da:fb:ff:25:53:19:fe:aa:d2:40:f1:c4:d7:
4c:d8:05:84:b2:1d:a2:f0:30:fc:7f:c5:9f:8a:5a:f1:8b:1e:
19:14:05:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 23:17:11 2025 by rpki-client