Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/Fa4rtvztLobT1gePEYyc0DRCu2Y.roa
File: Fa4rtvztLobT1gePEYyc0DRCu2Y.roa (raw, json)
Hash identifier: C1CnICPh2LaUpEFyvXsX8GWWmclYO2wcMr6Jq76RYVQ=
Subject key identifier: 15:AE:2B:B6:FC:ED:2E:86:D3:D6:07:8F:11:8C:9C:D0:34:42:BB:66
Certificate issuer: /CN=0c2d7c238e89dcd52f6fb2296dfa4758c61c97be
Certificate serial: 019420D5D83DF23F870E7D4C898ACB886B04
Authority key identifier: 0C:2D:7C:23:8E:89:DC:D5:2F:6F:B2:29:6D:FA:47:58:C6:1C:97:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DC18I46J3NUvb7IpbfpHWMYcl74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/Fa4rtvztLobT1gePEYyc0DRCu2Y.roa
Signing time: Wed 01 Jan 2025 07:47:52 +0000
ROA not before: Wed 01 Jan 2025 07:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35258
IP address blocks: 185.93.56.0/24 maxlen: 24
185.93.58.0/23 maxlen: 23
2a03:8fa0::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.mft
rsync://rpki.ripe.net/repository/DEFAULT/DC18I46J3NUvb7IpbfpHWMYcl74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 16:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:d8:3d:f2:3f:87:0e:7d:4c:89:8a:cb:88:6b:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c2d7c238e89dcd52f6fb2296dfa4758c61c97be
Validity
Not Before: Jan 1 07:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=15ae2bb6fced2e86d3d6078f118c9cd03442bb66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:46:8c:68:ed:e3:a3:32:d4:35:77:ca:11:b8:
6d:32:e6:0c:4d:29:62:69:1f:60:32:1c:22:67:fe:
fd:c4:c2:7c:63:9d:cf:26:85:05:81:80:75:7e:29:
e6:df:e6:b5:68:bd:d2:cd:8e:71:c7:64:f1:25:cc:
82:6d:e9:99:aa:b8:74:b1:cf:47:50:0d:24:b0:26:
13:dc:da:5b:12:ea:7d:ab:75:7d:3e:92:29:f0:00:
fc:b7:be:fd:4a:75:f6:5b:dc:82:07:fc:18:53:1c:
3c:88:1c:09:c7:9b:52:27:62:a0:b3:23:43:65:0e:
77:da:21:08:98:50:f7:a7:be:41:e8:e1:26:79:bb:
fd:98:0c:4f:8a:ce:9a:ed:a4:9d:15:55:7a:f8:01:
9f:3f:b2:1c:f2:ba:48:e8:83:ab:65:47:04:f2:ed:
fa:0e:d4:95:4d:ea:10:f2:17:b0:f9:40:3d:02:54:
e3:ca:53:5a:da:d1:84:2f:a8:37:e7:7d:a7:0a:fb:
d1:7d:a0:25:de:26:ad:fb:aa:5a:53:d2:78:3e:4f:
68:76:09:8e:65:7b:20:d1:23:4e:2b:e2:46:81:0e:
15:c9:b8:47:18:bf:55:06:ca:7c:9e:15:59:48:3a:
ac:90:a4:1e:55:5f:7b:7c:dd:99:90:63:85:14:84:
32:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:AE:2B:B6:FC:ED:2E:86:D3:D6:07:8F:11:8C:9C:D0:34:42:BB:66
X509v3 Authority Key Identifier:
keyid:0C:2D:7C:23:8E:89:DC:D5:2F:6F:B2:29:6D:FA:47:58:C6:1C:97:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DC18I46J3NUvb7IpbfpHWMYcl74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/Fa4rtvztLobT1gePEYyc0DRCu2Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.93.56.0/24
185.93.58.0/23
IPv6:
2a03:8fa0::/36
Signature Algorithm: sha256WithRSAEncryption
03:d9:0f:02:47:46:32:f9:e3:4f:25:7f:26:02:fa:91:87:8e:
b0:18:db:54:33:51:63:08:d6:d6:03:cb:44:c7:e5:e8:5d:37:
ea:c9:64:83:92:49:1e:27:0f:be:de:71:af:fe:91:83:e9:03:
2e:84:24:2f:4a:4e:d5:6c:9c:57:34:b8:77:b6:df:ca:c9:5c:
f9:8d:e6:90:a0:48:df:ba:e3:10:8a:ea:36:2f:6a:3f:0f:31:
86:df:4c:6f:0a:c2:c0:af:3f:d5:d0:d4:37:0e:16:7f:c6:6c:
3d:6a:a3:da:12:c1:52:cc:98:b7:b1:4a:4e:64:58:38:c8:2f:
f3:8e:0d:9a:a0:34:99:c5:58:69:16:53:76:1d:e2:8e:bd:ab:
55:79:14:25:ee:14:7b:0b:2c:80:06:e0:56:9d:da:20:60:6f:
d7:6f:74:f6:83:d7:d7:4c:73:25:d8:74:88:1f:21:f3:5d:f4:
26:08:1e:bf:39:82:25:6b:08:cc:a8:ba:a2:23:41:c0:7f:8d:
37:80:a7:a4:09:a9:33:18:ac:7b:af:7c:14:6b:95:d7:f1:c1:
4e:d9:4f:6b:5a:ae:eb:88:c7:ea:63:ed:ef:1a:50:e9:e1:5c:
66:d1:44:65:91:c3:2a:95:60:49:07:5b:47:05:0f:b8:d8:5d:
09:07:40:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 01:39:04 2025 by rpki-client