Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/FqYIT9v1PIigYUXlKqygd4WMyec.roa
File: FqYIT9v1PIigYUXlKqygd4WMyec.roa (raw, json)
Hash identifier: tv8mfQBReWKdNDNzaDeKywrzkQOxW77WcbdZkUDG+AU=
Subject key identifier: 16:A6:08:4F:DB:F5:3C:88:A0:61:45:E5:2A:AC:A0:77:85:8C:C9:E7
Certificate issuer: /CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Certificate serial: 01941FFA45F0B66D7D481451A41908385D3D
Authority key identifier: 1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/FqYIT9v1PIigYUXlKqygd4WMyec.roa
Signing time: Wed 01 Jan 2025 03:48:03 +0000
ROA not before: Wed 01 Jan 2025 03:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20756
IP address blocks: 62.93.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:45:f0:b6:6d:7d:48:14:51:a4:19:08:38:5d:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Validity
Not Before: Jan 1 03:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=16a6084fdbf53c88a06145e52aaca077858cc9e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:57:ea:bc:21:d8:5f:64:cf:3e:27:88:05:58:
d9:4a:0f:b2:68:b9:ff:db:21:49:fc:78:b1:70:63:
66:35:c3:67:69:bf:e4:d3:37:18:6c:96:be:3a:e5:
53:a1:0d:91:23:8b:97:f5:99:cf:81:a3:7f:08:38:
86:7c:f0:47:e1:5d:e3:24:bd:5f:25:43:ff:cc:ac:
0d:a3:d8:2b:7b:ef:49:df:65:23:89:af:8b:05:37:
44:a7:67:a3:05:b4:9d:8b:3d:63:5e:e7:49:0a:dc:
f5:75:7f:d6:19:c4:19:84:f9:c0:83:de:be:9b:13:
11:cb:51:6a:8b:63:d0:f4:a3:7d:a7:aa:6c:7e:57:
0f:83:27:84:4f:a5:dc:60:8c:ae:da:fb:d5:66:a6:
7a:21:bc:dd:e9:4c:52:7d:0d:2f:a2:f7:ec:44:d9:
30:30:b7:89:53:be:e7:c9:b0:2f:1b:ee:5c:f8:69:
23:82:2d:3f:64:6b:66:f9:4d:af:02:ac:9a:2b:f8:
30:d5:df:43:ab:d8:d7:2a:1f:88:cb:2c:ac:0e:01:
13:1f:b0:f1:da:bc:75:54:60:9e:2a:0a:2a:65:aa:
43:8b:9c:ff:1e:bc:0a:80:b3:80:47:72:ef:f6:94:
7a:a4:01:87:82:3b:30:ef:79:b0:73:26:78:85:95:
73:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:A6:08:4F:DB:F5:3C:88:A0:61:45:E5:2A:AC:A0:77:85:8C:C9:E7
X509v3 Authority Key Identifier:
keyid:1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/FqYIT9v1PIigYUXlKqygd4WMyec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.93.195.0/24
Signature Algorithm: sha256WithRSAEncryption
36:1a:f9:d6:22:01:d5:64:55:4f:f7:62:d0:92:a1:d8:25:2d:
e7:19:6a:50:6b:50:5e:fd:c8:54:12:a3:a6:a2:87:ae:e8:f1:
b6:97:ba:7f:95:21:94:64:82:42:41:86:73:6c:e4:83:ed:1d:
ad:92:23:61:f8:63:8a:fd:80:24:f9:2b:63:5c:57:f2:c5:c7:
dd:87:ca:08:83:55:b1:50:80:0d:78:13:d9:f5:62:58:8b:ce:
d4:72:c8:34:37:ad:23:5f:b5:e7:fa:11:71:9d:3b:fa:38:b7:
8b:7d:54:b8:3f:12:0c:9a:bd:2d:17:98:99:b2:a4:b0:f5:6c:
77:7b:43:40:77:d6:33:bd:3e:91:8c:50:56:3e:c8:6d:36:39:
c3:73:68:c6:01:90:cf:81:a5:fa:d9:92:81:b9:64:5e:72:b0:
1c:7b:b4:51:05:b6:1e:92:f1:dd:c5:1f:3e:f8:6d:2a:dc:1c:
ab:3a:3f:0c:8a:3f:52:e6:8a:0d:65:9c:d9:b6:33:f0:1e:73:
b2:ec:5d:5c:1e:54:82:f9:e9:82:56:03:fa:56:a7:7a:1b:d0:
2a:ed:18:d6:0c:e6:20:a2:fc:7c:88:35:24:2a:13:37:22:34:
a2:7a:28:61:7f:48:1c:21:4c:51:7b:d3:5d:21:db:90:e5:d9:
9b:ee:ec:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 22:55:27 2025 by rpki-client