Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/fNVPBx-nJkzMb3EbI9eFden66xI.roa
File: fNVPBx-nJkzMb3EbI9eFden66xI.roa (raw, json)
Hash identifier: 4Ma//fNnrLCw4CmoykWoEiiC3wb4lPTvORAHCvUM+U4=
Subject key identifier: 7C:D5:4F:07:1F:A7:26:4C:CC:6F:71:1B:23:D7:85:75:E9:FA:EB:12
Certificate issuer: /CN=16cde139ae0573b0a4dda93e77b57ff27f9beba1
Certificate serial: 0194266A4EBBCC011F3380010E96E506E6DD
Authority key identifier: 16:CD:E1:39:AE:05:73:B0:A4:DD:A9:3E:77:B5:7F:F2:7F:9B:EB:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/fNVPBx-nJkzMb3EbI9eFden66xI.roa
Signing time: Thu 02 Jan 2025 09:48:08 +0000
ROA not before: Thu 02 Jan 2025 09:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9890
IP address blocks: 155.45.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 18:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6a:4e:bb:cc:01:1f:33:80:01:0e:96:e5:06:e6:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16cde139ae0573b0a4dda93e77b57ff27f9beba1
Validity
Not Before: Jan 2 09:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7cd54f071fa7264ccc6f711b23d78575e9faeb12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:eb:d7:1f:4f:fb:35:ff:5f:54:13:69:f9:c7:
01:18:f3:cb:bc:6f:49:2e:ba:97:cc:11:db:69:7f:
98:a9:db:ba:87:a3:4c:d4:a4:5b:4d:c5:34:c9:e1:
a4:5a:76:fa:fb:b8:df:cd:d2:0d:bc:c5:b3:2c:75:
07:92:45:2e:bc:ef:01:29:29:1b:84:b8:d8:f3:b6:
6a:0d:d1:84:af:de:c7:8f:3c:ab:5f:fa:98:40:18:
92:34:0d:58:c8:5a:c2:e7:9b:1e:d4:01:4e:a3:13:
0e:56:57:02:df:24:29:ad:b9:45:83:be:0b:44:13:
27:98:25:b4:2c:44:75:e0:b3:70:08:dd:b4:80:5e:
9e:12:2b:85:e7:e4:08:32:77:3a:92:e0:f5:b1:4d:
28:77:9e:9e:12:fa:90:3f:61:7f:af:58:89:53:24:
05:54:bc:df:f5:cb:e3:95:38:00:b6:41:ff:9e:85:
f9:78:e4:8a:01:db:0b:8e:60:05:71:2a:a9:3a:17:
83:08:d7:b6:c9:97:a9:30:5b:44:2b:ea:56:45:20:
18:4b:1d:94:0f:12:73:e0:ae:05:96:b5:30:8c:17:
fa:7c:58:b1:ac:06:8e:6f:0a:49:a1:07:31:93:70:
64:42:d5:f3:65:2c:56:56:5b:31:6f:be:20:82:7b:
f5:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:D5:4F:07:1F:A7:26:4C:CC:6F:71:1B:23:D7:85:75:E9:FA:EB:12
X509v3 Authority Key Identifier:
keyid:16:CD:E1:39:AE:05:73:B0:A4:DD:A9:3E:77:B5:7F:F2:7F:9B:EB:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/fNVPBx-nJkzMb3EbI9eFden66xI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.45.130.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:79:2e:69:a5:53:a2:26:10:4e:15:9e:19:f2:a6:71:5a:3f:
7d:85:d7:61:43:04:de:9b:ac:bf:88:2f:d9:81:0f:c2:7f:e5:
89:74:a3:be:3e:6c:a9:17:33:9c:bc:9e:47:00:41:73:4f:d4:
a1:02:c9:b9:76:45:40:61:17:88:c9:ee:0d:96:5e:6d:ba:ce:
5e:b8:86:dd:1a:37:05:f1:e0:6d:ce:22:78:aa:eb:26:00:16:
ec:eb:1f:54:da:67:e2:01:d9:13:36:94:85:7f:ec:b0:cc:4c:
22:89:1b:36:68:e6:e8:b5:13:04:16:03:38:30:ac:f3:ee:ae:
b6:a9:25:60:d7:bd:a6:f6:44:66:17:e3:4c:bb:60:e2:3b:dc:
f3:db:f1:50:aa:c9:8c:bc:89:1a:94:15:81:fa:31:a0:0d:bd:
3b:bc:ab:77:03:e3:bc:bd:1e:95:3f:0c:d1:ed:2b:61:e3:e1:
64:90:81:3c:d4:e5:53:86:0d:b2:77:e7:cc:b8:85:65:b2:77:
b6:08:28:b7:2a:ca:b9:f0:8f:79:c5:5c:af:25:08:8a:2f:31:
1b:e3:2f:ad:0a:ec:50:aa:a5:15:aa:c9:57:78:33:70:42:be:
6d:5f:51:ed:9c:3e:26:c7:2a:7f:ef:bf:1d:5c:09:1d:d8:aa:
17:2e:02:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:13:24 2025 by rpki-client