Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/FZwlcI7hSCJGZbG3-fbjzuVlcs4.roa
File: FZwlcI7hSCJGZbG3-fbjzuVlcs4.roa (raw, json)
Hash identifier: aCVsh0rQuzu9PMq/a13atxYSUUoaQItB+uhtSU/SQMU=
Subject key identifier: 15:9C:25:70:8E:E1:48:22:46:65:B1:B7:F9:F6:E3:CE:E5:65:72:CE
Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial: 019567613A2C9D913DF43DC52E1C42E6E61F
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/FZwlcI7hSCJGZbG3-fbjzuVlcs4.roa
Signing time: Wed 05 Mar 2025 17:36:19 +0000
ROA not before: Wed 05 Mar 2025 17:36:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 80.246.232.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:67:61:3a:2c:9d:91:3d:f4:3d:c5:2e:1c:42:e6:e6:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
Validity
Not Before: Mar 5 17:36:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=159c25708ee148224665b1b7f9f6e3cee56572ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:cc:e6:22:45:e0:7c:7b:63:f7:a1:28:15:3b:
5c:cf:d4:0b:84:fd:a3:b3:bd:bf:be:bb:a7:ed:1a:
f4:bc:80:0b:e4:ec:9d:02:d7:f7:08:1f:85:da:6b:
c9:f2:e5:6f:02:39:a3:41:a7:ca:73:bd:7d:56:24:
13:ec:b8:62:d5:ed:d9:3b:d2:74:4a:a7:0c:7d:4d:
86:6b:c5:a5:f7:c1:a3:5c:fc:a6:66:e1:c4:a4:55:
c0:be:26:3e:71:d4:5f:b0:63:0f:47:fe:4e:f5:1e:
54:a3:97:8f:44:b9:70:9b:f6:85:24:83:f1:26:20:
86:ba:38:3f:a2:28:6e:90:78:ea:19:b0:31:29:e6:
75:ad:3e:c3:80:ef:05:49:5b:52:bf:9e:75:9b:1e:
31:2b:cb:a1:e4:cd:43:e3:01:f0:e2:71:1f:92:ca:
a9:41:3c:2b:6e:63:0c:d1:bd:5e:b4:60:77:89:5d:
86:ac:06:1f:68:be:b4:34:fc:57:4f:70:4c:00:4a:
c4:b8:0c:3b:bd:91:72:80:3a:92:fc:fd:a9:31:7a:
05:de:92:af:26:0b:65:93:e5:ee:21:7b:ac:e1:5d:
41:07:f8:aa:67:76:d2:dc:92:da:d2:75:e7:86:85:
a9:6d:17:49:89:ff:31:0c:27:c2:44:bd:26:12:22:
d2:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:9C:25:70:8E:E1:48:22:46:65:B1:B7:F9:F6:E3:CE:E5:65:72:CE
X509v3 Authority Key Identifier:
keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/FZwlcI7hSCJGZbG3-fbjzuVlcs4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.246.232.0/21
Signature Algorithm: sha256WithRSAEncryption
88:88:28:ce:98:23:a9:49:9c:96:69:13:22:28:c6:2c:ed:1c:
be:63:ca:39:f1:4d:e7:c2:0d:4c:7d:bf:26:b1:e5:a9:c6:c5:
e5:05:ee:dc:b2:8c:08:b8:f6:ae:b3:ff:d3:9c:2b:fd:1f:44:
97:92:78:25:fe:f2:91:92:f0:9b:bb:49:72:f8:b6:af:0c:11:
f5:37:38:3e:ee:8a:0e:28:9b:a1:39:f6:53:09:a8:d5:35:8b:
69:d4:fe:48:82:bd:fd:b2:05:c3:cf:b7:68:ae:9d:00:03:94:
8a:cd:97:e5:11:b7:8f:2e:19:10:62:d4:3b:32:42:9e:a4:4a:
4b:4a:63:c1:e0:3f:58:e2:50:5c:eb:4f:56:eb:f0:8d:93:c9:
bd:9e:85:99:b1:cd:94:4e:f2:48:02:1e:c5:39:13:95:38:a0:
f2:c9:d3:af:42:5e:0d:d8:98:3e:ec:e6:e1:b1:4d:1e:91:b2:
a8:91:de:b2:07:3d:52:82:da:a4:6b:b8:94:fc:03:57:05:b1:
ce:c5:34:2c:14:c2:77:7c:67:3f:3a:54:c9:3e:84:4a:c4:32:
08:11:58:1b:f3:d5:4c:c4:d4:51:30:e6:42:3e:f8:e0:72:ea:
12:f0:b8:c1:d8:08:d7:0b:0d:84:7f:f0:f1:83:c4:51:d1:1c:
5f:6d:13:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:45:49 2025 by rpki-client