Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/fbcFhpzULC3EEWBNByMVqkv4COk.roa
File: fbcFhpzULC3EEWBNByMVqkv4COk.roa (raw, json)
Hash identifier: IqZFwEwAMsXDTRbFGgHZteBrOxKZIky7zYKYfP8PcME=
Subject key identifier: 7D:B7:05:86:9C:D4:2C:2D:C4:11:60:4D:07:23:15:AA:4B:F8:08:E9
Certificate issuer: /CN=c0fbd5876613edc56e0f5de468cce5eb2885ff29
Certificate serial: 01942444FB80164D045674BA2E356421E120
Authority key identifier: C0:FB:D5:87:66:13:ED:C5:6E:0F:5D:E4:68:CC:E5:EB:28:85:FF:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wPvVh2YT7cVuD13kaMzl6yiF_yk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/fbcFhpzULC3EEWBNByMVqkv4COk.roa
Signing time: Wed 01 Jan 2025 23:48:08 +0000
ROA not before: Wed 01 Jan 2025 23:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 185.212.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/wPvVh2YT7cVuD13kaMzl6yiF_yk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/wPvVh2YT7cVuD13kaMzl6yiF_yk.mft
rsync://rpki.ripe.net/repository/DEFAULT/wPvVh2YT7cVuD13kaMzl6yiF_yk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:fb:80:16:4d:04:56:74:ba:2e:35:64:21:e1:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0fbd5876613edc56e0f5de468cce5eb2885ff29
Validity
Not Before: Jan 1 23:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7db705869cd42c2dc411604d072315aa4bf808e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:15:29:c0:df:8e:05:d7:5e:51:58:85:fa:a1:
66:a7:22:c3:96:b0:2e:54:b6:5a:5b:6d:fa:fc:6b:
76:2d:9e:99:2c:5f:4f:57:8b:6c:13:e5:5d:1f:28:
dd:f3:6c:b9:d2:a1:7f:46:04:d5:de:e3:6b:2f:86:
a9:d2:25:a5:0f:a8:24:5d:0f:24:86:0e:a9:01:0e:
c4:55:32:8f:99:60:1e:4a:ac:31:a3:8f:88:1c:9d:
7f:60:ae:5c:46:87:e1:93:c4:41:12:43:92:ac:b1:
83:ef:fe:4f:56:ff:17:13:9d:19:18:96:98:ba:f7:
53:c0:fc:de:d0:75:6d:2f:88:87:63:bd:c3:8c:1c:
ba:c5:03:8c:af:2e:a4:f0:81:33:f7:76:f0:09:54:
63:ba:4d:94:72:a7:26:1e:77:6b:ff:7c:cd:9c:2e:
81:43:4c:de:96:18:b6:e1:8c:94:a7:61:21:24:28:
8f:06:05:a9:70:8a:08:40:31:d5:d7:93:81:74:9b:
66:07:aa:3b:6c:bd:03:83:22:34:b6:a4:ff:ce:23:
ca:80:b3:3a:e0:44:36:c5:19:b6:20:11:a6:5d:5a:
08:3d:97:b1:f7:81:30:3c:bc:c3:ee:a8:e1:9a:f1:
e6:ed:17:9d:2c:1a:6f:8f:09:3f:a1:cb:f9:fa:5a:
3b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:B7:05:86:9C:D4:2C:2D:C4:11:60:4D:07:23:15:AA:4B:F8:08:E9
X509v3 Authority Key Identifier:
keyid:C0:FB:D5:87:66:13:ED:C5:6E:0F:5D:E4:68:CC:E5:EB:28:85:FF:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPvVh2YT7cVuD13kaMzl6yiF_yk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/fbcFhpzULC3EEWBNByMVqkv4COk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/wPvVh2YT7cVuD13kaMzl6yiF_yk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.212.105.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:83:1a:af:39:e0:20:a7:5b:2c:d6:b9:ad:4e:d7:0e:f1:a7:
ba:96:56:ea:2a:ff:5d:34:48:13:30:f8:04:f8:25:ba:03:80:
2d:90:9c:62:7c:0d:c0:7d:7a:f5:5c:76:4a:de:73:fb:09:b4:
eb:43:3c:bc:f2:05:db:b3:1f:80:05:c9:33:f5:d4:07:b7:3f:
5d:45:8b:a7:e8:be:1e:d3:da:1c:11:24:8e:7e:7e:13:63:1c:
99:fb:f3:a2:ad:56:e2:8a:70:16:37:a0:78:c5:15:85:a9:4e:
6a:42:5a:e7:25:41:4c:ac:cd:44:ed:e9:f1:dc:1c:2a:c8:b5:
ac:15:ec:e0:2b:09:b2:39:d4:8a:d2:bd:c4:07:bf:89:96:c5:
43:49:a4:cd:4b:24:3d:d0:2f:1c:cc:a7:12:a8:3f:70:af:11:
54:2e:f3:ad:07:7b:77:e6:2c:65:4f:2b:8f:d8:79:08:e0:7e:
13:8b:47:ef:41:4a:57:01:be:cd:98:cb:b7:5b:d9:25:08:66:
84:cc:f9:e1:e7:7f:82:03:ea:7e:d4:f9:3e:e1:02:e9:6e:dd:
1e:43:c3:f5:6a:ed:5b:97:4e:b4:51:e8:1d:20:10:99:74:65:
26:c5:d0:8b:0b:69:7f:be:82:57:cc:89:fe:87:6b:13:c4:a8:
33:41:08:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:51:22 2025 by rpki-client