Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/fH5WPVvWXs9aEvbouE7oQWy8788.roa
File: fH5WPVvWXs9aEvbouE7oQWy8788.roa (raw, json)
Hash identifier: GD7EXqeYvCZ8VnF2X6Kgf+OuiIVTDLp4AgSPaqZWAGY=
Subject key identifier: 7C:7E:56:3D:5B:D6:5E:CF:5A:12:F6:E8:B8:4E:E8:41:6C:BC:EF:CF
Certificate issuer: /CN=f6af433974df373b70abd76b13e1c70c775f554b
Certificate serial: 019423D7229127BFFA7D99BA3675AA1CDB95
Authority key identifier: F6:AF:43:39:74:DF:37:3B:70:AB:D7:6B:13:E1:C7:0C:77:5F:55:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9q9DOXTfNztwq9drE-HHDHdfVUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/fH5WPVvWXs9aEvbouE7oQWy8788.roa
Signing time: Wed 01 Jan 2025 21:48:08 +0000
ROA not before: Wed 01 Jan 2025 21:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200482
IP address blocks: 193.187.255.0/24 maxlen: 24
2a12:3e80::/40 maxlen: 48
2a12:3e80:100::/48 maxlen: 48
2a12:3e80:200::/39 maxlen: 48
2a12:3e80:200::/40 maxlen: 40
2a12:3e80:300::/40 maxlen: 40
2a12:3e80:402::/48 maxlen: 48
2a12:3e80:500::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/9q9DOXTfNztwq9drE-HHDHdfVUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/9q9DOXTfNztwq9drE-HHDHdfVUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/9q9DOXTfNztwq9drE-HHDHdfVUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:22:91:27:bf:fa:7d:99:ba:36:75:aa:1c:db:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6af433974df373b70abd76b13e1c70c775f554b
Validity
Not Before: Jan 1 21:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7c7e563d5bd65ecf5a12f6e8b84ee8416cbcefcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:90:31:07:91:2a:66:e8:b9:00:6a:84:e5:94:
22:ba:a4:4b:77:04:05:62:31:e4:bc:43:a5:e1:72:
8b:cb:4a:11:68:21:2d:05:6e:e0:dd:15:13:20:1a:
b7:75:37:2f:98:de:dd:69:fc:20:60:d2:33:56:3b:
35:5f:48:63:f0:50:9e:37:e2:0a:00:4f:62:55:ce:
2e:98:5d:b5:d6:cc:12:ea:04:fd:53:fa:d7:b5:35:
52:26:9d:a3:b2:35:82:f4:06:f1:98:2a:79:fb:20:
75:b4:ed:b7:f2:8d:d0:dc:b4:5f:64:cf:ff:7a:1f:
a5:bd:81:cd:00:97:c4:8b:22:e4:4a:db:07:91:91:
cc:97:2d:23:ca:2d:ed:c6:64:58:5f:3e:df:b8:3e:
97:cc:fc:36:47:ef:25:1e:9b:39:95:c6:88:bb:3f:
91:51:dd:06:62:f4:22:04:5f:b5:ed:de:11:41:66:
ac:0d:7e:16:f2:c4:b8:71:19:fd:1d:dc:ef:b8:5b:
9f:41:a6:cc:5c:f2:e2:04:29:27:96:3b:e3:23:e4:
0c:1e:12:ff:5b:09:d1:ff:c3:82:47:88:08:52:b1:
30:56:83:5a:f3:8d:21:b4:18:1e:19:cf:fd:17:95:
60:bf:13:ac:98:11:78:5f:76:b3:19:aa:eb:e8:bd:
63:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:7E:56:3D:5B:D6:5E:CF:5A:12:F6:E8:B8:4E:E8:41:6C:BC:EF:CF
X509v3 Authority Key Identifier:
keyid:F6:AF:43:39:74:DF:37:3B:70:AB:D7:6B:13:E1:C7:0C:77:5F:55:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9q9DOXTfNztwq9drE-HHDHdfVUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/fH5WPVvWXs9aEvbouE7oQWy8788.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/9q9DOXTfNztwq9drE-HHDHdfVUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.187.255.0/24
IPv6:
2a12:3e80::-2a12:3e80:100:ffff:ffff:ffff:ffff:ffff
2a12:3e80:200::/39
2a12:3e80:402::/48
2a12:3e80:500::/40
Signature Algorithm: sha256WithRSAEncryption
5f:d6:37:9e:ad:c7:c3:bc:fa:82:41:7b:90:6b:7f:3f:39:fa:
7f:76:80:6c:a3:45:67:13:6f:4c:2f:ad:ef:11:58:86:27:2e:
5d:e5:c0:a9:8e:c8:a6:11:0f:90:a9:1b:83:a1:10:b9:77:c6:
99:de:32:a2:65:e7:c3:f6:73:d0:1f:3f:67:84:75:09:62:d8:
27:17:9c:9f:df:71:be:93:6f:52:e3:8b:95:b7:25:a9:60:f7:
32:ef:ee:00:64:cc:1c:ee:f7:2e:56:2b:ba:77:0c:8b:92:1c:
71:39:9b:58:2b:b8:56:6d:e2:49:4e:81:f1:38:e0:34:7a:cf:
5e:15:e3:9b:b9:b3:c8:65:b8:10:4f:aa:be:c5:43:e6:02:55:
b0:fe:56:ea:d3:16:6f:aa:63:d6:c0:eb:59:b2:e9:0a:14:09:
e4:d4:fd:c3:f2:41:b8:c4:3e:72:52:f3:51:8a:62:37:05:1e:
0e:15:8e:ed:aa:d1:6d:10:c1:aa:2b:16:7b:71:16:b9:05:a1:
3e:6c:e5:47:8e:6b:b3:0d:40:1b:52:e7:8a:22:c3:53:7b:76:
09:fd:f2:fd:54:87:11:c7:0e:62:0d:40:ea:5e:7e:e5:f8:82:
1d:67:5a:0c:04:9d:2b:ac:9e:4b:29:36:8a:16:53:40:c5:1f:
bd:16:48:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:32:17 2025 by rpki-client