Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/_j56SkoPwjvw5J3-yiHS-OHaGdg.roa
File: _j56SkoPwjvw5J3-yiHS-OHaGdg.roa (raw, json)
Hash identifier: 8LANgZZ7cUUufNrH/hblrmKv7SFmglJPoUVHRC20Sgc=
Subject key identifier: FE:3E:7A:4A:4A:0F:C2:3B:F0:E4:9D:FE:CA:21:D2:F8:E1:DA:19:D8
Certificate issuer: /CN=fe1d18d9a222736dbac231110b88deac8db0336d
Certificate serial: 019427B5B939C12CF091315B5E9AD5B2E940
Authority key identifier: FE:1D:18:D9:A2:22:73:6D:BA:C2:31:11:0B:88:DE:AC:8D:B0:33:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_h0Y2aIic226wjERC4jerI2wM20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/_j56SkoPwjvw5J3-yiHS-OHaGdg.roa
Signing time: Thu 02 Jan 2025 15:50:08 +0000
ROA not before: Thu 02 Jan 2025 15:50:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210221
IP address blocks: 194.38.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/_h0Y2aIic226wjERC4jerI2wM20.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/_h0Y2aIic226wjERC4jerI2wM20.mft
rsync://rpki.ripe.net/repository/DEFAULT/_h0Y2aIic226wjERC4jerI2wM20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 06:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:b9:39:c1:2c:f0:91:31:5b:5e:9a:d5:b2:e9:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe1d18d9a222736dbac231110b88deac8db0336d
Validity
Not Before: Jan 2 15:50:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fe3e7a4a4a0fc23bf0e49dfeca21d2f8e1da19d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d7:b6:0a:64:79:2a:02:8f:62:e7:8a:2e:43:
8a:45:39:17:79:21:a9:e1:43:69:d9:f2:dd:ee:89:
8f:f2:4b:1a:65:71:c2:f8:69:d8:cc:df:e2:96:62:
93:39:ef:d5:71:0b:c4:37:67:86:94:a8:f4:47:47:
c2:40:d1:de:4f:ed:2c:90:97:d5:b8:f5:50:ef:8d:
ab:1c:bc:0e:10:99:50:20:fd:c9:13:19:3f:b0:29:
d1:4d:c9:c2:6d:9f:5e:e0:a8:58:4e:86:f8:0c:5f:
5f:3e:ff:67:d3:36:e4:d1:d9:2c:1e:4e:e3:e8:d7:
64:f0:b1:f9:e5:1e:a0:70:b8:96:b6:aa:ee:92:98:
f1:fd:5a:d2:45:22:bd:57:08:b4:1e:17:76:82:eb:
3e:6f:7f:56:4a:31:9a:73:98:e5:b5:3c:ae:17:31:
d8:98:34:71:01:a4:59:93:e3:f7:bc:40:d4:e1:80:
b3:3f:11:c8:e0:ef:b6:85:45:eb:71:65:f0:21:2e:
76:76:51:7e:72:c6:13:65:7e:3f:c5:fe:e0:81:f8:
42:ab:e5:9d:4f:3e:29:cd:67:5e:4d:87:fc:0e:4d:
d9:f1:e8:25:8a:0a:02:47:69:f2:75:ed:94:42:48:
75:8a:e5:33:bf:dc:37:03:3f:b8:1e:39:79:80:ec:
a0:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:3E:7A:4A:4A:0F:C2:3B:F0:E4:9D:FE:CA:21:D2:F8:E1:DA:19:D8
X509v3 Authority Key Identifier:
keyid:FE:1D:18:D9:A2:22:73:6D:BA:C2:31:11:0B:88:DE:AC:8D:B0:33:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_h0Y2aIic226wjERC4jerI2wM20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/_j56SkoPwjvw5J3-yiHS-OHaGdg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/_h0Y2aIic226wjERC4jerI2wM20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.38.130.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:21:8e:d8:d6:3d:2f:de:68:33:b3:f5:63:df:7e:bc:60:6b:
b5:4b:c9:14:65:c7:a9:19:b7:2e:dc:db:36:77:3a:42:9e:e4:
2f:50:33:2f:48:26:be:4b:76:02:88:8e:0e:97:a9:17:4b:91:
79:8b:8b:ce:87:28:c3:31:51:2e:ba:b4:f6:ee:12:36:4f:99:
51:c7:a8:8a:50:3d:25:c4:bf:d7:49:f4:ba:ca:cd:71:9a:65:
d3:64:33:eb:89:05:95:a3:ce:03:99:9c:2a:9b:e1:6d:87:c1:
38:08:37:28:3a:f1:e8:d7:c6:26:e4:40:76:79:f3:f0:06:d3:
83:ec:bb:47:8e:05:0f:69:c0:bb:45:8e:af:14:5e:a6:c0:ea:
6a:cc:04:7b:fb:63:64:c7:8d:b1:07:89:cf:1e:97:e1:48:30:
a8:91:f3:49:e8:55:df:c8:1c:61:4c:72:98:34:01:11:09:aa:
26:27:b9:24:e1:b0:1d:31:f5:5c:84:38:c8:c8:51:75:b7:06:
16:01:07:e9:45:0b:34:04:21:1c:ee:75:a3:b5:4c:a8:3c:65:
c9:37:b5:6b:52:34:3b:c7:9a:71:84:7c:1b:4b:d3:e2:7f:e2:
2c:44:30:fd:b2:19:5b:99:1c:8b:0c:a7:7a:ee:3b:05:52:a4:
e8:d3:c0:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:08:48 2025 by rpki-client