Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/FEpyM5gJNFe4ye5X-a6hHlCsXb4.roa
File: FEpyM5gJNFe4ye5X-a6hHlCsXb4.roa (raw, json)
Hash identifier: lMssHyOmtMoqB3eYJsMyXFwkDXBST8uWHzVNWSQIBeI=
Subject key identifier: 14:4A:72:33:98:09:34:57:B8:C9:EE:57:F9:AE:A1:1E:50:AC:5D:BE
Certificate issuer: /CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
Certificate serial: 0194258F49E6F1A373D837C9560E6FB8D331
Authority key identifier: 4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/FEpyM5gJNFe4ye5X-a6hHlCsXb4.roa
Signing time: Thu 02 Jan 2025 05:48:55 +0000
ROA not before: Thu 02 Jan 2025 05:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 40676
IP address blocks: 213.198.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Mar 2025 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:49:e6:f1:a3:73:d8:37:c9:56:0e:6f:b8:d3:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
Validity
Not Before: Jan 2 05:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=144a723398093457b8c9ee57f9aea11e50ac5dbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:85:78:ac:d8:ff:ee:12:50:94:d8:d8:de:0b:
9f:1f:1d:57:be:0f:a4:6f:0d:64:72:50:3e:f3:ca:
d2:a6:00:99:4b:0d:71:62:c9:32:ab:50:f2:65:be:
4c:c3:cb:cf:fa:63:28:71:ac:ab:49:bf:ed:a7:b0:
2c:31:be:34:d6:ca:5c:eb:48:66:d0:1d:d9:1e:ce:
48:67:e9:ad:0b:af:d1:3e:70:a8:12:54:d0:d0:4d:
3f:b8:d3:30:47:b7:65:ce:ac:17:c5:d0:60:be:1a:
db:ad:78:e4:7d:88:d4:72:9c:cc:98:07:2a:3f:38:
6f:9a:df:2f:c5:e4:da:7b:d8:e2:02:38:70:75:f4:
47:c6:15:62:a4:c1:9f:3d:61:bb:3c:86:80:b7:96:
57:4d:17:51:ea:2c:ee:b1:e8:b7:b5:d3:03:2b:73:
f0:44:ba:46:fe:5e:73:da:4b:c8:23:5d:87:d9:53:
9c:d7:87:08:25:e6:63:66:af:3a:ba:f3:fa:4e:3c:
27:53:1c:1b:8f:22:25:6c:c1:b0:39:64:10:97:f9:
60:29:d6:0f:89:2a:f2:b4:9b:b2:ac:3c:35:f4:cd:
2c:99:df:07:b0:c0:5b:54:1e:ba:8a:77:7a:a6:de:
19:72:01:20:b7:75:c4:4f:d5:fd:44:53:68:b3:65:
99:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:4A:72:33:98:09:34:57:B8:C9:EE:57:F9:AE:A1:1E:50:AC:5D:BE
X509v3 Authority Key Identifier:
keyid:4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/FEpyM5gJNFe4ye5X-a6hHlCsXb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.198.67.0/24
Signature Algorithm: sha256WithRSAEncryption
07:27:37:d0:4d:f9:b0:0c:d7:88:82:d8:49:4c:cb:00:f8:2b:
b2:37:6e:df:e2:85:27:66:20:5f:fb:f9:6e:b9:46:c5:29:a8:
d9:df:1d:85:b9:8e:f5:5f:a6:a9:e5:b1:07:dc:7a:da:61:86:
fb:a8:40:19:b3:5c:52:88:8d:11:97:83:3a:5a:ce:63:37:b9:
47:81:b9:1b:9a:ef:e6:bf:26:80:88:b0:68:00:04:67:9f:e3:
bc:76:98:ad:fd:b6:59:5d:8a:f7:3e:07:a2:f5:5d:d1:33:c1:
8c:76:b0:41:99:ff:08:bb:07:0c:9b:b8:e8:8e:b2:62:ad:5a:
04:52:b7:fe:c0:af:98:fa:b9:88:d4:2b:bb:5b:3e:8c:3b:08:
ae:27:ce:09:51:e3:e7:2d:38:b1:97:dd:8f:75:61:1b:4b:f0:
d4:18:ec:21:3f:b8:be:5e:95:ec:67:e8:fc:c0:ce:9e:fe:63:
cf:3a:77:6e:90:27:13:70:f8:ca:a0:62:88:9b:8f:0a:13:59:
c8:e1:0c:54:19:ba:73:60:d5:ad:00:08:1c:af:5d:48:90:43:
8d:9d:a9:ef:ec:41:cb:3d:be:03:29:8e:85:ee:4a:a0:ef:7a:
24:ad:21:a5:6e:43:d5:1e:97:23:e5:01:20:48:0f:1e:99:0a:
8d:43:79:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:50:38 2025 by rpki-client