Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/FUHDbJCepy28IKao54nO3bLU4P8.roa
File: FUHDbJCepy28IKao54nO3bLU4P8.roa (raw, json)
Hash identifier: 5WiEfgbqY6pwD5MQMHYe4zTDcjAo2CtmGmKJWacfkOA=
Subject key identifier: 15:41:C3:6C:90:9E:A7:2D:BC:20:A6:A8:E7:89:CE:DD:B2:D4:E0:FF
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01942824B78649424A7A4AEA1F33798FDDF2
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/FUHDbJCepy28IKao54nO3bLU4P8.roa
Signing time: Thu 02 Jan 2025 17:51:22 +0000
ROA not before: Thu 02 Jan 2025 17:51:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208389
IP address blocks: 93.123.0.0/24 maxlen: 24
93.123.1.0/24 maxlen: 24
93.123.2.0/24 maxlen: 24
93.123.3.0/24 maxlen: 24
93.123.4.0/24 maxlen: 24
93.123.5.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 00:57:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:b7:86:49:42:4a:7a:4a:ea:1f:33:79:8f:dd:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1541c36c909ea72dbc20a6a8e789ceddb2d4e0ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:c8:48:9e:00:ac:ac:50:03:2a:cd:d3:90:d8:
42:39:6c:4c:c1:c3:35:48:4b:82:70:a0:66:e8:dd:
ba:72:9f:09:24:3a:d6:7a:39:ec:59:28:1e:00:79:
ff:af:b4:c8:5d:0b:0a:5b:06:f9:90:55:b7:dd:7e:
f0:0c:28:06:68:6f:af:5d:1f:7a:3a:2d:ab:88:6f:
47:5d:f4:b5:4a:e8:c4:84:15:a7:9c:dc:ef:d9:c8:
56:4a:5e:bf:0c:82:0f:3a:1d:7a:04:18:01:e0:32:
94:60:d6:07:53:0f:d5:7f:92:06:b1:93:43:df:30:
78:3c:c2:9a:55:56:73:05:4e:b1:e7:4e:42:be:fb:
9a:84:a4:f9:17:b2:68:88:9c:e5:1a:f0:4d:40:e5:
53:c8:6d:24:a2:7f:d4:f1:f4:bb:d6:88:e8:e2:83:
64:83:5b:ce:95:73:29:1b:1f:2e:c0:c6:ed:d0:23:
31:ef:93:41:ea:2e:1c:ca:8c:ec:38:7d:1f:78:82:
80:0a:26:36:d9:b6:d0:b2:b1:93:eb:c6:f7:04:76:
57:e1:28:63:1d:70:ce:84:34:bb:3f:bf:ac:a2:ac:
cb:30:fe:c5:b8:ae:70:8f:f9:83:59:29:f9:5a:75:
ac:dd:c3:8e:6c:97:e7:48:76:97:50:8e:8d:4e:8b:
5b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:41:C3:6C:90:9E:A7:2D:BC:20:A6:A8:E7:89:CE:DD:B2:D4:E0:FF
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/FUHDbJCepy28IKao54nO3bLU4P8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.123.0.0-93.123.5.255
Signature Algorithm: sha256WithRSAEncryption
36:4b:6d:b2:80:ed:61:fd:27:99:8a:ed:fd:c6:d4:e5:e9:67:
52:32:ac:dd:49:00:2c:1a:5f:73:df:f7:06:ae:08:86:08:e9:
80:32:64:f7:ad:43:97:26:d8:f7:f6:fd:f8:ef:21:84:7a:b8:
21:61:17:9a:60:76:a8:de:22:23:0e:8e:37:94:14:32:e7:fb:
23:a6:d4:6f:17:fc:d4:3c:fb:ed:c1:6a:07:3e:5c:44:3c:bb:
bd:35:d0:14:0c:3b:d6:13:27:ce:96:e5:31:42:8d:88:63:92:
84:6c:58:b2:e9:f2:73:32:e9:a8:ad:14:58:6d:1b:51:93:2e:
d3:e2:3d:11:6a:8d:61:dc:f8:a4:da:c6:69:c2:ed:63:76:3b:
cb:72:78:05:6b:2e:e9:7d:e3:f7:ad:26:41:7a:e2:e9:53:25:
6d:c3:d4:f4:d8:bd:8f:c2:0e:0b:7a:60:70:f2:10:ff:61:16:
c0:b4:99:41:d3:10:9c:fa:2e:b0:e3:cd:a6:1f:ae:0f:53:4f:
f5:f8:e9:f6:4b:a5:ef:81:06:6a:46:8d:62:c2:07:fd:47:03:
a6:6f:f4:b1:2c:8b:35:8c:a6:ee:00:d9:82:e1:41:e8:3c:fc:
9f:95:ec:c3:13:07:a9:f3:40:d9:a5:f9:16:aa:82:bc:8b:e1:
3a:04:43:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:53:36 2025 by rpki-client