Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/FfGHuB6Qf_cay6wn_ZrJC4SPGUg.roa
File: FfGHuB6Qf_cay6wn_ZrJC4SPGUg.roa (raw, json)
Hash identifier: DYs9L8yM8et51Ym0pIsTXdtN2ADOJkVDLkBPalnCV9A=
Subject key identifier: 15:F1:87:B8:1E:90:7F:F7:1A:CB:AC:27:FD:9A:C9:0B:84:8F:19:48
Certificate issuer: /CN=b1ffee7dbf7f4566ea9e30546b2c2a2e7336f2f4
Certificate serial: 0194274800CCAA73D208F3AF0FA960A009CD
Authority key identifier: B1:FF:EE:7D:BF:7F:45:66:EA:9E:30:54:6B:2C:2A:2E:73:36:F2:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sf_ufb9_RWbqnjBUaywqLnM28vQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/FfGHuB6Qf_cay6wn_ZrJC4SPGUg.roa
Signing time: Thu 02 Jan 2025 13:50:17 +0000
ROA not before: Thu 02 Jan 2025 13:50:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 95.174.80.0/24 maxlen: 24
185.144.16.0/22 maxlen: 24
2a04:2f81::/42 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/sf_ufb9_RWbqnjBUaywqLnM28vQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/sf_ufb9_RWbqnjBUaywqLnM28vQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sf_ufb9_RWbqnjBUaywqLnM28vQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:00:cc:aa:73:d2:08:f3:af:0f:a9:60:a0:09:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1ffee7dbf7f4566ea9e30546b2c2a2e7336f2f4
Validity
Not Before: Jan 2 13:50:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=15f187b81e907ff71acbac27fd9ac90b848f1948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:78:88:9c:ab:51:08:e9:30:19:82:c6:9b:c2:
25:50:12:5e:99:a1:d3:7b:03:f2:2c:23:b4:bc:b2:
7b:65:03:03:ca:ef:23:b4:18:0d:e5:6c:1e:72:f8:
91:bc:de:b6:43:32:30:2b:40:89:d4:cf:c5:3f:37:
58:20:ef:74:ec:a8:fb:9e:3e:64:42:b5:df:94:49:
15:77:75:8b:a3:75:d7:c2:c6:46:e5:c3:64:53:c8:
6f:7b:64:c9:10:82:fc:f6:1a:6d:95:4b:0e:00:97:
62:80:16:d8:18:f0:48:c2:d6:81:3a:d1:03:d6:2f:
c6:df:34:1c:c5:7d:e2:51:39:f9:ec:35:61:61:b8:
c4:f6:f4:d0:f3:42:31:28:98:00:e9:f4:1b:9c:c8:
de:a7:1a:93:75:eb:e7:49:41:9e:9d:c1:7a:d4:93:
2f:8d:96:f5:f3:bb:a5:76:55:30:00:0d:7b:cf:8a:
bf:f0:87:90:e7:eb:1e:c7:30:b7:09:3b:df:16:fa:
db:0a:1e:e8:2b:51:9a:9d:0e:ce:01:46:6d:ea:6a:
c4:22:f1:73:65:ae:66:90:88:0d:b5:df:1e:cc:d4:
65:eb:f6:47:5e:cd:2f:45:fd:d2:48:80:7d:e9:9d:
31:16:5d:54:43:24:61:72:82:c8:d4:6a:ae:48:81:
87:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:F1:87:B8:1E:90:7F:F7:1A:CB:AC:27:FD:9A:C9:0B:84:8F:19:48
X509v3 Authority Key Identifier:
keyid:B1:FF:EE:7D:BF:7F:45:66:EA:9E:30:54:6B:2C:2A:2E:73:36:F2:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sf_ufb9_RWbqnjBUaywqLnM28vQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/FfGHuB6Qf_cay6wn_ZrJC4SPGUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/sf_ufb9_RWbqnjBUaywqLnM28vQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.174.80.0/24
185.144.16.0/22
IPv6:
2a04:2f81::/42
Signature Algorithm: sha256WithRSAEncryption
27:9e:b1:de:b6:e6:90:02:75:91:2a:43:b0:e8:51:a2:07:3b:
d4:a8:0b:cc:d5:63:5f:5d:3a:ad:1d:db:6a:d3:78:8e:a9:82:
d5:dc:95:0b:25:48:28:c7:c4:44:ec:78:e1:e3:3e:b5:2e:31:
65:98:56:dd:66:aa:79:3d:54:d0:66:29:dd:94:8a:3a:fa:bc:
40:85:db:46:80:c3:c6:0f:b7:99:b4:a9:a0:2b:1d:19:53:ab:
91:80:0a:b2:5e:b6:37:81:f5:fb:3d:79:ee:6e:2a:60:73:eb:
b4:d4:33:ca:12:f9:9a:2e:06:7d:02:99:a2:da:f7:a7:97:cf:
5a:82:b3:ab:15:eb:7c:25:e1:07:37:51:21:e3:03:5f:8b:1c:
b5:82:1c:09:bb:b3:0a:84:1b:77:5e:8c:87:9f:ed:64:ed:34:
5f:92:01:e6:cf:2c:a4:a5:db:24:1f:fc:45:7b:e4:f0:ca:fa:
f1:3c:cf:ec:52:ab:a2:93:87:40:6a:aa:19:92:7c:ec:34:57:
0f:7d:39:29:d0:45:60:c9:a3:40:53:e3:fe:ee:97:b5:75:ea:
e5:1f:e2:c8:4b:e6:a3:5f:af:13:1b:5e:bd:a6:44:f6:28:aa:
d6:d3:e9:b1:d7:b7:45:18:d9:97:90:28:5d:9b:55:f7:6c:c0:
32:80:6e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:51:03 2025 by rpki-client