Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/b2dd00-a621-49a9-bbab-37f9bf7861b6/1/fWdcwSs6zepV4nyngmDbMNEhJgc.roa
File: fWdcwSs6zepV4nyngmDbMNEhJgc.roa (raw, json)
Hash identifier: xKdKIOHrNEbxshe+Nt7u4EYPgDXnCkWil6RpBaiRPJQ=
Subject key identifier: 7D:67:5C:C1:2B:3A:CD:EA:55:E2:7C:A7:82:60:DB:30:D1:21:26:07
Certificate issuer: /CN=65c920a27e3e53a367f9ea96db7baf7bd65a83ea
Certificate serial: 01942068318328151C47BAE330ED0138F0E1
Authority key identifier: 65:C9:20:A2:7E:3E:53:A3:67:F9:EA:96:DB:7B:AF:7B:D6:5A:83:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zckgon4-U6Nn-eqW23uve9Zag-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/b2dd00-a621-49a9-bbab-37f9bf7861b6/1/fWdcwSs6zepV4nyngmDbMNEhJgc.roa
Signing time: Wed 01 Jan 2025 05:48:06 +0000
ROA not before: Wed 01 Jan 2025 05:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41960
IP address blocks: 185.252.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/b2dd00-a621-49a9-bbab-37f9bf7861b6/1/Zckgon4-U6Nn-eqW23uve9Zag-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/b2dd00-a621-49a9-bbab-37f9bf7861b6/1/Zckgon4-U6Nn-eqW23uve9Zag-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zckgon4-U6Nn-eqW23uve9Zag-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 17:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:31:83:28:15:1c:47:ba:e3:30:ed:01:38:f0:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65c920a27e3e53a367f9ea96db7baf7bd65a83ea
Validity
Not Before: Jan 1 05:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7d675cc12b3acdea55e27ca78260db30d1212607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:31:c8:b8:2d:26:12:1d:08:d0:1a:e3:0c:1e:
78:4c:1a:f6:2e:1b:11:fa:f8:9e:61:39:c3:e1:d4:
68:ee:90:25:e7:04:e6:e4:e9:17:bc:bb:b9:28:ec:
90:a9:2f:fd:88:ac:65:5c:d9:e8:7e:7e:96:a1:e7:
d8:67:40:d8:a8:ce:52:5f:b5:b0:47:18:42:04:e7:
66:5f:fa:49:3e:ac:ec:96:74:bb:db:57:37:f2:c1:
8b:7c:00:04:57:ee:dc:14:34:86:cf:14:68:9e:75:
af:4e:a6:57:b7:08:bd:8a:72:1f:d1:30:56:83:ca:
d5:ae:b9:0b:3c:51:88:6f:b8:82:6b:6c:70:63:c4:
31:a0:a7:26:f5:16:f2:99:ce:b6:0e:87:ab:bc:62:
cb:0c:55:5e:fe:16:45:90:12:d6:a6:19:93:4f:35:
3b:71:47:d9:6d:c4:b1:66:1b:72:0a:27:00:29:cf:
09:e5:d5:c4:bd:29:f3:74:2a:4e:e1:ab:19:32:6c:
21:3d:c2:10:85:bb:77:f6:83:f5:20:73:d5:ee:e9:
8b:12:bf:04:c1:8d:56:ef:3b:93:69:3c:cb:60:36:
f4:f1:51:d8:67:84:5b:6f:e9:7d:ad:df:47:ee:a3:
7d:42:ec:ee:b2:90:46:eb:c4:b3:7c:bd:8f:68:ca:
a3:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:67:5C:C1:2B:3A:CD:EA:55:E2:7C:A7:82:60:DB:30:D1:21:26:07
X509v3 Authority Key Identifier:
keyid:65:C9:20:A2:7E:3E:53:A3:67:F9:EA:96:DB:7B:AF:7B:D6:5A:83:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zckgon4-U6Nn-eqW23uve9Zag-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b2dd00-a621-49a9-bbab-37f9bf7861b6/1/fWdcwSs6zepV4nyngmDbMNEhJgc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b2dd00-a621-49a9-bbab-37f9bf7861b6/1/Zckgon4-U6Nn-eqW23uve9Zag-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.252.194.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:da:b6:cc:d2:cb:71:6b:60:89:78:b9:1b:4a:88:c5:b2:c7:
57:9c:8a:f5:9d:e9:ed:23:94:24:7c:92:cb:a3:1a:c5:0f:81:
c4:77:df:2f:54:1c:50:51:5b:ee:05:b7:63:29:3d:95:e3:b0:
e2:31:7e:eb:bb:44:5d:4d:1f:88:54:23:33:88:44:e6:b1:88:
89:39:84:ff:dd:a6:ee:ce:c7:c6:6c:40:85:67:d0:76:d5:a0:
a4:ce:28:45:6b:d9:c5:4e:53:95:fa:7f:4e:c6:1c:1f:92:c1:
ea:7e:1c:e3:74:40:d7:93:64:4b:6b:50:38:f6:46:0b:e8:36:
46:14:24:76:1a:f2:47:88:00:ed:bf:c9:aa:66:1e:32:a2:2c:
77:0d:d2:a0:9e:0c:4e:d2:7b:21:63:6a:de:81:8a:a3:d5:ac:
78:1d:47:4e:86:4c:d0:15:84:34:0a:2c:f1:3d:2a:20:9c:73:
52:f6:22:8f:a8:c6:b4:72:d3:89:1e:57:85:62:7b:72:8f:39:
98:97:5e:f4:23:3e:de:a1:9c:43:f7:f2:26:80:6e:e9:0b:b0:
fa:d2:88:6d:6e:4f:2b:71:50:47:45:08:52:aa:1b:a6:26:ed:
25:da:30:ee:49:3e:41:ea:fc:a8:33:4f:41:e8:f6:ec:03:8a:
b0:ea:f9:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:44:34 2025 by rpki-client