Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/fXCcgUSD-6HNgkjQxM90O6lfJzY.roa
File: fXCcgUSD-6HNgkjQxM90O6lfJzY.roa (raw, json)
Hash identifier: hPPYSOb/+jw/H4XCWA1NGkrCD/90gdTOvYWg/h1cmfU=
Subject key identifier: 7D:70:9C:81:44:83:FB:A1:CD:82:48:D0:C4:CF:74:3B:A9:5F:27:36
Certificate issuer: /CN=5eccb7cd1b9d6fc39d7158f2fe9cf5217a12d374
Certificate serial: 0194258F3463761EF9654FD1CA4EE05FEACD
Authority key identifier: 5E:CC:B7:CD:1B:9D:6F:C3:9D:71:58:F2:FE:9C:F5:21:7A:12:D3:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xsy3zRudb8OdcVjy_pz1IXoS03Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/fXCcgUSD-6HNgkjQxM90O6lfJzY.roa
Signing time: Thu 02 Jan 2025 05:48:49 +0000
ROA not before: Thu 02 Jan 2025 05:48:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62125
IP address blocks: 185.46.192.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xsy3zRudb8OdcVjy_pz1IXoS03Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Mar 2025 02:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:34:63:76:1e:f9:65:4f:d1:ca:4e:e0:5f:ea:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eccb7cd1b9d6fc39d7158f2fe9cf5217a12d374
Validity
Not Before: Jan 2 05:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7d709c814483fba1cd8248d0c4cf743ba95f2736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c4:2c:ed:64:1d:b8:54:59:ff:48:94:ae:db:
e8:da:a4:b4:67:d8:25:c2:82:83:c3:9f:f5:18:ee:
18:b9:0f:c4:5e:f8:85:f1:b0:2c:84:e8:9d:6b:1d:
07:cc:7f:e3:75:31:9f:ea:96:92:dd:d8:87:c0:79:
98:12:83:8d:e7:e5:db:23:21:e5:60:2b:ea:6f:e1:
48:1f:e4:db:26:a5:8e:d8:79:47:8c:2f:35:9e:00:
12:14:96:5a:38:fe:84:16:4b:e6:a4:d3:6b:10:26:
4c:26:ab:45:52:26:37:3d:85:a5:b8:45:60:9e:db:
a1:4e:12:90:63:1b:69:a3:b9:78:09:7e:25:83:ee:
60:f6:04:ba:2c:0b:5c:60:8e:4a:cb:f2:c3:60:20:
6c:80:bc:2f:50:a0:a2:22:cf:96:9d:dd:dd:90:4f:
6a:12:b9:15:50:44:c6:f3:19:ac:d9:af:a7:9f:10:
01:b0:25:82:fa:ff:3e:5d:8b:3d:86:31:69:ae:58:
55:7f:b6:f6:a3:e0:fc:b9:d9:78:60:27:0b:34:72:
1e:95:bd:76:59:7f:93:fa:88:6c:62:3a:69:43:de:
72:68:4c:26:b1:ff:5e:32:71:b4:fd:b5:7b:36:74:
85:0b:06:fe:c3:dd:0a:d8:1d:07:04:0a:e6:f9:89:
77:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:70:9C:81:44:83:FB:A1:CD:82:48:D0:C4:CF:74:3B:A9:5F:27:36
X509v3 Authority Key Identifier:
keyid:5E:CC:B7:CD:1B:9D:6F:C3:9D:71:58:F2:FE:9C:F5:21:7A:12:D3:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xsy3zRudb8OdcVjy_pz1IXoS03Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/fXCcgUSD-6HNgkjQxM90O6lfJzY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.46.192.0/22
Signature Algorithm: sha256WithRSAEncryption
80:6e:2e:f0:e0:31:cf:8a:77:69:d6:d4:89:4b:f2:85:b7:be:
70:14:6c:6e:eb:9b:6f:18:af:64:41:66:65:e5:eb:ef:e3:f8:
2a:8e:41:f3:3e:3c:ea:ce:20:66:11:07:9d:a3:6c:ba:3a:18:
7f:ec:aa:70:f5:41:e3:9a:10:8a:9f:16:7a:64:b3:a5:c6:fe:
c8:d3:66:97:96:aa:8e:0a:ed:c3:df:4f:56:48:1b:1b:1b:04:
f3:52:13:92:e6:1d:f7:c9:25:42:28:42:53:f1:20:39:35:3e:
c3:05:5c:73:e5:2f:c4:ed:94:b3:e4:b0:a5:e7:99:16:bb:af:
55:37:f1:4c:1a:c8:f5:b3:91:b5:6c:39:00:23:c4:fe:28:fe:
e4:2c:83:d1:95:64:5d:2e:0c:70:59:77:81:e6:64:ae:ca:4e:
cf:41:7b:37:65:45:f7:ea:54:0a:41:e8:76:81:0d:a9:70:39:
b7:23:e3:f0:f0:93:56:94:6c:16:ec:32:5d:5a:84:6b:99:e6:
e2:60:c5:10:1d:ec:f7:32:8c:b0:5b:4e:68:8b:a6:57:1a:79:
95:8b:70:23:a6:8c:1e:3e:68:9b:4f:bb:94:e6:f7:d7:45:06:
bf:2f:af:f6:2f:ec:54:cb:fb:94:f8:1c:2c:11:f6:22:c8:0b:
d6:29:a4:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:57:27 2025 by rpki-client