Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/FE1p8xqk22ZLL8TtVpBgIJ5HCYk.roa
File: FE1p8xqk22ZLL8TtVpBgIJ5HCYk.roa (raw, json)
Hash identifier: EEjSbBj9sFsFeIYvGJ66Mb2B5f9wjNh8P6NHIHv03o4=
Subject key identifier: 14:4D:69:F3:1A:A4:DB:66:4B:2F:C4:ED:56:90:60:20:9E:47:09:89
Certificate issuer: /CN=8b6a23a2fd1a0956378a37d4fce259df2bd794a7
Certificate serial: 0194214460F19154E2047698304D1736476C
Authority key identifier: 8B:6A:23:A2:FD:1A:09:56:37:8A:37:D4:FC:E2:59:DF:2B:D7:94:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2ojov0aCVY3ijfU_OJZ3yvXlKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/FE1p8xqk22ZLL8TtVpBgIJ5HCYk.roa
Signing time: Wed 01 Jan 2025 09:48:36 +0000
ROA not before: Wed 01 Jan 2025 09:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5400
IP address blocks: 185.68.200.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2ojov0aCVY3ijfU_OJZ3yvXlKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 21:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:60:f1:91:54:e2:04:76:98:30:4d:17:36:47:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6a23a2fd1a0956378a37d4fce259df2bd794a7
Validity
Not Before: Jan 1 09:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=144d69f31aa4db664b2fc4ed569060209e470989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:09:1d:e2:62:34:e0:1b:cd:5f:c6:ed:d1:52:
8c:11:60:21:0e:f5:7d:41:4c:64:de:31:42:53:6c:
9f:e7:a2:d8:4c:ca:88:f7:fa:e2:31:27:95:f2:55:
5d:84:75:ee:12:68:47:f4:e3:f7:fb:f1:a3:62:29:
71:43:8e:67:4a:c6:c9:e4:15:2b:29:03:19:d2:07:
84:e8:b6:52:7c:95:c1:a0:e7:4c:d5:9a:63:23:b8:
46:1f:3a:09:e8:7c:50:be:e3:60:43:0e:d5:39:f6:
1e:0f:4e:38:a1:cf:a4:07:a0:94:56:cd:86:b5:2b:
6b:8e:76:4e:f3:1d:d4:cd:cb:c7:a7:2c:38:5f:a7:
f9:ca:f7:d1:ed:04:37:2b:ea:d5:28:e6:f5:31:07:
a2:9b:40:15:b7:27:37:92:5e:ff:42:fd:37:25:5e:
f3:01:1d:da:51:a6:1b:e1:e4:35:41:1d:f9:5f:44:
92:df:68:48:e7:50:61:42:dc:42:a2:34:ca:b9:f2:
e7:11:2e:89:0c:b3:50:07:ca:95:46:b6:58:8e:a6:
90:9c:b2:2c:a8:60:f8:72:0c:85:b5:84:85:13:ef:
2c:ae:b1:31:54:2d:e7:09:38:5c:a9:97:ff:ac:81:
b4:9b:36:bd:8c:ed:33:42:7f:75:de:f5:d5:ab:60:
6a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:4D:69:F3:1A:A4:DB:66:4B:2F:C4:ED:56:90:60:20:9E:47:09:89
X509v3 Authority Key Identifier:
keyid:8B:6A:23:A2:FD:1A:09:56:37:8A:37:D4:FC:E2:59:DF:2B:D7:94:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2ojov0aCVY3ijfU_OJZ3yvXlKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/FE1p8xqk22ZLL8TtVpBgIJ5HCYk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.68.200.0/22
Signature Algorithm: sha256WithRSAEncryption
59:24:92:9c:37:4c:d8:8e:9f:49:b4:a4:d7:f3:2f:6b:22:52:
a1:a3:78:c7:e7:82:6e:28:59:94:b7:f1:92:a6:b6:32:42:4c:
94:b9:73:be:91:1f:97:3e:4a:7c:07:51:0d:fd:6c:c4:8a:8f:
e2:1f:16:0e:48:2f:44:19:55:3a:15:ca:20:9d:c4:2d:6f:a5:
c0:0d:30:10:f2:bb:fb:c7:66:4d:8a:d8:f5:ef:d5:06:74:cf:
7d:14:9c:a9:e6:de:66:14:7e:ca:f7:30:a1:5b:94:a7:e8:3a:
b5:2d:bb:ab:61:37:2d:f6:88:86:0a:00:24:1b:4a:5b:94:1f:
09:c8:9b:1c:72:f1:54:90:b5:a1:79:b0:ad:ce:4b:6c:56:25:
a7:83:c2:9e:b4:fe:66:33:6d:77:c4:67:21:74:73:d3:bc:40:
df:da:f9:d1:8f:3c:ca:73:b5:23:2d:8e:24:1e:fc:e0:8e:1c:
f4:a0:20:03:b3:2f:a1:44:08:b5:92:ce:73:51:1e:da:1b:d0:
19:a4:7f:28:b4:de:6f:97:f5:10:01:f8:16:da:1e:01:a0:4f:
d3:b7:4a:ec:60:71:56:1c:6e:8a:c5:e7:b9:21:4a:57:2b:5f:
03:61:53:a7:c2:75:ec:b4:a2:d4:e1:1c:20:d6:f2:5e:4c:2d:
a3:8d:06:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:37:21 2025 by rpki-client