Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/Fhu6eteSMh-I7iJVqiXmMyG026Q.roa
File: Fhu6eteSMh-I7iJVqiXmMyG026Q.roa (raw, json)
Hash identifier: F9PD+ubtwzitBN7aKci6vGXmXOFiGygMSM+2xXKhmeU=
Subject key identifier: 16:1B:BA:7A:D7:92:32:1F:88:EE:22:55:AA:25:E6:33:21:B4:DB:A4
Certificate issuer: /CN=a49f6266f61a1eccd4dee094cc71c6db86bbb37b
Certificate serial: 019422201FA212367007951FDEDF34C8C5D2
Authority key identifier: A4:9F:62:66:F6:1A:1E:CC:D4:DE:E0:94:CC:71:C6:DB:86:BB:B3:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJ9iZvYaHszU3uCUzHHG24a7s3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/Fhu6eteSMh-I7iJVqiXmMyG026Q.roa
Signing time: Wed 01 Jan 2025 13:48:37 +0000
ROA not before: Wed 01 Jan 2025 13:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6939
IP address blocks: 185.149.68.0/24 maxlen: 24
185.149.69.0/24 maxlen: 24
185.149.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/pJ9iZvYaHszU3uCUzHHG24a7s3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:1f:a2:12:36:70:07:95:1f:de:df:34:c8:c5:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a49f6266f61a1eccd4dee094cc71c6db86bbb37b
Validity
Not Before: Jan 1 13:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=161bba7ad792321f88ee2255aa25e63321b4dba4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c3:c4:87:0d:83:3f:f8:31:6d:28:a2:9a:07:
6f:f7:01:fc:15:ed:ef:97:0b:1b:36:7a:83:71:12:
37:89:5e:9f:46:82:f0:9d:80:fa:e5:e9:d6:e6:c3:
ee:d3:6d:24:c0:13:39:95:cb:ab:d4:c7:8a:ff:32:
f5:99:81:76:41:b8:c5:7c:20:81:1d:9a:83:0d:80:
03:1c:2d:06:29:29:35:5e:60:4a:8e:0b:f2:f7:a8:
bf:0d:bc:c1:e8:18:ad:fb:bb:6e:05:80:80:c1:0c:
4a:ae:9d:c9:ba:66:34:22:a0:cf:9d:94:60:c7:75:
aa:43:dd:e0:9f:e6:62:cb:9b:a0:ec:72:fa:a1:d8:
5d:29:d6:19:3c:d5:c6:90:ab:5f:83:91:e8:53:dd:
0f:d1:0d:ff:6e:52:ee:61:65:cc:b6:d3:80:fd:9d:
53:8b:38:39:01:dc:78:c7:f2:c7:db:47:15:30:22:
a9:74:1c:0d:1f:e5:f9:87:12:33:a6:80:87:4e:a0:
01:f8:8f:47:a0:4d:f8:da:51:61:7a:09:92:2b:67:
0e:72:cc:b2:f4:8a:a4:85:d8:4e:4c:77:88:1f:18:
47:4e:2c:71:ac:3f:25:cc:c7:d8:ed:68:86:ad:4b:
59:b9:28:45:fa:f9:e7:88:10:0f:b1:92:c3:fe:6e:
78:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:1B:BA:7A:D7:92:32:1F:88:EE:22:55:AA:25:E6:33:21:B4:DB:A4
X509v3 Authority Key Identifier:
keyid:A4:9F:62:66:F6:1A:1E:CC:D4:DE:E0:94:CC:71:C6:DB:86:BB:B3:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJ9iZvYaHszU3uCUzHHG24a7s3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/Fhu6eteSMh-I7iJVqiXmMyG026Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.149.68.0-185.149.70.255
Signature Algorithm: sha256WithRSAEncryption
4e:f5:24:0f:bd:b6:e2:90:cd:4b:76:4c:d8:3b:25:a1:21:39:
e2:d1:c0:13:b4:95:51:de:fb:cd:70:91:3f:9f:91:27:ae:07:
d2:ec:62:14:b1:84:20:56:79:a8:38:67:9b:25:8a:1e:11:cd:
3b:f8:72:e3:d3:66:70:77:c4:c1:ae:89:51:d0:09:e1:ab:54:
03:af:00:47:47:89:91:ef:33:3e:6c:e0:09:5b:3d:47:e1:40:
bc:54:2d:27:61:63:06:26:fe:12:6b:d1:0e:0c:48:69:ef:67:
3e:7e:d6:6f:a2:8b:50:10:f8:e3:20:ab:aa:30:05:af:64:ea:
03:06:8c:30:4c:20:a2:ef:b2:0c:21:a9:7b:db:22:c5:63:71:
28:b9:c9:03:77:e3:d7:4c:51:f9:05:02:72:da:2b:a2:d8:dd:
66:41:d7:22:2e:8a:5e:71:8a:76:da:c3:b2:34:fb:8e:5e:d7:
2b:fc:ae:2e:80:d9:e3:ef:40:90:aa:9c:1c:c1:0f:e4:1e:e3:
0b:c1:46:62:c2:fd:2c:38:86:2b:cf:30:a2:1e:7d:dd:61:cc:
ff:69:f2:c1:62:61:c1:e9:ba:62:fb:99:7d:43:80:0f:39:65:
e8:39:13:aa:93:4b:1e:05:c6:77:d0:7b:ec:e5:b7:d0:2c:0b:
d3:ff:d8:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:52:06 2025 by rpki-client