Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/FKEx2zQKag37bdIvvDgPtyLZX1A.roa
File: FKEx2zQKag37bdIvvDgPtyLZX1A.roa (raw, json)
Hash identifier: TU9HOk20hExN1ceSLOgWeTpBGwmKcjJ4w4HQDhfIOxQ=
Subject key identifier: 14:A1:31:DB:34:0A:6A:0D:FB:6D:D2:2F:BC:38:0F:B7:22:D9:5F:50
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 01942068363E79B2FAF2EB4B89EF843889D8
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/FKEx2zQKag37bdIvvDgPtyLZX1A.roa
Signing time: Wed 01 Jan 2025 05:48:08 +0000
ROA not before: Wed 01 Jan 2025 05:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3229
IP address blocks: 193.233.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 19:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:36:3e:79:b2:fa:f2:eb:4b:89:ef:84:38:89:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 1 05:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=14a131db340a6a0dfb6dd22fbc380fb722d95f50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d5:67:55:f6:66:bb:59:ee:09:55:01:87:d8:
c4:2a:42:d0:1b:e4:c8:92:7e:a5:9a:9f:3b:3e:7e:
68:68:46:21:25:7f:7d:ed:93:83:fa:a4:f5:be:bc:
5d:a8:4d:8e:36:e0:23:ec:1c:6f:48:da:b6:4e:04:
75:fd:9e:0f:a7:71:d2:1a:01:b9:a8:b8:a9:5f:de:
bf:2c:ef:b8:87:87:20:de:37:53:59:8a:6b:da:fb:
26:13:bc:80:89:ef:7d:6e:02:4c:fd:3c:fd:a5:2e:
3b:27:2c:ef:10:2d:3f:74:ab:48:20:5c:d1:b6:86:
39:6e:b6:65:de:15:fc:0f:20:bd:f5:70:90:fc:a8:
31:98:73:c2:3b:db:b1:bd:7c:64:1e:d5:5a:3b:74:
ce:4f:a7:b9:6d:34:50:af:5c:d9:8e:a4:31:ea:d6:
0f:d9:e1:90:95:5a:c8:9a:82:0b:db:7f:86:b1:10:
5e:7d:52:cc:2e:a9:70:59:e9:82:3b:38:c6:3c:97:
96:6c:da:c4:73:89:65:a6:52:db:ba:fa:46:f3:bc:
b1:cc:ea:23:17:bc:67:d7:c2:34:3f:fc:78:26:c4:
64:6b:16:b6:4a:b1:de:cc:5f:00:2b:84:63:19:9d:
d8:46:e5:74:a6:ae:bb:e6:83:79:e2:50:8e:62:03:
87:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:A1:31:DB:34:0A:6A:0D:FB:6D:D2:2F:BC:38:0F:B7:22:D9:5F:50
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/FKEx2zQKag37bdIvvDgPtyLZX1A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.172.0/24
Signature Algorithm: sha256WithRSAEncryption
52:b0:1e:ea:3d:c5:a7:ce:bb:dc:4e:e5:04:bd:ab:8c:7d:5b:
89:b7:ee:e6:7c:ac:5b:3d:a9:ad:9a:08:c9:6e:5f:94:47:82:
ae:ae:67:f9:c0:b9:56:cf:63:e8:fd:b5:20:a1:d0:32:93:33:
f9:7e:24:2b:a0:37:34:37:9b:6b:20:26:99:72:d8:32:bb:02:
9c:17:44:62:04:ee:2b:2b:77:ac:ea:8e:d0:1e:bf:54:e6:d5:
97:a9:10:b1:fa:ea:f4:06:52:86:58:d9:d3:9b:46:d2:31:d9:
bc:e0:14:b6:75:4c:cb:86:8c:d0:f2:be:94:8c:7a:58:4b:26:
50:69:7b:2d:8f:42:4c:8a:b3:33:cf:24:41:f6:c8:43:12:f1:
1e:2b:7c:95:fb:84:da:fc:61:7c:38:36:5e:43:e2:7f:c6:2d:
ae:d1:24:2f:a3:d6:a6:c1:97:cd:d3:4f:8d:9f:a9:de:34:10:
1e:0e:74:a5:03:25:4d:15:27:a3:4e:e4:a0:fd:79:f7:b7:e4:
c4:38:57:92:be:27:03:59:b3:c4:c9:5c:69:30:81:a2:9a:0b:
48:fb:97:12:8a:52:6f:9c:9d:b2:29:03:63:dd:b8:e5:55:0b:
0c:a6:d6:90:a4:32:00:97:69:9e:c5:fc:77:05:79:24:f4:2f:
a0:e4:9e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:13:49 2025 by rpki-client