Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/18b6da-b02e-40b1-97ae-d7399292019a/1/fkzPxe4oSfJ7rsZHCJi7Ez_ga90.roa
File: fkzPxe4oSfJ7rsZHCJi7Ez_ga90.roa (raw, json)
Hash identifier: mg3GC3ABaXwmgAsHAk2LKt5EpoWqSB6jRcpbqBUg5ds=
Subject key identifier: 7E:4C:CF:C5:EE:28:49:F2:7B:AE:C6:47:08:98:BB:13:3F:E0:6B:DD
Certificate issuer: /CN=9ededf47822aee27da28d34dab1fe7a3c60a6aaa
Certificate serial: 01941F8C7938B42C2BB445A6B2D646B06C37
Authority key identifier: 9E:DE:DF:47:82:2A:EE:27:DA:28:D3:4D:AB:1F:E7:A3:C6:0A:6A:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nt7fR4Iq7ifaKNNNqx_no8YKaqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/18b6da-b02e-40b1-97ae-d7399292019a/1/fkzPxe4oSfJ7rsZHCJi7Ez_ga90.roa
Signing time: Wed 01 Jan 2025 01:48:07 +0000
ROA not before: Wed 01 Jan 2025 01:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208277
IP address blocks: 176.221.32.0/21 maxlen: 32
176.221.39.0/24 maxlen: 24
185.99.232.0/22 maxlen: 32
2a03:9c80:8000::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/18b6da-b02e-40b1-97ae-d7399292019a/1/nt7fR4Iq7ifaKNNNqx_no8YKaqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/18b6da-b02e-40b1-97ae-d7399292019a/1/nt7fR4Iq7ifaKNNNqx_no8YKaqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nt7fR4Iq7ifaKNNNqx_no8YKaqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 16:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:79:38:b4:2c:2b:b4:45:a6:b2:d6:46:b0:6c:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ededf47822aee27da28d34dab1fe7a3c60a6aaa
Validity
Not Before: Jan 1 01:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7e4ccfc5ee2849f27baec6470898bb133fe06bdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:51:03:6d:e1:a2:d0:2a:64:a7:db:d8:5f:dd:
e7:28:f4:dd:67:24:bf:87:c9:30:75:05:15:37:dc:
3b:26:16:9e:1b:b6:e7:3c:3e:06:39:0c:4f:4c:3a:
c5:d0:1e:07:f1:8d:bd:49:01:3e:eb:4f:89:d3:16:
12:1b:e4:47:74:d0:4e:8b:ec:0f:4c:8d:8a:2c:6c:
0f:e0:07:74:26:da:15:16:39:57:66:81:33:44:5c:
75:d2:df:98:cd:83:f7:aa:0c:69:4b:d2:eb:b5:b7:
ed:c5:2a:61:8a:65:70:90:b5:82:63:43:13:74:bb:
aa:77:e7:77:0f:77:e3:97:4e:66:12:dd:be:b7:df:
d0:18:6d:1f:4e:6e:66:c2:c1:2a:1c:09:ce:e0:da:
3d:2e:83:77:ea:ea:fc:be:47:69:7b:72:f7:48:e7:
bb:e1:99:be:66:61:38:3d:01:10:80:8d:21:40:8a:
19:c6:72:4d:ad:db:66:9b:fd:cf:a0:1e:41:a8:d2:
83:ec:97:ef:dd:1e:d1:0a:9d:92:a4:10:a1:fb:fa:
87:2b:df:a4:b3:2f:d0:b0:4a:c3:6a:99:95:b9:36:
f7:64:c7:2d:80:e0:7b:e8:06:01:b0:c7:22:1e:6c:
6a:48:2a:84:a3:bd:9d:cb:6c:9b:bf:ab:9e:15:af:
c6:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:4C:CF:C5:EE:28:49:F2:7B:AE:C6:47:08:98:BB:13:3F:E0:6B:DD
X509v3 Authority Key Identifier:
keyid:9E:DE:DF:47:82:2A:EE:27:DA:28:D3:4D:AB:1F:E7:A3:C6:0A:6A:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nt7fR4Iq7ifaKNNNqx_no8YKaqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/18b6da-b02e-40b1-97ae-d7399292019a/1/fkzPxe4oSfJ7rsZHCJi7Ez_ga90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/18b6da-b02e-40b1-97ae-d7399292019a/1/nt7fR4Iq7ifaKNNNqx_no8YKaqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.221.32.0/21
185.99.232.0/22
IPv6:
2a03:9c80:8000::/34
Signature Algorithm: sha256WithRSAEncryption
9e:7d:b5:63:fa:74:27:7d:b8:4a:c5:a3:74:81:a1:21:2a:53:
73:43:eb:45:fa:55:3f:a4:62:f8:44:d1:88:05:5b:f3:cd:fa:
96:f0:17:19:6d:b3:41:80:04:d1:59:1c:21:34:9c:dd:1c:0a:
a0:31:a7:bd:5b:72:66:56:f0:7c:5a:ab:85:56:ae:a2:1c:57:
b0:79:f0:fd:b6:b1:d6:7e:d2:9d:ef:20:01:d2:9b:e4:8c:bd:
9c:65:56:d4:56:14:1c:fa:fb:02:91:ae:95:ec:7d:97:2c:10:
be:63:39:5b:56:3d:92:08:c0:b7:b0:5b:38:44:d5:bd:85:7b:
bc:13:87:78:67:1d:1b:b6:af:96:3c:1e:be:8d:43:86:fe:0a:
a6:b9:4d:66:b2:5e:a7:8f:2c:a1:34:9d:11:8b:03:7c:8d:c5:
01:00:13:4d:9b:92:a5:3a:9c:6f:25:db:e6:49:31:44:04:e6:
d9:05:13:05:c6:a3:20:f8:09:c2:ad:ca:a2:ac:a9:6d:13:3d:
fc:a6:e0:fa:e4:69:ef:9a:3a:06:69:50:1d:da:ea:57:30:36:
c8:aa:0b:e4:24:c3:ea:8f:dd:cc:cc:dc:1a:40:12:f9:98:50:
7f:fc:43:18:a2:f2:40:17:51:6a:e2:eb:80:d5:1e:a9:4c:0e:
42:26:b5:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 02:26:24 2025 by rpki-client