Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/d2725d-8001-41f1-80e5-a9eef294ac34/1/FsJZX9GGj2A1me0tekd7HmtKIf4.roa
File: FsJZX9GGj2A1me0tekd7HmtKIf4.roa (raw, json)
Hash identifier: wa9LmtrA5IFHkOGKHcF70x4E1HktC1RNDhObryrXOsE=
Subject key identifier: 16:C2:59:5F:D1:86:8F:60:35:99:ED:2D:7A:47:7B:1E:6B:4A:21:FE
Certificate issuer: /CN=fe92ef35321bf8f722734bff9dfa63fbd0f0690a
Certificate serial: 01941F8C1EA8EA3A87C10ACE1F8ADD610F38
Authority key identifier: FE:92:EF:35:32:1B:F8:F7:22:73:4B:FF:9D:FA:63:FB:D0:F0:69:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_pLvNTIb-Pcic0v_nfpj-9DwaQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/d2725d-8001-41f1-80e5-a9eef294ac34/1/FsJZX9GGj2A1me0tekd7HmtKIf4.roa
Signing time: Wed 01 Jan 2025 01:47:43 +0000
ROA not before: Wed 01 Jan 2025 01:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212559
IP address blocks: 5.1.42.0/24 maxlen: 24
91.243.118.0/24 maxlen: 24
193.107.15.0/24 maxlen: 24
2a10:78c0::/29 maxlen: 32
2a10:ef40::/29 maxlen: 32
2a11:2900::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/d2725d-8001-41f1-80e5-a9eef294ac34/1/_pLvNTIb-Pcic0v_nfpj-9DwaQo.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/d2725d-8001-41f1-80e5-a9eef294ac34/1/_pLvNTIb-Pcic0v_nfpj-9DwaQo.mft
rsync://rpki.ripe.net/repository/DEFAULT/_pLvNTIb-Pcic0v_nfpj-9DwaQo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 22:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:1e:a8:ea:3a:87:c1:0a:ce:1f:8a:dd:61:0f:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe92ef35321bf8f722734bff9dfa63fbd0f0690a
Validity
Not Before: Jan 1 01:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=16c2595fd1868f603599ed2d7a477b1e6b4a21fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:23:ce:a5:79:80:13:17:cd:db:e4:af:89:6e:
1a:ac:5e:56:bd:2f:8f:3e:1f:4e:87:f3:e9:92:cd:
0b:f1:04:3d:62:c1:aa:e9:7f:8b:ee:05:3f:93:91:
46:27:b9:b7:bc:99:e1:55:16:fc:bf:58:f3:5f:fe:
07:ec:b8:41:4c:0b:4b:ea:2f:ae:03:ac:e3:e3:50:
7c:3a:d0:60:0e:97:58:cd:67:73:05:a9:07:0e:4d:
49:70:8e:66:9b:e6:9a:84:0b:4a:99:38:c8:b3:5c:
51:0e:ca:4b:6f:d0:f0:dd:6f:35:44:28:fb:0f:54:
ac:88:db:6f:9d:ae:10:65:25:c3:98:91:ab:c3:f6:
bb:a0:7c:3d:c5:88:52:cc:ce:61:39:f9:ad:c5:17:
f7:ea:28:ae:e5:29:16:f8:b6:7e:d6:10:d8:7b:3e:
9a:1c:5a:a1:1b:4e:8d:13:ec:d0:fd:43:8e:74:97:
73:e5:4e:d8:49:e9:92:37:c9:ad:df:95:0d:86:89:
3c:27:e1:ea:d7:6d:dc:fb:3b:2e:cd:ab:aa:92:6b:
5b:c6:b8:db:d8:94:19:6b:b4:78:5e:ec:08:dd:d0:
d1:61:67:46:9b:08:39:7e:65:fd:0f:50:13:f7:2b:
f0:ef:40:e6:55:73:60:ef:11:21:f7:e0:dc:84:26:
53:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:C2:59:5F:D1:86:8F:60:35:99:ED:2D:7A:47:7B:1E:6B:4A:21:FE
X509v3 Authority Key Identifier:
keyid:FE:92:EF:35:32:1B:F8:F7:22:73:4B:FF:9D:FA:63:FB:D0:F0:69:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_pLvNTIb-Pcic0v_nfpj-9DwaQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d2725d-8001-41f1-80e5-a9eef294ac34/1/FsJZX9GGj2A1me0tekd7HmtKIf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d2725d-8001-41f1-80e5-a9eef294ac34/1/_pLvNTIb-Pcic0v_nfpj-9DwaQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.1.42.0/24
91.243.118.0/24
193.107.15.0/24
IPv6:
2a10:78c0::/29
2a10:ef40::/29
2a11:2900::/29
Signature Algorithm: sha256WithRSAEncryption
06:a6:87:ba:52:10:53:4a:e3:a5:1f:dd:1b:ed:74:63:57:84:
24:a9:cd:d4:d3:c5:9e:ed:0e:a2:8e:9c:b0:56:8d:e7:47:9b:
20:0e:dd:8f:43:8f:0e:33:6d:df:0f:e2:66:d1:6f:e0:af:77:
eb:8e:37:24:07:e6:42:07:b5:64:d3:fb:ec:5f:38:fb:64:88:
9f:22:10:55:91:ad:66:18:b4:4e:26:4e:88:a3:2f:9c:f0:0d:
8e:2a:85:d5:b3:23:57:c6:71:a2:0f:c5:60:0f:65:52:fe:39:
7f:b2:52:37:56:2b:64:98:26:dd:2b:b3:74:b4:d6:36:f7:96:
eb:b6:94:e5:42:bc:f2:46:94:93:e4:90:58:a8:b9:99:8d:b1:
6e:36:4b:b5:48:63:cd:f9:1b:32:e9:c0:b2:ca:52:8f:45:64:
80:30:fc:08:33:6a:df:6a:67:b7:a7:33:98:90:3b:d8:8c:35:
1a:40:45:fb:d5:ad:55:1d:23:7c:02:a1:b7:59:86:b5:a3:b3:
8e:20:f8:28:c5:4a:d9:01:a9:72:9b:b6:55:70:a3:87:ba:7e:
b4:3d:d1:4f:30:f9:cd:3c:f6:b4:ef:2d:2f:0a:2e:84:4e:66:
ba:7d:23:6b:43:e2:c6:cc:a7:34:11:ea:b7:58:a0:cd:35:9e:
27:cc:93:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:57:20 2025 by rpki-client