Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/Fb3AC5oCQZOvKG6n4AJ73m3x1PA.roa
File: Fb3AC5oCQZOvKG6n4AJ73m3x1PA.roa (raw, json)
Hash identifier: yVGtzoVorUao+D3F+hfXBAk4C0DIh5FR8h2raUrVXM8=
Subject key identifier: 15:BD:C0:0B:9A:02:41:93:AF:28:6E:A7:E0:02:7B:DE:6D:F1:D4:F0
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01941F8C3078EC1DFA8B51F5426147968B22
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/Fb3AC5oCQZOvKG6n4AJ73m3x1PA.roa
Signing time: Wed 01 Jan 2025 01:47:48 +0000
ROA not before: Wed 01 Jan 2025 01:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59590
IP address blocks: 81.181.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 06:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:30:78:ec:1d:fa:8b:51:f5:42:61:47:96:8b:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 01:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=15bdc00b9a024193af286ea7e0027bde6df1d4f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ed:2f:cd:29:07:a4:da:bc:39:63:05:d2:2e:
56:fe:64:a7:eb:9f:5a:d7:8d:bc:56:92:d7:b7:0e:
d2:17:03:d4:d3:93:14:c8:44:bd:00:e1:0b:a8:44:
e8:26:b7:72:80:d0:73:18:50:1b:24:a4:9f:ea:58:
9e:e8:d8:33:60:78:7c:e3:ed:23:67:dd:22:46:a3:
63:89:ae:42:9d:3a:cb:9b:13:42:3e:ce:a0:24:90:
74:3e:de:ae:76:d6:ad:0f:cf:5b:fa:9e:c7:79:f7:
35:58:b5:aa:10:90:33:8e:30:5f:0a:75:41:02:f3:
17:cc:90:89:dc:cc:8f:bd:30:d3:b1:fb:a8:7d:54:
4a:ed:f5:2d:fb:5a:04:d9:ce:4d:4c:c9:5d:19:65:
3e:96:fd:d4:87:9b:57:b6:56:44:d4:35:af:af:f8:
81:c7:68:81:c5:84:94:54:f8:9b:a7:c3:ed:6c:72:
99:86:94:92:e1:64:a5:14:60:11:df:c8:69:50:41:
7b:76:b1:1c:5b:4b:e9:64:09:f0:a0:21:96:f0:54:
6e:7c:8a:ed:06:6f:4b:7f:c5:87:e9:d7:83:59:ec:
40:fb:b3:c2:90:5e:70:af:bf:f2:9f:d7:05:f7:7d:
05:af:01:02:e1:d8:36:51:6a:a4:95:53:c2:0e:cf:
0b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:BD:C0:0B:9A:02:41:93:AF:28:6E:A7:E0:02:7B:DE:6D:F1:D4:F0
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/Fb3AC5oCQZOvKG6n4AJ73m3x1PA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.181.8.0/24
Signature Algorithm: sha256WithRSAEncryption
19:b6:1f:57:96:2e:7c:73:66:3b:54:96:f3:08:46:ef:5f:a7:
6b:8a:2b:82:74:76:9b:c7:47:0a:a9:e3:4e:1c:54:61:28:03:
ba:06:80:23:6b:9a:40:70:c3:76:e9:84:c0:83:85:d6:ad:0c:
09:83:31:4d:6d:b5:75:45:d5:6a:4a:d3:53:ee:ec:e6:78:57:
0e:77:6e:c4:94:d3:2e:66:4a:4c:59:b9:f0:a4:42:76:4a:d8:
68:5a:b4:f4:33:90:2e:2a:67:7a:21:40:aa:d5:3f:8d:f0:8e:
24:6a:d7:c0:cc:6e:1d:78:4c:a0:65:99:fe:79:08:df:ac:2c:
e5:a5:4a:18:87:c0:6e:72:85:22:c1:e7:92:f1:10:4e:fa:eb:
7f:b2:d9:5b:ce:25:36:8b:94:3e:3e:26:fe:d4:04:8d:28:65:
93:53:3d:27:c2:e8:d1:8e:86:b9:2c:77:15:b6:c3:a3:ea:64:
1c:b4:d9:f3:f5:27:fb:52:f2:45:5e:83:8f:2d:3b:15:68:9b:
50:0d:37:5f:48:55:af:50:fb:31:9a:d6:09:1e:39:6f:a6:b1:
cb:8f:fd:e1:61:23:2e:93:17:74:20:e6:e1:13:bc:2f:95:64:
9c:2e:67:ad:36:a7:59:74:43:ff:e9:1d:5a:f9:61:3b:f4:e0:
6f:59:ca:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:31:22 2025 by rpki-client