Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/FvHiXhaPx6LSnLtes2OzbeTfHok.roa
File: FvHiXhaPx6LSnLtes2OzbeTfHok.roa (raw, json)
Hash identifier: Jb4ETFyKDFZ3eA2RSzY5k0Vi4+iXbUGxbr9f8rVOwYE=
Subject key identifier: 16:F1:E2:5E:16:8F:C7:A2:D2:9C:BB:5E:B3:63:B3:6D:E4:DF:1E:89
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01941F8C25B4DA586D23DAF23234B07E610B
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/FvHiXhaPx6LSnLtes2OzbeTfHok.roa
Signing time: Wed 01 Jan 2025 01:47:45 +0000
ROA not before: Wed 01 Jan 2025 01:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44271
IP address blocks: 85.121.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:25:b4:da:58:6d:23:da:f2:32:34:b0:7e:61:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 01:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=16f1e25e168fc7a2d29cbb5eb363b36de4df1e89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f0:99:e0:a5:34:0a:b0:9a:42:cb:ad:40:d5:
2c:90:84:e9:a4:65:29:c5:ff:0e:5d:7f:ad:55:97:
e1:29:7e:90:5d:4c:89:08:04:e6:c3:ee:77:d3:43:
4c:99:1a:24:61:3c:3d:3b:ab:64:cb:3c:62:5f:f1:
49:36:5f:9a:ce:5e:79:59:18:ec:44:f9:ad:55:f0:
c7:d6:a7:90:35:3e:17:f8:ac:c1:3a:3c:3b:32:43:
93:67:4f:14:7a:dd:78:7b:b2:91:5e:e0:a2:fe:7b:
54:f3:89:cf:04:bf:a5:0d:06:01:cc:36:88:5a:18:
08:29:a2:d0:e5:78:4e:b6:8f:75:f8:35:95:4c:61:
02:85:3e:cc:09:43:93:81:53:62:ab:4d:e7:5a:d3:
bd:84:7f:41:43:5f:70:ce:2c:4f:be:50:0c:2f:31:
75:cc:81:9d:7f:47:f3:b4:e6:9e:60:30:a4:f9:f5:
76:b4:f7:a6:21:d6:30:b2:7d:47:08:a7:c6:b1:5d:
e8:59:e8:88:e8:2f:b9:e8:0c:39:31:58:31:e6:bb:
ea:68:6c:61:ab:c6:c5:9b:a0:69:62:60:1b:9c:72:
9b:a4:20:de:20:47:53:4b:94:5e:a5:d0:a1:b5:47:
34:73:f4:43:3a:41:48:63:09:87:af:17:be:20:16:
a2:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:F1:E2:5E:16:8F:C7:A2:D2:9C:BB:5E:B3:63:B3:6D:E4:DF:1E:89
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/FvHiXhaPx6LSnLtes2OzbeTfHok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.121.182.0/24
Signature Algorithm: sha256WithRSAEncryption
09:51:d3:d9:8c:5f:1a:f2:89:c8:2d:5b:e5:e0:4b:b9:62:50:
1b:90:5e:4d:8b:e2:ca:4d:f2:65:52:1d:66:27:c1:8c:2b:cd:
15:4e:25:fe:7c:ee:d9:34:fe:0c:9f:bc:fa:88:1f:36:5b:65:
84:09:af:60:2a:57:ef:4e:2c:04:b4:c1:18:52:52:6d:32:b1:
0f:0b:9d:69:30:25:24:25:ea:25:b6:cc:67:4f:e7:26:89:f5:
54:fd:e9:7e:09:72:45:47:b7:7a:11:29:89:5e:55:38:e7:81:
16:ca:7e:00:6f:aa:61:1f:df:5b:28:e5:8b:e3:1d:b1:8b:42:
d8:2b:8a:11:ec:62:a6:64:c6:32:83:4c:95:a0:db:fc:bd:f4:
01:02:87:3d:4d:91:de:20:de:e6:8c:ce:af:02:56:ba:d8:00:
5a:1d:23:5d:de:2c:98:eb:1e:88:7c:59:fe:59:58:7b:1b:9e:
35:5e:ef:fb:60:72:d4:51:59:66:86:b5:63:53:ab:ef:31:45:
01:52:22:0d:1c:62:8d:be:d6:b4:c3:d3:00:c5:8a:d7:7b:8b:
88:ce:ab:fc:66:b2:9c:19:d9:af:90:27:d2:0b:73:82:79:97:
f2:47:41:92:c9:bd:81:c0:6f:56:18:3e:6c:94:a2:c9:6c:72:
53:02:76:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:32:32 2025 by rpki-client