Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/FBVKHX6AhPmIHwsxiIn3PjKprdY.roa
File: FBVKHX6AhPmIHwsxiIn3PjKprdY.roa (raw, json)
Hash identifier: Bmsov5n8BlbBA+lBpQbbXasr+P0qhbMGVQr6CkzBkoY=
Subject key identifier: 14:15:4A:1D:7E:80:84:F9:88:1F:0B:31:88:89:F7:3E:32:A9:AD:D6
Certificate issuer: /CN=88b213bf1627548efdfb1b2e2645baaf1d983aa0
Certificate serial: 0194266C2646A23ABD629C52C2F3CCDB4186
Authority key identifier: 88:B2:13:BF:16:27:54:8E:FD:FB:1B:2E:26:45:BA:AF:1D:98:3A:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iLITvxYnVI79-xsuJkW6rx2YOqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/FBVKHX6AhPmIHwsxiIn3PjKprdY.roa
Signing time: Thu 02 Jan 2025 09:50:09 +0000
ROA not before: Thu 02 Jan 2025 09:50:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198231
IP address blocks: 62.204.37.0/24 maxlen: 24
2a13:9300::/31 maxlen: 31
2a13:fe00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/iLITvxYnVI79-xsuJkW6rx2YOqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/iLITvxYnVI79-xsuJkW6rx2YOqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/iLITvxYnVI79-xsuJkW6rx2YOqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:26:46:a2:3a:bd:62:9c:52:c2:f3:cc:db:41:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88b213bf1627548efdfb1b2e2645baaf1d983aa0
Validity
Not Before: Jan 2 09:50:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=14154a1d7e8084f9881f0b318889f73e32a9add6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:aa:12:87:59:5b:49:e7:2d:e6:24:f0:8e:00:
ec:d4:35:ce:81:62:e5:db:ca:89:c2:e9:29:bd:c5:
b9:66:49:3a:70:a1:f7:75:fa:99:e1:42:cf:6a:1b:
7c:b4:d5:36:62:72:ec:5c:5b:5c:15:98:ec:76:72:
ce:b4:93:ab:58:01:38:1d:22:6c:5b:bc:2e:dd:81:
59:f5:4b:32:00:89:ba:b0:62:d5:49:45:45:5a:52:
fb:5e:aa:ba:27:77:34:7c:f2:d8:38:d1:f3:98:ed:
24:6a:04:58:93:d4:8f:dc:e0:9d:8a:ac:10:48:ec:
8f:14:1d:c1:ae:37:aa:b9:35:f0:1c:f5:d7:5e:58:
2a:d5:c1:3a:ee:14:cb:bb:31:c3:8c:23:48:cb:26:
bd:3e:d8:45:52:3b:00:18:bc:1e:5a:e3:1c:8d:a6:
90:61:c7:6e:c4:5a:41:10:8f:52:13:64:31:27:15:
f7:63:2e:3d:40:0f:2d:72:dd:49:d6:01:81:ac:96:
d1:4f:2e:1d:c4:45:49:7c:55:d1:83:d7:f0:3c:7b:
77:33:6b:12:8b:2d:db:69:b1:8a:87:10:2e:a7:67:
02:4a:7d:7b:81:c3:41:0e:a0:6c:63:e1:5e:8a:35:
89:22:9a:11:6a:2a:a7:d4:49:10:13:f7:88:06:26:
4a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:15:4A:1D:7E:80:84:F9:88:1F:0B:31:88:89:F7:3E:32:A9:AD:D6
X509v3 Authority Key Identifier:
keyid:88:B2:13:BF:16:27:54:8E:FD:FB:1B:2E:26:45:BA:AF:1D:98:3A:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLITvxYnVI79-xsuJkW6rx2YOqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/FBVKHX6AhPmIHwsxiIn3PjKprdY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/iLITvxYnVI79-xsuJkW6rx2YOqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.204.37.0/24
IPv6:
2a13:9300::/31
2a13:fe00::/29
Signature Algorithm: sha256WithRSAEncryption
54:92:97:e9:41:28:a1:ce:6a:8b:f7:be:eb:4f:37:3b:54:d1:
28:ac:0a:6f:6c:94:c8:38:f6:99:21:fc:02:46:e3:84:49:f4:
ef:53:a9:a7:16:0d:97:95:ec:26:7d:e6:84:2c:c5:65:1d:29:
af:45:50:73:a3:bc:26:71:5e:d1:f1:01:23:97:96:42:6f:f9:
6e:b3:22:7c:84:ca:db:1d:4d:15:c4:62:71:28:42:ab:d5:6c:
15:07:d2:c8:e7:78:4b:45:af:d3:94:29:14:87:f4:e0:4c:a5:
b2:e4:61:3b:7b:ba:11:ab:a8:c1:21:71:e5:dd:7f:86:50:61:
3a:34:c4:04:e3:ee:e3:a2:04:c4:2f:4c:a9:80:c3:c5:6a:6a:
73:5a:3f:3d:06:5f:49:59:80:cc:1a:45:3b:61:36:e0:6e:cb:
57:3c:b2:c2:e7:0a:70:82:94:1a:96:23:53:3f:06:31:7c:46:
04:7f:f8:56:fe:13:b0:76:4a:81:d2:de:c9:68:24:da:3a:b2:
5b:34:52:40:c9:b5:2a:f7:0e:9b:11:03:23:81:cf:c0:f8:02:
84:0f:c6:c4:0b:7b:f2:97:4b:3f:ee:f9:c6:db:9c:45:88:c6:
75:27:f7:e0:af:ce:e2:89:e1:53:56:a2:10:78:90:0f:99:5e:
9d:2a:c3:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:42:52 2025 by rpki-client