Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/e71e27-c687-4fd7-8180-4b2da197a7e6/1/FiGOQGJVQzUX0AI-kIcMSlyL5Jw.roa
File: FiGOQGJVQzUX0AI-kIcMSlyL5Jw.roa (raw, json)
Hash identifier: iNn6sg9mF+PuqzA3VDumFe63FkMkR+FoX25ZFTkc1KE=
Subject key identifier: 16:21:8E:40:62:55:43:35:17:D0:02:3E:90:87:0C:4A:5C:8B:E4:9C
Certificate issuer: /CN=687726d38fcf2a7fbbb7bfc28d63fe3579ed211d
Certificate serial: 019421444F28762BFA4D4BB1AF2A66FE0D23
Authority key identifier: 68:77:26:D3:8F:CF:2A:7F:BB:B7:BF:C2:8D:63:FE:35:79:ED:21:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aHcm04_PKn-7t7_CjWP-NXntIR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/e71e27-c687-4fd7-8180-4b2da197a7e6/1/FiGOQGJVQzUX0AI-kIcMSlyL5Jw.roa
Signing time: Wed 01 Jan 2025 09:48:32 +0000
ROA not before: Wed 01 Jan 2025 09:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396982
IP address blocks: 193.73.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/e71e27-c687-4fd7-8180-4b2da197a7e6/1/aHcm04_PKn-7t7_CjWP-NXntIR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/e71e27-c687-4fd7-8180-4b2da197a7e6/1/aHcm04_PKn-7t7_CjWP-NXntIR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aHcm04_PKn-7t7_CjWP-NXntIR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 16:04:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:4f:28:76:2b:fa:4d:4b:b1:af:2a:66:fe:0d:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=687726d38fcf2a7fbbb7bfc28d63fe3579ed211d
Validity
Not Before: Jan 1 09:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=16218e406255433517d0023e90870c4a5c8be49c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e7:4f:fc:11:30:92:21:3e:74:d2:f3:94:29:
e8:c9:24:49:7d:a0:86:c6:45:3b:89:18:48:01:66:
10:a5:a8:ba:33:1c:56:c3:e4:0d:ec:e3:0b:48:70:
ed:f3:2c:49:e2:0a:91:b1:0e:f2:89:f5:7a:87:0e:
e5:aa:f5:46:54:5e:6f:2f:61:fa:7e:07:03:07:86:
f8:9d:f3:6a:9f:21:8c:8d:cf:50:60:bf:73:a1:d7:
55:e2:7a:67:09:fa:5f:e1:63:98:25:a0:2f:9a:e3:
1b:8b:f1:cc:b4:b7:2c:ab:32:f6:48:7c:1a:60:25:
de:01:78:2c:c9:d4:f6:e3:dd:36:cb:54:a2:89:50:
8b:f3:61:4d:b6:2a:5d:e0:9b:76:73:ac:7a:79:49:
22:b1:3c:87:ff:e6:32:43:10:c1:65:50:eb:2f:91:
2a:e9:af:21:26:3e:67:31:62:d6:ff:c1:05:0f:39:
8f:2c:4a:9f:a0:79:1f:7a:90:ea:4e:ce:32:05:8b:
0f:4e:bb:7b:c8:12:d5:52:64:d2:7b:a0:48:eb:9f:
7e:6a:eb:87:53:6a:80:1b:a7:48:1e:0d:e3:dc:f2:
db:7a:e8:f4:b7:d5:39:2e:2e:8d:56:33:a8:8b:ef:
c2:6a:8c:50:4f:e7:87:fa:73:02:c9:35:04:40:56:
c4:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:21:8E:40:62:55:43:35:17:D0:02:3E:90:87:0C:4A:5C:8B:E4:9C
X509v3 Authority Key Identifier:
keyid:68:77:26:D3:8F:CF:2A:7F:BB:B7:BF:C2:8D:63:FE:35:79:ED:21:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aHcm04_PKn-7t7_CjWP-NXntIR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e71e27-c687-4fd7-8180-4b2da197a7e6/1/FiGOQGJVQzUX0AI-kIcMSlyL5Jw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e71e27-c687-4fd7-8180-4b2da197a7e6/1/aHcm04_PKn-7t7_CjWP-NXntIR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.73.208.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:0d:ff:f6:e0:e1:f5:26:75:64:f4:ef:c6:3a:d1:6c:3b:6e:
c0:9d:48:87:15:e2:31:ca:ee:42:ef:58:06:b5:cd:a8:17:7c:
da:38:d4:b1:4e:63:f8:2c:a7:a5:c1:2e:5d:a1:a2:9d:2c:11:
e0:21:bb:05:ca:83:46:ee:fe:23:5a:ff:d3:c9:36:02:c8:57:
16:c5:e5:41:c1:51:8b:88:88:ca:b7:d3:31:2a:4c:d1:a2:4c:
82:92:20:6e:01:9b:fe:d1:54:29:a5:0e:a7:03:b6:a0:6b:5d:
71:ce:f9:dc:0f:4f:db:f2:c7:f2:1c:2f:4d:39:87:5c:7f:f3:
d0:48:a6:d1:5c:f6:cb:58:bb:ac:ff:bf:e4:1b:a4:24:32:da:
51:ce:65:f6:a0:4f:33:b0:6a:e5:4e:32:cf:d3:cd:92:31:4d:
ee:cf:3f:82:7c:e2:01:b2:e0:e6:f8:d3:db:e6:21:d8:82:c0:
a4:73:db:6d:b5:29:48:91:ad:fb:b8:57:3f:09:db:51:24:8e:
8a:91:37:38:6e:f7:31:8d:ed:20:9e:48:ff:75:94:b8:28:02:
c5:8d:6a:f6:ca:8c:cf:a9:52:49:39:c8:8d:3a:7d:5a:ac:d5:
11:cc:2f:94:3f:18:9d:97:54:27:56:07:47:33:b0:17:c3:7b:
7e:34:54:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:45:24 2025 by rpki-client