Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Fh6CLt6xczOHHemrrM4bMN7qnwo.roa
File: Fh6CLt6xczOHHemrrM4bMN7qnwo.roa (raw, json)
Hash identifier: hvSyiuRPH2Z9ZscYXJ/Gadi12dcqRqXvTeKlVkuzaPk=
Subject key identifier: 16:1E:82:2E:DE:B1:73:33:87:1D:E9:AB:AC:CE:1B:30:DE:EA:9F:0A
Certificate issuer: /CN=66df7742890173927935206a28efbf48123e787c
Certificate serial: 019425FDD55F5725ADE8DDB28E4FF5A20D08
Authority key identifier: 66:DF:77:42:89:01:73:92:79:35:20:6A:28:EF:BF:48:12:3E:78:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Fh6CLt6xczOHHemrrM4bMN7qnwo.roa
Signing time: Thu 02 Jan 2025 07:49:39 +0000
ROA not before: Thu 02 Jan 2025 07:49:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62262
IP address blocks: 5.159.208.0/21 maxlen: 24
185.145.88.0/22 maxlen: 24
195.88.8.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 21:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:d5:5f:57:25:ad:e8:dd:b2:8e:4f:f5:a2:0d:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66df7742890173927935206a28efbf48123e787c
Validity
Not Before: Jan 2 07:49:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=161e822edeb17333871de9abacce1b30deea9f0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:af:dd:12:73:50:6f:c6:9a:5d:b2:d2:3a:dd:
d1:ee:23:2e:c3:59:38:a4:5e:a9:76:ec:f9:b5:25:
ef:36:a6:ca:a3:f5:39:6f:8a:78:e3:2a:66:5d:9f:
bd:09:65:ec:0a:d0:e9:70:5d:3a:a2:e4:de:67:0d:
a1:b9:9f:63:25:7f:eb:d9:38:16:0c:b0:30:09:77:
c3:11:b9:f5:15:db:2d:99:11:85:94:54:3a:40:1d:
8f:1f:2d:68:01:a9:2f:92:f1:cb:48:3f:68:87:27:
65:19:83:82:44:da:43:47:9d:d8:a6:e9:e1:49:d6:
db:7a:03:63:43:df:b0:be:05:2f:f1:c8:01:3d:bf:
fe:e2:66:6b:c2:d3:66:cf:34:f9:9f:20:9f:91:aa:
b5:a5:e9:a9:f5:3d:cc:a2:0e:33:38:63:bc:71:78:
1c:06:14:cb:fb:2e:26:8b:8b:3b:c2:76:6e:d6:99:
98:8b:d8:fc:41:93:5e:76:b1:db:67:8c:24:dc:bb:
5e:14:80:be:10:90:0d:c7:74:34:6b:d8:ce:76:c5:
80:f0:90:c3:61:20:40:fd:2a:23:e0:61:22:85:a1:
0b:44:a6:f4:e5:37:ac:d1:7e:93:e9:e3:45:a4:8e:
69:cf:9d:c4:27:8d:05:9d:86:6f:1a:62:a7:e4:8d:
16:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:1E:82:2E:DE:B1:73:33:87:1D:E9:AB:AC:CE:1B:30:DE:EA:9F:0A
X509v3 Authority Key Identifier:
keyid:66:DF:77:42:89:01:73:92:79:35:20:6A:28:EF:BF:48:12:3E:78:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Fh6CLt6xczOHHemrrM4bMN7qnwo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.159.208.0/21
185.145.88.0/22
195.88.8.0/23
Signature Algorithm: sha256WithRSAEncryption
11:a5:66:f8:e4:57:be:0e:3a:ee:68:74:96:fe:b1:4b:ec:45:
8a:ef:8c:02:1c:41:73:91:84:15:89:0a:c4:aa:08:a2:7c:78:
e7:78:38:50:95:9c:e9:5e:03:63:2b:7d:2c:5d:31:44:3d:c5:
c7:8e:73:15:c6:27:29:f5:8c:9d:8e:04:f4:6d:f0:36:41:1a:
db:3c:1f:7e:70:ff:20:c4:f8:b6:51:46:08:ec:5c:9e:fb:9b:
7f:33:08:c9:fa:eb:b0:40:d3:3d:6a:46:67:64:78:f4:5a:eb:
2d:4f:2e:37:75:0d:0f:35:30:69:c2:1a:9e:02:d9:5a:9e:33:
63:fd:6a:a7:47:e1:66:ac:3c:10:b6:f8:89:4c:7b:68:a7:16:
f7:96:b7:4c:c6:fc:30:70:32:d1:14:22:37:a1:ad:6b:88:9e:
dc:ed:d7:af:b8:e8:94:1e:63:17:8f:c5:ff:d0:fa:c7:26:de:
f8:4b:a4:69:47:e9:c7:ea:f5:7e:01:19:6e:ad:7a:0f:a6:7a:
b8:29:79:e9:ff:6f:73:ff:59:67:24:21:f5:ca:b3:66:83:e6:
39:98:d3:06:e8:9d:a9:83:93:a2:a0:ac:af:a6:62:1f:c1:bb:
ea:59:59:92:55:e6:d7:a3:28:63:be:bc:6a:3b:30:32:cd:5c:
a0:a8:51:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 06:06:27 2025 by rpki-client