Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/fw-9UYbBKED3FPK1cxwcKkMCFm0.roa
File: fw-9UYbBKED3FPK1cxwcKkMCFm0.roa (raw, json)
Hash identifier: jRUQB1Fr5hDxlkTn2IWZrgIhUE7mB/LkFsYZT2IUhmk=
Subject key identifier: 7F:0F:BD:51:86:C1:28:40:F7:14:F2:B5:73:1C:1C:2A:43:02:16:6D
Certificate issuer: /CN=846af54e6558cfc86252946e4692ab92777c0e10
Certificate serial: 019425FD72F6352AB2A97056A40AF36AB5C2
Authority key identifier: 84:6A:F5:4E:65:58:CF:C8:62:52:94:6E:46:92:AB:92:77:7C:0E:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGr1TmVYz8hiUpRuRpKrknd8DhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/fw-9UYbBKED3FPK1cxwcKkMCFm0.roa
Signing time: Thu 02 Jan 2025 07:49:14 +0000
ROA not before: Thu 02 Jan 2025 07:49:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8987
IP address blocks: 193.24.42.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/hGr1TmVYz8hiUpRuRpKrknd8DhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:72:f6:35:2a:b2:a9:70:56:a4:0a:f3:6a:b5:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=846af54e6558cfc86252946e4692ab92777c0e10
Validity
Not Before: Jan 2 07:49:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7f0fbd5186c12840f714f2b5731c1c2a4302166d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b4:68:6d:d2:81:f4:0d:bb:37:76:e4:fc:4c:
24:62:9d:4f:cd:c7:3b:6e:28:4b:3f:e4:d3:4c:25:
be:3b:12:64:37:73:79:31:1f:6a:e2:ac:2e:9f:d0:
a0:c5:5a:9e:c6:a0:f6:40:fb:fb:47:73:6f:18:a8:
16:6b:3d:e8:96:7e:04:ba:a9:b4:aa:3c:52:13:df:
67:20:e2:bb:9d:ec:c9:4a:55:76:8d:9a:ea:10:5c:
69:11:3a:30:c0:04:9e:a7:5e:70:00:3f:ca:d0:ac:
7a:03:25:1b:d2:3c:19:88:66:55:44:d3:a5:91:73:
e5:b3:5d:be:94:8c:bd:05:2d:30:46:96:46:6f:f7:
ef:2c:d7:97:ac:5a:01:0b:b4:e2:00:65:5e:57:63:
de:54:0c:23:54:7c:78:e7:37:40:8b:80:45:ab:cf:
41:d6:12:de:45:a1:df:59:92:20:9b:77:88:d3:aa:
d4:87:d1:71:91:41:a2:18:1e:64:05:48:11:6f:d0:
20:28:93:57:4a:53:bd:28:3c:90:12:e6:9f:51:b9:
a9:cc:17:8f:fd:c2:2f:86:54:b9:2d:20:23:3d:29:
89:4c:68:fb:2f:8c:dc:d9:81:45:69:51:b4:7d:f0:
df:8e:1a:6a:8e:fc:4e:65:8d:03:59:7f:b3:7c:de:
df:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:0F:BD:51:86:C1:28:40:F7:14:F2:B5:73:1C:1C:2A:43:02:16:6D
X509v3 Authority Key Identifier:
keyid:84:6A:F5:4E:65:58:CF:C8:62:52:94:6E:46:92:AB:92:77:7C:0E:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGr1TmVYz8hiUpRuRpKrknd8DhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/fw-9UYbBKED3FPK1cxwcKkMCFm0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.24.42.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:3f:6e:17:09:e9:45:c1:5e:dd:c5:39:28:f1:d4:af:f8:a5:
c1:28:53:77:a6:6f:a6:17:73:60:20:7d:6a:d7:f6:b3:70:c1:
fd:4e:2c:ef:d7:d3:1c:bd:b6:98:ec:b1:ff:f0:64:36:fb:6a:
07:1b:92:f6:97:fd:01:06:1f:ef:0c:fd:01:6a:3a:57:54:29:
c8:83:4d:9f:ff:72:38:7c:8d:18:40:59:1d:e7:55:98:38:24:
0a:ab:a4:81:56:50:30:6c:20:41:22:a6:71:8e:86:a7:ac:2b:
0b:7a:b8:61:76:c9:b8:a9:82:a5:07:08:cc:db:2b:23:a8:6c:
02:b4:f9:5a:8c:ce:7c:3c:71:c6:8a:99:81:92:d0:5e:3b:58:
15:c0:9d:67:d4:33:7a:04:d8:1f:b0:6c:24:b7:8a:84:28:a5:
67:ab:92:d8:36:7e:ae:20:08:c6:7e:25:fc:f3:34:31:a3:9f:
b4:f5:8f:93:53:15:56:ce:76:18:3b:ea:59:32:d9:56:43:aa:
10:20:c2:de:f4:bd:7a:ce:5d:f5:7c:28:09:48:11:8d:de:8a:
90:ee:b2:78:8c:54:cd:7a:f4:2c:85:68:94:9e:8a:5e:97:21:
11:0f:d5:76:8c:a7:00:54:95:ba:de:99:ef:01:99:c8:cf:50:
e2:ee:e9:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 15:44:17 2025 by rpki-client