Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/F-P_HvBB3WeH7KniyH81o28KKbo.roa
File: F-P_HvBB3WeH7KniyH81o28KKbo.roa (raw, json)
Hash identifier: 8sYaDjHEHJUFW2fXpmzCzQDMt9L045SyDdjIlOEUNco=
Subject key identifier: 17:E3:FF:1E:F0:41:DD:67:87:EC:A9:E2:C8:7F:35:A3:6F:0A:29:BA
Certificate issuer: /CN=b72588c00eef715809eb5fdd6d6717cc28c0dfac
Certificate serial: 01942827A040B52A0F4F0A9E4A376617DE3A
Authority key identifier: B7:25:88:C0:0E:EF:71:58:09:EB:5F:DD:6D:67:17:CC:28:C0:DF:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/F-P_HvBB3WeH7KniyH81o28KKbo.roa
Signing time: Thu 02 Jan 2025 17:54:33 +0000
ROA not before: Thu 02 Jan 2025 17:54:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205297
IP address blocks: 178.236.138.0/24 maxlen: 24
193.32.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft
rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 11:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:a0:40:b5:2a:0f:4f:0a:9e:4a:37:66:17:de:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72588c00eef715809eb5fdd6d6717cc28c0dfac
Validity
Not Before: Jan 2 17:54:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=17e3ff1ef041dd6787eca9e2c87f35a36f0a29ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:bb:89:8a:93:ef:58:ef:e2:78:2d:07:06:4b:
02:ae:5f:fc:82:4b:a5:69:aa:cb:82:4c:22:e4:ca:
a4:bb:71:64:7c:12:93:a6:5c:be:e9:e3:72:a0:42:
54:ea:e9:f0:84:c7:eb:25:bc:56:ae:37:24:67:65:
f2:23:d0:91:9d:c1:e0:76:9b:26:1e:ad:a2:ac:08:
5c:24:52:f6:70:83:5e:55:28:3d:07:82:01:50:8c:
20:46:9b:fa:55:04:e9:b6:07:1d:48:c5:b7:0c:88:
25:f4:a6:0f:72:5c:9c:0a:f4:54:0b:24:65:e6:9f:
62:53:5e:a5:72:af:19:5b:07:ac:d2:fa:6f:05:85:
e0:d1:de:5a:38:46:e1:46:24:8b:22:1d:f3:05:6c:
2f:7a:28:b7:25:fa:1d:49:26:e8:37:01:3a:30:18:
76:93:8d:ee:1d:90:bb:d3:57:2a:ca:2f:df:e0:5e:
9d:51:e4:01:b7:3e:22:3d:84:b0:64:5c:2e:b3:4f:
8d:ab:d4:76:38:c9:7e:b5:75:ce:6d:92:a4:ed:63:
53:4b:6a:66:55:a1:5c:78:01:2b:dc:3e:b1:15:b1:
dc:3e:62:b0:59:06:e8:bc:7b:1a:a7:07:74:fb:fa:
c5:23:7b:28:76:fa:24:4a:11:52:6d:f8:a6:f1:cc:
f8:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:E3:FF:1E:F0:41:DD:67:87:EC:A9:E2:C8:7F:35:A3:6F:0A:29:BA
X509v3 Authority Key Identifier:
keyid:B7:25:88:C0:0E:EF:71:58:09:EB:5F:DD:6D:67:17:CC:28:C0:DF:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/F-P_HvBB3WeH7KniyH81o28KKbo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.236.138.0/24
193.32.200.0/24
Signature Algorithm: sha256WithRSAEncryption
61:c0:99:12:af:cd:c2:96:7a:05:89:52:5a:92:72:39:14:e3:
9d:b5:76:f9:69:35:fb:9b:0a:eb:60:c5:67:b4:07:24:0e:a6:
e4:29:57:42:a7:50:0a:27:7b:c8:93:d3:5a:af:2d:58:15:c3:
4d:ae:77:07:46:3c:e2:1a:7a:52:4a:08:2d:4b:14:6e:d9:9a:
42:ff:03:30:9c:b4:96:88:27:70:dd:88:79:cd:d7:b1:74:44:
ff:62:d8:ef:16:51:64:ae:8f:ae:f0:ec:27:84:6d:0a:8d:08:
ab:f1:45:48:a3:c7:fd:72:7e:23:d2:6d:60:65:79:2e:78:d9:
c5:d0:43:e5:16:ee:d8:c0:79:63:75:be:0a:f5:a4:76:23:f4:
5f:b9:99:46:59:f9:ee:72:e5:2e:48:25:e5:75:94:b7:35:0c:
96:9a:5f:ea:44:6d:05:c5:1c:f2:dd:06:63:5b:88:27:c0:e4:
60:a0:e0:68:6d:d2:db:93:ac:2a:82:f9:87:68:4e:c0:2f:e9:
d3:3a:ab:34:2a:58:dc:4e:16:0b:b0:81:b4:d2:d1:97:5c:7b:
65:91:48:27:43:ca:57:08:93:62:7e:9b:14:70:c1:e9:c7:78:
12:22:c6:ba:9c:6d:1e:73:9e:5e:7c:16:53:19:f7:89:a0:2d:
f8:d0:06:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:35:57 2025 by rpki-client