Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/FEeoPiD21ay-PeH3iQ-gflQJ0UI.roa
File: FEeoPiD21ay-PeH3iQ-gflQJ0UI.roa (raw, json)
Hash identifier: El+8B1KQ8rtMV0Fbf7tHPn5styqhe70y2ZAwIAOnKkU=
Subject key identifier: 14:47:A8:3E:20:F6:D5:AC:BE:3D:E1:F7:89:0F:A0:7E:54:09:D1:42
Certificate issuer: /CN=5ff7352d47db9785f49118092de8704a67f6520d
Certificate serial: 0194282687B62EEE93BFA3A447EEB7ECAE0C
Authority key identifier: 5F:F7:35:2D:47:DB:97:85:F4:91:18:09:2D:E8:70:4A:67:F6:52:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X_c1LUfbl4X0kRgJLehwSmf2Ug0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/FEeoPiD21ay-PeH3iQ-gflQJ0UI.roa
Signing time: Thu 02 Jan 2025 17:53:21 +0000
ROA not before: Thu 02 Jan 2025 17:53:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204751
IP address blocks: 185.241.188.0/22 maxlen: 22
2a0c:b080::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft
rsync://rpki.ripe.net/repository/DEFAULT/X_c1LUfbl4X0kRgJLehwSmf2Ug0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:87:b6:2e:ee:93:bf:a3:a4:47:ee:b7:ec:ae:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ff7352d47db9785f49118092de8704a67f6520d
Validity
Not Before: Jan 2 17:53:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1447a83e20f6d5acbe3de1f7890fa07e5409d142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:01:28:fb:70:88:25:7c:92:7b:81:2a:a6:ef:
90:6d:db:9c:8e:70:82:cf:3a:74:ac:ce:a8:41:12:
89:e1:1a:20:fc:aa:fa:08:04:1c:b0:ed:49:d6:d6:
38:b8:9e:53:5d:e5:90:24:70:a9:4f:0a:48:f2:2a:
73:aa:48:8c:ac:8e:39:50:ac:33:cc:3d:e1:f5:ce:
99:dc:9d:34:de:0f:e0:53:33:ae:a4:6e:57:54:c2:
ee:5e:e9:0a:72:a6:91:48:66:1e:53:8f:a4:be:45:
73:fd:88:e0:da:a3:6c:f8:5d:c8:e0:98:88:97:b6:
d0:fd:91:30:cc:77:a0:bd:50:97:24:db:43:18:1d:
6e:37:ba:92:6a:b7:5a:27:bb:01:c0:d9:34:a7:ed:
3c:18:27:bf:2b:84:96:c4:27:c9:b8:db:ff:b2:2a:
53:61:6a:dc:f9:a5:f9:b3:65:63:ea:a4:79:8b:49:
b6:d7:18:56:c9:cd:04:df:ae:9f:d7:ba:fb:a3:5d:
d7:43:b6:36:a2:c6:bd:66:92:26:9d:d3:85:2b:d8:
b3:10:98:03:a4:29:24:a8:b2:d3:9c:28:82:f9:68:
ac:a1:aa:d4:36:5a:d2:ad:a3:bf:25:31:35:d5:a6:
01:41:d0:a2:60:0d:97:88:8a:f3:60:61:af:ce:6c:
98:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:47:A8:3E:20:F6:D5:AC:BE:3D:E1:F7:89:0F:A0:7E:54:09:D1:42
X509v3 Authority Key Identifier:
keyid:5F:F7:35:2D:47:DB:97:85:F4:91:18:09:2D:E8:70:4A:67:F6:52:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X_c1LUfbl4X0kRgJLehwSmf2Ug0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/FEeoPiD21ay-PeH3iQ-gflQJ0UI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.241.188.0/22
IPv6:
2a0c:b080::/29
Signature Algorithm: sha256WithRSAEncryption
8e:c3:bb:a8:3d:15:c3:31:b5:db:46:64:3b:71:3a:e7:90:ff:
38:fc:1e:bb:02:b0:20:aa:53:e4:84:99:13:b4:4a:11:e5:b2:
ad:9f:43:66:e9:f4:2e:0e:17:c6:3e:74:7f:90:9d:2c:fd:d0:
12:6e:80:16:66:8f:0f:78:d7:65:29:c8:8b:9d:3f:f7:22:a4:
ae:0d:76:a7:8f:41:3f:bc:a5:2f:d2:55:6b:7c:66:17:49:e6:
c1:a2:56:3f:e7:d7:a0:72:a6:d9:7e:0d:9f:9b:ac:6f:3c:ee:
04:bc:7e:bb:66:1d:3a:61:cb:02:e1:bf:a0:cd:ad:ce:ee:95:
0d:26:63:b1:22:3e:b8:38:d5:8e:94:87:ef:7e:f5:93:15:ff:
97:de:86:66:7d:4e:89:7b:a1:de:ff:a0:24:73:06:b6:b1:44:
25:07:e1:67:12:cf:64:a2:48:65:a6:c5:45:e9:17:c8:61:d2:
42:0f:80:5f:6d:20:af:f5:4c:06:53:11:4a:ed:bf:07:60:11:
30:2c:ab:2f:dd:0b:28:75:27:51:b8:ef:ad:a4:87:2b:ba:e1:
42:93:9a:2d:88:5d:42:0c:36:63:9d:f4:09:4c:d2:1f:62:a5:
18:46:06:77:18:01:74:b2:41:91:81:18:02:43:c9:19:cd:3a:
6c:8b:10:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:07:21 2025 by rpki-client