Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/fTo1f8ubRBwfU0xVoHHtzOApYuU.roa
File: fTo1f8ubRBwfU0xVoHHtzOApYuU.roa (raw, json)
Hash identifier: 6qDVE6eG6EbcIMXQ5M9bjDvf2Vx2WIt3k9ZSfVGTUr8=
Subject key identifier: 7D:3A:35:7F:CB:9B:44:1C:1F:53:4C:55:A0:71:ED:CC:E0:29:62:E5
Certificate issuer: /CN=e4ba91d626504ccbc64d89740b63cb2eb4234f70
Certificate serial: 0194244483FF72F17E97D2211140CF720B9A
Authority key identifier: E4:BA:91:D6:26:50:4C:CB:C6:4D:89:74:0B:63:CB:2E:B4:23:4F:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5LqR1iZQTMvGTYl0C2PLLrQjT3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/fTo1f8ubRBwfU0xVoHHtzOApYuU.roa
Signing time: Wed 01 Jan 2025 23:47:37 +0000
ROA not before: Wed 01 Jan 2025 23:47:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8426
IP address blocks: 138.248.0.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/5LqR1iZQTMvGTYl0C2PLLrQjT3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 17:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:83:ff:72:f1:7e:97:d2:21:11:40:cf:72:0b:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4ba91d626504ccbc64d89740b63cb2eb4234f70
Validity
Not Before: Jan 1 23:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7d3a357fcb9b441c1f534c55a071edcce02962e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:75:e8:52:bf:3f:91:4b:b6:24:4d:f5:ea:a0:
45:83:cb:5a:58:a4:83:29:5f:53:49:25:26:68:31:
77:8c:40:ba:17:e1:79:63:37:b9:92:d2:ea:11:b8:
97:a3:a5:77:3a:da:fc:b2:71:0b:58:f9:4c:56:0f:
9c:85:e7:e0:9c:d1:09:14:9f:71:74:72:76:5c:8f:
48:53:c6:0c:d0:5d:79:6b:00:85:a9:72:57:d1:e5:
00:42:92:3e:79:aa:99:10:31:de:5d:25:cd:e6:0d:
53:9b:03:8e:7e:b0:1c:96:f4:3d:4f:b2:f2:47:3c:
fc:16:bd:48:ea:c4:f8:86:df:9d:f4:82:18:5b:fe:
31:9b:ed:96:7c:0e:6a:7d:2f:ad:f3:fa:a6:19:f2:
2f:cc:9d:5d:33:d2:02:ca:6a:b7:ab:bd:d5:98:34:
d5:1e:09:db:85:2f:9c:16:52:e0:26:53:8b:8b:01:
c0:a3:c3:38:14:ec:d1:7d:1a:d6:85:14:d3:00:f3:
4d:63:a6:42:05:53:14:81:72:52:85:12:d1:fd:03:
00:1c:b8:f7:67:6f:e1:ec:a8:af:9e:af:30:f1:2e:
14:50:8b:13:c3:75:0a:2c:18:a6:f4:35:fb:cc:25:
12:f3:5c:10:05:69:0e:05:cc:7c:d4:1e:c7:0c:79:
e9:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:3A:35:7F:CB:9B:44:1C:1F:53:4C:55:A0:71:ED:CC:E0:29:62:E5
X509v3 Authority Key Identifier:
keyid:E4:BA:91:D6:26:50:4C:CB:C6:4D:89:74:0B:63:CB:2E:B4:23:4F:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LqR1iZQTMvGTYl0C2PLLrQjT3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/fTo1f8ubRBwfU0xVoHHtzOApYuU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.248.0.0/20
Signature Algorithm: sha256WithRSAEncryption
0a:1e:0f:13:35:f4:aa:f7:0d:e2:1b:58:da:63:42:a1:d4:c3:
db:4f:67:bc:18:cb:79:31:90:59:29:01:b0:34:74:f8:be:74:
89:b1:73:f4:86:f0:48:36:aa:13:c1:db:1b:7a:9d:31:7e:74:
a5:9a:23:3a:89:45:08:d0:e2:b0:90:c0:42:f9:d2:38:b0:36:
d0:64:c2:41:6c:73:3d:ea:d1:43:f5:aa:77:55:a3:a5:65:a7:
b3:1b:03:cd:c4:f5:8c:e3:45:89:bc:bc:a5:3d:d9:90:2f:62:
7e:6f:96:8b:09:69:81:52:5a:dd:bd:c6:d1:75:0a:e9:20:35:
84:58:3c:c1:4c:e5:6d:16:94:38:a0:3a:90:19:c8:29:08:0a:
fa:f3:ba:01:52:bb:33:37:52:b1:8e:16:83:b6:4e:8e:5a:ea:
54:10:3b:7c:ce:de:96:76:d3:02:cf:65:9c:5e:3f:d7:13:39:
38:85:d0:c4:f0:b4:47:2a:f3:2e:6a:1b:77:20:71:94:58:cb:
88:21:5a:3e:e1:ba:48:e5:05:19:db:e8:d7:3e:5c:a7:a3:11:
66:be:98:87:92:d2:7d:cf:0d:32:8b:ee:77:e9:4d:e4:46:d3:
d6:64:d7:15:9c:1d:5f:cc:7e:27:9b:01:b5:9a:0f:8f:d9:b7:
d7:34:62:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:00:19 2025 by rpki-client