Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/1-_faHefIQXiAFnH3LNhBjrPU09I.roa
File: 1-_faHefIQXiAFnH3LNhBjrPU09I.roa (raw, json)
Hash identifier: 7InTaPWZ/MJFW8mHuJCEltHrQe/oJd/TwCKtlJ9uvvg=
Subject key identifier: FB:F7:DA:1D:E7:C8:41:78:80:16:71:F7:2C:D8:41:8E:B3:D4:D3:D2
Certificate issuer: /CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Certificate serial: 01941FFA69E80E3E869AF9D17A4D8B877143
Authority key identifier: 0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/1-_faHefIQXiAFnH3LNhBjrPU09I.roa
Signing time: Wed 01 Jan 2025 03:48:12 +0000
ROA not before: Wed 01 Jan 2025 03:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206092
IP address blocks: 45.131.194.0/24 maxlen: 24
45.134.22.0/24 maxlen: 24
85.8.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 23:34:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:69:e8:0e:3e:86:9a:f9:d1:7a:4d:8b:87:71:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Validity
Not Before: Jan 1 03:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fbf7da1de7c84178801671f72cd8418eb3d4d3d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:71:f7:01:d2:0e:2e:31:f5:33:ba:c2:06:38:
26:0b:18:4c:54:3f:ff:20:d9:34:52:18:af:42:d3:
08:06:b2:86:f7:fd:64:5d:71:bb:62:9f:77:3b:2c:
c4:20:32:17:2d:89:e1:f8:34:4c:4f:2a:ba:e3:ce:
c6:93:86:24:88:56:49:a2:5a:b1:75:57:df:8a:92:
81:09:4b:e4:39:65:2d:11:2f:b6:fc:2c:67:a7:8f:
00:73:41:0f:d9:40:4b:a2:83:1b:a7:2f:59:63:0e:
90:f2:24:04:08:8f:ab:4d:19:d2:4b:37:75:d0:96:
c1:e9:ee:d2:b6:5b:96:1c:fb:91:dd:2f:96:35:e9:
65:ae:e9:b4:88:24:44:2c:ca:30:4f:6b:59:b7:ee:
f7:bf:85:75:e6:49:07:ce:13:17:80:14:c9:a8:a0:
83:29:77:a9:50:21:25:03:70:2a:2c:00:b6:b9:fd:
5c:af:83:74:ea:2c:ea:81:93:01:88:bc:fd:f3:dd:
ad:b1:2c:06:75:8c:14:ba:8e:3a:b9:23:d1:e3:29:
0d:87:92:8f:f3:19:58:84:c5:b1:e0:2a:c6:78:5b:
2f:5d:6c:68:ad:72:0e:2c:66:ea:db:f6:57:82:12:
24:16:1e:a7:46:48:07:a9:8d:69:97:f3:7e:d5:8e:
dc:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:F7:DA:1D:E7:C8:41:78:80:16:71:F7:2C:D8:41:8E:B3:D4:D3:D2
X509v3 Authority Key Identifier:
keyid:0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/1-_faHefIQXiAFnH3LNhBjrPU09I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.194.0/24
45.134.22.0/24
85.8.130.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:96:fd:a0:97:94:6d:d4:2c:fc:2b:a4:9c:5d:9d:fd:d6:7c:
cf:6f:f8:be:39:4a:75:fe:78:ca:82:2b:2f:6a:1b:af:a4:ab:
62:5d:49:00:3d:b2:05:ab:92:ad:52:d9:8a:21:c9:fc:18:14:
ab:c0:81:9e:8f:6d:99:46:ff:26:ca:9b:33:e0:a2:44:b0:fa:
6b:bb:46:ff:b4:80:90:7e:7f:e1:9e:b9:47:58:ab:f9:13:b8:
d6:68:65:e7:67:55:5a:77:c3:ff:03:3d:b9:76:80:00:ca:eb:
bf:4d:95:a9:17:0f:00:ca:d1:d7:82:21:6b:08:6e:7f:0b:46:
fd:3a:54:1c:05:de:4d:00:c8:1e:ed:eb:cf:21:77:0f:f7:0d:
a7:02:0a:3a:45:60:5a:dc:cd:06:79:d3:9a:11:7b:71:30:e7:
4f:43:be:1d:66:ef:bd:ea:42:b4:29:a7:d5:b7:45:f5:2d:62:
36:d1:e2:8b:26:5d:00:f9:d0:1f:61:38:6a:0a:20:c9:08:75:
79:ef:d2:f4:5a:f7:3e:96:6f:88:fa:4e:d0:74:04:73:02:30:
a1:bb:4a:a5:84:18:67:9e:83:1b:a5:94:49:e6:42:c9:04:96:
4a:3d:2d:76:0b:df:6c:65:95:d1:e2:4e:a7:1d:0f:df:86:54:
6c:0c:41:53
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Apr 6 08:44:52 2025 by rpki-client