Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/c60b1b-9b42-45eb-a582-92ddec6bd0a2/1/F1UjLRrMW4w-z1A5jk_jyEpufnU.roa
File: F1UjLRrMW4w-z1A5jk_jyEpufnU.roa (raw, json)
Hash identifier: H0RAjk+jMZacwgROEVs3RS9XB3a2sWnbKmOF2vnFoYU=
Subject key identifier: 17:55:23:2D:1A:CC:5B:8C:3E:CF:50:39:8E:4F:E3:C8:4A:6E:7E:75
Certificate issuer: /CN=4b4fbfcf5fdc48ab0bfb52854f7a04fc1cff1dbd
Certificate serial: 01942522356C0F9B37CBA9C51007A8ABDAF3
Authority key identifier: 4B:4F:BF:CF:5F:DC:48:AB:0B:FB:52:85:4F:7A:04:FC:1C:FF:1D:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/c60b1b-9b42-45eb-a582-92ddec6bd0a2/1/F1UjLRrMW4w-z1A5jk_jyEpufnU.roa
Signing time: Thu 02 Jan 2025 03:49:46 +0000
ROA not before: Thu 02 Jan 2025 03:49:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3269
IP address blocks: 163.162.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/c60b1b-9b42-45eb-a582-92ddec6bd0a2/1/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/c60b1b-9b42-45eb-a582-92ddec6bd0a2/1/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 22:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:35:6c:0f:9b:37:cb:a9:c5:10:07:a8:ab:da:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b4fbfcf5fdc48ab0bfb52854f7a04fc1cff1dbd
Validity
Not Before: Jan 2 03:49:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1755232d1acc5b8c3ecf50398e4fe3c84a6e7e75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7c:32:93:86:80:1d:52:c7:3d:7e:c1:40:05:
51:e7:ee:61:f6:60:65:8e:08:b4:91:01:22:26:68:
d5:e3:67:36:cc:49:35:de:44:fb:3e:2c:ce:94:0b:
b1:45:e6:ac:c1:98:6c:79:2a:ce:3c:a5:79:c6:67:
10:ec:8f:43:2d:7b:70:31:51:fd:a5:2d:ce:b5:f9:
f8:29:5c:33:93:36:2d:19:9c:f2:de:b8:d5:b3:bb:
ee:1c:46:71:2d:17:66:15:a1:ba:56:de:ce:10:53:
c9:20:cd:65:82:1d:f5:7e:81:8b:ea:35:fd:07:46:
cc:e3:d0:1b:67:17:57:5e:47:31:f6:6f:2f:d7:ae:
ca:8c:9c:1a:cd:11:a7:e2:a4:eb:4d:48:b8:a2:ce:
af:dc:89:67:54:a4:16:70:f0:4c:e4:2d:43:99:1f:
5d:10:b5:09:3b:fe:c2:1a:23:31:21:45:47:89:d5:
02:1b:32:a9:41:a6:31:e9:8e:ea:cc:32:f3:32:35:
c6:af:fb:88:87:15:8b:dd:6c:9d:6b:74:1b:27:37:
5e:09:44:f6:e7:65:ab:5f:71:46:9d:6e:e3:aa:02:
1f:54:a6:a1:a6:0c:ca:cb:97:37:4f:ac:8e:d2:02:
d7:ef:15:d5:6f:a4:9d:09:96:48:48:75:26:c8:87:
0e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:55:23:2D:1A:CC:5B:8C:3E:CF:50:39:8E:4F:E3:C8:4A:6E:7E:75
X509v3 Authority Key Identifier:
keyid:4B:4F:BF:CF:5F:DC:48:AB:0B:FB:52:85:4F:7A:04:FC:1C:FF:1D:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c60b1b-9b42-45eb-a582-92ddec6bd0a2/1/F1UjLRrMW4w-z1A5jk_jyEpufnU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c60b1b-9b42-45eb-a582-92ddec6bd0a2/1/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.162.88.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:09:b7:8e:78:31:2e:80:6e:9e:28:cf:43:ec:42:3a:aa:96:
79:f3:29:92:fa:66:d5:9a:d2:71:7b:88:bb:23:5a:03:51:55:
5b:7b:2b:e4:67:5f:70:67:d5:d2:05:7c:27:c7:4c:6d:4a:3a:
82:42:af:4b:61:7d:51:31:68:f4:85:06:0c:c5:89:63:51:34:
e5:61:8d:7a:4c:b0:df:10:d8:e0:ae:23:4a:2d:84:69:ab:e7:
97:fe:83:1e:fe:96:c3:75:c5:1d:33:7d:d3:68:e4:41:dd:b7:
74:b1:25:4c:90:48:5a:ba:e8:d6:25:82:6e:8a:77:7d:9e:88:
9d:67:c1:8b:b7:17:f8:25:be:62:a5:26:3a:4f:b0:73:eb:52:
3e:f9:24:b7:c6:71:2d:a6:23:08:35:55:84:77:00:5a:94:05:
d0:61:34:4b:60:b2:c1:2d:0b:6b:02:b5:67:39:69:95:70:88:
00:3f:42:75:4a:af:db:99:3a:33:1d:7e:fb:e4:28:7d:dd:ce:
af:e1:26:3e:dd:91:8c:d0:3c:06:b9:bc:2b:b7:25:4e:b4:2a:
20:f7:07:1f:f8:53:3a:84:82:72:2f:67:69:c6:1a:fc:bf:8c:
19:5e:13:45:9a:94:a9:e6:ae:07:97:11:31:4a:9c:5c:bf:ff:
62:60:48:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 08:08:38 2025 by rpki-client