Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/F-W1PnZcCIg_t9g53Zhr8ZnRECY.roa
File: F-W1PnZcCIg_t9g53Zhr8ZnRECY.roa (raw, json)
Hash identifier: vUOE0EzW5wlVnmrKCdNEm67M3EqZb+A0EvhCnOtIuZM=
Subject key identifier: 17:E5:B5:3E:76:5C:08:88:3F:B7:D8:39:DD:98:6B:F1:99:D1:10:26
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 019424455581A728E938B7612A4DD5B1E528
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/F-W1PnZcCIg_t9g53Zhr8ZnRECY.roa
Signing time: Wed 01 Jan 2025 23:48:31 +0000
ROA not before: Wed 01 Jan 2025 23:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396356
IP address blocks: 194.146.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 10:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:55:81:a7:28:e9:38:b7:61:2a:4d:d5:b1:e5:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Jan 1 23:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=17e5b53e765c08883fb7d839dd986bf199d11026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b9:ab:d3:87:40:26:dc:de:dc:2b:21:3c:09:
c0:5f:b3:1d:7d:11:5b:c2:c3:aa:99:69:9f:03:dd:
73:30:7e:9b:87:87:a4:c4:fb:8a:29:87:75:d7:b4:
18:d2:2f:42:bb:f7:49:8f:0a:0a:e7:cd:39:be:e4:
09:76:d3:90:57:15:e8:c3:c5:5a:09:05:fb:01:71:
92:c1:8e:9e:73:cc:1b:68:a6:e1:3e:1a:f5:85:01:
3c:f2:9d:d0:25:30:c8:a1:88:d1:39:db:a1:58:0c:
c1:06:50:bb:11:de:78:2c:5c:46:6a:88:a1:03:dc:
01:f3:ea:1d:26:72:f8:cd:6b:b4:d2:8b:a7:f9:ff:
de:3d:26:e9:c5:7a:2d:f4:13:e7:a6:ec:bf:ed:d3:
cb:9c:9b:cf:f6:48:1a:6a:0b:3a:97:7f:b7:5a:c5:
10:3b:af:22:bf:9f:2a:7f:46:5e:5d:53:b4:fa:4d:
44:f2:e4:a8:49:7b:4a:3d:3a:05:64:6e:14:f1:ca:
92:5e:99:83:62:9d:33:ff:6e:eb:f7:68:58:46:86:
c1:62:71:10:ff:84:af:01:fd:8a:60:8e:b0:ce:03:
a3:a6:7f:c3:3a:96:9c:67:b8:88:56:66:3b:a0:4d:
87:98:cb:b0:6f:e7:f2:29:19:f8:c5:1b:d2:da:2e:
88:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:E5:B5:3E:76:5C:08:88:3F:B7:D8:39:DD:98:6B:F1:99:D1:10:26
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/F-W1PnZcCIg_t9g53Zhr8ZnRECY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.146.93.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:06:c2:f7:0f:c1:7b:16:9f:9c:1f:92:8f:ac:83:5a:07:d8:
e6:41:ca:94:dc:27:1a:a4:eb:e2:61:ed:40:8c:2b:7a:c4:7e:
1f:1f:db:b2:3d:11:f1:b8:4f:bd:10:b3:4c:27:e0:ed:14:4e:
36:7b:e2:80:e1:69:7c:01:22:81:d8:9f:bc:47:6b:53:a3:1c:
f0:c8:fc:42:39:79:d4:42:9e:4d:1a:80:45:a3:a8:16:65:d0:
84:ce:68:f7:f4:09:5d:14:66:d8:04:d8:94:24:c0:0c:14:c2:
6d:27:b6:5e:0e:10:bf:4f:57:fa:bb:5b:99:24:69:3a:0e:e2:
1a:f1:4d:60:a4:04:82:c4:91:da:0d:58:1b:ee:e7:10:6a:92:
86:08:aa:30:74:15:6f:7b:36:9a:a2:05:3e:a3:8a:01:9f:c0:
da:10:bf:93:fa:81:57:cc:12:d4:0a:fe:5e:a9:7e:52:3f:7a:
aa:3f:f4:b4:90:66:45:41:32:c7:0e:02:ff:4d:30:3f:a0:ed:
6f:2d:c1:90:d5:ce:a6:6c:19:60:46:11:5e:a4:cd:c7:cb:dd:
df:c3:65:35:03:f8:02:a4:2b:ba:17:8a:fb:7a:8e:1e:2c:75:
11:3f:0a:ee:86:f2:4b:42:03:12:a4:25:bc:a8:c9:43:66:cc:
25:df:b4:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 18:58:23 2025 by rpki-client