Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/17ac67-2d5f-439a-8ff9-cacfb67bff9d/1/Fih80Nlgmx3m_whvZZHZZjIiang.roa
File: Fih80Nlgmx3m_whvZZHZZjIiang.roa (raw, json)
Hash identifier: VaQgFDqa2oxdRNRXm5kYRO6eCGdj59ZMDn/K3AC/eNc=
Subject key identifier: 16:28:7C:D0:D9:60:9B:1D:E6:FF:08:6F:65:91:D9:66:32:22:6A:78
Certificate issuer: /CN=521d2c07c28ac7b726a825d3693afe2397209de6
Certificate serial: 01942143E0C1327E922604BEBE53E40A4702
Authority key identifier: 52:1D:2C:07:C2:8A:C7:B7:26:A8:25:D3:69:3A:FE:23:97:20:9D:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh0sB8KKx7cmqCXTaTr-I5cgneY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/17ac67-2d5f-439a-8ff9-cacfb67bff9d/1/Fih80Nlgmx3m_whvZZHZZjIiang.roa
Signing time: Wed 01 Jan 2025 09:48:04 +0000
ROA not before: Wed 01 Jan 2025 09:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5467
IP address blocks: 93.175.0.0/19 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/17ac67-2d5f-439a-8ff9-cacfb67bff9d/1/Uh0sB8KKx7cmqCXTaTr-I5cgneY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/17ac67-2d5f-439a-8ff9-cacfb67bff9d/1/Uh0sB8KKx7cmqCXTaTr-I5cgneY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh0sB8KKx7cmqCXTaTr-I5cgneY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:e0:c1:32:7e:92:26:04:be:be:53:e4:0a:47:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521d2c07c28ac7b726a825d3693afe2397209de6
Validity
Not Before: Jan 1 09:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=16287cd0d9609b1de6ff086f6591d96632226a78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:12:cc:f7:b7:dc:d7:12:a2:76:9c:5a:01:99:
0b:6c:9b:69:9e:7e:d4:9b:57:bb:3c:53:bf:19:2e:
30:55:eb:75:a8:ce:67:4f:35:d0:97:31:15:cd:c0:
d6:69:ee:0e:81:9a:12:c1:e5:c7:8b:85:4b:2c:71:
3d:48:2e:8c:fa:e7:d7:49:36:25:a7:6a:c6:82:4e:
76:21:4f:48:03:9f:32:af:13:25:ef:f0:d1:fe:0f:
72:42:be:4d:40:83:6f:75:17:89:1b:fe:e0:f9:66:
d6:b5:11:6e:a2:af:1c:43:39:57:40:11:1a:ae:28:
ea:00:29:dd:ac:eb:e2:eb:54:34:ca:7f:f5:38:d4:
8c:f0:e5:64:98:4b:73:1d:3f:31:4f:0b:01:2e:dc:
3b:86:29:a0:1b:0c:ab:48:75:81:58:cc:17:49:aa:
dd:eb:7b:96:23:02:79:e9:a8:c1:e2:74:9b:de:49:
74:27:30:da:d3:63:b6:8f:0e:ec:98:d4:41:0e:d2:
a0:e7:fd:c5:7e:d1:bb:0c:28:71:3f:24:ba:c8:8f:
42:e4:1e:00:2e:5e:4f:a2:d2:5f:5f:24:32:7f:a4:
27:fa:33:dd:49:6b:7a:0f:e7:8a:95:ee:16:d4:5b:
63:ea:44:3e:ea:6d:26:9b:14:54:fc:0a:92:d3:af:
25:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:28:7C:D0:D9:60:9B:1D:E6:FF:08:6F:65:91:D9:66:32:22:6A:78
X509v3 Authority Key Identifier:
keyid:52:1D:2C:07:C2:8A:C7:B7:26:A8:25:D3:69:3A:FE:23:97:20:9D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh0sB8KKx7cmqCXTaTr-I5cgneY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/17ac67-2d5f-439a-8ff9-cacfb67bff9d/1/Fih80Nlgmx3m_whvZZHZZjIiang.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/17ac67-2d5f-439a-8ff9-cacfb67bff9d/1/Uh0sB8KKx7cmqCXTaTr-I5cgneY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.175.0.0/19
Signature Algorithm: sha256WithRSAEncryption
84:97:4d:f7:ca:e9:2f:57:76:f1:6b:6d:1f:a2:d3:70:ac:cc:
d8:f9:6f:f9:b8:08:59:db:31:8d:09:fd:97:d3:c9:f4:48:f7:
9e:c1:5f:f1:09:4f:b2:51:10:4e:02:ab:e8:27:71:03:67:3a:
e9:34:61:8d:e2:74:bd:83:3f:bb:7f:31:95:3e:d4:7d:6a:08:
2a:df:cf:fc:94:88:c9:f6:03:23:3d:70:05:e1:1e:0f:4f:f4:
00:c6:ab:cd:5e:7d:c1:79:8e:b5:63:ca:3f:b0:e7:f9:8e:4c:
4a:f7:61:ea:dc:60:74:c0:ee:10:f9:ef:d5:7b:cc:68:37:0f:
41:77:75:d5:ec:bc:06:b2:7f:e6:24:55:ea:17:f4:fd:6d:9d:
ab:93:02:7c:cb:e4:61:4c:9d:d5:b7:e5:75:54:b1:82:2d:9a:
92:7b:b4:41:5c:45:f9:96:6b:c7:17:6b:8f:b3:33:fb:a6:29:
3d:5f:e3:8c:9c:56:30:e8:9f:5b:55:08:99:cb:46:dd:f3:c0:
01:63:f9:d7:19:a8:f1:55:ae:c9:4c:cb:51:47:31:c4:1f:e6:
f4:cc:16:de:88:ec:82:eb:18:a5:e2:7a:56:33:61:7d:d8:1e:
13:05:f7:fc:6a:74:e7:23:4e:21:c5:91:f5:a9:03:84:13:11:
4c:f3:d0:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:12:11 2025 by rpki-client