Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b15851-a83b-415c-aee5-f9efc0457fb9/1/F6cqsVfR3nCwcraDWbOKx9UMCf0.roa
File: F6cqsVfR3nCwcraDWbOKx9UMCf0.roa (raw, json)
Hash identifier: VhLYWpxjVaCJbMRdgI+y8qkEuKfM8KwIqDJg1RYVsew=
Subject key identifier: 17:A7:2A:B1:57:D1:DE:70:B0:72:B6:83:59:B3:8A:C7:D5:0C:09:FD
Certificate issuer: /CN=582c74fc59b7ab096a257d3b6299d2f6fda46a80
Certificate serial: 01941FFA96584F6C52B6EB91D98081A42339
Authority key identifier: 58:2C:74:FC:59:B7:AB:09:6A:25:7D:3B:62:99:D2:F6:FD:A4:6A:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WCx0_Fm3qwlqJX07YpnS9v2kaoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b15851-a83b-415c-aee5-f9efc0457fb9/1/F6cqsVfR3nCwcraDWbOKx9UMCf0.roa
Signing time: Wed 01 Jan 2025 03:48:23 +0000
ROA not before: Wed 01 Jan 2025 03:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212598
IP address blocks: 5.42.202.0/24 maxlen: 24
91.142.130.0/24 maxlen: 24
194.31.59.0/24 maxlen: 24
194.31.64.0/24 maxlen: 24
194.31.79.0/24 maxlen: 24
194.31.87.0/24 maxlen: 24
2a0f:a440::/29 maxlen: 29
2a12:1dc7:fffd::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/b15851-a83b-415c-aee5-f9efc0457fb9/1/WCx0_Fm3qwlqJX07YpnS9v2kaoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/b15851-a83b-415c-aee5-f9efc0457fb9/1/WCx0_Fm3qwlqJX07YpnS9v2kaoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/WCx0_Fm3qwlqJX07YpnS9v2kaoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:96:58:4f:6c:52:b6:eb:91:d9:80:81:a4:23:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=582c74fc59b7ab096a257d3b6299d2f6fda46a80
Validity
Not Before: Jan 1 03:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=17a72ab157d1de70b072b68359b38ac7d50c09fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:be:10:c1:c6:c5:5f:8c:20:6f:ba:e5:26:8a:
26:35:de:4d:9e:3d:cc:d9:62:24:f5:a6:96:80:34:
40:c6:3f:6a:d0:35:58:e8:8d:d2:84:98:97:f5:b5:
77:ae:5b:79:58:e7:29:eb:16:a5:76:b5:00:3b:6a:
0e:4f:05:de:b1:09:5e:f2:59:4f:48:ee:00:63:0e:
eb:68:c8:27:16:5e:35:0b:48:21:b3:5f:48:64:cc:
50:f7:05:fb:8f:fa:0e:a6:11:f6:ae:78:6a:89:54:
48:48:38:cb:d1:ad:75:68:52:c0:ff:c2:8a:22:1a:
ed:7a:39:dd:a4:83:29:15:5f:5f:02:11:97:47:4a:
8a:0f:dc:5d:33:7a:db:ef:ea:8e:8a:cc:e6:cb:e8:
4d:49:7b:a9:2c:29:b4:51:a6:68:03:6c:f8:e6:02:
94:8c:75:1c:b5:ec:86:7d:a3:7e:f8:79:65:78:a1:
80:86:5b:91:83:d9:a7:5c:b0:1c:16:e4:63:25:0c:
31:20:dd:ec:c1:3a:a2:33:91:13:0c:07:83:ed:13:
22:f7:11:8f:ce:c1:24:82:fa:e4:90:6e:0a:43:87:
8d:54:bf:c9:a0:19:0c:a2:34:52:09:25:db:ee:76:
1f:b7:77:d9:b1:cf:8b:ef:bd:be:53:6c:c3:07:70:
39:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:A7:2A:B1:57:D1:DE:70:B0:72:B6:83:59:B3:8A:C7:D5:0C:09:FD
X509v3 Authority Key Identifier:
keyid:58:2C:74:FC:59:B7:AB:09:6A:25:7D:3B:62:99:D2:F6:FD:A4:6A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WCx0_Fm3qwlqJX07YpnS9v2kaoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b15851-a83b-415c-aee5-f9efc0457fb9/1/F6cqsVfR3nCwcraDWbOKx9UMCf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b15851-a83b-415c-aee5-f9efc0457fb9/1/WCx0_Fm3qwlqJX07YpnS9v2kaoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.42.202.0/24
91.142.130.0/24
194.31.59.0/24
194.31.64.0/24
194.31.79.0/24
194.31.87.0/24
IPv6:
2a0f:a440::/29
2a12:1dc7:fffd::/48
Signature Algorithm: sha256WithRSAEncryption
39:3c:09:41:f6:44:10:df:d7:bf:e1:25:e6:82:ea:63:21:f8:
82:e6:12:6b:a0:6b:92:c7:92:85:1e:08:6c:65:8d:fd:3d:22:
6a:5f:60:43:a5:0c:56:06:b8:20:a0:81:09:bf:dc:15:fb:36:
6e:39:5b:db:97:da:a3:e3:44:e1:eb:ad:f7:67:96:b0:ea:b1:
c3:c2:6c:f1:d6:60:b6:25:39:a8:fc:74:9a:14:fa:3d:21:84:
a5:60:44:2a:d0:6a:e2:04:e1:24:11:5c:8e:0d:d7:fd:ca:7e:
37:5e:87:d9:a3:36:81:57:64:ac:f1:ae:14:8f:56:96:f2:2f:
ee:93:df:c1:3a:17:a1:34:a4:c7:3b:20:5c:89:02:52:97:52:
9a:bc:99:0d:6c:a4:5c:3e:9e:3d:10:96:db:7f:51:45:e9:87:
8f:06:09:c8:93:1f:27:4b:22:e1:e1:ef:80:f7:f4:42:88:c7:
3c:12:5f:82:8b:49:5e:6b:f6:b4:34:37:1a:58:66:6b:a1:eb:
94:ac:dc:6f:95:45:58:fe:c2:23:4f:c1:e5:01:bd:2f:c3:c3:
82:3d:99:74:d2:ba:20:5e:01:13:b0:9f:3d:eb:35:20:cd:3c:
7f:2c:7f:80:54:c0:14:76:c7:07:6f:f0:a2:44:6f:99:bf:d5:
f3:a6:f6:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:03:27 2025 by rpki-client