Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/fNzqJvsbqb0H74heu_eSek8VtgI.roa
File: fNzqJvsbqb0H74heu_eSek8VtgI.roa (raw, json)
Hash identifier: o4Nod9JSdaU0RMBqsV3JfhPtjNeHWMXe4pMD3qdsnU8=
Subject key identifier: 7C:DC:EA:26:FB:1B:A9:BD:07:EF:88:5E:BB:F7:92:7A:4F:15:B6:02
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 019448E6E551DAE370070BEBFEBC817458A2
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/fNzqJvsbqb0H74heu_eSek8VtgI.roa
Signing time: Thu 09 Jan 2025 02:31:19 +0000
ROA not before: Thu 09 Jan 2025 02:31:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213766
IP address blocks: 124.155.248.0/24 maxlen: 24
124.155.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 21:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:48:e6:e5:51:da:e3:70:07:0b:eb:fe:bc:81:74:58:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Jan 9 02:31:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7cdcea26fb1ba9bd07ef885ebbf7927a4f15b602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:98:bc:4c:8d:77:69:00:0d:c3:62:b2:51:f0:
95:88:d9:15:75:f0:cc:16:7d:6c:07:b5:54:29:4b:
51:b9:d7:cb:73:db:65:b0:bc:8b:77:72:4a:fc:c3:
9f:6a:d0:21:49:53:da:b8:d3:5a:00:de:a5:dc:20:
9f:6f:85:5a:82:cd:c1:df:6a:d9:a4:65:ae:1d:63:
20:40:96:7a:c2:37:c2:67:a1:8d:56:8c:ee:74:78:
0f:12:bf:98:ea:b3:87:0b:d0:b0:66:51:d2:bd:51:
b2:0b:96:c3:ae:c1:63:e3:b8:36:1e:5b:e3:4e:9d:
72:4f:32:5d:e5:6a:77:9c:c0:de:d8:c6:f2:a7:9e:
38:dd:a6:5b:8c:d3:6a:a0:49:8e:75:8e:a5:ff:c3:
8f:0f:41:f9:9e:b9:c1:1b:5a:77:03:e8:43:3f:29:
ab:40:cf:03:d0:61:7c:db:b5:d8:cf:54:3d:e3:0a:
fd:fa:85:bd:ee:0d:b2:0c:15:c4:5a:f0:63:39:75:
81:54:eb:2f:9d:e1:87:80:c0:bc:11:64:25:67:ed:
45:30:af:34:15:69:bf:d9:79:dd:ce:f0:32:78:55:
5f:a7:60:48:4e:c8:67:fc:5f:2f:eb:3a:c4:13:7f:
25:c7:3c:a7:51:cf:8a:ec:81:b3:02:0e:18:a0:fe:
67:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:DC:EA:26:FB:1B:A9:BD:07:EF:88:5E:BB:F7:92:7A:4F:15:B6:02
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/fNzqJvsbqb0H74heu_eSek8VtgI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
124.155.248.0/24
124.155.251.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:ca:08:84:0b:03:5b:f8:54:b8:4c:95:be:8d:03:3c:ca:80:
22:14:01:f8:03:19:d5:18:4d:15:3c:3c:9f:ce:80:cb:d2:07:
89:3b:e5:0a:2d:66:03:f5:24:01:fb:49:f8:4a:02:9c:79:27:
cb:30:7d:a5:1f:c6:cf:09:3e:87:79:ac:ff:60:e6:5d:60:a9:
85:df:cc:e4:ec:46:cd:36:44:da:21:73:49:7d:71:12:ed:64:
ba:a3:fb:9b:3c:9f:f0:04:15:0f:64:ab:88:63:27:54:20:1b:
3e:f4:6e:42:37:60:8b:29:3b:97:9c:5d:6c:50:f5:c6:c7:00:
4e:a3:7c:a4:58:6a:d9:3b:9e:c8:29:3f:18:6b:b2:7a:10:fe:
00:d2:36:3d:1a:84:8b:59:b8:03:1e:dd:f0:5e:31:4b:e4:23:
48:fc:40:7e:4d:f7:13:73:b5:65:85:3b:d7:34:0d:ea:1f:af:
1b:e3:97:ca:15:c7:7e:b0:4a:83:ae:22:eb:af:f2:6f:68:b7:
d0:cd:9a:97:e3:b2:fb:00:c8:c4:09:9a:37:ec:3f:53:fb:44:
32:93:69:c3:30:57:1c:c7:03:74:56:e8:34:3f:b6:13:3c:ea:
fd:e5:6b:e3:19:47:45:24:e1:f0:51:d9:26:92:77:08:ee:df:
10:78:d1:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:53:44 2025 by rpki-client