Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/a89644-9316-4e8b-81a4-1f19a8bda3ed/1/FQ_8F69qJ1OIvrywFvryFirKQj8.roa
File: FQ_8F69qJ1OIvrywFvryFirKQj8.roa (raw, json)
Hash identifier: q2ovk1tVG4lGYgmszBcNRyfEZ8Wo4tad3oDRiuzylzY=
Subject key identifier: 15:0F:FC:17:AF:6A:27:53:88:BE:BC:B0:16:FA:F2:16:2A:CA:42:3F
Certificate issuer: /CN=576d59494a0a927f7a68f909ecef577cd503db1c
Certificate serial: 019426D9B73638D0065666E68715B90139A9
Authority key identifier: 57:6D:59:49:4A:0A:92:7F:7A:68:F9:09:EC:EF:57:7C:D5:03:DB:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V21ZSUoKkn96aPkJ7O9XfNUD2xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/a89644-9316-4e8b-81a4-1f19a8bda3ed/1/FQ_8F69qJ1OIvrywFvryFirKQj8.roa
Signing time: Thu 02 Jan 2025 11:49:49 +0000
ROA not before: Thu 02 Jan 2025 11:49:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39072
IP address blocks: 185.145.32.0/22 maxlen: 22
194.110.164.0/22 maxlen: 22
194.110.164.0/24 maxlen: 24
194.110.165.0/24 maxlen: 24
194.116.202.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/a89644-9316-4e8b-81a4-1f19a8bda3ed/1/V21ZSUoKkn96aPkJ7O9XfNUD2xw.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/a89644-9316-4e8b-81a4-1f19a8bda3ed/1/V21ZSUoKkn96aPkJ7O9XfNUD2xw.mft
rsync://rpki.ripe.net/repository/DEFAULT/V21ZSUoKkn96aPkJ7O9XfNUD2xw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:b7:36:38:d0:06:56:66:e6:87:15:b9:01:39:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=576d59494a0a927f7a68f909ecef577cd503db1c
Validity
Not Before: Jan 2 11:49:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=150ffc17af6a275388bebcb016faf2162aca423f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d3:6b:2a:f3:4b:76:bd:01:af:02:2b:bf:ce:
8e:4a:70:ba:7c:19:6e:79:92:c7:76:7b:93:90:df:
4a:47:df:a1:cb:e1:13:1d:c0:d2:d7:f7:f7:21:be:
fa:c1:f5:5e:4f:1a:3c:e9:8e:80:0f:3c:fe:af:6d:
95:5b:6e:e2:41:87:1f:b9:7b:4b:3d:12:4b:99:e9:
15:71:1f:2f:8d:3c:64:18:9e:d6:31:06:94:f9:d9:
a8:8b:3e:94:2b:aa:36:df:77:46:ce:75:2c:34:52:
14:4c:45:6a:08:b0:69:ef:dc:cc:08:1e:11:47:fb:
f1:7e:90:d8:0a:23:65:10:40:5c:46:ba:2e:50:eb:
12:27:ff:0f:cb:93:82:12:e5:b9:c2:d8:48:72:1c:
fe:4f:29:fb:f3:d6:9b:3f:c5:ab:05:d3:c9:32:b3:
e4:5f:6e:55:34:69:b8:f5:a4:03:45:7d:b8:bb:ad:
5b:31:72:f3:8e:b5:4d:a5:c4:31:fd:de:f3:a1:1f:
cc:0b:5a:84:02:4d:c9:46:a9:32:43:cf:5c:db:75:
e7:ed:4c:b2:72:b0:a6:5d:c7:ea:b3:85:da:1e:79:
20:f9:44:d7:1b:5f:fa:92:d4:80:9e:73:eb:50:e5:
fa:d1:85:09:05:bf:91:a0:7e:18:77:1f:ae:fd:43:
e0:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:0F:FC:17:AF:6A:27:53:88:BE:BC:B0:16:FA:F2:16:2A:CA:42:3F
X509v3 Authority Key Identifier:
keyid:57:6D:59:49:4A:0A:92:7F:7A:68:F9:09:EC:EF:57:7C:D5:03:DB:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V21ZSUoKkn96aPkJ7O9XfNUD2xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a89644-9316-4e8b-81a4-1f19a8bda3ed/1/FQ_8F69qJ1OIvrywFvryFirKQj8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a89644-9316-4e8b-81a4-1f19a8bda3ed/1/V21ZSUoKkn96aPkJ7O9XfNUD2xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.145.32.0/22
194.110.164.0/22
194.116.202.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:a3:e6:12:6a:3c:ce:e8:e4:92:0b:0c:2e:bd:96:de:80:08:
19:aa:77:69:44:48:54:fd:c7:73:77:e0:8a:1c:f6:c1:15:cb:
51:fb:01:3e:88:2e:af:1a:77:5f:ba:73:48:fe:aa:43:a0:7c:
4e:d0:fa:cd:ae:bf:b7:d1:06:f4:1d:bd:c1:6c:05:ec:08:21:
4f:36:34:b2:5f:f5:3c:a5:b0:ef:7d:24:b4:af:f7:ed:cc:bd:
83:48:20:37:5a:c8:2b:89:47:09:1d:fb:9c:2f:ff:50:a4:89:
b2:dc:0b:3b:16:30:58:dc:d9:43:fe:25:39:76:e3:8c:5e:5c:
05:81:35:3e:b5:e7:c3:de:9f:ce:99:65:73:54:2d:a9:13:cd:
d6:b7:34:30:f0:76:a7:91:6e:10:70:9c:50:06:bc:ce:5f:75:
f0:db:bf:5c:26:ac:16:b4:e4:9a:47:65:f0:59:2b:37:f6:02:
72:f5:5a:28:3b:be:0c:b0:9d:ab:f7:20:c9:ff:4f:ad:b6:fc:
6d:66:78:64:bb:61:7d:37:a9:4c:ab:68:c8:a2:16:e4:e9:9a:
84:25:21:b9:3e:81:8a:1e:47:b6:cc:06:18:da:1f:fe:21:ed:
bc:ac:f4:dc:a2:39:ae:db:33:54:f4:7c:c9:8d:68:85:ac:23:
51:a4:2d:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:08:29 2025 by rpki-client