Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/06c734-09a1-4da3-8992-bd4d54445a95/1/FkDDEmYYETOpVMpWkL7RuuEpqTY.roa
File: FkDDEmYYETOpVMpWkL7RuuEpqTY.roa (raw, json)
Hash identifier: kK3s8Vv/PXYJJP7bWNTiE/RHQRNUSZAURtLuU/aMQ6g=
Subject key identifier: 16:40:C3:12:66:18:11:33:A9:54:CA:56:90:BE:D1:BA:E1:29:A9:36
Certificate issuer: /CN=d703ceac906d07f74ca94c446303d954666b583a
Certificate serial: 019420680A4E896EDEE643C24E7072E34665
Authority key identifier: D7:03:CE:AC:90:6D:07:F7:4C:A9:4C:44:63:03:D9:54:66:6B:58:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1wPOrJBtB_dMqUxEYwPZVGZrWDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/06c734-09a1-4da3-8992-bd4d54445a95/1/FkDDEmYYETOpVMpWkL7RuuEpqTY.roa
Signing time: Wed 01 Jan 2025 05:47:56 +0000
ROA not before: Wed 01 Jan 2025 05:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62571
IP address blocks: 185.64.8.0/24 maxlen: 24
185.64.9.0/24 maxlen: 24
185.64.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/06c734-09a1-4da3-8992-bd4d54445a95/1/1wPOrJBtB_dMqUxEYwPZVGZrWDo.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/06c734-09a1-4da3-8992-bd4d54445a95/1/1wPOrJBtB_dMqUxEYwPZVGZrWDo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1wPOrJBtB_dMqUxEYwPZVGZrWDo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:0a:4e:89:6e:de:e6:43:c2:4e:70:72:e3:46:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d703ceac906d07f74ca94c446303d954666b583a
Validity
Not Before: Jan 1 05:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1640c31266181133a954ca5690bed1bae129a936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f8:33:9c:6b:19:94:ee:8c:2c:16:7e:41:6d:
1e:8b:36:f7:c1:5b:41:3a:56:29:2d:ff:a8:32:38:
02:a7:e6:b3:ac:2d:e4:ac:31:cf:01:6d:61:f7:78:
c8:8c:fd:06:bf:b2:6c:71:b9:ae:51:85:e8:64:4a:
7c:c3:0d:c4:95:4f:a2:5d:47:92:2d:18:38:d8:5e:
5b:9e:96:b3:d8:c4:db:a5:90:34:b9:92:83:78:c2:
58:bf:17:a5:af:a1:87:75:3c:a9:50:8f:f4:72:5f:
ba:2c:60:9b:f1:75:2b:e2:48:8c:58:8a:dd:c4:da:
6c:74:fa:e7:c4:26:2b:26:ee:2b:18:a1:0c:f0:9b:
1a:d4:09:17:dd:3d:39:24:fb:78:f1:74:23:8b:eb:
33:55:18:56:bd:58:9b:eb:e8:f3:75:50:9d:e8:03:
84:c8:4a:64:a7:24:d9:41:93:c4:d7:5d:92:dc:93:
08:82:58:7b:83:a1:89:b3:cc:6e:d4:b0:59:f0:29:
3d:78:b5:c3:22:7b:09:d5:81:db:f6:1a:59:76:12:
a2:05:83:f5:32:a1:16:21:da:8e:88:42:45:16:cf:
7b:7c:b9:b8:ef:49:fb:25:ab:d6:f3:c0:73:95:c0:
05:7d:da:58:3e:0e:0e:cb:5c:68:df:86:6c:a5:3b:
56:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:40:C3:12:66:18:11:33:A9:54:CA:56:90:BE:D1:BA:E1:29:A9:36
X509v3 Authority Key Identifier:
keyid:D7:03:CE:AC:90:6D:07:F7:4C:A9:4C:44:63:03:D9:54:66:6B:58:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wPOrJBtB_dMqUxEYwPZVGZrWDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/06c734-09a1-4da3-8992-bd4d54445a95/1/FkDDEmYYETOpVMpWkL7RuuEpqTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/06c734-09a1-4da3-8992-bd4d54445a95/1/1wPOrJBtB_dMqUxEYwPZVGZrWDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.64.8.0-185.64.10.255
Signature Algorithm: sha256WithRSAEncryption
6c:c4:96:12:f1:c3:41:4e:0d:da:eb:8c:c9:f9:4b:37:4d:f4:
a3:87:c9:b0:77:ac:9b:f8:e6:9b:96:85:4f:87:78:a5:50:f7:
19:02:44:ca:e0:e6:03:67:c9:a2:66:0a:34:cb:30:33:14:87:
5f:e9:cd:3b:98:8c:69:3e:20:f2:ed:71:bf:8b:e3:ec:1c:e2:
cf:79:1c:0f:ae:ce:69:aa:ef:0f:6a:3d:eb:e6:4c:14:84:be:
ff:0a:49:de:37:a3:7d:1d:b2:86:97:61:6a:44:57:d1:66:07:
bf:2b:ff:e7:7d:bd:38:cb:f7:d7:72:94:9d:86:8d:1c:6d:84:
10:6f:5a:cc:d9:e9:06:ce:80:6c:76:a0:f3:3b:8a:ad:e4:f5:
9c:f2:dd:21:1a:48:df:7d:56:39:79:bd:d0:f7:d7:ab:0a:ab:
b0:af:b3:4b:47:2b:9f:1e:34:07:68:b2:07:68:30:f0:e4:f0:
e7:ab:eb:d7:b0:e9:35:9e:28:3d:39:f7:b9:ff:3a:81:84:62:
a7:0c:e5:1c:d1:4d:f5:87:d0:1a:ab:8e:9a:4e:31:e5:4f:04:
88:fc:a7:58:a0:03:63:fb:83:0e:11:92:d8:03:30:e2:34:86:
34:25:72:e7:db:f9:35:69:9a:03:eb:9c:da:f0:45:5a:93:3b:
43:99:b0:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:16:28 2025 by rpki-client