Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/802e9e-f982-449d-8b70-76c05cf5f2e6/1/FW_JqLhHC7LyHZmaeSFALgStml0.roa
File: FW_JqLhHC7LyHZmaeSFALgStml0.roa (raw, json)
Hash identifier: pWsELGWJQyn59BiBQF9FnS772zDDCwVPNTG6tAAe2Fg=
Subject key identifier: 15:6F:C9:A8:B8:47:0B:B2:F2:1D:99:9A:79:21:40:2E:04:AD:9A:5D
Certificate issuer: /CN=369c713c51987e1ffa5482277f5f1c8cb722f44b
Certificate serial: 01941F8CAA2A230E3FC84D094DB968BD2125
Authority key identifier: 36:9C:71:3C:51:98:7E:1F:FA:54:82:27:7F:5F:1C:8C:B7:22:F4:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpxxPFGYfh_6VIInf18cjLci9Es.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/802e9e-f982-449d-8b70-76c05cf5f2e6/1/FW_JqLhHC7LyHZmaeSFALgStml0.roa
Signing time: Wed 01 Jan 2025 01:48:19 +0000
ROA not before: Wed 01 Jan 2025 01:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25384
IP address blocks: 85.89.224.0/19 maxlen: 19
85.89.239.0/24 maxlen: 24
85.89.250.0/24 maxlen: 24
92.60.144.0/20 maxlen: 20
109.236.176.0/20 maxlen: 20
185.3.13.0/24 maxlen: 24
185.3.14.0/24 maxlen: 24
185.3.15.0/24 maxlen: 24
193.162.192.0/19 maxlen: 19
193.162.217.0/24 maxlen: 24
193.162.218.0/23 maxlen: 23
193.162.219.0/24 maxlen: 24
217.10.16.0/20 maxlen: 20
2001:15f8:1::/48 maxlen: 48
2001:15f8:c00::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/802e9e-f982-449d-8b70-76c05cf5f2e6/1/NpxxPFGYfh_6VIInf18cjLci9Es.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/802e9e-f982-449d-8b70-76c05cf5f2e6/1/NpxxPFGYfh_6VIInf18cjLci9Es.mft
rsync://rpki.ripe.net/repository/DEFAULT/NpxxPFGYfh_6VIInf18cjLci9Es.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 22:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:aa:2a:23:0e:3f:c8:4d:09:4d:b9:68:bd:21:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=369c713c51987e1ffa5482277f5f1c8cb722f44b
Validity
Not Before: Jan 1 01:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=156fc9a8b8470bb2f21d999a7921402e04ad9a5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6f:a7:2b:e2:6b:ad:be:fb:59:71:ec:c7:ba:
f0:32:40:ce:db:56:ec:be:54:7d:9f:76:9e:8b:5b:
05:b5:b9:67:f5:8e:cf:59:ac:79:8f:9d:93:30:38:
1a:65:1d:66:9f:a7:39:e5:7e:72:d8:84:7f:da:4a:
a1:b1:9c:f1:8d:e8:2c:5f:66:eb:19:1e:e4:67:0b:
e4:16:68:83:a0:d6:0c:6b:4d:b8:59:3e:38:2d:b1:
fc:66:d8:0a:af:37:e8:48:a1:f3:b9:ab:b0:ac:29:
f2:aa:07:d4:de:c2:d1:02:b9:ef:0d:69:c3:10:ec:
2c:1a:0e:bb:c0:35:a3:95:27:09:22:5e:0d:9a:89:
2f:4f:c5:c9:da:91:7d:2c:c7:40:c5:bd:1e:ab:0c:
8e:d3:02:53:1a:e4:25:00:a3:95:cd:cb:aa:18:fe:
b6:5c:ae:35:6f:b5:f1:47:24:f6:5c:59:c8:e7:cc:
f7:00:3b:05:ba:19:db:df:f0:37:43:ec:f4:c3:bc:
07:29:d8:cb:82:fd:9a:80:9b:1c:7d:37:5d:66:37:
11:ab:60:42:f9:40:64:7a:8f:09:76:b5:dd:c5:21:
e1:80:9a:64:3f:fe:1b:50:09:ba:fc:ef:98:7d:15:
4e:96:06:74:78:24:3f:97:3f:39:4a:0f:62:0c:78:
de:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:6F:C9:A8:B8:47:0B:B2:F2:1D:99:9A:79:21:40:2E:04:AD:9A:5D
X509v3 Authority Key Identifier:
keyid:36:9C:71:3C:51:98:7E:1F:FA:54:82:27:7F:5F:1C:8C:B7:22:F4:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpxxPFGYfh_6VIInf18cjLci9Es.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/802e9e-f982-449d-8b70-76c05cf5f2e6/1/FW_JqLhHC7LyHZmaeSFALgStml0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/802e9e-f982-449d-8b70-76c05cf5f2e6/1/NpxxPFGYfh_6VIInf18cjLci9Es.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.89.224.0/19
92.60.144.0/20
109.236.176.0/20
185.3.13.0-185.3.15.255
193.162.192.0/19
217.10.16.0/20
IPv6:
2001:15f8:1::/48
2001:15f8:c00::/48
Signature Algorithm: sha256WithRSAEncryption
79:b0:61:b4:2e:5d:3d:1f:3e:63:16:95:35:81:be:29:42:11:
93:68:8a:f5:62:d4:6a:d8:33:2f:da:04:33:f4:56:8e:71:a4:
92:a8:39:9e:98:04:40:cf:09:c3:c7:f6:dc:5b:d8:b0:a6:c5:
89:8a:50:94:0a:fb:eb:3b:0b:ed:49:2e:fe:5e:07:a2:dc:e0:
91:a7:0c:6a:31:3e:0c:49:8d:e8:7f:79:fd:27:45:bc:18:01:
74:94:42:6c:76:e4:13:72:ad:6c:59:0f:50:e0:83:f8:67:a5:
87:73:e7:34:2b:88:62:f7:6c:75:3e:4a:0b:de:4c:93:38:df:
89:38:cb:7f:39:c1:de:cc:e5:17:7b:b2:a3:df:92:64:d6:05:
43:4e:25:7e:01:92:69:6d:96:b6:f9:70:e8:2d:9c:f5:a7:55:
e1:af:71:61:6c:ff:4d:87:54:c1:a0:07:fa:92:20:2b:c2:82:
80:b4:87:ce:8d:5b:3e:c8:d7:16:bd:f2:39:f1:9e:33:43:c9:
bb:d1:ce:24:5b:d5:c7:90:97:e5:92:b4:58:54:98:e1:bc:35:
16:66:cd:48:14:d2:90:b6:26:15:ca:da:17:d2:d3:a9:0a:90:
21:fd:fa:a4:a7:e1:e7:58:a1:be:50:c9:a0:c7:68:64:f7:c4:
b2:e6:4f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:47:54 2025 by rpki-client