Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/fBCAQQunUbIFnsnY_Z2NiT-IFh0.roa
File: fBCAQQunUbIFnsnY_Z2NiT-IFh0.roa (raw, json)
Hash identifier: ctYinvsmftRWQTXHwlWnEmWM2W9y6/GDBjzyDD3IcGg=
Subject key identifier: 7C:10:80:41:0B:A7:51:B2:05:9E:C9:D8:FD:9D:8D:89:3F:88:16:1D
Certificate issuer: /CN=0148d2ca8a2b43b6cad25b22265354fe303911a0
Certificate serial: 019420D637CCB082BD8DAE1DAC125BA1B468
Authority key identifier: 01:48:D2:CA:8A:2B:43:B6:CA:D2:5B:22:26:53:54:FE:30:39:11:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AUjSyoorQ7bK0lsiJlNU_jA5EaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/fBCAQQunUbIFnsnY_Z2NiT-IFh0.roa
Signing time: Wed 01 Jan 2025 07:48:17 +0000
ROA not before: Wed 01 Jan 2025 07:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28924
IP address blocks: 193.178.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/AUjSyoorQ7bK0lsiJlNU_jA5EaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/AUjSyoorQ7bK0lsiJlNU_jA5EaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/AUjSyoorQ7bK0lsiJlNU_jA5EaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:37:cc:b0:82:bd:8d:ae:1d:ac:12:5b:a1:b4:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0148d2ca8a2b43b6cad25b22265354fe303911a0
Validity
Not Before: Jan 1 07:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7c1080410ba751b2059ec9d8fd9d8d893f88161d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:cb:7f:5f:0f:35:d9:35:63:77:7b:30:b1:aa:
bf:e7:dc:ce:86:03:ce:c5:2a:8b:26:57:de:2a:25:
e5:72:6b:ab:cc:32:40:6f:d9:45:d5:90:be:03:8e:
0f:85:dd:2d:2c:74:fc:3f:79:0f:f5:1e:f7:e7:2f:
a6:bd:22:47:d9:c4:5d:af:fe:e2:98:79:fa:07:5a:
55:e5:24:90:48:51:ab:eb:18:94:d9:09:73:24:2c:
88:7d:06:00:fa:64:20:c7:87:a1:79:85:31:3f:54:
2e:a6:5b:fa:11:6b:1f:2a:81:72:45:7f:41:2e:2c:
24:6c:35:a8:d9:17:66:c5:1a:fc:2b:49:cf:e6:29:
75:65:1e:f7:4d:8b:a4:02:ab:df:da:24:68:bf:ff:
f8:1e:ff:93:be:4f:b0:ef:53:30:52:21:89:77:01:
80:7d:7e:bd:48:e2:05:86:89:4e:00:75:67:5e:9f:
ca:84:6e:ae:f4:fc:1b:12:53:09:89:8f:8c:cd:a9:
d1:2f:43:86:33:14:9b:44:5a:ab:c2:19:5e:5f:31:
19:0f:1f:57:17:98:6b:ff:14:66:7e:58:21:a8:ef:
3e:97:cb:e2:6f:76:25:97:eb:de:01:bb:7c:28:61:
fa:15:cf:55:e6:ed:17:e9:f7:b9:3e:4b:24:76:33:
96:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:10:80:41:0B:A7:51:B2:05:9E:C9:D8:FD:9D:8D:89:3F:88:16:1D
X509v3 Authority Key Identifier:
keyid:01:48:D2:CA:8A:2B:43:B6:CA:D2:5B:22:26:53:54:FE:30:39:11:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AUjSyoorQ7bK0lsiJlNU_jA5EaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/fBCAQQunUbIFnsnY_Z2NiT-IFh0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/AUjSyoorQ7bK0lsiJlNU_jA5EaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.178.119.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:37:64:5e:ec:24:a9:f8:5a:26:a3:84:e8:14:37:fc:82:a7:
b0:5f:f2:18:58:2f:39:27:8a:08:4a:32:08:12:92:f2:cb:bb:
de:91:d2:48:e2:e9:8f:3e:a2:c3:e4:a1:55:71:90:ec:5f:43:
c1:1a:de:d9:4f:7d:95:c0:52:97:9e:99:4b:af:30:93:8d:00:
9e:9a:71:f0:52:35:dc:b0:49:bb:26:40:a6:d2:3a:25:cf:97:
5b:7f:56:fa:99:8f:22:b9:b0:92:35:41:9e:e5:c0:44:73:06:
c8:0b:e3:95:40:c9:73:fb:19:3c:b2:96:e8:71:88:05:bc:87:
0d:9a:52:71:d3:1d:47:09:f7:a3:4d:f0:ca:d7:87:a9:e5:c1:
3f:9a:32:90:b4:aa:c5:e0:f6:84:47:ee:6f:6a:e7:4b:b4:08:
75:c9:f8:e4:aa:17:bf:2f:43:2a:10:74:5f:05:30:b7:d8:4d:
47:92:f2:dc:56:99:ff:ed:c3:17:12:f3:44:2e:32:3c:d7:43:
82:7a:e6:8a:15:7f:ce:a3:fa:d8:d4:7c:08:41:bf:59:d0:ac:
2c:1e:29:cc:98:95:3b:15:d1:c7:66:5a:f3:84:e0:80:bd:fe:
94:ab:01:51:29:4a:6f:41:a3:42:27:36:36:6c:1b:00:7d:38:
43:91:7a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 21:59:39 2025 by rpki-client