Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/FP9KPtAPudwifvNA1yXNkNCFOFY.roa
File: FP9KPtAPudwifvNA1yXNkNCFOFY.roa (raw, json)
Hash identifier: ocGzp/8Fhd1lCI2svcm4GtNlcaUMkqz9rj4sgodMzFo=
Subject key identifier: 14:FF:4A:3E:D0:0F:B9:DC:22:7E:F3:40:D7:25:CD:90:D0:85:38:56
Certificate issuer: /CN=2e249793e5924a9f25f3a0a8dd994b374eb937d2
Certificate serial: 0194274725D9D36D0FFED17409041B8E621B
Authority key identifier: 2E:24:97:93:E5:92:4A:9F:25:F3:A0:A8:DD:99:4B:37:4E:B9:37:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LiSXk-WSSp8l86Co3ZlLN065N9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/FP9KPtAPudwifvNA1yXNkNCFOFY.roa
Signing time: Thu 02 Jan 2025 13:49:21 +0000
ROA not before: Thu 02 Jan 2025 13:49:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42525
IP address blocks: 176.67.184.0/21 maxlen: 24
185.125.80.0/22 maxlen: 24
2a06:b740::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/LiSXk-WSSp8l86Co3ZlLN065N9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 22:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:25:d9:d3:6d:0f:fe:d1:74:09:04:1b:8e:62:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e249793e5924a9f25f3a0a8dd994b374eb937d2
Validity
Not Before: Jan 2 13:49:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=14ff4a3ed00fb9dc227ef340d725cd90d0853856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f0:7c:cb:b5:8d:fd:11:4e:22:40:28:a2:e1:
e3:a4:d4:b1:bc:c5:e5:87:31:9e:a5:18:2f:c3:d0:
cf:cf:23:da:05:16:e1:04:28:d3:c5:69:23:cf:38:
ce:46:1c:d8:df:2c:28:94:60:f7:d6:7e:5e:5b:b2:
3f:c3:64:28:e5:75:88:35:65:da:df:91:e7:c8:59:
02:83:b7:b0:cd:a4:37:28:e8:20:48:3c:53:3a:63:
44:b4:c3:b1:4b:93:94:0b:58:6d:4a:6c:a7:7f:05:
69:12:42:33:ca:1e:54:55:2c:de:e7:a4:db:af:df:
9c:b2:30:cb:10:fa:16:dd:6c:75:9b:d8:04:d6:11:
6a:34:09:f3:3e:d1:ca:16:00:30:cd:37:7d:ef:6c:
4b:aa:21:6e:38:1a:f3:fd:96:51:9c:c1:ac:1e:b5:
a2:0c:67:ee:40:8c:18:45:08:dd:d0:2a:33:c3:ce:
24:9e:2f:93:b9:fc:ea:50:53:a8:16:70:1f:dd:64:
42:01:9f:32:6b:64:8c:36:86:95:5a:85:27:5b:70:
60:f5:20:8d:23:7d:01:7d:7e:60:92:a2:6f:84:10:
90:87:63:8b:81:bf:c6:76:34:ca:08:b2:f0:08:38:
23:d1:19:54:bb:37:da:ed:9a:f0:b2:fc:f8:c3:b4:
77:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:FF:4A:3E:D0:0F:B9:DC:22:7E:F3:40:D7:25:CD:90:D0:85:38:56
X509v3 Authority Key Identifier:
keyid:2E:24:97:93:E5:92:4A:9F:25:F3:A0:A8:DD:99:4B:37:4E:B9:37:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LiSXk-WSSp8l86Co3ZlLN065N9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/FP9KPtAPudwifvNA1yXNkNCFOFY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.67.184.0/21
185.125.80.0/22
IPv6:
2a06:b740::/29
Signature Algorithm: sha256WithRSAEncryption
b6:4d:eb:07:9e:95:00:a8:97:4c:ae:b7:56:f8:1a:b9:2d:0a:
c0:2a:a9:5f:16:99:0a:77:90:d3:74:eb:53:81:32:b7:3e:ee:
97:32:11:34:f0:e1:ef:48:e1:ed:71:d8:72:1c:2f:15:30:18:
f3:b0:ce:b5:c3:4b:c6:53:0a:1c:8e:d8:cf:b1:cf:36:4d:69:
87:16:3b:81:02:10:ac:69:b9:e4:89:16:7d:4f:8b:92:17:76:
77:58:d9:a8:3d:f8:9a:6b:e1:da:26:58:11:73:c3:fa:60:b4:
78:cc:9b:60:79:cf:8c:4a:60:17:2e:c9:3c:ec:be:2e:62:33:
19:0f:d2:c0:aa:4b:2b:2e:b8:ab:db:b6:ee:f1:6f:3d:ad:f8:
ee:4c:3d:53:88:bf:bb:72:d3:ce:34:8c:21:66:01:39:69:d7:
4b:be:55:b7:6a:5f:f2:32:90:cc:57:6e:a5:13:27:43:fc:38:
66:ac:22:92:59:88:bf:08:48:03:60:9f:56:c3:d9:0a:a9:09:
ec:b5:76:0a:d5:17:74:a5:48:27:44:14:6d:e4:79:4d:85:4a:
00:8c:e1:dd:8d:41:33:89:b5:d6:c0:4a:9b:f7:42:b0:14:36:
c0:d7:20:5c:08:e7:0b:02:50:5b:ac:02:d6:56:ca:6b:e1:04:
ff:ce:bd:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:57:40 2025 by rpki-client