Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/FSXy2TtOSpMZ2XDcNKgNNiQnbKM.roa
File: FSXy2TtOSpMZ2XDcNKgNNiQnbKM.roa (raw, json)
Hash identifier: /T12WOhZaUuSku4ox6ePPcvZ8Y26JtVUn7Ay1gZp9DI=
Subject key identifier: 15:25:F2:D9:3B:4E:4A:93:19:D9:70:DC:34:A8:0D:36:24:27:6C:A3
Certificate issuer: /CN=86efb49df2474a6042b9f210bfea861b1b2886ed
Certificate serial: 01942143D18978D6BDB58F45E36081CB8B02
Authority key identifier: 86:EF:B4:9D:F2:47:4A:60:42:B9:F2:10:BF:EA:86:1B:1B:28:86:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hu-0nfJHSmBCufIQv-qGGxsohu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/FSXy2TtOSpMZ2XDcNKgNNiQnbKM.roa
Signing time: Wed 01 Jan 2025 09:48:00 +0000
ROA not before: Wed 01 Jan 2025 09:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29533
IP address blocks: 194.146.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hu-0nfJHSmBCufIQv-qGGxsohu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 20:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:d1:89:78:d6:bd:b5:8f:45:e3:60:81:cb:8b:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86efb49df2474a6042b9f210bfea861b1b2886ed
Validity
Not Before: Jan 1 09:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1525f2d93b4e4a9319d970dc34a80d3624276ca3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c2:a2:68:48:2e:b1:b4:b3:9e:55:ab:27:48:
df:a6:da:e2:7d:31:56:47:b5:34:de:62:b0:6f:a3:
f9:3b:1f:ae:5a:fe:ca:7f:2d:a2:7d:69:53:37:af:
c1:82:e9:bd:e8:f0:4f:62:de:66:5c:73:26:b2:c8:
dc:b1:f8:51:48:45:30:79:ca:50:97:5c:36:f8:c3:
dc:b5:4f:f2:58:ea:11:e6:0d:13:d2:08:f0:63:7a:
3c:53:07:5f:e0:2f:ce:ff:b3:92:03:fb:d4:02:2f:
ed:a5:33:ff:bd:af:c4:36:30:6f:c6:13:27:86:9f:
6d:e7:18:f1:9f:13:fc:fb:49:8b:06:53:c5:36:27:
ab:53:9b:18:fd:13:77:e8:bc:ff:ac:f7:de:fc:ab:
07:91:09:21:71:fd:05:55:14:8d:3b:bc:55:4d:e7:
85:d4:79:27:bb:8a:ab:f7:e8:24:15:b4:28:0c:76:
c0:95:53:bc:46:07:e1:2e:70:6a:7e:08:76:9c:a9:
a4:75:e3:72:d6:a3:80:5b:f8:39:5c:a9:a8:f7:b1:
03:48:b9:89:9d:94:57:20:d2:5d:8e:b4:eb:ad:a2:
0c:34:a6:80:20:6d:2c:43:04:c4:67:c6:de:cd:16:
33:40:5d:dc:a3:59:61:e2:48:95:4d:eb:47:68:b2:
b1:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:25:F2:D9:3B:4E:4A:93:19:D9:70:DC:34:A8:0D:36:24:27:6C:A3
X509v3 Authority Key Identifier:
keyid:86:EF:B4:9D:F2:47:4A:60:42:B9:F2:10:BF:EA:86:1B:1B:28:86:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hu-0nfJHSmBCufIQv-qGGxsohu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/FSXy2TtOSpMZ2XDcNKgNNiQnbKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.146.121.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:05:a5:49:05:d1:1b:da:05:3c:f4:15:17:10:fb:8c:75:7b:
46:a1:cf:c6:70:c7:8b:4b:b5:27:ca:dc:f4:99:5d:5e:72:78:
72:9c:e0:73:9f:70:62:4d:b7:d2:ce:aa:5b:b7:5c:ba:e8:6e:
ce:68:e3:7c:89:a0:4a:f0:60:d4:fb:81:2d:be:cc:2c:e0:8f:
c5:90:bd:95:eb:80:83:6a:3d:54:31:ca:a8:6c:a6:5c:c4:8c:
c9:7c:58:a5:f0:c8:be:00:79:aa:67:25:9a:dc:e1:22:69:2b:
0a:47:c9:a4:af:0f:bc:ea:32:e8:b8:51:db:fb:d0:1c:75:0d:
c1:bb:f1:f7:99:03:5d:60:8d:ea:3b:a3:ed:e4:df:04:8d:77:
4d:a9:e7:23:08:cc:47:2b:18:8a:10:50:89:d1:3d:0b:96:09:
34:fa:12:bb:c2:a8:58:98:52:7f:fe:ee:16:6a:29:20:f4:6b:
bc:98:a7:54:fe:85:23:dd:51:04:80:81:10:a1:96:5b:a8:60:
aa:3c:b7:ae:4c:51:70:29:f0:cb:f5:2b:7f:71:e1:91:70:64:
56:93:17:9c:ce:7c:e6:e1:c0:06:5e:6e:1b:31:47:8c:58:aa:
47:0f:b6:03:e7:33:45:f0:1d:3c:c2:7d:c1:bc:ab:ba:26:9f:
06:f2:78:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:49:32 2025 by rpki-client