Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/FhiaygjAF_1CRSj0CN-vLLhuasg.roa
File: FhiaygjAF_1CRSj0CN-vLLhuasg.roa (raw, json)
Hash identifier: SeFF3k4+NSW9uVrbVWJXjtkwiHNZBfGKLzdPBZ23zYE=
Subject key identifier: 16:18:9A:CA:08:C0:17:FD:42:45:28:F4:08:DF:AF:2C:B8:6E:6A:C8
Certificate issuer: /CN=7c9126732c2f0193bc3de4e8d3abc15f4baed62d
Certificate serial: 019425FC269B20DB0CB868BAE1604033A0F2
Authority key identifier: 7C:91:26:73:2C:2F:01:93:BC:3D:E4:E8:D3:AB:C1:5F:4B:AE:D6:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fJEmcywvAZO8PeTo06vBX0uu1i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/FhiaygjAF_1CRSj0CN-vLLhuasg.roa
Signing time: Thu 02 Jan 2025 07:47:49 +0000
ROA not before: Thu 02 Jan 2025 07:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215927
IP address blocks: 5.252.8.0/23 maxlen: 23
5.252.8.0/24 maxlen: 24
5.252.9.0/24 maxlen: 24
5.252.10.0/23 maxlen: 23
5.252.10.0/24 maxlen: 24
5.252.11.0/24 maxlen: 24
45.156.176.0/23 maxlen: 23
45.156.176.0/24 maxlen: 24
45.156.177.0/24 maxlen: 24
45.156.178.0/23 maxlen: 23
45.156.178.0/24 maxlen: 24
45.156.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fJEmcywvAZO8PeTo06vBX0uu1i0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:26:9b:20:db:0c:b8:68:ba:e1:60:40:33:a0:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c9126732c2f0193bc3de4e8d3abc15f4baed62d
Validity
Not Before: Jan 2 07:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=16189aca08c017fd424528f408dfaf2cb86e6ac8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:67:ff:c8:cb:36:28:09:a1:c8:de:dc:c4:d5:
b5:4f:18:01:46:0c:1d:a8:f3:f4:01:b8:5a:05:73:
0f:54:00:67:77:6d:95:d3:40:4c:47:9c:da:7f:af:
ea:4b:c6:15:4a:02:68:20:f8:7e:b1:6e:1f:6d:69:
f2:05:1f:21:b5:5f:2f:7d:6f:76:1b:c6:90:08:09:
2d:39:0e:9c:ff:66:da:ee:81:24:ae:3e:db:46:a8:
2f:18:f8:35:f0:17:7d:79:12:91:d2:8e:41:ab:cf:
3a:6f:55:ff:4f:1b:34:1f:3f:0f:80:ca:69:d1:5c:
7f:d4:76:ae:42:d6:f3:88:7c:64:bc:36:0a:42:c9:
25:f2:39:70:5d:59:ca:98:08:54:1b:e8:5a:38:4c:
94:2e:c9:47:7a:f1:a5:bd:ef:57:f1:e6:e3:e2:21:
83:6e:6e:c2:31:3d:2a:1e:39:3a:15:61:84:3f:d5:
8a:6c:dc:d8:52:e2:44:c5:0d:3c:48:42:9a:43:05:
80:5f:a8:20:a0:bb:9e:15:e9:5a:0e:cc:c4:7a:4b:
f0:d6:4f:2e:64:ae:00:fc:1e:5c:33:c2:08:7b:17:
60:2e:a6:2c:3a:87:dd:33:1a:75:1a:82:5a:0c:85:
80:a0:ec:07:a2:d1:aa:f7:bc:07:e3:11:d5:bd:36:
22:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:18:9A:CA:08:C0:17:FD:42:45:28:F4:08:DF:AF:2C:B8:6E:6A:C8
X509v3 Authority Key Identifier:
keyid:7C:91:26:73:2C:2F:01:93:BC:3D:E4:E8:D3:AB:C1:5F:4B:AE:D6:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fJEmcywvAZO8PeTo06vBX0uu1i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/FhiaygjAF_1CRSj0CN-vLLhuasg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.8.0/22
45.156.176.0/22
Signature Algorithm: sha256WithRSAEncryption
80:1b:50:8a:0c:c3:a4:2c:37:e5:5b:bb:07:47:ba:a3:44:5c:
b0:06:de:22:93:6f:ce:33:59:4d:17:e9:d8:e5:7f:51:91:4f:
f9:5c:37:17:5c:0a:fc:5c:57:67:50:5b:d1:56:a9:5c:3b:5e:
e5:40:7f:8f:4a:dc:c4:24:3d:1f:44:da:ae:be:df:57:96:10:
bc:eb:b4:a5:cf:a0:10:c2:44:58:4a:15:45:05:31:30:cf:e1:
6c:93:6c:f4:50:90:07:d8:5c:93:f3:54:c7:fd:a3:6c:f5:63:
76:03:6c:20:fb:70:54:b5:ca:a9:09:69:bc:70:ec:61:60:e7:
9e:28:35:8f:97:dc:1d:e9:07:9b:4d:ad:7e:aa:61:b8:da:8a:
1d:95:88:74:8a:3c:1d:17:5d:80:1a:5d:92:b5:6e:dd:b0:99:
7a:7e:21:fd:72:6f:26:40:a4:fa:fe:81:fe:0a:b3:be:8e:3d:
e6:39:b4:7a:6c:2b:a9:6f:9b:40:39:62:dc:b3:e0:7f:5f:13:
05:61:6a:04:28:d4:b4:f0:9c:04:4d:6f:05:ae:33:8d:aa:af:
cc:f8:a5:4e:0b:82:d1:1f:d1:c6:80:57:ee:15:be:97:f9:6d:
65:cb:d5:66:a5:e7:a1:b5:d7:f4:0d:62:f3:69:9b:43:14:84:
72:d3:1f:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:40:57 2025 by rpki-client