Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/9291e1-57ca-4c29-9e93-bd75ef9b5798/1/FIcaLo5Lkwo711cOwWKooXhLRhY.roa
File: FIcaLo5Lkwo711cOwWKooXhLRhY.roa (raw, json)
Hash identifier: ouIyYU8i1Bc12QJ63/vjQssVyB/lGTByw+wFjtilEFk=
Subject key identifier: 14:87:1A:2E:8E:4B:93:0A:3B:D7:57:0E:C1:62:A8:A1:78:4B:46:16
Certificate issuer: /CN=80df0cbdd5571e580ea57e18a440ca2bea4806f8
Certificate serial: 019421444982410C957EB17537B2DF521922
Authority key identifier: 80:DF:0C:BD:D5:57:1E:58:0E:A5:7E:18:A4:40:CA:2B:EA:48:06:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gN8MvdVXHlgOpX4YpEDKK-pIBvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/9291e1-57ca-4c29-9e93-bd75ef9b5798/1/FIcaLo5Lkwo711cOwWKooXhLRhY.roa
Signing time: Wed 01 Jan 2025 09:48:30 +0000
ROA not before: Wed 01 Jan 2025 09:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205871
IP address blocks: 185.179.58.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/9291e1-57ca-4c29-9e93-bd75ef9b5798/1/gN8MvdVXHlgOpX4YpEDKK-pIBvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/9291e1-57ca-4c29-9e93-bd75ef9b5798/1/gN8MvdVXHlgOpX4YpEDKK-pIBvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/gN8MvdVXHlgOpX4YpEDKK-pIBvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 00:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:49:82:41:0c:95:7e:b1:75:37:b2:df:52:19:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80df0cbdd5571e580ea57e18a440ca2bea4806f8
Validity
Not Before: Jan 1 09:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=14871a2e8e4b930a3bd7570ec162a8a1784b4616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e5:56:46:00:3b:1f:32:f6:4f:af:8c:ce:00:
92:4a:a2:e4:1a:18:df:b1:a1:14:c9:f0:3f:6c:11:
1f:58:55:da:38:f1:41:64:10:5d:ca:6d:5b:d5:32:
ab:66:db:a9:cb:95:d2:6a:08:16:a7:85:25:3c:8f:
3c:eb:ac:9a:12:f7:69:57:62:89:03:e8:f5:e4:6c:
f3:7d:20:72:d1:94:fc:54:5a:38:af:34:19:05:6b:
c4:28:5a:d9:fa:28:f9:e4:2c:34:f4:42:7d:88:be:
31:bf:b6:45:56:a6:97:29:49:d1:22:2f:87:78:ce:
a0:26:bf:48:c8:dd:72:37:63:fe:51:85:5d:d1:40:
ed:fb:65:ef:8a:16:61:27:bb:bf:0c:72:85:84:41:
6e:47:17:76:78:39:35:d5:eb:33:9e:78:ed:7d:b7:
5e:11:1b:bf:05:97:51:1b:fd:f4:ed:2e:73:0d:c0:
f8:d1:3a:8e:16:fb:2c:f6:5b:ad:89:b9:c6:aa:10:
ac:36:55:23:ee:35:64:36:c2:fc:11:fb:d5:42:4b:
47:82:cd:dd:e2:68:cd:3f:0a:0d:bf:45:f3:29:23:
0c:62:81:ad:27:66:ec:9a:9b:52:c2:f5:36:5c:74:
d9:f1:0f:cb:2a:ea:72:0a:5d:d2:31:9f:e9:4e:e0:
e5:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:87:1A:2E:8E:4B:93:0A:3B:D7:57:0E:C1:62:A8:A1:78:4B:46:16
X509v3 Authority Key Identifier:
keyid:80:DF:0C:BD:D5:57:1E:58:0E:A5:7E:18:A4:40:CA:2B:EA:48:06:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gN8MvdVXHlgOpX4YpEDKK-pIBvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9291e1-57ca-4c29-9e93-bd75ef9b5798/1/FIcaLo5Lkwo711cOwWKooXhLRhY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9291e1-57ca-4c29-9e93-bd75ef9b5798/1/gN8MvdVXHlgOpX4YpEDKK-pIBvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.179.58.0/23
Signature Algorithm: sha256WithRSAEncryption
dd:28:53:03:6e:a9:2c:ab:53:09:fe:0b:15:92:ba:a1:23:11:
73:4f:9f:09:bf:cd:2a:70:a2:77:cc:55:0d:4f:d2:9e:65:30:
94:41:34:2a:d3:b5:4a:16:e4:16:76:7c:f1:32:1e:d6:35:80:
71:2e:bc:b4:cb:81:1b:a0:b5:c8:14:7d:65:f0:d2:da:e9:96:
e3:1c:69:46:00:7a:b4:cb:d3:de:0c:a3:5d:c7:ee:b4:19:e8:
3c:3f:20:d2:9e:74:a2:09:6c:23:34:09:ec:52:ea:62:c9:18:
80:9a:f0:a3:42:0f:bd:9d:71:95:e5:d6:ba:08:51:cc:96:26:
b4:a6:f1:3b:f5:de:26:09:9b:dd:e4:e6:06:50:7b:db:73:6f:
33:46:a8:92:10:c8:c6:d5:68:3e:26:33:be:9c:ac:fa:9a:6b:
c7:23:28:16:4e:a7:92:6c:de:05:4b:a5:24:61:a8:44:91:11:
46:b9:7f:b7:1d:7b:3a:ac:1b:70:1b:8a:97:1f:16:67:23:00:
46:85:63:44:23:6d:d8:c6:01:a3:75:73:e5:14:f6:c4:de:59:
ae:6a:a5:48:a0:c8:84:18:90:94:c0:3d:d9:dc:01:df:bf:4b:
d5:4d:ff:3f:f7:c9:59:64:6a:d6:a3:d0:19:0e:27:e2:43:14:
b9:68:c9:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 09:11:25 2025 by rpki-client