Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/FKUQCuIzHK8m5v7DPK95ZLZm2mw.roa
File: FKUQCuIzHK8m5v7DPK95ZLZm2mw.roa (raw, json)
Hash identifier: mGQVq8qw6WFTG/cqC2f1RaOfzOJeLw01iaR6UwH6vKA=
Subject key identifier: 14:A5:10:0A:E2:33:1C:AF:26:E6:FE:C3:3C:AF:79:64:B6:66:DA:6C
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 0194274857F9F56399AFC30CDFACAB2014CD
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/FKUQCuIzHK8m5v7DPK95ZLZm2mw.roa
Signing time: Thu 02 Jan 2025 13:50:40 +0000
ROA not before: Thu 02 Jan 2025 13:50:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 273853
IP address blocks: 217.76.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:57:f9:f5:63:99:af:c3:0c:df:ac:ab:20:14:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 2 13:50:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=14a5100ae2331caf26e6fec33caf7964b666da6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:08:12:a1:73:91:cd:22:13:62:ee:25:64:41:
0f:e8:3d:e5:81:dc:09:57:29:90:52:92:82:4b:5a:
19:da:cc:77:c3:b5:ec:ae:68:b3:25:02:4b:47:08:
e2:7e:97:aa:51:3f:2a:24:f0:ed:74:fa:ef:ea:a4:
bd:03:29:b6:7c:f4:48:87:af:8f:34:54:0d:35:ef:
d0:68:92:a1:d7:f2:5e:dc:22:50:d1:0d:1d:00:7f:
a9:9d:b6:28:0f:57:01:f2:c7:bb:fa:20:bd:2e:d5:
ce:bf:12:07:df:95:77:7f:79:12:69:31:1b:17:b9:
ee:18:95:36:52:70:03:c7:d2:ad:56:96:2a:5b:d8:
d3:63:78:22:19:26:58:da:93:7f:ba:b0:14:c5:7b:
7f:86:0a:e9:69:d8:da:ed:7f:04:36:bf:11:a8:70:
f4:d1:55:da:fa:e2:87:21:c9:25:87:71:0d:f7:76:
58:dc:e3:2a:da:9a:b7:74:5e:53:37:b0:b9:77:9e:
c2:a7:c1:23:40:21:05:46:6c:43:97:68:fb:06:ad:
4d:4c:96:4d:af:43:5c:18:7a:a2:9c:8d:33:f8:58:
31:40:21:fb:e5:ee:c8:d3:60:96:5e:d9:04:5e:7c:
89:98:9e:f6:1f:29:d1:fa:1f:93:7f:c7:3a:93:02:
93:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:A5:10:0A:E2:33:1C:AF:26:E6:FE:C3:3C:AF:79:64:B6:66:DA:6C
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/FKUQCuIzHK8m5v7DPK95ZLZm2mw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.76.244.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:d2:6f:27:6f:45:78:77:03:bb:6c:1a:78:59:a5:57:0e:8c:
21:89:91:8c:b2:93:fd:bb:28:7a:2a:3a:54:de:b6:4e:95:3a:
9a:8e:b2:0c:2a:2e:d8:32:f1:02:c2:a9:e1:6b:6b:d9:18:ba:
29:ef:56:01:f7:67:a9:eb:b1:9a:1d:88:24:9b:2d:3f:39:41:
3d:8b:d0:a7:99:3e:73:60:f7:da:ed:ce:04:6b:6e:48:8e:7a:
5e:1a:42:e4:c6:f3:7c:08:85:db:fd:e2:f4:46:15:c9:3c:50:
eb:1e:c9:c0:d5:ce:f7:27:db:3d:53:36:1b:59:1b:73:9f:a4:
a7:d8:7a:1c:0f:34:bd:43:97:45:80:67:d0:20:31:bb:31:5a:
d3:c1:e6:e5:96:b6:5f:d7:30:5f:6c:9b:61:26:30:a2:88:fe:
97:5a:1f:15:51:25:e4:fa:ae:bf:1c:cc:8b:5a:ee:64:f3:eb:
cb:09:45:64:0c:1e:d2:4c:18:9c:60:f9:09:fa:83:95:79:b2:
51:61:3a:ed:a4:41:c2:21:70:de:0f:03:20:7e:a3:28:08:98:
ec:fc:8e:2a:0d:88:65:97:5c:ea:89:bf:15:a2:9d:27:53:93:
df:8a:23:18:d3:62:48:7c:8c:ea:40:30:be:39:8b:a5:07:4b:
5e:0b:46:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:39:44 2025 by rpki-client