Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/fw3gz0aqjo5XVgwJTdKfHaFdUQs.roa
File: fw3gz0aqjo5XVgwJTdKfHaFdUQs.roa (raw, json)
Hash identifier: JL7NgqZELT4U9G+fzWp0vr0wSFH0b/IIZthdFsJqTtY=
Subject key identifier: 7F:0D:E0:CF:46:AA:8E:8E:57:56:0C:09:4D:D2:9F:1D:A1:5D:51:0B
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 01960F37621D66AFE0A660D30A328F796893
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/fw3gz0aqjo5XVgwJTdKfHaFdUQs.roa
Signing time: Mon 07 Apr 2025 07:46:49 +0000
ROA not before: Mon 07 Apr 2025 07:46:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39838
IP address blocks: 89.42.112.0/23 maxlen: 23
89.45.208.0/23 maxlen: 23
141.136.56.0/21 maxlen: 21
217.26.188.0/22 maxlen: 22
217.76.247.0/24 maxlen: 24
2a0a:e9c3::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0f:37:62:1d:66:af:e0:a6:60:d3:0a:32:8f:79:68:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Apr 7 07:46:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7f0de0cf46aa8e8e57560c094dd29f1da15d510b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a6:ee:d3:af:39:93:aa:5b:90:e8:c3:57:79:
2e:bb:97:7d:2c:3d:62:c4:2b:94:11:15:0e:71:f3:
4d:62:b7:f7:aa:97:46:86:30:8e:38:53:b6:4f:81:
a0:66:6e:7e:d3:19:7f:ca:bb:52:ef:cc:2a:71:d1:
62:5f:36:b8:ca:9d:3e:1f:28:48:83:b6:ea:9b:a0:
f7:9d:1a:2f:ed:30:24:d1:19:fd:b9:b3:53:f9:f2:
24:e9:55:1a:fd:c3:c7:44:9e:6b:ab:8e:29:aa:bd:
4c:d4:0e:2a:9c:f1:a9:a3:77:31:1c:f4:fd:cf:66:
d5:23:2d:14:71:72:09:61:7c:c1:f5:47:de:36:b1:
ab:21:d6:2d:0e:4e:70:7c:bf:16:37:a4:fa:54:36:
4f:cd:7b:b6:44:fc:f7:f1:42:63:fb:bd:3d:41:d7:
0d:16:7e:c4:e1:ec:2a:df:13:a7:49:e7:f7:b4:1a:
90:df:a4:cb:3a:a4:f9:89:6c:ed:2e:55:32:6d:35:
3f:2c:81:3a:4c:64:01:ef:60:c4:6a:34:a0:86:92:
3f:7b:e7:da:79:7c:04:dc:d4:78:7d:02:fd:b2:fc:
32:e3:3b:ba:49:4d:b4:48:24:f3:b6:00:66:b9:26:
2b:4a:60:36:83:61:65:14:ab:41:d2:49:f8:ac:71:
9d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:0D:E0:CF:46:AA:8E:8E:57:56:0C:09:4D:D2:9F:1D:A1:5D:51:0B
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/fw3gz0aqjo5XVgwJTdKfHaFdUQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.112.0/23
89.45.208.0/23
141.136.56.0/21
217.26.188.0/22
217.76.247.0/24
IPv6:
2a0a:e9c3::/32
Signature Algorithm: sha256WithRSAEncryption
39:17:35:d3:c0:09:35:fd:ed:12:5d:f6:38:c0:df:bc:bd:f1:
63:5f:d6:51:ac:83:0d:22:06:ad:ad:2c:4c:12:14:b0:05:3f:
14:f0:45:05:b1:4f:4f:33:db:0d:f2:f0:fb:6d:f3:f8:69:4f:
07:96:ba:23:f4:60:5d:ba:87:c0:b8:33:cc:d3:6c:84:7a:ec:
d7:ee:b0:9a:7c:67:e7:1c:53:d2:40:87:52:75:f4:3b:b7:a4:
9e:6a:de:b3:17:4d:46:12:7d:ee:76:b9:a9:86:0f:97:35:ef:
42:a7:3e:a1:a7:ae:5f:f9:a2:f3:7a:5b:f4:5d:04:b8:9f:ee:
0a:a8:bc:cc:06:81:29:f7:67:75:cf:8a:35:78:ff:da:92:89:
03:fb:2c:64:88:02:96:72:d6:3e:0b:de:53:c6:42:06:16:7d:
94:5c:11:25:1a:5c:f9:1d:ad:d1:55:8b:24:a8:0b:4f:90:de:
16:fb:a0:90:29:e7:fc:d1:2a:05:b3:87:13:d7:35:db:ef:4d:
a9:98:0c:a4:e6:d9:26:41:36:f9:d2:65:42:b0:3d:1e:9b:e7:
03:1a:53:6a:db:c1:53:40:b5:55:57:11:e5:f1:6c:75:6f:ea:
64:de:f8:85:84:f7:49:40:0c:cf:dd:1f:c9:16:09:17:55:6c:
6d:38:a3:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 21:04:46 2025 by rpki-client