Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/fkZMJf--qW7MT6bXdyPn8Rz0kGM.roa
File: fkZMJf--qW7MT6bXdyPn8Rz0kGM.roa (raw, json)
Hash identifier: FGOPoxO9vvC4y9ljtcZplGO40KLgXf+OUCl+F6C8Bmk=
Subject key identifier: 7E:46:4C:25:FF:BE:A9:6E:CC:4F:A6:D7:77:23:E7:F1:1C:F4:90:63
Certificate issuer: /CN=24d470214c69e430f8b385e0936ad960166acdf0
Certificate serial: 0194252156B079385B873F95709D8329E1B2
Authority key identifier: 24:D4:70:21:4C:69:E4:30:F8:B3:85:E0:93:6A:D9:60:16:6A:CD:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/fkZMJf--qW7MT6bXdyPn8Rz0kGM.roa
Signing time: Thu 02 Jan 2025 03:48:49 +0000
ROA not before: Thu 02 Jan 2025 03:48:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 213.255.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 18:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:56:b0:79:38:5b:87:3f:95:70:9d:83:29:e1:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d470214c69e430f8b385e0936ad960166acdf0
Validity
Not Before: Jan 2 03:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7e464c25ffbea96ecc4fa6d77723e7f11cf49063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:6b:f6:3c:df:d9:dc:1b:06:8a:d7:66:29:89:
f8:08:aa:79:5d:e3:f3:06:13:77:ab:f7:a0:70:23:
b9:71:8d:29:f7:69:81:e0:6d:04:a5:30:5e:7c:23:
29:09:b6:86:9c:bb:23:a0:a8:c5:15:dd:a4:9a:65:
04:36:23:62:7d:03:ed:48:12:71:19:1c:f9:90:3f:
f1:83:2e:c5:f1:ba:19:af:7d:ae:a0:d0:f3:bd:0b:
bc:c2:b9:95:ce:15:ce:25:ac:93:f4:39:65:52:17:
98:6f:f8:d4:76:8e:ec:1f:35:8c:c1:ff:bf:43:0e:
75:b8:10:b6:d6:bb:fc:be:ec:84:3a:1d:af:3a:63:
2c:27:51:f2:81:ca:ea:20:49:db:3d:86:b9:4e:13:
e9:02:a5:64:bc:c4:d2:99:52:b7:c7:e9:8a:8a:74:
74:3a:ea:c5:a9:4a:74:5a:96:f6:b5:73:c0:5b:f9:
d4:20:79:5b:cc:51:03:ac:2b:eb:85:37:f5:a5:8d:
f2:62:72:c6:5b:85:99:8a:7e:b0:99:ae:61:08:ec:
7e:42:3b:74:6f:7b:00:58:91:65:5d:47:d7:96:1c:
ba:ad:f0:41:b7:e8:93:68:73:1c:78:0c:df:22:c5:
36:c3:d7:90:b0:a8:52:70:9b:6f:bf:08:3d:cb:a0:
4b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:46:4C:25:FF:BE:A9:6E:CC:4F:A6:D7:77:23:E7:F1:1C:F4:90:63
X509v3 Authority Key Identifier:
keyid:24:D4:70:21:4C:69:E4:30:F8:B3:85:E0:93:6A:D9:60:16:6A:CD:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/fkZMJf--qW7MT6bXdyPn8Rz0kGM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.255.206.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:b4:6e:c9:9c:d3:40:53:0d:4b:de:0c:29:b2:2d:24:6e:aa:
55:95:71:47:c4:32:0f:63:82:5e:21:e7:3b:1c:53:26:b0:8f:
ff:34:43:e0:0d:e4:fa:fd:b5:a9:67:d3:7f:7a:4a:ef:9a:5c:
90:73:85:93:6a:b5:eb:44:b5:e8:1b:21:f3:bc:27:15:9f:84:
d5:63:61:ef:ef:f2:e9:40:b6:51:1c:e1:c4:74:90:b0:ab:15:
b4:49:10:0a:f7:7b:2d:d4:ba:e4:51:13:9f:2a:79:3e:d7:2a:
4a:be:d5:75:6c:cb:15:4e:c1:30:03:8f:06:eb:b5:2a:c2:78:
38:ad:87:ae:bd:ec:e4:85:4f:3b:96:fb:4b:cd:3b:a0:39:7e:
9f:e5:35:46:f6:80:e3:26:57:71:79:fb:38:58:90:98:cb:b5:
48:ea:11:34:bc:f9:86:01:74:db:77:28:fa:72:46:96:fb:06:
cb:78:a5:ee:26:c4:a2:da:b6:f9:6c:79:5f:03:2e:c1:f0:ad:
21:d5:5f:9c:1f:06:2b:06:11:72:27:8a:e4:8a:e1:e0:4f:75:
0d:21:12:78:d7:3f:03:89:90:11:d8:1c:40:97:1b:ea:f7:30:
c7:0f:16:e3:87:79:73:32:4b:89:31:8f:f1:46:8e:eb:4e:51:
39:81:1c:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:44:17 2025 by rpki-client