Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/1-fKXBjqiTeM90rh_YcnHRZImMf4.roa
File: 1-fKXBjqiTeM90rh_YcnHRZImMf4.roa (raw, json)
Hash identifier: XviyK9gZCSyNGe87uM1BJ71gLbA2w08qEYd7JArw4Hs=
Subject key identifier: F9:F2:97:06:3A:A2:4D:E3:3D:D2:B8:7F:61:C9:C7:45:92:26:31:FE
Certificate issuer: /CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Certificate serial: 0194228D3FA015633DB45F8E960F3D482BA5
Authority key identifier: E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/1-fKXBjqiTeM90rh_YcnHRZImMf4.roa
Signing time: Wed 01 Jan 2025 15:47:49 +0000
ROA not before: Wed 01 Jan 2025 15:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12312
IP address blocks: 141.98.44.0/24 maxlen: 24
2a07:6f46:4400::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:3f:a0:15:63:3d:b4:5f:8e:96:0f:3d:48:2b:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Validity
Not Before: Jan 1 15:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f9f297063aa24de33dd2b87f61c9c745922631fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ea:4b:d1:ae:41:60:ae:11:59:d8:3b:a5:19:
97:bb:de:7d:cf:ee:b0:bc:3b:fe:c1:30:2e:8f:56:
f9:bb:85:ec:9c:94:8f:3d:e6:95:0a:bd:cf:b7:33:
57:e2:81:e2:85:58:49:12:e2:e6:fd:6a:88:2b:12:
af:27:0d:c4:cb:0f:ff:8f:ca:a4:24:00:03:b4:d7:
2e:5c:3c:f1:76:ae:e4:6d:d4:63:b6:cd:6c:d0:6d:
28:09:3b:f6:98:9d:94:10:2e:11:0b:56:6f:f0:2b:
3d:de:6d:67:0f:90:1e:35:fd:1f:0f:f0:61:f7:a6:
c6:fd:4c:b3:7b:b1:eb:e8:71:c0:72:ee:43:cd:c4:
23:a8:d5:b2:24:5e:37:4b:07:c0:07:f8:82:1b:93:
ad:fa:5a:6a:f6:88:ef:29:b2:fe:c2:f0:2d:5a:99:
f2:e8:f3:f1:97:51:73:e3:22:8d:a6:a4:b6:bf:5a:
16:95:37:20:7e:d0:40:3b:55:93:a7:c9:2f:ff:92:
62:82:e5:44:6b:86:59:66:65:31:28:94:33:02:34:
6b:8c:14:26:51:7d:42:76:ef:d4:b2:a1:4c:11:06:
c2:59:a6:0d:e6:6f:24:7e:bc:25:52:bf:94:df:f0:
76:a5:52:56:7f:cb:8e:1a:23:dd:cc:88:5b:7c:ae:
7e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:F2:97:06:3A:A2:4D:E3:3D:D2:B8:7F:61:C9:C7:45:92:26:31:FE
X509v3 Authority Key Identifier:
keyid:E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/1-fKXBjqiTeM90rh_YcnHRZImMf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.44.0/24
IPv6:
2a07:6f46:4400::/40
Signature Algorithm: sha256WithRSAEncryption
75:20:5f:96:dc:be:40:1e:92:20:c3:88:26:be:aa:8b:2d:1e:
89:4a:14:f1:c4:73:9d:51:ca:02:10:22:f6:e3:72:c7:29:aa:
be:92:db:27:8a:bf:06:4a:93:c9:65:18:db:e3:a1:91:12:69:
54:8c:0a:3e:cd:d0:1a:76:b3:ef:77:46:12:a1:81:70:67:a7:
62:81:a7:4b:62:f7:b3:ae:ed:4a:9a:32:85:10:f9:09:1b:15:
6b:4d:20:71:03:2c:f1:5f:69:e5:0b:44:3d:c0:19:d7:5d:b4:
65:18:55:f4:f6:a1:4e:f4:9f:86:cd:f9:ab:8b:c2:a7:2f:da:
54:75:0d:6b:16:ee:13:45:47:06:01:57:a6:65:d6:5f:60:4b:
87:f8:b6:85:fd:e8:cd:a6:3b:15:4d:34:c6:08:44:0d:9e:fd:
04:e4:3a:89:39:c3:67:57:03:15:81:56:db:67:83:f8:89:f5:
b9:48:39:04:26:ae:15:d1:95:c4:0a:76:18:bf:0c:66:33:4e:
cc:d5:75:69:c5:4c:1d:ba:12:18:3d:c1:48:fe:d6:76:ab:d3:
26:2a:33:f7:2e:87:06:af:f4:bb:4c:76:65:3d:d8:bd:e5:bf:
05:72:f3:6a:54:b8:db:7e:9d:fb:98:49:b3:a2:00:50:2c:34:
d7:6b:4d:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:13:04 2025 by rpki-client