Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/f0wCPyNuTeQIvdOaxmoM9zgS-yA.roa
File: f0wCPyNuTeQIvdOaxmoM9zgS-yA.roa (raw, json)
Hash identifier: f/FLhL5iK4w35mAjQuNFPLV5x3iPtqx+dEGqwTvpyc4=
Subject key identifier: 7F:4C:02:3F:23:6E:4D:E4:08:BD:D3:9A:C6:6A:0C:F7:38:12:FB:20
Certificate issuer: /CN=7c4b917dc9046a065678ae0df4d3e30369c59c69
Certificate serial: 019426D98B3311B835ED6E308213870A1FC0
Authority key identifier: 7C:4B:91:7D:C9:04:6A:06:56:78:AE:0D:F4:D3:E3:03:69:C5:9C:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fEuRfckEagZWeK4N9NPjA2nFnGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/f0wCPyNuTeQIvdOaxmoM9zgS-yA.roa
Signing time: Thu 02 Jan 2025 11:49:38 +0000
ROA not before: Thu 02 Jan 2025 11:49:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48550
IP address blocks: 45.12.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/fEuRfckEagZWeK4N9NPjA2nFnGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/fEuRfckEagZWeK4N9NPjA2nFnGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fEuRfckEagZWeK4N9NPjA2nFnGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 11:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:8b:33:11:b8:35:ed:6e:30:82:13:87:0a:1f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c4b917dc9046a065678ae0df4d3e30369c59c69
Validity
Not Before: Jan 2 11:49:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7f4c023f236e4de408bdd39ac66a0cf73812fb20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:57:ea:06:9c:ba:88:23:37:89:94:06:f4:26:
23:33:50:c4:bd:e2:86:88:f3:45:96:67:4d:10:0a:
e5:f3:36:df:f7:ff:ea:90:11:b8:18:78:1e:cd:7f:
12:8f:8f:0d:92:7a:44:40:1a:68:fc:6d:87:7a:34:
ae:57:be:fe:8a:52:5d:c0:c8:5c:98:45:7c:c5:96:
26:f4:ec:cc:bf:68:0d:d1:15:95:68:a2:07:f9:e7:
fb:1f:9e:95:5d:50:dc:50:8f:e6:9f:7e:a7:5c:be:
15:8a:6a:01:6b:b6:8e:4c:4b:cb:b8:63:d6:79:bd:
3d:15:df:6e:66:15:d8:8c:e9:c6:56:e1:1f:7b:3a:
41:1a:d2:2e:cf:42:cc:f0:ce:0d:4d:c5:9f:85:ed:
42:2c:60:c2:1c:0e:c2:9f:a0:92:39:58:75:04:d2:
1c:bc:89:a0:65:ff:d7:cb:3c:d7:9e:55:33:be:d0:
a7:fb:b3:cd:38:77:de:37:94:50:61:51:60:c9:98:
75:69:f9:b3:4d:3e:36:61:cf:29:3f:0f:6b:4b:7a:
a5:b3:79:d0:64:6b:92:60:d6:7d:61:11:50:2b:e4:
83:16:67:2c:af:f4:83:bd:41:6a:82:05:9a:53:51:
77:1d:58:b3:06:ce:17:c4:a4:3e:27:03:5d:86:4e:
91:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:4C:02:3F:23:6E:4D:E4:08:BD:D3:9A:C6:6A:0C:F7:38:12:FB:20
X509v3 Authority Key Identifier:
keyid:7C:4B:91:7D:C9:04:6A:06:56:78:AE:0D:F4:D3:E3:03:69:C5:9C:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fEuRfckEagZWeK4N9NPjA2nFnGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/f0wCPyNuTeQIvdOaxmoM9zgS-yA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/fEuRfckEagZWeK4N9NPjA2nFnGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.121.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:81:c8:4f:12:bb:8a:6c:17:90:3b:3c:71:39:15:5d:c7:74:
bb:51:6e:58:4e:03:e1:5e:c8:41:6a:6c:d2:5f:ec:75:d2:eb:
4f:35:91:fc:0c:f1:b6:e6:9f:d8:14:34:42:b3:40:30:09:b8:
bb:a0:f4:ef:34:10:4e:33:4b:b3:e1:5f:68:6b:62:55:03:db:
1e:33:d6:87:9e:41:2b:8c:1a:e7:a3:55:4f:78:e0:f4:39:ab:
4e:cb:90:6e:91:14:ff:4e:67:bf:2f:79:23:dc:40:81:f0:94:
97:45:14:2a:36:4a:48:9e:1e:f9:65:25:8e:62:7f:e4:31:8f:
71:19:e3:02:41:d8:92:f3:0a:00:6e:8f:54:f6:27:36:e7:5b:
08:15:42:82:1c:44:1a:a0:ad:d3:45:6a:3f:49:6b:e6:61:91:
84:63:2a:33:95:0a:f0:43:bd:eb:00:b8:52:76:c5:c4:b6:30:
1e:00:8f:9a:b6:13:61:9c:8b:c6:f7:fd:13:ea:ef:65:ad:37:
88:ab:09:9e:96:ea:df:39:64:18:d8:62:e5:0b:c6:45:da:8e:
bc:f7:2e:35:00:fe:aa:93:15:3d:58:dc:9c:66:71:02:56:07:
09:8f:46:7f:ab:4a:27:1c:15:bf:ad:61:d5:1b:58:51:e5:1b:
2e:4c:3a:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 20:14:57 2025 by rpki-client