Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/fngY7vAjtnIa6khyzBr6ohfARXc.roa
File: fngY7vAjtnIa6khyzBr6ohfARXc.roa (raw, json)
Hash identifier: 8j7K0AdGmWd/+RMVsdDrX0khITQq1MTMhTuPXkbPnqc=
Subject key identifier: 7E:78:18:EE:F0:23:B6:72:1A:EA:48:72:CC:1A:FA:A2:17:C0:45:77
Certificate issuer: /CN=23b1943087ce69623e76b2145b3479ac204ba1c9
Certificate serial: 019424B35F5DB41AA9876D9DA2BC0B87DF8D
Authority key identifier: 23:B1:94:30:87:CE:69:62:3E:76:B2:14:5B:34:79:AC:20:4B:A1:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I7GUMIfOaWI-drIUWzR5rCBLock.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/fngY7vAjtnIa6khyzBr6ohfARXc.roa
Signing time: Thu 02 Jan 2025 01:48:42 +0000
ROA not before: Thu 02 Jan 2025 01:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35405
IP address blocks: 87.236.64.0/24 maxlen: 24
87.236.65.0/24 maxlen: 24
87.236.70.0/24 maxlen: 24
87.236.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.mft
rsync://rpki.ripe.net/repository/DEFAULT/I7GUMIfOaWI-drIUWzR5rCBLock.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:5f:5d:b4:1a:a9:87:6d:9d:a2:bc:0b:87:df:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23b1943087ce69623e76b2145b3479ac204ba1c9
Validity
Not Before: Jan 2 01:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7e7818eef023b6721aea4872cc1afaa217c04577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:43:4e:76:fd:d8:61:9e:ee:fb:45:51:9e:7c:
47:17:34:65:20:02:8c:08:44:ff:40:dd:33:95:24:
22:4a:6b:6b:2a:aa:18:bf:5e:64:55:18:2a:90:97:
fd:60:34:7f:77:8f:1c:64:d5:a3:50:35:fb:45:22:
35:27:c5:18:8d:00:86:15:a1:5e:61:95:79:94:4a:
a5:e8:1b:4d:49:ba:3d:96:c4:37:8a:53:d9:a2:c7:
18:28:14:5a:7f:c0:43:b6:da:e8:1b:a6:7b:ae:b4:
1e:9f:28:90:5e:c8:15:c2:7e:33:5a:f8:03:88:57:
34:29:4c:49:1b:39:43:f5:9a:9b:a3:de:85:d9:ad:
58:3b:9e:78:d7:d1:67:26:e5:6e:62:c1:33:0b:41:
2d:56:07:eb:0d:31:76:f0:ae:5f:79:e7:8a:01:59:
b3:68:b6:50:dd:ac:b5:26:4b:d1:56:9b:c6:04:bb:
fe:bc:cc:6f:70:6c:b9:7e:7e:ee:a8:20:69:c0:bc:
16:bc:da:3f:b9:ff:f4:e8:37:28:41:0d:75:0d:38:
12:dd:3d:8b:46:a4:70:b1:7d:23:4a:3b:b9:fc:ab:
55:9f:b8:e6:e2:37:aa:12:ab:78:b6:12:49:83:57:
c2:9f:dc:96:ef:d2:82:f3:74:c1:e4:46:62:70:f9:
f5:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:78:18:EE:F0:23:B6:72:1A:EA:48:72:CC:1A:FA:A2:17:C0:45:77
X509v3 Authority Key Identifier:
keyid:23:B1:94:30:87:CE:69:62:3E:76:B2:14:5B:34:79:AC:20:4B:A1:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I7GUMIfOaWI-drIUWzR5rCBLock.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/fngY7vAjtnIa6khyzBr6ohfARXc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.236.64.0/23
87.236.70.0/23
Signature Algorithm: sha256WithRSAEncryption
2f:e3:b4:d1:5f:15:06:06:78:9c:6e:c5:b2:d7:a1:14:41:33:
9f:94:01:48:34:61:aa:cc:e0:c1:b6:b4:55:6c:56:76:f2:d5:
fe:5b:70:ca:40:8b:74:f6:08:69:cc:b9:f1:3a:f5:5b:a4:06:
d8:d9:51:f6:a3:8b:ff:c8:fb:4a:cf:fe:c7:c5:33:88:3b:42:
1d:40:fe:fd:dc:94:b2:de:c3:ba:3c:fa:bf:4d:4a:13:88:7c:
98:df:31:b2:91:f6:d3:5a:b0:e7:05:6c:23:50:70:1c:44:47:
ec:bb:29:5a:8c:06:38:9d:b9:2e:17:15:d4:fe:bd:f7:34:22:
9b:83:ff:f8:bd:4e:be:d2:06:13:39:47:c0:94:f3:8f:77:83:
c9:2a:00:ca:53:48:b5:61:c8:a1:d8:7f:7b:66:f2:f0:ec:79:
71:d6:ae:5b:ce:a1:b2:dc:10:3c:d8:85:9e:0a:a5:8d:9a:0b:
15:a9:e7:6c:83:02:58:39:ef:ec:3a:f2:c6:d6:a8:07:86:39:
3f:aa:25:32:ff:73:a2:24:41:9d:f0:4a:27:3e:8e:14:1b:bb:
9b:2d:bd:37:8f:16:1c:b3:8c:67:46:52:e7:12:92:be:6e:28:
e2:48:01:09:1c:83:6a:19:f7:fd:94:f2:3c:03:76:af:2c:bf:
df:c4:8d:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:05:37 2025 by rpki-client