Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/1-7yAEP3nLzNnqtf3Nej2sy65zq4.roa
File: 1-7yAEP3nLzNnqtf3Nej2sy65zq4.roa (raw, json)
Hash identifier: tYb6X8EoEPBIOpcCtjg5jZ8qmmvQ3HaHzxmvyPy77Pw=
Subject key identifier: FB:BC:80:10:FD:E7:2F:33:67:AA:D7:F7:35:E8:F6:B3:2E:B9:CE:AE
Certificate issuer: /CN=64c0bc594af811753dfc116af459b1b874471489
Certificate serial: 01956D4F2B6558AA08C56ACC2E7E0C1366AA
Authority key identifier: 64:C0:BC:59:4A:F8:11:75:3D:FC:11:6A:F4:59:B1:B8:74:47:14:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/1-7yAEP3nLzNnqtf3Nej2sy65zq4.roa
Signing time: Thu 06 Mar 2025 21:14:19 +0000
ROA not before: Thu 06 Mar 2025 21:14:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 185.30.212.0/23 maxlen: 23
185.30.214.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 08:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:6d:4f:2b:65:58:aa:08:c5:6a:cc:2e:7e:0c:13:66:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64c0bc594af811753dfc116af459b1b874471489
Validity
Not Before: Mar 6 21:14:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fbbc8010fde72f3367aad7f735e8f6b32eb9ceae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fb:24:52:83:e1:76:b4:e8:a4:73:28:ff:8b:
9e:7b:68:c5:1e:53:14:11:b9:a4:4c:a9:9e:e3:84:
13:75:41:8e:60:ab:eb:1a:87:b5:88:c6:12:13:b6:
51:07:d1:56:2c:4c:5b:ff:be:2b:5b:af:ed:3e:43:
45:21:2e:a7:cb:83:c0:13:9b:a5:4f:6c:7c:33:58:
c8:d4:8b:24:e7:66:df:d1:5f:8d:0a:ac:e0:81:21:
9e:4b:e7:3f:ff:5f:c4:a5:af:10:1b:f0:95:17:49:
5f:42:20:e0:59:d6:6b:40:8f:e6:bf:01:7f:8a:4c:
68:9f:f7:ea:4e:93:60:de:08:f4:6b:ec:45:76:68:
3d:f3:03:d1:29:13:06:ea:f8:58:8e:53:ae:45:33:
00:ef:50:fd:9b:51:97:95:5d:01:79:d6:b2:38:b0:
d9:b7:55:51:5e:c3:53:59:cc:d9:aa:09:d1:68:fa:
8e:d1:27:c5:4f:b6:6b:59:e6:49:fd:f0:22:3f:64:
79:92:30:5b:52:87:a8:17:f3:0d:d4:e2:53:e2:3f:
85:14:30:a9:9b:e4:6d:39:71:0e:ba:ed:18:96:ca:
7e:5e:99:11:57:2a:c2:6b:1f:cd:d9:a3:c1:36:28:
52:0b:e0:66:15:04:b2:10:05:31:c5:ff:49:48:2a:
5b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:BC:80:10:FD:E7:2F:33:67:AA:D7:F7:35:E8:F6:B3:2E:B9:CE:AE
X509v3 Authority Key Identifier:
keyid:64:C0:BC:59:4A:F8:11:75:3D:FC:11:6A:F4:59:B1:B8:74:47:14:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/1-7yAEP3nLzNnqtf3Nej2sy65zq4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.30.212.0/22
Signature Algorithm: sha256WithRSAEncryption
85:3d:c7:57:f1:bf:81:da:95:93:74:14:e0:84:dd:7b:00:25:
0f:9d:a4:66:f8:ea:d5:ae:9f:5e:1a:17:1f:4d:32:a2:77:4f:
ec:7a:61:25:51:13:8f:1e:f0:5e:d8:d2:8c:34:90:ad:4a:60:
d1:32:78:32:f5:fe:88:02:8b:7c:83:79:e5:1e:4a:d3:05:87:
2c:f1:94:25:ce:ac:4e:7d:f3:0a:59:ba:90:f4:a7:cd:f7:d4:
ee:f0:d8:8a:d1:e8:6d:1e:22:6c:5f:68:fa:70:4d:01:d2:d6:
f1:c2:8b:75:91:5b:77:e4:31:30:e5:ee:49:f1:ff:b7:65:1a:
1f:77:4e:dd:09:73:b1:28:e0:9f:75:9a:bf:ec:5a:dd:d8:7d:
c2:b2:e4:a7:39:1a:35:68:3f:3b:fa:51:c8:46:97:10:27:3b:
90:58:22:a9:45:34:39:25:b7:39:40:76:0b:ed:be:37:c7:03:
97:07:c9:0a:31:04:0c:31:96:fb:f3:ee:4d:2b:d7:c7:de:33:
30:55:45:77:8d:9c:7a:87:98:f9:ed:d9:af:2d:b9:0d:9b:b3:
95:a2:11:da:08:e8:c7:4c:fb:de:83:4b:2e:33:ed:ce:fd:2e:
2a:f4:c5:55:c6:b8:7f:ec:49:e3:27:cf:2d:19:90:6a:2f:c3:
5a:48:01:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 18:37:19 2025 by rpki-client