Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/fc85n9-kc-W5Cgqomk8JDto0ZeA.roa
File: fc85n9-kc-W5Cgqomk8JDto0ZeA.roa (raw, json)
Hash identifier: 0IptxCTFAzNODhcgWUQwVWQ1lyUf5mVW8te8c9wh2bQ=
Subject key identifier: 7D:CF:39:9F:DF:A4:73:E5:B9:0A:0A:A8:9A:4F:09:0E:DA:34:65:E0
Certificate issuer: /CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
Certificate serial: 019427B61BCAD8A2685210A1FB453731CDF4
Authority key identifier: 21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/fc85n9-kc-W5Cgqomk8JDto0ZeA.roa
Signing time: Thu 02 Jan 2025 15:50:33 +0000
ROA not before: Thu 02 Jan 2025 15:50:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205650
IP address blocks: 147.234.18.0/24 maxlen: 24
147.234.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 21:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:1b:ca:d8:a2:68:52:10:a1:fb:45:37:31:cd:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
Validity
Not Before: Jan 2 15:50:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7dcf399fdfa473e5b90a0aa89a4f090eda3465e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:74:89:6f:19:7b:a3:d2:fa:95:c3:94:a8:cf:
10:23:ec:9e:e4:62:6b:f9:71:32:88:1f:c5:74:1f:
25:ce:bc:cd:80:57:a7:30:c8:b6:0a:af:ff:13:2d:
c8:96:a7:12:2b:04:a7:78:12:ee:83:c7:0a:01:d6:
e0:62:72:4a:37:e7:18:df:29:07:9e:98:38:3b:21:
df:14:49:3e:6a:da:1b:d7:74:39:51:c0:56:a6:29:
b8:4e:05:35:03:a4:07:2f:83:4f:08:be:20:ee:35:
db:3c:bd:06:46:0b:eb:0c:e3:33:69:51:89:5a:d1:
5c:87:56:bd:e9:27:f4:5b:2b:1c:67:43:bd:38:af:
c5:ca:47:b0:0c:3c:45:aa:26:23:ff:a6:90:57:d0:
2b:39:9c:03:eb:16:ba:1c:b3:69:eb:9f:78:aa:f2:
c8:38:d0:fb:ad:a7:2c:8e:44:00:ca:7d:8b:57:6f:
b5:4f:13:cb:76:0e:d7:a6:f9:77:2c:3c:a3:f6:70:
e8:0d:19:9d:d5:d4:cd:47:68:cc:9a:41:9d:20:ca:
bd:ec:88:f1:95:2e:28:1b:0d:66:cf:7f:1d:66:c5:
9b:d2:ee:4e:19:a5:8d:db:a9:aa:44:ba:76:95:7a:
31:0c:df:94:6d:c3:9e:68:8a:b9:e7:a3:ac:02:61:
24:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:CF:39:9F:DF:A4:73:E5:B9:0A:0A:A8:9A:4F:09:0E:DA:34:65:E0
X509v3 Authority Key Identifier:
keyid:21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/fc85n9-kc-W5Cgqomk8JDto0ZeA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.234.18.0/23
Signature Algorithm: sha256WithRSAEncryption
42:da:86:c7:63:89:9e:6b:44:06:d4:28:77:5e:77:12:7a:74:
23:7c:24:ec:9b:8d:28:0e:50:55:1d:04:d0:63:8c:75:d9:fd:
60:d7:cf:e1:df:2b:f8:68:96:e5:c7:16:fc:c0:64:e4:b2:72:
a8:ff:67:7d:ce:d0:5f:d0:a1:dc:71:ac:ad:cc:da:76:3a:34:
60:e6:f3:7a:47:2c:8d:a9:e1:17:66:89:b1:a1:84:87:0e:ca:
69:f8:0b:74:52:0e:9c:36:01:43:4f:2b:20:83:7c:2a:e2:05:
b1:50:6a:ae:67:8f:78:52:28:01:a1:aa:76:61:1a:e4:40:b1:
f4:01:97:2f:a6:17:dc:a9:94:80:d1:99:4c:fe:0e:5e:b6:c1:
f9:7c:fd:0c:62:0f:00:b2:7f:67:ae:8c:10:0a:ee:8d:10:79:
97:87:a9:3e:cd:3b:eb:8c:0e:5e:82:2b:6e:24:e9:09:1b:d1:
ab:43:0a:4d:75:43:d3:23:e0:9d:bc:d9:d1:0d:e0:0b:19:8f:
a2:62:82:3c:8b:71:6d:9d:92:20:2c:7a:6e:33:70:a9:b3:71:
02:f9:57:4e:ba:ae:89:97:94:12:e7:a5:12:a3:12:08:53:e3:
b3:a7:43:1b:61:cb:1f:d8:f7:10:99:6c:f4:cb:0a:e3:bb:53:
de:3b:24:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:34:20 2025 by rpki-client