Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/1-8mzLgcSu9Oq6q2tMFsUIKVj-y8.roa
File: 1-8mzLgcSu9Oq6q2tMFsUIKVj-y8.roa (raw, json)
Hash identifier: TL+lgkmWfcVi2SAdBZQfMnIAV6VfzBiyuBl16HYlLH0=
Subject key identifier: FB:C9:B3:2E:07:12:BB:D3:AA:EA:AD:AD:30:5B:14:20:A5:63:FB:2F
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 01946A09118A31F7CAE7B89AFB0457CDBD2C
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/1-8mzLgcSu9Oq6q2tMFsUIKVj-y8.roa
Signing time: Wed 15 Jan 2025 12:56:06 +0000
ROA not before: Wed 15 Jan 2025 12:56:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 23470
IP address blocks: 176.57.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6a:09:11:8a:31:f7:ca:e7:b8:9a:fb:04:57:cd:bd:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jan 15 12:56:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fbc9b32e0712bbd3aaeaadad305b1420a563fb2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e2:e2:0c:8a:d7:e4:07:39:f0:c8:7a:84:f8:
0e:15:41:ea:25:ef:52:64:52:eb:6b:10:a6:65:9b:
8a:11:e4:b8:eb:9d:16:77:af:5a:fa:c0:3b:81:34:
4d:59:d3:ab:a6:17:35:f2:aa:e9:be:02:6b:fa:18:
33:04:9a:16:aa:db:61:ed:fd:57:8c:b8:ff:ae:b7:
98:95:88:4c:4d:bd:79:95:34:9a:9a:77:36:35:77:
c7:62:bd:b0:ee:d2:f7:f2:fe:67:4d:52:f4:5d:71:
e3:72:de:51:39:ac:2e:5d:1c:3e:86:ac:6a:04:f6:
6b:b4:8b:0d:60:cc:e8:61:ff:88:df:52:c9:36:26:
ae:e1:36:66:7d:2a:0d:58:0c:0c:3d:ec:1a:5f:5e:
97:48:72:94:68:e6:d5:a7:1d:16:c5:1f:61:c9:ec:
4f:07:54:7f:c2:6c:59:88:bc:39:69:e5:70:eb:fa:
b8:66:a8:0a:2d:c4:35:ab:e9:fc:09:21:6f:f7:09:
c3:a2:90:02:6b:ed:39:c1:7a:87:11:65:80:c4:6b:
df:a2:13:c8:73:bd:d3:24:b9:62:b9:d0:30:ec:ad:
33:83:e2:a2:10:68:9b:89:64:da:1b:01:c9:78:04:
45:80:01:52:63:31:d5:3d:6d:b5:e6:2f:24:37:68:
7b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:C9:B3:2E:07:12:BB:D3:AA:EA:AD:AD:30:5B:14:20:A5:63:FB:2F
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/1-8mzLgcSu9Oq6q2tMFsUIKVj-y8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.57.57.0/24
Signature Algorithm: sha256WithRSAEncryption
29:b9:aa:70:89:d7:0b:0f:ca:0c:ee:af:43:cc:39:b5:48:c2:
4d:b7:8d:34:10:cd:1f:02:b0:a3:c4:01:b3:ca:58:69:86:b4:
9f:38:86:45:77:3f:bc:89:a8:b5:37:39:74:75:b8:21:26:83:
62:b4:d6:0d:99:83:68:a5:a0:23:4c:04:8a:b9:68:f0:9a:6c:
c7:b6:67:d3:5d:df:6c:06:2e:7a:4c:a7:1e:fa:bd:ed:7d:a3:
f4:7e:a4:e7:6c:51:e3:9c:90:ba:41:f4:ed:df:38:f7:ea:c2:
0b:01:19:85:64:0f:be:83:25:e3:0f:b5:2e:5f:c7:36:e5:0e:
65:3b:4a:2f:87:a4:ff:21:8d:36:6f:ac:ef:69:83:65:71:e2:
64:55:c8:bc:ca:fa:c5:ed:2a:aa:84:f9:06:20:22:88:a3:96:
1b:91:9d:1e:d2:1b:d5:2f:34:2c:39:46:5b:30:ed:5d:19:99:
b2:ad:c9:cf:1f:d7:c8:42:54:8c:a5:69:ba:cb:63:21:22:74:
aa:28:ef:67:48:10:3b:0c:69:9e:11:4b:32:5a:f8:33:cc:65:
85:bc:8d:a5:11:b9:65:b3:8e:d2:17:91:59:e9:17:17:e9:6d:
b9:12:46:26:97:b8:92:af:89:3c:a7:e0:67:cf:f3:71:ee:c8:
f7:0a:75:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:53:29 2025 by rpki-client