Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/fify_6-v5sqd_osd48HrIrrz4wc.roa
File: fify_6-v5sqd_osd48HrIrrz4wc.roa (raw, json)
Hash identifier: Wl6fbGx56sTMeSv7ZOKw++x8X2fliqdpmB49dtAOPfU=
Subject key identifier: 7E:27:F2:FF:AF:AF:E6:CA:9D:FE:8B:1D:E3:C1:EB:22:BA:F3:E3:07
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 01942747CB020AE2D3861089E57230A566F3
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/fify_6-v5sqd_osd48HrIrrz4wc.roa
Signing time: Thu 02 Jan 2025 13:50:03 +0000
ROA not before: Thu 02 Jan 2025 13:50:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60931
IP address blocks: 46.8.80.0/20 maxlen: 20
46.8.80.0/21 maxlen: 21
46.8.80.0/22 maxlen: 22
46.8.84.0/22 maxlen: 22
46.8.88.0/21 maxlen: 21
46.8.88.0/22 maxlen: 22
46.8.92.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 03:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:cb:02:0a:e2:d3:86:10:89:e5:72:30:a5:66:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Jan 2 13:50:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7e27f2ffafafe6ca9dfe8b1de3c1eb22baf3e307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:29:24:3a:15:c2:60:e2:50:7f:a0:13:ed:cf:
0e:73:c9:7a:0d:77:00:79:ae:37:78:32:61:9a:73:
08:96:03:ae:37:64:ef:af:3e:2e:ab:68:51:ef:db:
c2:75:58:01:99:b5:e7:8b:f0:1f:c3:79:12:d7:98:
bc:6f:99:53:33:82:08:43:15:dd:ed:fc:81:59:f4:
2b:b8:18:1d:dd:b8:cd:97:7d:d7:b5:c8:a5:40:41:
8f:a6:4d:cc:12:cf:64:6b:33:e3:43:86:8b:a5:13:
7c:06:2d:98:87:1c:b6:f7:85:5f:37:0c:ae:8d:78:
27:dc:d9:fb:61:ac:f4:e9:62:a9:6e:c1:2b:b2:c8:
34:a0:01:f6:6a:5d:b4:df:84:ac:38:38:b6:f6:1c:
33:7b:05:70:a7:30:96:24:8b:74:aa:03:ab:57:c8:
37:94:be:d8:2b:38:8c:04:a7:75:b9:30:df:52:94:
3f:ab:d6:9e:88:c5:55:82:84:76:36:4c:34:e1:2c:
ac:f1:6c:87:11:c6:b1:53:85:e8:65:24:51:4a:99:
1c:05:09:21:29:95:63:59:8b:aa:a8:51:e5:25:cf:
fe:52:bf:71:56:59:bf:ba:e4:35:0f:f2:b6:d2:59:
a5:0c:79:dc:56:4a:6e:82:44:9d:9d:3c:6a:91:7c:
d4:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:27:F2:FF:AF:AF:E6:CA:9D:FE:8B:1D:E3:C1:EB:22:BA:F3:E3:07
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/fify_6-v5sqd_osd48HrIrrz4wc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.80.0/20
Signature Algorithm: sha256WithRSAEncryption
9e:d2:66:44:0d:46:31:4d:3f:32:fa:45:ff:ae:81:72:cd:83:
6e:d0:b6:2e:e0:db:63:cc:ce:58:1f:89:7e:50:e7:fa:d0:0e:
71:57:a8:82:13:44:45:94:57:48:73:55:a4:83:39:f2:1e:47:
02:89:43:75:e7:93:74:cb:3f:78:16:6c:d2:44:73:6c:69:2e:
05:fb:75:69:eb:73:dd:4f:59:e0:13:a5:37:2a:46:81:22:bb:
96:cf:3b:7a:41:52:36:d4:ba:93:ad:d8:b5:eb:90:0b:b7:6f:
c2:7d:af:0f:0c:73:83:ff:5a:c4:e0:27:46:4d:1f:04:1e:c4:
46:30:be:97:25:70:ec:fb:45:2d:79:d2:fe:be:b8:1e:2c:0e:
d3:29:b3:67:ab:ef:a8:e7:ae:b9:08:b3:60:5e:df:e1:e6:05:
7f:be:e5:53:50:fe:55:28:fb:19:63:46:96:3c:d2:75:37:63:
1b:0f:41:c4:4b:d2:0e:b0:21:40:a6:ca:94:a8:a8:a5:6d:22:
ef:14:c3:9b:f8:4c:bd:19:0e:6a:c4:f1:9a:92:1e:60:00:2d:
fe:c0:c0:37:d2:d9:3f:b3:6f:47:5a:72:e7:33:9e:a0:9d:8f:
b7:8d:95:db:76:9c:94:c3:c0:5b:68:4f:39:f0:b7:fb:ab:97:
27:dc:6b:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 09:44:32 2025 by rpki-client