Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/f6p1K4No02fZm1LJsicjzEU3rAw.roa
File: f6p1K4No02fZm1LJsicjzEU3rAw.roa (raw, json)
Hash identifier: 5eQrDQpwdWjUYiyOBrTFE+NwhOsR1IFuyzPPazmdl4c=
Subject key identifier: 7F:AA:75:2B:83:68:D3:67:D9:9B:52:C9:B2:27:23:CC:45:37:AC:0C
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0194ACE4DB42C9C5BF0631FA25FF293264B3
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/f6p1K4No02fZm1LJsicjzEU3rAw.roa
Signing time: Tue 28 Jan 2025 12:31:06 +0000
ROA not before: Tue 28 Jan 2025 12:31:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203647
IP address blocks: 194.135.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Mar 2025 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ac:e4:db:42:c9:c5:bf:06:31:fa:25:ff:29:32:64:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 28 12:31:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7faa752b8368d367d99b52c9b22723cc4537ac0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:dc:af:13:40:9a:f2:13:d6:4f:25:80:20:83:
ee:8e:57:d0:c2:b0:52:f7:b8:a5:c4:b2:11:ad:aa:
5d:92:f9:e6:e2:2e:9e:8f:a5:5f:16:c3:a0:94:92:
12:15:f4:c7:cc:ee:bb:05:5b:2a:c5:84:f6:cd:45:
b4:5a:f8:fc:66:02:13:75:88:cd:8e:2d:bc:5e:dc:
2b:ed:0b:ba:29:85:60:ec:9f:8f:6a:53:59:53:d9:
7f:7e:f3:69:85:03:95:79:f9:54:a7:42:46:95:23:
d4:cb:85:c1:e9:18:7e:eb:cb:b9:ce:df:2f:4a:bb:
02:01:bb:c0:24:4f:d1:c2:07:7b:47:f4:db:b5:98:
82:e5:24:4b:40:2a:4a:58:88:6c:f8:55:56:c5:85:
9a:a7:f4:5c:43:2b:73:73:ad:0d:20:a3:82:60:9d:
4b:75:f4:6a:a4:7f:c4:45:06:c5:9c:23:aa:62:c8:
8b:1b:d5:74:a1:ed:5a:cd:88:7c:ed:a2:f7:41:17:
32:c0:34:94:4f:35:f4:27:0c:d5:32:0c:e9:c0:e5:
95:4b:1a:61:65:ea:f9:a9:e2:39:4e:a7:30:c7:9b:
b3:e3:e6:3f:35:9e:4f:08:b1:41:84:45:6a:03:4a:
cb:f1:27:4b:bb:0d:1d:bf:65:12:a1:41:32:ac:12:
04:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:AA:75:2B:83:68:D3:67:D9:9B:52:C9:B2:27:23:CC:45:37:AC:0C
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/f6p1K4No02fZm1LJsicjzEU3rAw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.135.119.0/24
Signature Algorithm: sha256WithRSAEncryption
43:1a:23:ba:c0:58:ab:1b:c9:6e:99:41:26:76:5c:a3:83:3b:
81:77:92:67:7c:6c:0e:ed:40:d3:6b:43:d0:30:7f:4a:8f:b8:
98:99:f4:1a:07:1a:50:1b:6d:f9:d8:34:fb:99:c6:f6:1c:6d:
52:2f:5b:2a:5f:76:5c:df:7f:4e:7c:24:2f:7c:2c:f5:1b:cd:
3c:5e:21:d4:3b:55:d7:c7:dc:c1:f2:6e:a9:b9:33:b6:72:66:
6a:5d:af:11:43:92:35:27:d4:4b:75:3f:00:49:4c:eb:2e:7d:
2b:c1:a4:4f:1e:b6:02:87:41:08:ba:29:7b:d9:88:ed:60:71:
98:fc:cf:12:49:e4:97:92:4d:c9:eb:8f:b7:48:cd:10:56:38:
0e:39:64:b8:99:35:44:76:47:44:9b:c7:48:4c:d9:9a:d5:c9:
62:bc:93:e7:fd:fa:71:c5:6e:92:dc:07:58:5a:1e:3f:47:a4:
6b:6a:38:3f:d7:e6:c9:9a:e4:2b:37:cc:66:b1:76:a0:12:e1:
bd:d0:41:88:6f:0a:85:70:33:9e:13:8d:8d:3e:bd:2f:ad:4b:
bc:24:43:fb:4f:56:b2:68:68:de:33:a9:ab:84:b6:10:8c:df:
50:8f:1a:1c:90:82:69:3f:eb:45:ca:4b:de:c2:bd:d5:16:54:
23:89:3a:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:41:19 2025 by rpki-client