Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/FrvqkSHwjbblJ9JCevEy3LmN2cA.roa
File: FrvqkSHwjbblJ9JCevEy3LmN2cA.roa (raw, json)
Hash identifier: tLNihWutttaa61WHUIyQ2PH1W0/ZUvjaDvlOqFNnZbg=
Subject key identifier: 16:BB:EA:91:21:F0:8D:B6:E5:27:D2:42:7A:F1:32:DC:B9:8D:D9:C0
Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Certificate serial: 0194228D9E10279842E312AFD6B334F9453C
Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/FrvqkSHwjbblJ9JCevEy3LmN2cA.roa
Signing time: Wed 01 Jan 2025 15:48:13 +0000
ROA not before: Wed 01 Jan 2025 15:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42193
IP address blocks: 213.14.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 02:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:9e:10:27:98:42:e3:12:af:d6:b3:34:f9:45:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Validity
Not Before: Jan 1 15:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=16bbea9121f08db6e527d2427af132dcb98dd9c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:36:0f:27:a8:59:53:08:00:59:41:ee:2b:9e:
2a:67:17:55:ff:84:0e:a4:c4:a2:d2:7f:8a:77:ec:
f3:d4:00:d7:f4:61:fc:48:95:23:c0:1d:e9:8f:89:
7b:cd:10:24:47:8b:27:22:77:b0:7b:30:d0:e4:b1:
06:30:09:c1:98:59:06:b5:3e:9d:ee:62:04:cf:a5:
32:0f:e2:4e:a6:21:1c:5b:b7:33:37:5f:10:a6:27:
74:65:ca:aa:db:b8:8d:9d:1d:e4:f3:c6:a9:07:29:
3e:66:59:73:15:3d:60:21:21:d3:26:f4:3b:12:31:
37:f3:cd:14:fb:33:09:b3:3d:b8:f1:8c:da:23:27:
31:35:da:bb:9e:a7:9e:38:54:9f:c9:5d:f5:99:ac:
a5:80:7c:88:4d:d7:e5:2f:8b:e9:61:ef:2b:fb:b8:
ad:74:3c:de:8a:30:72:fe:4d:e1:f0:bd:e0:b5:e2:
05:1f:9a:20:f1:94:12:01:28:e8:ab:a4:da:e1:c7:
78:98:e2:09:9d:6b:75:00:91:c7:eb:ed:ff:03:f2:
aa:8d:e7:da:3c:50:98:35:32:f4:fd:ae:be:e1:8a:
0f:a1:c2:e1:c1:8f:2b:07:9b:23:c8:34:20:d6:3f:
e0:7a:1b:97:2d:03:ba:2c:f9:83:59:3c:fd:c8:b2:
4e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:BB:EA:91:21:F0:8D:B6:E5:27:D2:42:7A:F1:32:DC:B9:8D:D9:C0
X509v3 Authority Key Identifier:
keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/FrvqkSHwjbblJ9JCevEy3LmN2cA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.14.241.0/24
Signature Algorithm: sha256WithRSAEncryption
44:bd:58:06:25:c3:23:3a:08:3e:62:7d:b1:79:7f:84:95:a4:
b8:4b:d2:37:29:19:23:fd:65:69:ef:b8:e6:97:32:12:a8:c9:
eb:b5:11:b0:ac:03:9a:bf:1f:4a:4a:20:e2:ba:f1:e6:a7:60:
f7:23:a3:ee:75:4d:81:66:d7:06:3a:cb:55:50:e5:dd:54:30:
95:ca:4f:f3:8c:16:7e:20:5e:ef:0f:e4:8a:dd:5d:99:5e:0f:
a3:d3:4a:b8:e1:45:37:6c:f7:72:37:9e:6f:16:c2:e7:b0:84:
71:55:a0:96:12:f7:13:a6:24:be:3e:92:5b:39:a0:2e:af:b4:
e1:6d:80:1d:d9:ae:89:b6:c1:5d:55:c1:4a:fc:98:4d:c2:e5:
ac:1f:3d:8f:7e:cc:4d:c8:86:7f:7e:dc:1b:be:90:11:36:d6:
ca:77:bd:80:e4:7c:13:dd:6f:96:5a:8d:16:51:c1:fb:03:89:
1e:45:81:0f:35:eb:c1:54:8b:8b:54:6c:2a:72:3d:27:9e:21:
f8:f1:41:be:aa:3b:a0:fc:ec:21:b2:26:9e:92:6d:73:cc:1e:
e3:0d:31:9a:eb:ba:57:c8:6b:26:13:c4:75:58:9f:ad:1e:af:
45:2d:b0:a5:a7:1d:db:b8:7f:ef:06:c5:9c:c5:cf:0c:c4:93:
83:0a:dc:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:12:53 2025 by rpki-client