Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/FrU1Oox2_na0t8PHzgp-6KSwiHM.roa
File: FrU1Oox2_na0t8PHzgp-6KSwiHM.roa (raw, json)
Hash identifier: t852FrgSIP4XpcduveQ1IN2NEYbV3Op3/6ajF011XuA=
Subject key identifier: 16:B5:35:3A:8C:76:FE:76:B4:B7:C3:C7:CE:0A:7E:E8:A4:B0:88:73
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 019425FC703A9592B72B5A87B2AF948B5689
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/FrU1Oox2_na0t8PHzgp-6KSwiHM.roa
Signing time: Thu 02 Jan 2025 07:48:08 +0000
ROA not before: Thu 02 Jan 2025 07:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30860
IP address blocks: 82.115.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:70:3a:95:92:b7:2b:5a:87:b2:af:94:8b:56:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jan 2 07:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=16b5353a8c76fe76b4b7c3c7ce0a7ee8a4b08873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0f:d2:20:90:39:2c:46:18:eb:8b:49:b3:e3:
af:cf:2a:79:e5:6c:53:e9:95:fd:72:d7:ee:9b:bb:
e3:59:f7:3e:19:99:77:80:f7:3b:1c:9d:a1:c3:6e:
6c:5e:2e:43:3c:7c:b3:6a:92:34:25:3f:86:3e:63:
3d:48:7c:97:db:5e:4f:27:ab:5d:62:8f:9d:20:56:
cd:69:ee:c9:2f:b5:c9:2f:87:35:cd:e3:65:86:01:
30:4a:d6:e0:33:6e:5e:e0:e7:0f:5d:e5:8f:79:b1:
40:be:73:ec:8a:af:f3:72:18:3f:ca:39:16:4e:25:
ef:c1:d2:02:fe:49:14:25:d9:f7:d0:ff:e5:19:20:
4a:01:6c:50:7a:f4:86:65:09:c9:2e:f4:64:6c:ae:
98:56:39:8d:db:75:81:ba:e6:6a:34:33:6b:a7:6b:
66:76:92:fe:1c:bd:77:5f:9e:2d:d6:f0:df:e8:2f:
7b:1d:17:11:80:18:3d:8a:6e:3b:69:58:eb:12:fe:
a4:c3:85:a9:39:77:5d:96:97:7d:56:47:85:7d:55:
db:e6:7b:55:c5:ed:04:a8:a8:28:2f:cb:ab:48:61:
01:1e:43:b2:31:ec:41:12:07:b5:b6:f2:b6:55:da:
80:1e:3b:d5:59:0c:af:3e:9e:32:32:83:79:09:44:
49:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:B5:35:3A:8C:76:FE:76:B4:B7:C3:C7:CE:0A:7E:E8:A4:B0:88:73
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/FrU1Oox2_na0t8PHzgp-6KSwiHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.0.0/24
Signature Algorithm: sha256WithRSAEncryption
02:9f:4b:79:a2:f7:df:a4:52:c2:76:16:18:9c:9c:d5:ad:c2:
14:92:56:90:47:68:fc:a2:96:24:58:e5:08:eb:b4:d6:68:3c:
e8:0c:b5:63:f3:14:48:2e:61:81:87:f5:ea:fb:98:41:31:8a:
3a:c5:31:3e:fe:25:07:f4:06:70:17:16:85:73:6c:f7:66:ed:
03:53:ef:3b:da:85:aa:70:bb:f9:35:77:de:18:93:b8:d2:54:
c3:49:7a:90:fc:b3:3e:02:02:91:47:a5:0f:f0:46:e9:ef:a3:
f0:1a:ff:0a:69:e8:48:39:7a:77:ed:a2:55:8d:e0:7f:66:17:
6c:f4:9a:63:74:53:b2:14:89:12:00:2b:d5:08:a7:1a:1e:fd:
e1:e3:0f:36:26:15:2b:20:3a:0e:0e:b9:a1:69:30:ef:43:fa:
b8:94:31:67:83:cb:08:92:e5:9e:e9:b4:9c:2c:41:9f:2d:5e:
c5:eb:d9:dc:78:e9:59:fc:63:c3:54:9d:e1:e3:a5:75:a2:8f:
f9:cf:1a:8c:84:55:ac:23:b9:f3:61:ac:bf:94:f4:4e:25:33:
9a:31:2e:b1:0b:b5:d3:3b:7d:54:ae:e4:9c:84:ed:66:41:6e:
06:4c:0b:f9:74:84:08:d3:42:f0:db:d1:06:a7:fc:7c:b9:0d:
54:07:2d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:47:59 2025 by rpki-client