Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/927638-fd47-4e56-bb9e-d7920ae44920/1/beiUjzIIFq8lUZEsjU5aHKjNnJA.roa
File: beiUjzIIFq8lUZEsjU5aHKjNnJA.roa (raw, json)
Hash identifier: mFm580c3qaH3SmCWZbvTiuZ0e3oedku3mVQP4lTuq5I=
Subject key identifier: 6D:E8:94:8F:32:08:16:AF:25:51:91:2C:8D:4E:5A:1C:A8:CD:9C:90
Certificate issuer: /CN=fe7ce8fbfb8479cfb976b443cc3c7ce2f703ab7e
Certificate serial: 01942748421E82E25F950FB9CCF4AD824981
Authority key identifier: FE:7C:E8:FB:FB:84:79:CF:B9:76:B4:43:CC:3C:7C:E2:F7:03:AB:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_nzo-_uEec-5drRDzDx84vcDq34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/927638-fd47-4e56-bb9e-d7920ae44920/1/beiUjzIIFq8lUZEsjU5aHKjNnJA.roa
Signing time: Thu 02 Jan 2025 13:50:34 +0000
ROA not before: Thu 02 Jan 2025 13:50:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3303
IP address blocks: 193.247.96.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/927638-fd47-4e56-bb9e-d7920ae44920/1/_nzo-_uEec-5drRDzDx84vcDq34.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/927638-fd47-4e56-bb9e-d7920ae44920/1/_nzo-_uEec-5drRDzDx84vcDq34.mft
rsync://rpki.ripe.net/repository/DEFAULT/_nzo-_uEec-5drRDzDx84vcDq34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:42:1e:82:e2:5f:95:0f:b9:cc:f4:ad:82:49:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe7ce8fbfb8479cfb976b443cc3c7ce2f703ab7e
Validity
Not Before: Jan 2 13:50:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6de8948f320816af2551912c8d4e5a1ca8cd9c90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:91:bd:4f:df:7e:61:32:14:09:bb:2a:70:72:
8f:b1:65:08:c5:ab:cc:cd:de:4a:28:1f:d6:83:50:
49:db:e9:82:a8:bf:1a:70:64:fd:42:42:42:66:c4:
16:06:85:c7:64:7f:1a:44:37:54:cb:29:cc:76:71:
43:e1:bf:41:68:40:ef:ef:00:2e:51:cc:a2:1d:9c:
fe:09:14:9a:35:10:a9:30:e9:9a:14:de:09:7c:52:
6b:c2:84:c9:c7:42:ed:0e:19:bc:36:fe:e6:17:66:
7e:2e:14:67:d8:ac:73:c1:d0:75:33:4e:3a:b5:bb:
b3:80:a4:6b:b6:85:32:14:fb:04:27:64:44:16:5d:
90:7d:e7:cc:7d:93:81:5c:37:73:12:e1:5d:e8:c7:
96:68:73:14:02:df:46:54:77:be:9b:5d:c7:3f:04:
91:0c:42:1d:e0:40:81:64:9d:dd:eb:6e:0a:4e:4e:
17:fc:9b:6f:77:e0:12:92:9e:dc:f2:75:4f:90:bc:
77:1e:b9:04:12:24:a5:2d:7c:08:80:6d:67:5f:a1:
6b:0c:5f:c2:af:58:97:2b:a6:96:3a:5b:13:c0:ab:
5e:2c:90:72:e0:87:8d:f9:b3:6f:ea:0c:d0:2f:09:
cc:f5:c1:87:0e:43:7d:db:24:f6:4d:3e:af:33:b9:
f5:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:E8:94:8F:32:08:16:AF:25:51:91:2C:8D:4E:5A:1C:A8:CD:9C:90
X509v3 Authority Key Identifier:
keyid:FE:7C:E8:FB:FB:84:79:CF:B9:76:B4:43:CC:3C:7C:E2:F7:03:AB:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_nzo-_uEec-5drRDzDx84vcDq34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/927638-fd47-4e56-bb9e-d7920ae44920/1/beiUjzIIFq8lUZEsjU5aHKjNnJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/927638-fd47-4e56-bb9e-d7920ae44920/1/_nzo-_uEec-5drRDzDx84vcDq34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.247.96.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:98:9c:7e:13:7a:fc:19:83:fa:e1:56:3a:13:a6:ec:7b:47:
24:4f:45:9b:3b:52:49:77:e8:35:9e:c8:92:d9:85:99:b9:66:
3c:b4:93:90:cc:e9:ee:84:e5:d5:87:16:82:53:44:a5:f4:c5:
40:06:1a:a3:1e:d7:b1:45:6f:1a:3c:44:d7:8f:a3:4c:98:1c:
94:26:da:e5:e2:23:41:d9:2a:98:94:f9:3c:de:0c:f2:b0:85:
ab:3a:f7:98:33:8e:52:aa:90:56:df:c5:de:fe:17:d5:f0:8c:
cd:93:29:af:ec:4d:d9:5a:21:f0:b3:d1:f6:4b:ed:41:54:45:
28:d7:5e:89:ae:b7:23:80:54:38:5c:bd:42:f7:81:09:68:f0:
e7:52:65:28:c2:83:51:0c:b5:35:9b:b0:e8:d3:4b:21:47:f2:
17:f5:98:bb:cf:fd:45:ea:49:d5:b4:92:8f:68:d7:9a:03:ab:
2f:24:36:df:85:69:66:d6:c5:fd:cc:92:34:f3:d3:c5:9d:bc:
70:72:85:67:3e:d4:de:91:96:61:cd:e2:52:b3:27:64:d1:a3:
18:bf:10:82:e2:f6:71:52:7c:e3:5c:de:4d:49:e3:80:a5:c0:
40:69:35:c9:0c:17:38:3a:84:93:c2:42:e8:bf:f8:00:44:d7:
a4:1e:61:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:32:08 2025 by rpki-client