Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/FePFuzEqB9f7ilajywdQpEPMzKo.roa
File: FePFuzEqB9f7ilajywdQpEPMzKo.roa (raw, json)
Hash identifier: I5eMCXbNJhaHcUecOqZBTRMoNOXYmdT0pvUT3eEKqpo=
Subject key identifier: 15:E3:C5:BB:31:2A:07:D7:FB:8A:56:A3:CB:07:50:A4:43:CC:CC:AA
Certificate issuer: /CN=679252b9e21df8176cc538027895f7f4585666ab
Certificate serial: 019425FC4B6704280963D204AB072F49550B
Authority key identifier: 67:92:52:B9:E2:1D:F8:17:6C:C5:38:02:78:95:F7:F4:58:56:66:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5JSueId-BdsxTgCeJX39FhWZqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/FePFuzEqB9f7ilajywdQpEPMzKo.roa
Signing time: Thu 02 Jan 2025 07:47:58 +0000
ROA not before: Thu 02 Jan 2025 07:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197495
IP address blocks: 91.198.169.0/24 maxlen: 24
195.206.121.0/24 maxlen: 24
2001:67c:28cc::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z5JSueId-BdsxTgCeJX39FhWZqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:4b:67:04:28:09:63:d2:04:ab:07:2f:49:55:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=679252b9e21df8176cc538027895f7f4585666ab
Validity
Not Before: Jan 2 07:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=15e3c5bb312a07d7fb8a56a3cb0750a443ccccaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ed:1f:c9:ba:97:c7:b1:6e:7d:e8:5a:e7:07:
f6:df:f4:1e:79:1c:2a:62:c1:5d:0e:63:7a:f0:84:
22:a9:f9:c3:8b:8b:49:5c:b1:ed:8a:96:74:a0:93:
0f:e3:4b:78:2e:41:47:2a:9e:f5:3c:6a:62:de:ee:
5a:68:1b:0b:e6:e7:f0:c7:3b:bd:de:8e:04:79:d9:
84:ce:d6:fb:cb:2c:fc:d3:55:fa:ef:c2:f6:69:0f:
12:31:79:56:e6:02:da:c6:ae:27:9e:fe:1c:a0:d5:
09:2c:14:40:d5:3d:c2:4f:bc:19:13:c5:9e:6b:2e:
c0:17:c9:06:02:3e:8b:6a:ed:74:18:b0:6c:88:ef:
a9:96:2c:3e:3d:fe:14:92:31:7f:be:01:10:13:22:
bc:3d:c0:fc:d1:3a:92:32:a8:c8:60:aa:b5:ce:7f:
6b:21:65:1b:e1:55:c5:1c:c1:e6:c5:0c:d1:a4:eb:
27:3e:0c:3e:11:28:4b:b0:02:6a:94:73:3c:a2:a4:
67:e3:64:64:0d:3f:96:6f:e1:60:14:07:08:f6:e8:
f9:ab:66:5c:1d:87:2c:45:8a:86:23:0b:a7:e2:02:
c7:7b:c0:b6:70:9a:5b:e0:13:7e:90:05:07:78:f2:
64:d5:ee:55:e1:14:75:88:5a:16:20:29:96:ef:1a:
63:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:E3:C5:BB:31:2A:07:D7:FB:8A:56:A3:CB:07:50:A4:43:CC:CC:AA
X509v3 Authority Key Identifier:
keyid:67:92:52:B9:E2:1D:F8:17:6C:C5:38:02:78:95:F7:F4:58:56:66:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5JSueId-BdsxTgCeJX39FhWZqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/FePFuzEqB9f7ilajywdQpEPMzKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.169.0/24
195.206.121.0/24
IPv6:
2001:67c:28cc::/48
Signature Algorithm: sha256WithRSAEncryption
8d:0e:97:6b:0f:54:a3:50:43:0f:92:e1:a7:84:9e:46:50:ce:
df:c2:8e:85:76:18:57:a4:12:30:11:d6:98:9d:04:9f:05:ea:
92:12:8c:e6:ea:c4:93:f1:c9:09:b2:f4:30:33:61:14:1d:c7:
ba:5b:d0:c4:a1:ef:7a:42:9b:2f:b1:6c:d8:6e:1e:2e:41:c4:
c7:0a:23:36:f3:18:20:37:0b:ff:f9:90:0d:9c:6a:70:2a:fd:
c9:00:c9:1f:99:59:02:88:a9:c8:ad:7a:15:f3:9f:3c:e2:7e:
40:a3:17:3d:fb:9e:26:7d:b1:fb:21:06:91:a4:f5:ad:bf:65:
24:df:b9:81:b3:cf:9f:95:4c:e7:e9:62:90:8c:b5:58:fe:de:
f8:29:2d:79:2f:96:5b:0b:37:b5:72:a7:c1:33:fc:fe:f4:df:
7a:5d:1c:a6:0a:69:bf:0c:ae:75:e2:60:15:03:88:75:ad:ba:
5f:56:c3:25:ae:69:7c:95:38:75:24:93:4c:07:2b:86:8b:d9:
06:d1:5c:93:29:bd:cd:bc:32:f9:c5:ca:53:3e:4a:34:3d:16:
49:1b:51:65:b1:dd:7c:c6:43:12:f4:01:4c:c6:1d:8e:99:c7:
53:20:34:26:3d:39:2a:4b:5d:92:4c:09:88:6a:b8:a3:74:c9:
f8:f7:65:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:58:49 2025 by rpki-client