Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/fczn2jh4ajq3X4s1Mo_fsWXXm34.roa
File: fczn2jh4ajq3X4s1Mo_fsWXXm34.roa (raw, json)
Hash identifier: J5rtauXxpoCURr4ah9LdMnYQCXOtCScxCM8XbJ0ALGA=
Subject key identifier: 7D:CC:E7:DA:38:78:6A:3A:B7:5F:8B:35:32:8F:DF:B1:65:D7:9B:7E
Certificate issuer: /CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Certificate serial: 019420D6395C0F8385435FD639B096501324
Authority key identifier: 8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/fczn2jh4ajq3X4s1Mo_fsWXXm34.roa
Signing time: Wed 01 Jan 2025 07:48:17 +0000
ROA not before: Wed 01 Jan 2025 07:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199740
IP address blocks: 212.52.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.mft
rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:39:5c:0f:83:85:43:5f:d6:39:b0:96:50:13:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Validity
Not Before: Jan 1 07:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7dcce7da38786a3ab75f8b35328fdfb165d79b7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3d:d4:a5:86:f8:01:1a:7c:d5:2d:c9:73:f5:
2f:bd:eb:40:43:f4:6b:ed:2c:7e:2d:2a:99:f8:79:
92:bc:bd:88:d6:44:b5:83:e5:bc:8d:27:7f:c4:7e:
31:31:f0:0d:97:5a:46:4b:3b:04:3a:51:91:68:8a:
55:32:15:d9:21:43:17:26:5a:a4:21:7a:e6:c1:27:
ec:47:21:b7:d3:9c:83:61:e4:67:62:62:c1:c1:cd:
a8:02:6c:5c:e4:37:0e:a1:00:82:3a:62:a4:96:66:
ea:f5:d5:be:0f:94:e5:b6:15:a5:57:37:58:e9:3c:
35:4e:21:eb:67:00:43:3a:9d:d5:1f:a4:b8:53:fb:
e9:e8:40:ba:fd:fa:5d:65:25:6c:fd:19:7f:f8:c1:
6f:5d:fd:86:e8:f3:d8:50:f1:c5:ae:35:d6:95:09:
f8:13:e4:97:2b:9f:88:69:03:31:d5:56:65:d0:cb:
c8:b3:ae:02:60:51:7b:a1:6c:60:22:23:91:ce:ee:
14:6b:57:98:32:a7:0b:d1:ca:c0:a1:b4:bc:bf:3f:
80:65:0e:d2:54:4a:84:06:35:9e:a4:95:ea:c3:34:
fe:01:94:6b:9d:40:09:32:da:53:d8:b1:ea:bb:23:
ba:b9:e9:a6:cd:17:71:4c:81:7d:95:b3:80:f9:e0:
65:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:CC:E7:DA:38:78:6A:3A:B7:5F:8B:35:32:8F:DF:B1:65:D7:9B:7E
X509v3 Authority Key Identifier:
keyid:8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/fczn2jh4ajq3X4s1Mo_fsWXXm34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.52.12.0/24
Signature Algorithm: sha256WithRSAEncryption
11:ec:07:d3:21:13:fb:a2:02:d5:5f:76:d3:00:8c:70:b4:12:
27:35:14:d4:21:6d:64:18:f2:17:f7:f4:6c:3f:04:bb:9c:5d:
99:eb:f2:11:eb:05:f3:d2:71:d1:6f:4f:52:62:12:4b:5e:cb:
83:f3:17:4e:b7:df:31:4f:f8:fc:40:22:f6:e0:47:b1:13:9e:
24:6f:79:31:6d:0c:bc:33:04:cc:db:44:62:e5:da:fb:e8:8a:
4b:4d:96:19:ad:db:87:1f:16:d9:f3:27:d1:a7:9a:ba:51:e6:
ec:59:b2:9c:29:b9:e1:e9:00:0d:92:80:9f:f4:df:6a:55:83:
24:47:1b:4c:63:16:fb:e4:a7:26:3c:a1:04:85:59:a3:1f:58:
eb:e8:06:24:d8:9d:3b:3a:8a:a6:8c:46:63:65:58:73:08:a4:
1b:50:87:f3:73:5e:27:11:e8:ca:c1:d1:e0:a9:bf:13:f7:1c:
e2:a9:f8:fe:d7:71:63:07:88:8a:f0:d5:0c:75:a5:32:4e:57:
00:46:38:0d:d9:14:c4:f8:1e:e3:5a:a6:4f:87:4e:67:53:da:
b0:41:f3:dc:8f:98:21:a7:97:4a:38:f9:31:66:29:15:f7:a2:
7d:a4:6f:f1:57:b3:54:b6:ff:ac:3a:a5:5a:d1:07:1c:c0:85:
03:7d:a9:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 06:45:40 2025 by rpki-client