Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/FRwc3NIwLMg85xs9oKQE8y-aSsE.roa
File: FRwc3NIwLMg85xs9oKQE8y-aSsE.roa (raw, json)
Hash identifier: 4ntKtlA4N2n8X73E8ZF+yd2Me5uBBOuZ+BWHkgFL6/M=
Subject key identifier: 15:1C:1C:DC:D2:30:2C:C8:3C:E7:1B:3D:A0:A4:04:F3:2F:9A:4A:C1
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 0194282413A3795F018D11D9CD8004C1AF8A
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/FRwc3NIwLMg85xs9oKQE8y-aSsE.roa
Signing time: Thu 02 Jan 2025 17:50:40 +0000
ROA not before: Thu 02 Jan 2025 17:50:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51737
IP address blocks: 46.20.208.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:13:a3:79:5f:01:8d:11:d9:cd:80:04:c1:af:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Jan 2 17:50:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=151c1cdcd2302cc83ce71b3da0a404f32f9a4ac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:de:24:2b:4b:da:f8:a4:29:dd:76:a1:b4:93:
ce:0d:0f:d8:11:92:f4:33:7c:f9:a6:31:00:31:5a:
80:94:02:1f:a9:86:86:1e:58:c7:1f:34:c8:fb:08:
0d:a9:58:61:37:6f:1e:b5:0e:5b:34:93:30:fa:f7:
00:6a:7c:0e:05:05:1e:6e:36:75:a1:99:3c:86:9e:
43:f0:b8:de:a7:a4:bb:cf:fa:c8:61:b8:58:e8:73:
d6:be:a7:12:ad:9f:9a:5b:f8:d8:c3:83:e7:2d:22:
eb:bb:6d:a2:d8:82:92:dc:73:04:5a:5b:b9:70:84:
63:e6:02:50:2c:4b:fe:45:23:a2:df:3f:67:da:f5:
58:19:10:fb:2e:18:5d:70:64:c3:4f:5d:cd:17:3c:
4c:64:82:38:b2:56:c5:9d:28:25:74:bc:09:22:c3:
91:eb:59:b0:18:45:52:5f:ac:b0:99:9a:16:d9:06:
75:4e:22:9e:70:f1:5e:bd:d9:e1:b8:cc:1b:ab:4f:
2b:10:65:31:16:4c:7a:e8:fe:4a:1b:60:d8:e8:9a:
7f:80:e4:47:10:8e:17:74:da:c3:19:dd:24:56:b3:
1a:02:45:48:0f:e7:e5:e0:28:27:45:96:5c:2a:b2:
ce:6c:5b:93:db:6a:dc:18:09:f4:23:b6:73:29:2a:
ee:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:1C:1C:DC:D2:30:2C:C8:3C:E7:1B:3D:A0:A4:04:F3:2F:9A:4A:C1
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/FRwc3NIwLMg85xs9oKQE8y-aSsE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.20.208.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:20:a1:4f:e0:ce:d1:4e:0d:de:26:d1:c5:27:40:08:24:14:
e8:7c:06:54:e4:58:42:1d:b6:6c:34:6d:72:13:c9:9f:6a:a9:
5c:39:da:6c:95:70:22:5c:a2:af:88:a0:76:02:b7:93:8d:07:
0d:02:f4:89:a5:c4:a8:b0:ec:8b:c6:c7:81:48:7d:de:f1:76:
9d:7f:61:76:e6:c6:0f:ea:10:db:64:6e:bb:2f:51:4c:ab:92:
1b:7f:c6:97:9f:91:ba:e7:32:a7:63:ce:31:a9:35:41:d9:fc:
44:08:20:54:d4:3f:e7:65:44:ce:e6:77:47:3f:b0:97:a6:a3:
ca:9e:2d:ad:d3:48:bb:c9:3b:86:59:bb:ed:3b:84:ff:ff:9b:
df:0e:3e:c3:b8:53:f6:0a:db:a0:5f:45:e2:74:e7:97:a9:1a:
b8:24:49:a4:b5:35:a6:32:eb:c7:7c:3d:0b:c0:f2:3c:80:05:
ac:87:91:c8:d8:b7:82:e3:cb:2b:59:48:e2:23:dc:a0:63:da:
2c:a2:18:4d:d6:80:b9:94:b5:00:0c:a9:13:5a:71:bc:e9:78:
a4:2c:9b:3f:f3:e3:70:e0:88:04:e5:af:45:32:62:d6:be:c4:
ec:e5:15:86:fc:e7:7e:44:a8:de:21:b9:c5:2d:67:a6:46:d4:
ff:be:f5:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:03:46 2025 by rpki-client