Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/79d746-03f9-4c71-afc7-e5d0b76de5b8/1/bS2AXyQj6T-v-BFQFVgN8omhTFI.roa
File: bS2AXyQj6T-v-BFQFVgN8omhTFI.roa (raw, json)
Hash identifier: Hlm2+aXt9COQOoJS5S5Wj7t+eBfLw0yjo9KgiG+EY2U=
Subject key identifier: 6D:2D:80:5F:24:23:E9:3F:AF:F8:11:50:15:58:0D:F2:89:A1:4C:52
Certificate issuer: /CN=fb3bad7d0685995ced35108b2e11525a7aab1418
Certificate serial: 01942144513BCED6ED5E057E667196522AD9
Authority key identifier: FB:3B:AD:7D:06:85:99:5C:ED:35:10:8B:2E:11:52:5A:7A:AB:14:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-zutfQaFmVztNRCLLhFSWnqrFBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/79d746-03f9-4c71-afc7-e5d0b76de5b8/1/bS2AXyQj6T-v-BFQFVgN8omhTFI.roa
Signing time: Wed 01 Jan 2025 09:48:32 +0000
ROA not before: Wed 01 Jan 2025 09:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208025
IP address blocks: 217.198.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/79d746-03f9-4c71-afc7-e5d0b76de5b8/1/1-zutfQaFmVztNRCLLhFSWnqrFBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/79d746-03f9-4c71-afc7-e5d0b76de5b8/1/1-zutfQaFmVztNRCLLhFSWnqrFBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-zutfQaFmVztNRCLLhFSWnqrFBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:51:3b:ce:d6:ed:5e:05:7e:66:71:96:52:2a:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb3bad7d0685995ced35108b2e11525a7aab1418
Validity
Not Before: Jan 1 09:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6d2d805f2423e93faff8115015580df289a14c52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:59:11:96:e3:d5:56:be:61:34:b6:6a:39:b8:
60:49:97:34:9a:83:c1:4c:5c:cc:a9:df:ba:5d:09:
3f:1b:8e:ae:0d:04:4c:4f:a4:0c:11:ba:91:7e:97:
90:19:38:ff:09:a2:e8:40:ed:f2:9b:13:80:30:b5:
05:ec:6e:c5:ed:f7:19:56:10:20:c2:60:3c:0a:e9:
46:8c:b1:5c:2b:37:98:1c:14:00:b6:98:d2:c4:24:
3a:11:ea:35:d6:2c:63:86:66:5c:55:55:f8:06:d8:
51:89:60:e1:b5:16:cf:23:90:e4:8a:0e:4c:5a:f1:
db:f5:a0:29:56:85:f1:d5:67:e7:fd:b9:0a:07:92:
39:60:31:f9:fb:04:79:51:87:92:d1:5a:97:6c:e8:
4f:e0:b6:53:29:20:d6:b2:9f:e9:fa:e7:f7:f3:1b:
0f:81:4b:11:1b:01:0f:7d:c5:6b:49:5e:de:7c:45:
3d:60:60:81:b3:ac:30:8c:d5:b1:00:5b:9f:74:52:
86:88:90:de:3b:35:a0:50:eb:c0:e8:f0:11:1b:7d:
fb:a8:f1:47:6b:51:af:b1:d4:a6:55:65:b2:81:e7:
73:2d:95:97:fd:62:78:20:d9:43:15:00:85:d4:af:
94:43:62:16:4b:2a:6b:bb:99:6d:1d:23:6a:00:ff:
f4:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:2D:80:5F:24:23:E9:3F:AF:F8:11:50:15:58:0D:F2:89:A1:4C:52
X509v3 Authority Key Identifier:
keyid:FB:3B:AD:7D:06:85:99:5C:ED:35:10:8B:2E:11:52:5A:7A:AB:14:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-zutfQaFmVztNRCLLhFSWnqrFBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/79d746-03f9-4c71-afc7-e5d0b76de5b8/1/bS2AXyQj6T-v-BFQFVgN8omhTFI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/79d746-03f9-4c71-afc7-e5d0b76de5b8/1/1-zutfQaFmVztNRCLLhFSWnqrFBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.198.185.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:f9:26:0a:c9:68:2f:70:ac:a1:b9:f0:01:63:46:dd:96:f3:
76:27:02:0c:02:32:3f:be:5d:24:0a:c7:26:f6:78:30:ba:61:
cd:f4:98:58:c8:fc:15:3e:4a:07:b5:fa:89:a0:f2:50:f8:d9:
32:4b:dc:ee:04:83:3f:c7:d8:44:c3:83:be:aa:fe:f1:bd:03:
84:e6:20:71:55:c9:6a:e0:05:3d:34:f1:3a:bc:34:40:3b:52:
35:b9:95:fd:b8:ac:ef:f5:e5:6a:aa:08:02:a7:7f:30:9e:49:
fe:df:85:84:d9:9a:c3:d4:8f:d8:d1:50:96:a3:e3:f0:19:37:
71:69:a5:07:96:db:0c:48:c2:d1:65:12:e5:13:77:08:40:27:
f0:b5:03:37:aa:6f:8e:73:1a:05:66:54:b4:41:d2:e3:73:7f:
e4:65:d9:d6:4d:56:f4:27:4d:2a:fe:76:19:8c:33:36:b8:d9:
67:5b:95:5b:ac:1b:d1:0b:0d:24:0a:bc:cc:95:2c:2f:39:7f:
3d:cd:59:76:e3:72:fc:2d:0e:de:05:1f:42:00:8e:3c:ec:18:
66:6e:5f:09:e1:7f:4c:37:ce:59:8d:79:d9:e6:1e:59:b7:e9:
92:8d:ef:60:8a:95:8a:34:9f:99:82:ea:a4:cd:9c:bf:45:8c:
43:e1:56:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 06:40:19 2025 by rpki-client