Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/97e4e5-0247-46ba-83ca-3268ae9096dc/1/FGOsY9-HqfDhV_eYPJumTPv7mbs.roa
File: FGOsY9-HqfDhV_eYPJumTPv7mbs.roa (raw, json)
Hash identifier: c+fUr824m306Z/PBp0f+wo9t+5bwqZzfepc/d/UUTQc=
Subject key identifier: 14:63:AC:63:DF:87:A9:F0:E1:57:F7:98:3C:9B:A6:4C:FB:FB:99:BB
Certificate issuer: /CN=c7f6ad83f25c2886a25857fb515d4559527c46f7
Certificate serial: 01942444DCD34F3315D94BF61AF6406503A3
Authority key identifier: C7:F6:AD:83:F2:5C:28:86:A2:58:57:FB:51:5D:45:59:52:7C:46:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/97e4e5-0247-46ba-83ca-3268ae9096dc/1/FGOsY9-HqfDhV_eYPJumTPv7mbs.roa
Signing time: Wed 01 Jan 2025 23:48:00 +0000
ROA not before: Wed 01 Jan 2025 23:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47207
IP address blocks: 93.157.0.0/21 maxlen: 24
195.5.163.0/24 maxlen: 24
2001:67c:54::/48 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/97e4e5-0247-46ba-83ca-3268ae9096dc/1/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/97e4e5-0247-46ba-83ca-3268ae9096dc/1/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 05:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:dc:d3:4f:33:15:d9:4b:f6:1a:f6:40:65:03:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7f6ad83f25c2886a25857fb515d4559527c46f7
Validity
Not Before: Jan 1 23:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1463ac63df87a9f0e157f7983c9ba64cfbfb99bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:dd:bf:4e:fb:15:63:d8:f7:81:02:6a:10:8d:
b4:f4:9c:f8:bf:d9:56:ca:7f:4c:18:4b:97:6c:3e:
59:3e:87:59:7c:cf:e0:88:16:a8:44:11:4b:8b:70:
0b:9a:30:8d:da:fa:08:43:80:cc:21:c5:8d:49:63:
8a:fe:d7:67:71:7b:bb:80:4d:1c:b5:25:ba:20:6f:
c1:dc:be:50:65:57:96:dd:38:d8:c2:cb:02:55:31:
d6:70:20:46:6f:3a:dd:d5:0c:ae:75:a0:81:41:a4:
1f:4c:77:07:b8:0e:94:d1:e5:e8:62:7f:63:28:49:
64:69:93:09:7d:e1:0d:25:51:5b:43:23:a5:5e:46:
b6:91:69:eb:17:63:88:78:89:43:0d:fa:40:77:3b:
ed:7a:4d:0d:fe:19:ab:a0:a2:63:ae:e6:be:47:ae:
a5:02:30:b6:bf:1a:24:99:cb:a5:8f:aa:02:e5:cb:
b9:40:fe:ba:25:ef:1a:65:f0:f0:4f:84:d4:c3:df:
4c:52:14:7b:3c:26:97:4b:d2:e5:32:fa:54:82:d5:
c5:b8:34:4d:7c:a6:9c:98:6c:e9:b0:e4:42:df:62:
48:e4:aa:5f:a6:b6:0d:b4:17:a7:63:7c:8a:34:ca:
b2:22:c6:29:75:41:c5:6e:15:89:aa:aa:70:6a:4c:
61:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:63:AC:63:DF:87:A9:F0:E1:57:F7:98:3C:9B:A6:4C:FB:FB:99:BB
X509v3 Authority Key Identifier:
keyid:C7:F6:AD:83:F2:5C:28:86:A2:58:57:FB:51:5D:45:59:52:7C:46:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/97e4e5-0247-46ba-83ca-3268ae9096dc/1/FGOsY9-HqfDhV_eYPJumTPv7mbs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/97e4e5-0247-46ba-83ca-3268ae9096dc/1/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.157.0.0/21
195.5.163.0/24
IPv6:
2001:67c:54::/48
Signature Algorithm: sha256WithRSAEncryption
54:43:66:1e:15:63:99:f7:2a:07:90:da:33:46:df:d1:4a:b0:
c1:9a:77:b1:a2:e2:9f:11:77:3a:45:e8:52:bd:a4:fb:95:23:
93:73:0a:6f:42:a7:c8:8d:86:bd:fd:49:49:48:a8:5b:ba:08:
0a:a5:7e:d0:4e:64:c0:b1:d4:17:37:3a:22:f4:f4:6e:12:05:
30:ef:1f:2c:a4:03:88:71:26:ef:c4:5e:11:f2:a7:58:4d:9f:
9d:2a:fb:e9:89:b1:59:d1:2e:1b:1b:f1:1e:fc:35:10:3d:d6:
80:05:44:59:83:03:d6:34:c2:fc:59:2a:34:c6:ff:44:92:d4:
5c:35:dc:f5:ca:75:a6:38:56:1d:11:45:a3:d2:66:c2:13:26:
7e:46:95:1d:7c:ff:94:56:d7:37:22:fa:fb:73:d0:82:85:67:
a6:e9:f5:3c:32:49:ec:85:e8:1a:5d:b5:1a:b1:11:d3:4e:84:
db:03:60:38:02:40:79:19:06:98:4a:f6:1e:2d:61:02:44:3f:
22:e5:73:ff:0f:71:4e:8d:0d:63:ec:56:98:e5:d5:8b:3e:38:
f2:b3:58:1d:7f:1e:27:bb:00:22:7e:45:19:ac:be:9a:97:5d:
27:3a:ad:ae:23:1c:fd:90:4d:ad:b1:2e:06:2c:ac:37:83:99:
74:4e:6c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 16:27:31 2025 by rpki-client