Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/_nLYAZC-VddX97JjR5Q6LKKqBQ4.roa
File: _nLYAZC-VddX97JjR5Q6LKKqBQ4.roa (raw, json)
Hash identifier: ndREz8aC1hd1w5pe58qePL+6kw9PyDSZ6Q1HeOlC7Rc=
Subject key identifier: FE:72:D8:01:90:BE:55:D7:57:F7:B2:63:47:94:3A:2C:A2:AA:05:0E
Certificate issuer: /CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2
Certificate serial: 01941FFA468BE0541CF7E63328AB9C3ED0DF
Authority key identifier: F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/_nLYAZC-VddX97JjR5Q6LKKqBQ4.roa
Signing time: Wed 01 Jan 2025 03:48:03 +0000
ROA not before: Wed 01 Jan 2025 03:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396356
IP address blocks: 43.229.8.0/22 maxlen: 22
185.48.52.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 15:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:46:8b:e0:54:1c:f7:e6:33:28:ab:9c:3e:d0:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2
Validity
Not Before: Jan 1 03:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fe72d80190be55d757f7b26347943a2ca2aa050e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0e:25:8f:4f:7b:42:9d:0c:d6:04:ca:62:4a:
78:81:67:ff:b3:28:8e:76:41:ce:30:2f:f1:fb:cf:
27:7a:c7:a4:0c:d4:6d:9e:e9:4d:32:d7:74:9b:d9:
c8:d3:65:80:5e:23:5a:b3:b5:eb:75:09:fb:6d:1a:
e6:1d:66:a7:61:71:d0:b2:94:7b:0f:c5:10:51:89:
1a:96:9b:51:aa:ce:59:95:96:94:25:31:28:55:34:
03:67:14:dd:15:60:e6:fc:fc:c0:20:9c:0c:36:40:
df:4e:43:6c:4e:ca:92:83:6d:1b:f9:c2:cb:f0:09:
47:53:12:34:71:6c:fa:77:7c:3f:ae:30:4b:c5:e6:
d5:13:a8:3e:5e:15:e7:02:b0:63:1a:bc:68:94:57:
24:ed:79:4e:d2:82:32:75:ba:01:71:e1:b0:32:5b:
93:e9:fb:20:a8:77:ea:fd:54:e5:da:c5:29:6b:5c:
8f:f7:6b:17:c0:5f:73:1e:2a:38:65:c6:b8:7d:0b:
38:93:a7:b2:e2:5a:3c:9c:c6:ef:1c:9e:31:35:ca:
77:f3:34:5e:d3:f9:f2:b1:23:fc:ec:5a:b5:cf:8a:
5f:a0:32:2a:c3:1f:f7:e1:cb:c4:cd:ab:37:fc:fb:
79:6a:f7:c3:64:b3:d1:1d:72:ac:6b:df:66:6d:5b:
3e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:72:D8:01:90:BE:55:D7:57:F7:B2:63:47:94:3A:2C:A2:AA:05:0E
X509v3 Authority Key Identifier:
keyid:F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/_nLYAZC-VddX97JjR5Q6LKKqBQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.229.8.0/22
185.48.52.0/22
Signature Algorithm: sha256WithRSAEncryption
c2:aa:90:5f:75:7f:9b:4b:fb:f3:14:59:b6:54:8a:d7:43:f6:
b1:1d:03:4e:f6:7e:6d:81:28:2e:fd:8d:85:30:27:99:99:c9:
fc:1b:4d:5b:66:7b:44:f3:f9:c5:04:fb:0f:14:d1:08:e2:94:
fa:f4:98:06:a1:8d:55:53:28:39:a9:7e:bc:01:68:9d:b5:3f:
8e:e0:cc:ad:b8:22:c7:0e:98:d3:96:5c:39:34:57:98:79:2f:
d0:0f:ff:f3:49:44:8e:ff:fa:1a:78:fb:66:d7:15:81:36:89:
28:3c:00:3f:ae:9d:06:c8:52:79:f3:21:29:86:0b:2d:a5:66:
ec:e5:01:73:c9:70:06:a6:8c:04:e2:17:49:9f:35:ac:f7:a4:
1f:04:d8:ec:18:4f:08:31:21:2b:90:db:0b:ef:79:e1:00:ef:
6e:3d:ed:1e:77:bb:56:5b:49:24:4b:65:d3:4d:56:30:ff:86:
8e:1e:90:0a:46:38:aa:17:26:6a:74:16:8b:20:03:e5:41:83:
4a:19:b2:e0:19:f0:a0:02:5a:4b:e9:14:d0:4d:60:08:af:97:
9d:16:ec:7c:0a:7a:a0:de:b6:50:23:fa:42:59:92:52:a5:ab:
dc:69:36:7e:c1:bb:15:fd:ec:77:f0:2c:42:f0:d7:f9:a7:ac:
dd:b7:1a:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:10:34 2025 by rpki-client