Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/5f5589-4c32-493f-924e-bae7aa0a18a0/1/1-7k1BSVErLFvFpR9s4khkCRgcx8.roa
File: 1-7k1BSVErLFvFpR9s4khkCRgcx8.roa (raw, json)
Hash identifier: OjA0u5BcNw+jfDFu4scr2j7odbJKWBNkQN28Ky+RjrQ=
Subject key identifier: FB:B9:35:05:25:44:AC:B1:6F:16:94:7D:B3:89:21:90:24:60:73:1F
Certificate issuer: /CN=1716ebd40a744a0c84f2535457047808ad2f17c4
Certificate serial: 019421B208693D640A6E6B1794B33D0C6EF0
Authority key identifier: 17:16:EB:D4:0A:74:4A:0C:84:F2:53:54:57:04:78:08:AD:2F:17:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/5f5589-4c32-493f-924e-bae7aa0a18a0/1/1-7k1BSVErLFvFpR9s4khkCRgcx8.roa
Signing time: Wed 01 Jan 2025 11:48:23 +0000
ROA not before: Wed 01 Jan 2025 11:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61003
IP address blocks: 193.108.116.0/24 maxlen: 24
193.108.117.0/24 maxlen: 24
193.108.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/5f5589-4c32-493f-924e-bae7aa0a18a0/1/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/5f5589-4c32-493f-924e-bae7aa0a18a0/1/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 22:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:08:69:3d:64:0a:6e:6b:17:94:b3:3d:0c:6e:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1716ebd40a744a0c84f2535457047808ad2f17c4
Validity
Not Before: Jan 1 11:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fbb935052544acb16f16947db38921902460731f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:2b:cc:57:3e:38:79:e1:38:73:24:fd:4c:bd:
32:99:a5:e4:16:ad:70:34:48:d9:d7:0f:f8:ae:30:
c7:fd:5e:f7:73:d2:a1:12:31:60:4d:f5:61:4b:a0:
01:ec:da:85:bc:2b:b2:79:36:be:b6:ff:ce:ae:bc:
86:46:2e:8f:2e:43:ba:cf:c9:3a:5e:3f:84:54:32:
38:a1:c0:74:43:1e:d1:39:77:95:7e:4e:02:e9:89:
20:d7:94:cd:7b:83:05:36:7f:94:19:27:eb:f7:98:
fe:a7:53:78:42:ad:50:45:89:f9:70:02:61:b9:51:
c1:eb:2d:6a:68:d7:ab:ff:16:6e:a1:29:f7:38:78:
ce:78:61:80:5e:aa:3e:85:47:96:9f:92:0f:3c:87:
f1:ce:b2:dd:14:e1:e5:d2:7b:cd:34:7d:16:d6:87:
5a:3f:7a:19:1a:25:c9:bb:64:e3:17:d6:a1:ff:ae:
7b:0e:80:13:ca:90:1e:0a:d6:46:c9:f1:16:62:57:
3e:65:8e:3f:89:50:cd:8e:c7:01:bf:67:52:e3:49:
2c:5c:be:70:bb:77:d1:a0:27:ee:a8:79:40:64:83:
ab:31:64:bc:0e:71:0c:c9:00:5e:9f:54:76:45:03:
a8:fd:a6:e7:de:46:2f:57:e1:19:e4:00:49:88:26:
04:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:B9:35:05:25:44:AC:B1:6F:16:94:7D:B3:89:21:90:24:60:73:1F
X509v3 Authority Key Identifier:
keyid:17:16:EB:D4:0A:74:4A:0C:84:F2:53:54:57:04:78:08:AD:2F:17:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5f5589-4c32-493f-924e-bae7aa0a18a0/1/1-7k1BSVErLFvFpR9s4khkCRgcx8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5f5589-4c32-493f-924e-bae7aa0a18a0/1/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.108.116.0-193.108.118.255
Signature Algorithm: sha256WithRSAEncryption
80:9c:2e:c2:49:9a:3c:54:88:9b:7c:00:ec:b8:35:91:44:ee:
3d:f8:f9:1e:5c:b3:d9:03:78:68:90:c1:10:23:86:05:14:9d:
b5:2c:19:ac:0c:f3:09:e2:81:60:28:f5:b2:9b:f9:2b:7e:6d:
bd:a3:39:ea:7c:37:93:1c:f5:e8:be:fa:5a:ff:f5:b5:59:55:
d4:21:5f:d4:da:4d:cf:11:31:b3:ca:b9:f7:0b:bd:47:cf:60:
ed:11:26:e5:76:a2:d8:54:1c:4a:63:01:c3:e5:ad:11:f3:9b:
dd:6e:35:4e:fb:30:36:56:fa:da:4f:e1:bf:ae:a7:12:9b:24:
aa:f0:b7:ef:1d:d0:36:39:d5:fa:68:25:34:45:9c:f2:20:97:
df:77:c5:48:f3:45:68:d0:a5:68:33:2e:13:35:64:91:35:d4:
69:3b:5f:c8:b7:72:6b:68:64:47:0b:af:f1:c6:f2:fa:86:a6:
90:78:b9:94:a1:61:c0:bd:e7:90:38:a9:10:90:be:ff:3b:88:
c6:13:b2:16:8e:d0:3a:38:cc:d1:99:88:ea:f5:86:66:fb:95:
bb:d8:1a:dc:d2:fe:eb:c3:c6:91:00:aa:d6:b0:68:3c:6c:2e:
e3:8d:93:f1:ef:ab:6b:11:d2:c5:80:6c:9e:51:d4:5b:f5:10:
37:84:a0:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 05:40:27 2025 by rpki-client