Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/F0jtKGP40uC6UeGFBvx9vjMBKeg.roa
File: F0jtKGP40uC6UeGFBvx9vjMBKeg.roa (raw, json)
Hash identifier: /o36By5Q83qZbeXySOjiZ7fpjLFdoyPEIY6paV+aTiU=
Subject key identifier: 17:48:ED:28:63:F8:D2:E0:BA:51:E1:85:06:FC:7D:BE:33:01:29:E8
Certificate issuer: /CN=cc46bfff8b90e3748555ba1447fd4edecc340a13
Certificate serial: 0194258F5997915FFF60715C572F50818032
Authority key identifier: CC:46:BF:FF:8B:90:E3:74:85:55:BA:14:47:FD:4E:DE:CC:34:0A:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zEa__4uQ43SFVboUR_1O3sw0ChM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/F0jtKGP40uC6UeGFBvx9vjMBKeg.roa
Signing time: Thu 02 Jan 2025 05:48:59 +0000
ROA not before: Thu 02 Jan 2025 05:48:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12586
IP address blocks: 195.162.4.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/zEa__4uQ43SFVboUR_1O3sw0ChM.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/zEa__4uQ43SFVboUR_1O3sw0ChM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zEa__4uQ43SFVboUR_1O3sw0ChM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:59:97:91:5f:ff:60:71:5c:57:2f:50:81:80:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc46bfff8b90e3748555ba1447fd4edecc340a13
Validity
Not Before: Jan 2 05:48:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1748ed2863f8d2e0ba51e18506fc7dbe330129e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:6a:ab:5c:7d:89:4b:fb:ab:cb:0e:42:a8:aa:
8c:05:9e:08:49:b4:d3:8c:63:77:56:72:9e:b6:1b:
e8:21:28:d3:37:0d:6d:f2:22:bb:6c:14:25:4e:6e:
74:ab:e3:83:c8:a7:d3:08:c6:39:20:49:72:7d:32:
b9:2f:43:c9:2c:4f:d3:57:cc:a5:95:e3:4d:97:b1:
aa:bd:42:d6:98:2d:46:e7:08:10:05:da:08:ff:f6:
48:d2:c8:5e:3b:15:52:49:10:23:be:8f:f1:55:12:
88:2b:5c:8c:65:e7:d9:61:af:a9:f3:ad:20:33:d7:
a0:6e:b9:1e:b6:0a:7d:18:4e:72:69:f3:3d:30:84:
fc:d6:73:87:f6:fd:94:cf:a9:8b:c1:3d:e5:14:11:
3c:68:c7:00:f6:66:b2:49:0c:21:e8:49:57:bb:61:
49:84:df:a2:c2:2f:59:0f:34:dc:b6:bf:3a:85:c1:
a2:bc:4a:a1:50:95:e6:c4:6e:51:2f:1b:c9:8c:eb:
07:1d:f1:08:9b:4f:64:ac:8e:8c:d2:1f:f8:94:5d:
eb:d2:d5:0e:40:ef:e1:2d:5c:94:79:15:b2:f2:cb:
bc:b1:9b:48:b3:e9:08:d8:1d:b9:b0:ba:99:10:6c:
2e:73:fb:15:35:e7:6e:ce:86:6e:6b:f3:a0:40:e9:
05:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:48:ED:28:63:F8:D2:E0:BA:51:E1:85:06:FC:7D:BE:33:01:29:E8
X509v3 Authority Key Identifier:
keyid:CC:46:BF:FF:8B:90:E3:74:85:55:BA:14:47:FD:4E:DE:CC:34:0A:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEa__4uQ43SFVboUR_1O3sw0ChM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/F0jtKGP40uC6UeGFBvx9vjMBKeg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/zEa__4uQ43SFVboUR_1O3sw0ChM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.162.4.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:85:75:e2:91:e3:5b:bd:4a:d8:6f:03:93:0f:0d:1d:ed:89:
b8:a2:2d:fe:f0:9e:4a:7a:ce:65:98:f8:e5:b1:ce:2f:2b:77:
9f:e3:1e:3a:00:13:a3:3f:03:c8:aa:d0:9f:3f:13:33:b3:ef:
a5:dc:b2:77:ae:73:16:be:14:3e:0d:8d:96:ec:62:0a:9d:cb:
a7:bd:39:af:c2:f2:78:25:4b:fc:99:93:e7:98:b4:08:c0:78:
cc:66:8d:c6:f1:40:08:b8:88:7b:20:82:84:c1:92:bd:c0:af:
7c:b6:ee:7b:7d:1c:c5:ed:2a:9f:87:28:78:1f:a5:d6:c2:45:
f1:63:8e:b0:a1:04:41:f5:d1:46:47:15:51:e0:f1:b2:c3:99:
26:3e:53:4a:e9:5a:ed:2b:26:d8:33:ca:d6:45:5b:29:82:8f:
e1:92:66:1d:78:af:03:28:52:68:51:05:20:60:ef:b1:34:97:
9f:79:26:4a:aa:bb:cc:3a:8b:73:2a:f4:07:c7:a3:eb:f4:80:
2f:2d:f6:16:6a:be:1c:6d:93:b1:01:6d:db:c0:ea:e2:34:5b:
91:49:c6:81:96:40:59:44:d7:56:c2:88:04:20:5d:46:1f:20:
44:22:11:ba:2f:0d:ed:3e:8c:3f:3e:a0:88:ee:5b:75:8d:ce:
d9:a3:ca:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:55:35 2025 by rpki-client