Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/FiMDwSy461Wg2zX9q83Y7OlO6-4.roa
File: FiMDwSy461Wg2zX9q83Y7OlO6-4.roa (raw, json)
Hash identifier: TLfzTAdqn8XT9HDlI5efkKCPpG0DQm1IHNE4Vmzr6mU=
Subject key identifier: 16:23:03:C1:2C:B8:EB:55:A0:DB:35:FD:AB:CD:D8:EC:E9:4E:EB:EE
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 01941FFA9FE78C9F4B34A2A33A399B449FC2
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/FiMDwSy461Wg2zX9q83Y7OlO6-4.roa
Signing time: Wed 01 Jan 2025 03:48:26 +0000
ROA not before: Wed 01 Jan 2025 03:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61400
IP address blocks: 141.101.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:9f:e7:8c:9f:4b:34:a2:a3:3a:39:9b:44:9f:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 1 03:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=162303c12cb8eb55a0db35fdabcdd8ece94eebee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1a:5f:65:62:c5:a7:18:ef:46:5b:c2:ad:57:
a7:bc:a4:3e:8d:9e:24:79:a9:aa:3c:50:9a:be:b9:
73:72:b2:72:06:19:1b:72:6a:1d:c9:49:a5:c6:0c:
47:fa:3f:d3:a0:ec:ff:08:1d:9a:a4:de:60:88:8b:
5b:06:31:9d:34:d2:6b:a0:4a:59:9f:14:a1:e6:96:
48:10:04:a1:33:c1:1f:65:62:c4:f0:6c:b8:e7:bb:
a5:4d:c3:d7:f7:9a:cd:dc:02:36:cd:97:6d:60:79:
0f:e4:78:62:0f:65:15:28:7f:a6:8a:0c:67:64:bd:
81:41:d8:0f:64:bf:43:2f:4b:38:ac:fc:c8:b9:dc:
d9:21:64:5a:c8:9b:ea:8d:13:5c:f3:27:4b:fd:05:
64:b4:1f:1d:51:59:a3:ed:3e:b3:d1:78:82:86:0b:
50:71:37:5a:9d:a4:fa:b8:5f:e3:62:f1:ac:ac:41:
f9:3d:87:e0:3d:ab:45:4a:2a:e8:ae:dd:35:9f:64:
24:aa:30:38:72:56:22:a9:3a:23:77:64:3b:57:19:
59:13:18:39:ba:59:44:d1:16:6a:f5:9f:66:ee:0f:
78:bf:90:f8:40:ef:71:8d:bc:a6:22:a8:73:33:eb:
3e:f6:b0:54:ca:ee:41:9c:df:05:d8:24:06:6e:f7:
a1:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:23:03:C1:2C:B8:EB:55:A0:DB:35:FD:AB:CD:D8:EC:E9:4E:EB:EE
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/FiMDwSy461Wg2zX9q83Y7OlO6-4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.101.255.0/24
Signature Algorithm: sha256WithRSAEncryption
16:b5:b0:e7:40:c6:4f:98:1b:66:e6:68:e1:2e:60:cb:a2:1c:
00:f1:e4:3e:9c:5e:33:66:74:d8:aa:30:b9:ae:de:d5:fa:f6:
78:8e:13:74:93:2e:97:8f:3d:3f:8d:59:3a:56:00:58:5b:8d:
f3:06:64:9b:9b:4b:0e:66:f8:d4:8a:45:7c:38:63:b6:6e:ed:
41:3b:0b:4d:08:85:cf:36:35:3e:b2:55:5b:23:ee:c2:6c:59:
fd:ce:82:a7:6f:6b:ab:f0:5c:cb:b9:a1:ba:47:ef:5e:6b:7a:
bc:cd:3b:25:ac:58:c1:f1:29:fa:5e:86:95:0f:ec:df:40:79:
b8:05:26:68:c0:24:9a:fe:de:c2:6d:f9:96:5f:e5:41:1c:72:
b1:eb:e7:b8:9b:f9:91:09:30:0b:82:07:4e:ac:ab:55:99:1b:
7d:e6:78:83:48:8c:86:0a:25:3d:45:ec:e0:cb:52:50:11:6f:
99:fd:6e:3a:b5:2c:ac:8b:ed:1e:06:12:59:78:60:5b:99:3f:
0b:67:2d:44:7c:e1:a8:70:ea:0a:c8:33:17:bf:8e:56:22:27:
05:9b:96:a9:1c:db:05:9f:34:a8:ca:95:fc:f0:0f:74:4a:b5:
d1:2f:2b:ee:fa:05:06:3f:88:34:6b:5c:50:1b:3c:8e:0d:ab:
f2:58:f3:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:18:47 2025 by rpki-client