Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/Fjpn_EhgQWiM2WTKdhOHYUup0SI.roa
File: Fjpn_EhgQWiM2WTKdhOHYUup0SI.roa (raw, json)
Hash identifier: avJT71Pm6rETaFlOLm5bUihbILmnzENzyrtgZ72o/yM=
Subject key identifier: 16:3A:67:FC:48:60:41:68:8C:D9:64:CA:76:13:87:61:4B:A9:D1:22
Certificate issuer: /CN=826605b4d27f13968e8794e6ef091223748817d8
Certificate serial: 019424457036CAA034845E1A92CE5941A7B0
Authority key identifier: 82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/Fjpn_EhgQWiM2WTKdhOHYUup0SI.roa
Signing time: Wed 01 Jan 2025 23:48:37 +0000
ROA not before: Wed 01 Jan 2025 23:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 136523
IP address blocks: 168.199.20.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:70:36:ca:a0:34:84:5e:1a:92:ce:59:41:a7:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826605b4d27f13968e8794e6ef091223748817d8
Validity
Not Before: Jan 1 23:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=163a67fc486041688cd964ca761387614ba9d122
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:04:47:5c:41:dd:83:3f:a3:1e:8c:6c:2c:35:
83:ff:88:02:b7:0b:2d:31:58:f8:c4:c9:e3:15:a3:
05:4d:9c:07:55:9b:cf:8b:3d:65:88:7b:b6:16:f8:
28:a3:46:41:c9:b7:79:10:25:3c:5c:08:43:99:77:
c3:6c:15:c7:94:a4:28:23:e6:0a:62:75:e4:df:40:
cd:dc:e0:04:29:fb:e8:18:5b:9c:34:30:25:12:5d:
cd:c9:c3:1a:d9:0f:72:76:30:c2:58:d5:96:9a:c4:
4c:9b:d6:96:7f:b2:1d:c2:43:29:25:73:45:c2:5a:
d8:e4:e6:e4:ba:0b:9b:22:cd:ba:4a:cd:ca:5e:ce:
66:d2:12:d8:26:a2:3c:76:4d:24:db:c4:53:cf:b0:
88:a3:ca:8c:c6:16:c3:69:e0:07:a3:d1:9e:a4:95:
38:64:3e:1b:29:51:91:9d:02:54:b7:c6:c0:5d:7c:
52:29:90:01:3c:99:90:67:ee:2f:74:64:45:4f:a7:
9c:6d:46:2b:c9:7f:3d:c0:9d:8c:bb:4d:aa:e0:9b:
41:be:1e:b7:9a:ef:6f:0a:b0:5b:7e:3a:a3:36:62:
24:71:5e:b6:56:ea:fb:cc:a6:b7:13:e5:dc:ba:6f:
74:72:33:c8:b3:b5:f0:68:27:b4:93:a2:46:bd:36:
10:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:3A:67:FC:48:60:41:68:8C:D9:64:CA:76:13:87:61:4B:A9:D1:22
X509v3 Authority Key Identifier:
keyid:82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/Fjpn_EhgQWiM2WTKdhOHYUup0SI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.199.20.0/23
Signature Algorithm: sha256WithRSAEncryption
88:12:73:71:ee:27:81:59:33:c7:63:55:6c:43:6e:92:ef:3a:
dc:ad:86:87:a8:9e:5a:7e:e1:11:30:b5:e4:a5:51:42:c7:6f:
eb:2f:a7:63:d5:2c:da:97:b3:a3:ed:68:9e:e3:73:ac:33:da:
ad:79:95:05:b2:eb:2a:10:16:d9:53:c7:d4:89:8d:5a:bd:38:
de:2b:8d:76:17:05:a2:f7:83:2e:32:e0:75:87:f0:7e:74:50:
80:5e:b1:20:65:83:ac:65:c5:6c:9a:99:5e:53:98:cf:73:76:
09:84:16:91:c7:f3:3c:22:83:f1:aa:86:08:26:39:50:90:8c:
32:62:1e:e2:34:a3:cc:0c:83:52:8a:6e:ab:f1:60:c3:7d:7e:
83:9e:12:4b:4c:b4:fc:d9:85:8b:f5:5d:04:cc:4c:c1:2e:9a:
63:61:9d:da:84:c2:47:a9:53:be:cf:29:c6:a2:7d:74:4c:e9:
07:7b:a1:bf:70:9c:35:3a:b9:c6:c3:5d:10:4f:4e:d8:cf:ab:
53:f8:77:b0:cd:3b:a4:9a:03:3e:b1:9d:2b:c7:88:b7:4d:5c:
70:d0:57:f1:57:e3:2a:6f:c3:ed:c0:f8:0b:69:83:5d:bc:56:
ea:e5:c8:8b:4b:20:c2:45:75:1d:b4:74:5c:3c:42:9d:2e:00:
c1:b4:01:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 18:56:35 2025 by rpki-client