Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/e18c2d-64ff-44e8-8eef-b9c89b9b1f65/1/fxLB2UJLDSaxPyWV2-cdEb8R5e8.roa
File: fxLB2UJLDSaxPyWV2-cdEb8R5e8.roa (raw, json)
Hash identifier: qTbDhlkyoNs8mOWo2CnjkxjvNByWkkbKi24V6XgdMB8=
Subject key identifier: 7F:12:C1:D9:42:4B:0D:26:B1:3F:25:95:DB:E7:1D:11:BF:11:E5:EF
Certificate issuer: /CN=0ae1a5b68eca768f211a48e856d7f583f90e75e7
Certificate serial: 019420D5B2A618FDFDCEDC4C63ABB307C8C7
Authority key identifier: 0A:E1:A5:B6:8E:CA:76:8F:21:1A:48:E8:56:D7:F5:83:F9:0E:75:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CuGlto7Kdo8hGkjoVtf1g_kOdec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/e18c2d-64ff-44e8-8eef-b9c89b9b1f65/1/fxLB2UJLDSaxPyWV2-cdEb8R5e8.roa
Signing time: Wed 01 Jan 2025 07:47:43 +0000
ROA not before: Wed 01 Jan 2025 07:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8426
IP address blocks: 194.48.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/e18c2d-64ff-44e8-8eef-b9c89b9b1f65/1/CuGlto7Kdo8hGkjoVtf1g_kOdec.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/e18c2d-64ff-44e8-8eef-b9c89b9b1f65/1/CuGlto7Kdo8hGkjoVtf1g_kOdec.mft
rsync://rpki.ripe.net/repository/DEFAULT/CuGlto7Kdo8hGkjoVtf1g_kOdec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 19:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:b2:a6:18:fd:fd:ce:dc:4c:63:ab:b3:07:c8:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ae1a5b68eca768f211a48e856d7f583f90e75e7
Validity
Not Before: Jan 1 07:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7f12c1d9424b0d26b13f2595dbe71d11bf11e5ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:00:02:ff:d3:32:2c:dd:62:7f:c0:ce:1a:a7:
14:79:59:24:af:0d:34:b5:21:03:c3:b5:27:74:c2:
c3:2c:1d:a8:76:36:b4:84:a8:27:60:a8:c6:f1:30:
ad:bf:0f:a6:bd:6d:8b:53:d4:af:7c:53:b4:db:77:
13:28:98:aa:d8:1d:c1:02:71:1a:cc:72:15:06:bc:
8f:64:de:3b:4c:0a:6d:c5:47:49:41:be:c7:53:0e:
2b:69:25:58:46:8d:cf:da:6b:f4:1b:91:42:5b:6e:
74:9d:e9:54:64:b6:bb:69:1e:17:01:83:79:f9:6d:
76:7d:5d:6e:15:f6:1c:f2:e4:40:d5:28:c6:92:bd:
58:27:4e:b5:29:6e:78:19:08:5e:36:74:4c:12:db:
aa:be:01:ea:23:33:d2:a9:00:14:87:6a:88:03:d7:
eb:51:57:eb:39:1f:f7:83:97:e3:86:65:2c:66:76:
b2:4d:bc:b9:4d:4b:b8:f0:cf:63:9b:c9:c9:ee:ac:
dc:d5:00:46:22:bd:37:40:df:56:04:de:a0:c8:01:
b2:50:41:f1:ce:8d:2d:cb:71:21:45:e7:9f:90:d0:
1b:b4:83:53:96:83:01:31:1f:09:63:65:24:cf:e0:
16:3e:ad:2f:b4:4f:b6:06:70:f8:2f:01:9f:04:15:
64:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:12:C1:D9:42:4B:0D:26:B1:3F:25:95:DB:E7:1D:11:BF:11:E5:EF
X509v3 Authority Key Identifier:
keyid:0A:E1:A5:B6:8E:CA:76:8F:21:1A:48:E8:56:D7:F5:83:F9:0E:75:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CuGlto7Kdo8hGkjoVtf1g_kOdec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/e18c2d-64ff-44e8-8eef-b9c89b9b1f65/1/fxLB2UJLDSaxPyWV2-cdEb8R5e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/e18c2d-64ff-44e8-8eef-b9c89b9b1f65/1/CuGlto7Kdo8hGkjoVtf1g_kOdec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.48.207.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:9e:9a:ec:82:fc:b3:74:f0:f5:90:bb:ed:52:5d:55:ee:b3:
ef:dc:ee:5e:0e:e8:97:f2:e2:ad:58:a5:23:25:87:02:82:e0:
e4:43:c0:8d:0e:5b:ad:be:9c:2f:0d:e8:93:21:73:2c:e0:2c:
2c:b5:a2:8d:ba:b5:24:1b:a8:8d:e7:44:09:34:99:24:42:b5:
16:26:a4:ed:57:f9:1a:74:a0:e5:cc:31:44:26:41:3a:ea:78:
2b:44:a6:34:b4:7c:d5:f8:6b:18:25:3f:ff:ad:65:1a:d8:ca:
2f:12:6f:11:b0:71:72:d9:09:4d:6d:d5:74:5a:87:b5:be:f1:
76:fb:27:1a:25:be:10:35:09:37:17:29:c8:5d:a3:d1:a9:80:
79:cd:55:bd:16:ac:6a:87:4c:30:a7:b0:40:6a:5a:67:a6:3f:
37:90:30:33:3f:ee:40:49:c3:a3:4f:56:9b:4e:cb:89:cb:16:
d1:39:48:94:e9:64:21:22:4c:78:31:ef:a2:51:a2:d6:f0:ac:
97:f8:87:52:7e:a5:fa:9d:b3:e9:7b:63:eb:7e:60:3d:f9:14:
14:cc:85:a8:fd:81:63:93:f9:82:38:ee:f6:58:31:09:6f:47:
51:8b:b0:32:56:31:b5:da:fb:dd:dc:7d:f7:d9:21:9e:f0:e6:
6a:9b:2a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 02:55:42 2025 by rpki-client