Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/FA-QlJ6cBknLoVs11m-IWI5JqMU.roa
File: FA-QlJ6cBknLoVs11m-IWI5JqMU.roa (raw, json)
Hash identifier: r8HsoeDeWa0yb93DWpCdKufJZriIWPldmcOF9KHG1Us=
Subject key identifier: 14:0F:90:94:9E:9C:06:49:CB:A1:5B:35:D6:6F:88:58:8E:49:A8:C5
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01942143CE48E0F7FE9ED7AAE2D44DA12496
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/FA-QlJ6cBknLoVs11m-IWI5JqMU.roa
Signing time: Wed 01 Jan 2025 09:47:59 +0000
ROA not before: Wed 01 Jan 2025 09:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1299
IP address blocks: 109.176.210.0/24 maxlen: 24
109.176.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:ce:48:e0:f7:fe:9e:d7:aa:e2:d4:4d:a1:24:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 1 09:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=140f90949e9c0649cba15b35d66f88588e49a8c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8d:f0:6a:d6:e8:34:7c:e5:55:10:8a:bd:26:
74:2b:12:db:bb:32:65:f6:d2:59:79:63:cf:b1:cc:
0c:d4:82:84:86:f5:81:9f:6b:75:ea:40:35:03:05:
c2:b5:4b:52:8a:6f:cc:cc:85:61:23:72:24:46:f6:
d3:f3:17:6a:19:db:23:ee:ba:b6:11:ed:dd:4e:9b:
17:9d:91:3f:2a:c5:c9:39:0b:c4:3d:0b:60:08:2f:
93:df:52:5c:3c:24:14:30:2a:74:d5:d8:97:84:f7:
05:5d:50:29:66:c0:86:c1:ed:d9:d4:74:8d:5c:d5:
27:75:5a:9b:a2:4b:54:84:18:04:1e:37:f8:73:ed:
27:8f:c1:37:37:34:3f:90:fe:5d:c0:1d:25:5c:76:
de:47:88:28:13:73:7a:18:72:a1:5e:4e:df:b8:71:
dd:7a:f3:08:a3:f2:c4:bc:75:59:4f:48:6f:9d:07:
3f:ff:d3:be:60:d1:53:cb:cd:3f:54:06:a1:b5:8c:
e6:7e:6c:e0:55:6c:34:f1:db:1f:1f:c0:cf:54:16:
8f:44:40:62:ed:0d:40:ee:65:1f:7e:59:6c:db:79:
66:81:0f:d2:db:78:fa:41:d7:19:c1:76:0d:10:44:
5a:03:47:37:3d:ab:04:f7:4a:11:f5:00:4b:22:60:
de:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:0F:90:94:9E:9C:06:49:CB:A1:5B:35:D6:6F:88:58:8E:49:A8:C5
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/FA-QlJ6cBknLoVs11m-IWI5JqMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.176.210.0/24
109.176.241.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:31:51:47:ef:5d:68:16:72:8f:40:f2:bb:73:30:7b:27:e8:
36:a8:df:49:7b:ad:11:98:0e:3e:d9:a1:d3:73:8d:fc:53:b7:
b9:01:0c:c8:84:82:29:6c:6b:44:14:03:80:92:20:6f:67:ae:
a0:27:b4:e0:14:eb:31:22:ec:4d:83:5f:10:40:66:19:b2:13:
d9:c3:18:04:64:e2:da:08:2e:1a:0a:3d:65:66:3f:53:0a:9a:
34:36:f5:c9:f3:61:6e:7a:9f:44:66:19:7b:fd:af:6b:6e:56:
3d:9f:48:af:f9:2b:2c:42:2f:e5:31:83:85:6c:af:6b:d0:74:
db:e3:0c:41:72:79:50:af:af:36:ca:47:df:21:4c:c7:e6:24:
b9:95:96:fa:be:b0:99:86:f0:f0:1b:9d:50:17:4a:2d:ba:7f:
a2:9e:21:4d:e7:83:9b:b8:19:94:88:cc:ed:6e:0e:63:5b:5d:
a4:95:ee:b9:c4:18:c5:ca:a2:06:49:ed:78:02:97:e0:15:bd:
bd:2b:fc:76:75:55:6a:af:b7:cf:e7:10:bf:22:b1:2d:2e:a7:
19:ae:14:6c:a3:23:f2:b3:73:c5:99:8f:b2:34:4a:47:e3:37:
1d:d6:34:a9:39:66:f5:ed:09:ee:bc:7a:34:b8:4a:ab:93:13:
de:43:8f:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 07:44:57 2025 by rpki-client