Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/FFW_fE42nEbL8IG4R5kUautlZfY.roa
File: FFW_fE42nEbL8IG4R5kUautlZfY.roa (raw, json)
Hash identifier: UiqpRS64iwjqpwbLUfpp25p4t3kONE+AlmZUjd5+VlM=
Subject key identifier: 14:55:BF:7C:4E:36:9C:46:CB:F0:81:B8:47:99:14:6A:EB:65:65:F6
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01942144060CCD31B532AA022DE29E79959B
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/FFW_fE42nEbL8IG4R5kUautlZfY.roa
Signing time: Wed 01 Jan 2025 09:48:13 +0000
ROA not before: Wed 01 Jan 2025 09:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205021
IP address blocks: 77.93.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:06:0c:cd:31:b5:32:aa:02:2d:e2:9e:79:95:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 1 09:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1455bf7c4e369c46cbf081b84799146aeb6565f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:35:5f:ce:0d:47:9d:6a:18:a0:84:b1:c8:98:
aa:d5:37:a8:d7:04:fe:52:1b:d8:a1:8c:c1:b3:f8:
d1:96:f1:29:6f:c9:c9:ab:28:f9:d9:6e:cb:e3:82:
8f:ee:5e:33:29:ed:c9:c5:9e:63:c2:dd:81:a0:0a:
19:73:5c:95:95:c6:c3:ea:a2:3b:07:75:0b:de:87:
12:ce:b6:c4:2a:06:3d:e7:80:24:dc:8d:b2:90:a0:
44:b4:2f:17:72:21:ad:d0:24:e0:9f:ec:f7:7a:d4:
a5:bb:cf:00:30:ca:0f:43:89:f5:21:10:fc:66:e6:
9d:7a:27:d6:1e:04:a8:00:79:dd:93:d4:10:65:76:
9b:01:d2:51:2a:a4:18:b2:c9:48:bf:d8:e8:01:12:
eb:d8:49:62:b9:c0:cc:8e:ef:e8:f9:d7:84:02:65:
6d:9c:ed:70:0c:2e:c8:58:d9:01:b0:3c:b0:2c:f7:
13:04:1b:bd:42:84:a1:06:16:36:a3:2f:41:84:5d:
80:22:f6:3e:ee:d1:c1:26:88:07:77:87:03:82:ca:
b5:89:d8:1c:1c:61:3a:d2:f0:9c:ab:42:c2:6b:7b:
f1:b1:78:9e:a5:00:1a:4a:87:4a:7d:67:1c:35:1e:
1c:1a:02:7b:4b:86:ae:81:e9:03:83:a5:60:6d:c4:
f1:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:55:BF:7C:4E:36:9C:46:CB:F0:81:B8:47:99:14:6A:EB:65:65:F6
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/FFW_fE42nEbL8IG4R5kUautlZfY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.141.0/24
Signature Algorithm: sha256WithRSAEncryption
01:a1:01:d6:7d:f4:f2:18:1a:79:28:8c:26:97:28:f3:12:08:
c7:07:44:4d:8b:d5:cd:9b:bb:9f:f9:7a:fc:ba:b2:ff:c2:cd:
ee:fe:4c:0f:00:6e:5a:81:ea:2e:11:1b:fc:3a:b1:f9:19:18:
1f:99:55:42:11:06:86:b3:11:fe:84:df:71:3b:82:5c:2b:3d:
5a:3f:6d:bf:f3:16:e0:e6:79:9d:03:7e:53:3c:6b:b4:17:2d:
8b:2b:c7:4c:dd:3d:be:2b:16:c8:b4:66:71:d6:e5:fe:cb:3f:
b9:1d:4c:5d:f5:e3:b2:42:86:0a:17:ef:34:2f:59:53:e7:2a:
d2:c8:ee:44:99:46:41:9b:45:70:a1:e3:98:45:d5:68:05:25:
c7:ad:50:49:e2:8d:25:04:42:ad:01:61:cd:01:ad:93:0d:37:
18:bc:9d:2c:ec:07:52:c4:a6:43:52:8a:a9:a4:f3:76:e9:e8:
6c:2e:ea:35:b1:07:b0:0c:66:be:15:76:f7:b1:b3:78:d9:8c:
d5:b6:1d:e2:f2:97:9e:cd:a4:f8:ab:ff:08:74:1d:2e:e3:97:
a8:18:5e:32:a1:2f:6b:54:c2:8b:ee:1b:f8:85:21:d5:d5:5c:
42:1b:dd:70:a1:ed:99:f8:5c:ea:6d:47:f5:73:44:2c:91:97:
90:2b:be:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 07:48:41 2025 by rpki-client