Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/_FIw_A5dt1xU03Zbhge-_m33JRg.roa
File: _FIw_A5dt1xU03Zbhge-_m33JRg.roa (raw, json)
Hash identifier: detBPIO7UYh9KdSe2E/Nz7Rkxgy8iMeWzoXOu0ZPnXY=
Subject key identifier: FC:52:30:FC:0E:5D:B7:5C:54:D3:76:5B:86:07:BE:FE:6D:F7:25:18
Certificate issuer: /CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c
Certificate serial: 019425217DAEC867DBA703548C3E3837164D
Authority key identifier: 9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/_FIw_A5dt1xU03Zbhge-_m33JRg.roa
Signing time: Thu 02 Jan 2025 03:48:59 +0000
ROA not before: Thu 02 Jan 2025 03:48:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211701
IP address blocks: 185.216.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 21:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:7d:ae:c8:67:db:a7:03:54:8c:3e:38:37:16:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c
Validity
Not Before: Jan 2 03:48:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fc5230fc0e5db75c54d3765b8607befe6df72518
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:38:db:15:2b:45:cd:94:a5:1a:58:0e:2f:a8:
b8:73:96:46:7b:c5:09:b4:dd:b2:26:ae:f1:c9:d0:
03:6c:d0:61:02:15:eb:2d:54:39:1c:83:d0:c0:6b:
70:05:ff:e5:00:0c:0f:2c:86:d2:b4:80:4e:77:71:
15:58:ca:40:fd:a3:99:d2:25:16:49:87:1e:a2:74:
db:14:0e:cc:98:9c:f1:f6:86:26:87:73:ae:0c:ba:
c5:d3:c4:81:19:9a:a8:a8:aa:b8:3b:f9:de:52:51:
0e:1a:fd:0c:c2:77:88:67:17:52:5d:68:78:80:ed:
a7:d5:78:01:f7:12:2f:2d:b1:63:22:25:8b:1c:3a:
4e:7c:39:25:d0:ac:d9:95:65:63:3a:fd:07:d5:0c:
63:8e:5d:6e:80:c4:c2:cf:b9:71:b4:55:6a:8c:43:
14:e6:6d:ce:25:79:f5:74:95:e9:d3:23:5f:f4:04:
ce:c3:48:ab:33:b7:22:0b:35:d0:87:a5:35:79:8c:
8a:d8:31:e1:73:a8:80:b0:3e:44:78:65:cf:3c:67:
2e:5f:93:21:b0:60:27:ec:71:69:79:a0:76:46:39:
90:73:a1:7e:27:02:f4:76:46:9b:e1:5e:35:98:2a:
2e:d7:af:05:aa:f4:07:e9:34:3b:60:8b:db:a2:21:
ab:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:52:30:FC:0E:5D:B7:5C:54:D3:76:5B:86:07:BE:FE:6D:F7:25:18
X509v3 Authority Key Identifier:
keyid:9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/_FIw_A5dt1xU03Zbhge-_m33JRg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.216.190.0/24
Signature Algorithm: sha256WithRSAEncryption
58:ea:a6:3b:ca:6c:23:f3:0c:83:4a:62:cd:a7:49:cf:cb:8b:
c8:45:05:3a:e4:04:a4:74:76:61:30:35:e3:f9:a9:60:56:50:
46:e4:1f:e5:96:b0:09:91:41:de:cf:15:8b:f1:19:d6:33:eb:
af:76:e1:13:13:5f:ff:5f:89:a1:30:f4:0e:51:f0:d5:84:9d:
30:44:91:dd:af:b7:b6:17:63:06:c4:02:49:4a:93:05:3e:bf:
e9:96:19:4c:b0:f2:56:09:80:3f:d9:49:34:6f:2d:ff:e6:2a:
a3:26:e2:c9:08:45:68:11:2f:fe:36:ca:ed:55:ed:da:cc:56:
e1:9d:df:2f:3e:af:06:09:53:93:85:e1:02:f5:c9:2b:60:c7:
1f:95:cd:d6:aa:31:f8:82:bf:bf:ce:56:e6:9d:00:db:57:3c:
3f:2d:a5:d6:a6:89:0c:e2:14:1c:ac:47:35:34:df:3a:1b:a4:
b5:75:c3:9a:d2:eb:71:97:c6:c1:d3:d1:9b:d3:48:70:75:f5:
06:96:43:d2:7a:b7:ff:f1:81:8c:c5:54:79:5f:77:ca:98:bf:
8b:14:95:d6:39:53:a5:2f:55:b5:55:a2:19:2a:77:b5:6d:a6:
db:7b:9b:71:a3:3d:0b:c7:68:c5:a6:df:26:d4:de:1f:9d:85:
34:4c:39:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:49:02 2025 by rpki-client