Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/FJdpsV6pjhMSL6IT7vB41CVTVRI.roa
File: FJdpsV6pjhMSL6IT7vB41CVTVRI.roa (raw, json)
Hash identifier: S25aXExUDruwqgW26JBpjwRzCwZa0LN7qVcFUwKAsy4=
Subject key identifier: 14:97:69:B1:5E:A9:8E:13:12:2F:A2:13:EE:F0:78:D4:25:53:55:12
Certificate issuer: /CN=0502861f923c7ec1132b548f7abb861baca1f406
Certificate serial: 0194221FEB0368889B02C377AC7D94678C90
Authority key identifier: 05:02:86:1F:92:3C:7E:C1:13:2B:54:8F:7A:BB:86:1B:AC:A1:F4:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BQKGH5I8fsETK1SPeruGG6yh9AY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/FJdpsV6pjhMSL6IT7vB41CVTVRI.roa
Signing time: Wed 01 Jan 2025 13:48:24 +0000
ROA not before: Wed 01 Jan 2025 13:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12859
IP address blocks: 185.104.28.0/22 maxlen: 24
2a06:2ec0::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/BQKGH5I8fsETK1SPeruGG6yh9AY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/BQKGH5I8fsETK1SPeruGG6yh9AY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BQKGH5I8fsETK1SPeruGG6yh9AY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 07:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:eb:03:68:88:9b:02:c3:77:ac:7d:94:67:8c:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0502861f923c7ec1132b548f7abb861baca1f406
Validity
Not Before: Jan 1 13:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=149769b15ea98e13122fa213eef078d425535512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:09:c0:f6:e7:5e:49:92:61:4d:78:57:5e:76:
38:f1:9e:11:62:77:6f:7e:28:ad:11:b4:7b:27:0a:
b4:f5:37:53:29:28:1d:20:95:0d:b9:08:75:81:3d:
1b:0e:98:30:a4:25:fc:5c:c0:6f:43:4e:24:7c:de:
61:71:6a:39:63:4d:3d:d3:7f:26:f9:28:6a:ad:c1:
e9:7d:80:f2:6b:50:e3:c9:4b:72:fc:54:17:b0:af:
94:d8:8b:38:db:2a:ac:b8:0a:47:19:d0:56:cc:db:
fe:de:b5:f3:b2:96:47:f9:df:89:0d:f0:d4:4b:ed:
59:51:bd:15:6a:27:40:bc:19:3d:29:e7:dc:16:6c:
5e:66:ea:f2:5e:02:a8:77:34:4a:85:5c:42:fe:cd:
08:fd:a8:29:ea:86:c6:e9:de:69:be:d4:d9:60:9b:
b6:4d:fc:ec:85:63:85:e9:01:53:47:8e:2d:ce:4e:
48:d4:65:5f:84:b1:a0:57:9c:10:1c:b1:53:71:56:
e4:e7:6f:b8:2a:10:65:8f:c1:45:3d:e1:5e:75:96:
48:75:da:4b:24:cd:4a:0d:1e:b4:00:d1:76:39:6f:
4b:56:f2:d9:30:94:dd:30:42:11:d0:9a:e0:24:7e:
a0:87:02:0a:e2:df:70:2a:fc:ff:d8:55:b7:60:0c:
25:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:97:69:B1:5E:A9:8E:13:12:2F:A2:13:EE:F0:78:D4:25:53:55:12
X509v3 Authority Key Identifier:
keyid:05:02:86:1F:92:3C:7E:C1:13:2B:54:8F:7A:BB:86:1B:AC:A1:F4:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQKGH5I8fsETK1SPeruGG6yh9AY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/FJdpsV6pjhMSL6IT7vB41CVTVRI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/BQKGH5I8fsETK1SPeruGG6yh9AY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.104.28.0/22
IPv6:
2a06:2ec0::/29
Signature Algorithm: sha256WithRSAEncryption
1c:95:82:63:17:be:80:70:e7:44:4a:83:81:31:64:e4:7c:85:
06:7a:07:db:d1:d8:01:3b:f1:ca:92:31:b6:62:6d:3a:b0:33:
69:6a:c3:6b:17:8d:e4:85:5b:85:43:9e:34:5f:ec:0e:47:3f:
5f:97:c7:23:ae:99:c9:1a:e4:26:75:ee:a9:5d:ca:ce:2d:f1:
e4:61:1e:e7:78:d1:5a:6a:8e:69:cd:83:3d:3a:28:80:f3:50:
d2:bb:e1:ca:cf:32:82:24:41:bc:a5:b9:45:2b:4e:5a:c9:f0:
23:ee:6e:19:ab:76:11:c7:65:3d:ca:16:9c:09:1d:a1:fe:c6:
3f:cf:6c:a5:b2:29:92:b6:49:32:54:fc:07:90:b6:8d:a7:34:
a7:29:6b:00:3c:56:c4:01:1a:3a:be:53:b5:1b:14:cc:1e:9a:
e3:cb:8e:c8:6c:dc:72:30:24:65:c2:3d:9a:43:4e:a9:f0:a6:
75:8e:77:a0:e9:b7:18:98:40:f3:b8:ac:25:12:68:73:33:6a:
c9:8f:3e:63:81:df:2b:c9:e6:e6:cd:bf:2a:09:d4:35:d0:a8:
9e:85:97:37:3a:9a:20:f2:28:c7:c4:04:bd:cf:c3:98:fe:9c:
8d:36:aa:f2:02:5e:49:b0:30:34:da:3d:54:ab:a6:bb:ee:f7:
1f:7c:ea:6c
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQiH+sDaIibAsN3rH2UZ4yQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MDI4NjFmOTIzYzdlYzExMzJiNTQ4ZjdhYmI4NjFiYWNh
MWY0MDYwHhcNMjUwMTAxMTM0ODI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNDk3NjliMTVlYTk4ZTEzMTIyZmEyMTNlZWYwNzhkNDI1NTM1NTEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQnA9udeSZJhTXhXXnY48Z4RYndv
fiitEbR7Jwq09TdTKSgdIJUNuQh1gT0bDpgwpCX8XMBvQ04kfN5hcWo5Y009038m
+ShqrcHpfYDya1DjyUty/FQXsK+U2Is42yqsuApHGdBWzNv+3rXzspZH+d+JDfDU
S+1ZUb0VaidAvBk9KefcFmxeZuryXgKodzRKhVxC/s0I/agp6obG6d5pvtTZYJu2
TfzshWOF6QFTR44tzk5I1GVfhLGgV5wQHLFTcVbk52+4KhBlj8FFPeFedZZIddpL
JM1KDR60ANF2OW9LVvLZMJTdMEIR0JrgJH6ghwIK4t9wKvz/2FW3YAwlmwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFBSXabFeqY4TEi+iE+7weNQlU1USMB8GA1UdIwQY
MBaAFAUChh+SPH7BEytUj3q7hhusofQGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlFLR0g1SThmc0VUSzFTUGVydUdHNnloOUFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9hOTI3NmYtZThjMS00NWQ2LWE0MmQt
MGM2NGRlYmU5ZWM0LzEvRkpkcHNWNnBqaE1TTDZJVDd2QjQxQ1ZUVlJJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9hOTI3NmYtZThjMS00NWQ2LWE0MmQtMGM2NGRlYmU5ZWM0
LzEvQlFLR0g1SThmc0VUSzFTUGVydUdHNnloOUFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuWgcMA0E
AgACMAcDBQMqBi7AMA0GCSqGSIb3DQEBCwUAA4IBAQAclYJjF76AcOdESoOBMWTk
fIUGegfb0dgBO/HKkjG2Ym06sDNpasNrF43khVuFQ540X+wORz9fl8cjrpnJGuQm
de6pXcrOLfHkYR7neNFaao5pzYM9OiiA81DSu+HKzzKCJEG8pblFK05ayfAj7m4Z
q3YRx2U9yhacCR2h/sY/z2ylsimStkkyVPwHkLaNpzSnKWsAPFbEARo6vlO1GxTM
Hprjy47IbNxyMCRlwj2aQ06p8KZ1jneg6bcYmEDzuKwlEmhzM2rJjz5jgd8ryebm
zb8qCdQ10KiehZc3Opog8ijHxAS9z8OY/pyNNqryAl5JsDA02j1Uq6a77vcffOps
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:40:08 2025 by rpki-client