Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/e4bb51-b963-4b46-aa27-26bf8ccd7b74/1/fEAZa-O9fHJhM2xOUClofNSLhKo.roa
File: fEAZa-O9fHJhM2xOUClofNSLhKo.roa (raw, json)
Hash identifier: 7vCADDbVNbLzIuWoH8sPbznEC+p/MBTPDQ5yLj9acsM=
Subject key identifier: 7C:40:19:6B:E3:BD:7C:72:61:33:6C:4E:50:29:68:7C:D4:8B:84:AA
Certificate issuer: /CN=0ede17b8caf02461bf54c0964ed38a2590062f94
Certificate serial: 01941FFAAE54D008E1288EC7B9F82D26FBFB
Authority key identifier: 0E:DE:17:B8:CA:F0:24:61:BF:54:C0:96:4E:D3:8A:25:90:06:2F:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/e4bb51-b963-4b46-aa27-26bf8ccd7b74/1/fEAZa-O9fHJhM2xOUClofNSLhKo.roa
Signing time: Wed 01 Jan 2025 03:48:29 +0000
ROA not before: Wed 01 Jan 2025 03:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 196659
IP address blocks: 91.102.232.0/21 maxlen: 24
91.102.233.0/24 maxlen: 24
91.102.234.0/24 maxlen: 24
91.102.235.0/24 maxlen: 24
91.102.236.0/24 maxlen: 24
91.102.237.0/24 maxlen: 24
91.102.238.0/24 maxlen: 24
91.102.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/e4bb51-b963-4b46-aa27-26bf8ccd7b74/1/Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/e4bb51-b963-4b46-aa27-26bf8ccd7b74/1/Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:ae:54:d0:08:e1:28:8e:c7:b9:f8:2d:26:fb:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ede17b8caf02461bf54c0964ed38a2590062f94
Validity
Not Before: Jan 1 03:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7c40196be3bd7c7261336c4e5029687cd48b84aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:72:dc:67:8f:57:e8:5e:aa:3b:68:6f:43:5f:
bd:ed:16:23:8d:0e:60:aa:27:f7:96:63:31:77:cc:
d2:02:ad:de:1d:81:1c:82:9d:29:79:4f:a1:23:b8:
87:77:f2:81:f3:62:da:91:86:8e:ff:62:75:de:ac:
26:e6:cc:bd:f8:d8:81:3c:ee:fc:0d:b7:59:88:a9:
4d:37:64:d1:a5:f0:48:ed:b0:24:90:af:fa:d9:af:
76:55:d4:3c:32:08:05:1c:42:36:86:84:de:aa:73:
77:04:3c:ea:c9:31:6b:5d:34:d6:c2:0b:a1:73:b1:
ba:fe:16:17:94:59:c0:24:c1:b6:a2:f4:da:6f:d6:
66:58:5a:ab:d0:bb:ef:12:85:03:d9:94:5c:1f:99:
43:4e:72:87:59:6b:5d:96:4e:58:4f:ee:8a:5d:9b:
cc:24:42:9e:8e:3d:ae:6a:bf:33:0f:69:5a:c2:ee:
f2:0b:cb:dd:f4:f6:6e:fa:f2:67:5f:f4:dc:c9:9e:
89:6a:7b:da:82:02:e3:e9:92:5d:5c:cb:41:e4:e9:
91:3c:2f:5f:5a:42:6e:28:0e:98:ff:90:fa:80:9f:
02:6a:9a:19:e8:16:ef:ba:af:03:ed:c7:6e:a7:eb:
b7:af:37:a2:61:ab:b8:f4:6b:93:76:10:eb:a0:2c:
0d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:40:19:6B:E3:BD:7C:72:61:33:6C:4E:50:29:68:7C:D4:8B:84:AA
X509v3 Authority Key Identifier:
keyid:0E:DE:17:B8:CA:F0:24:61:BF:54:C0:96:4E:D3:8A:25:90:06:2F:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e4bb51-b963-4b46-aa27-26bf8ccd7b74/1/fEAZa-O9fHJhM2xOUClofNSLhKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e4bb51-b963-4b46-aa27-26bf8ccd7b74/1/Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.102.232.0/21
Signature Algorithm: sha256WithRSAEncryption
dd:cc:36:57:03:3d:81:c0:be:c6:3b:2d:5b:da:e2:58:6c:e4:
64:bb:05:a2:31:2d:f4:3f:4d:d9:85:8e:b1:ce:36:dd:ed:e9:
b7:69:83:0e:21:e7:a8:4d:fc:2c:f6:b3:ed:e9:45:c3:7c:50:
34:fd:ab:ef:fd:3f:39:70:71:ac:e5:2f:08:b6:7c:62:4d:e8:
1e:e3:10:3d:28:c9:5f:67:d3:cc:64:4d:a4:05:5b:50:b8:f7:
8f:e2:8c:10:0a:15:6a:8a:9b:7d:6c:21:84:bc:c4:18:27:27:
93:8d:60:82:a6:0a:93:06:8a:f0:0c:53:d1:2d:15:b4:84:57:
97:61:f2:3d:1b:4e:3f:ff:fe:35:e4:5a:82:e4:10:f3:37:e4:
4a:a0:2c:cd:8d:6a:45:0a:54:cc:b9:35:8e:15:c6:8f:55:a7:
4a:dc:2a:34:de:67:50:5f:e2:f7:89:b6:17:b4:f1:d2:e1:52:
de:ca:53:f9:c9:eb:43:83:14:bc:ea:45:46:f3:1b:a7:12:9d:
52:a5:59:78:cf:65:6a:8a:7d:ff:57:7c:26:c1:e9:b6:19:e6:
cd:66:03:f6:3c:89:17:91:a8:bd:b0:cd:7e:45:0c:9e:44:a9:
a5:b1:30:3a:93:30:3e:56:5c:bb:ba:11:62:ba:2f:c3:a9:0d:
83:32:00:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 08:36:56 2025 by rpki-client