Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/ff3618-7032-4143-9374-ba1418d22087/1/FBcAeE9oQIOW9kKPQJ1vgouTAbk.roa
File: FBcAeE9oQIOW9kKPQJ1vgouTAbk.roa (raw, json)
Hash identifier: L0pGWwbFutGyRI32rrNWdKvE3ZZY088xKR9lZle7SCg=
Subject key identifier: 14:17:00:78:4F:68:40:83:96:F6:42:8F:40:9D:6F:82:8B:93:01:B9
Certificate issuer: /CN=5ce1aae0c93ad04b7298082b68bf6a54fa68bcf0
Certificate serial: 0194266B53AE4BD21176C0D3C0517D2D15AB
Authority key identifier: 5C:E1:AA:E0:C9:3A:D0:4B:72:98:08:2B:68:BF:6A:54:FA:68:BC:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XOGq4Mk60EtymAgraL9qVPpovPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/ff3618-7032-4143-9374-ba1418d22087/1/FBcAeE9oQIOW9kKPQJ1vgouTAbk.roa
Signing time: Thu 02 Jan 2025 09:49:15 +0000
ROA not before: Thu 02 Jan 2025 09:49:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42831
IP address blocks: 94.136.168.0/22 maxlen: 22
185.75.20.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/ff3618-7032-4143-9374-ba1418d22087/1/XOGq4Mk60EtymAgraL9qVPpovPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/ff3618-7032-4143-9374-ba1418d22087/1/XOGq4Mk60EtymAgraL9qVPpovPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XOGq4Mk60EtymAgraL9qVPpovPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:53:ae:4b:d2:11:76:c0:d3:c0:51:7d:2d:15:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ce1aae0c93ad04b7298082b68bf6a54fa68bcf0
Validity
Not Before: Jan 2 09:49:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=141700784f68408396f6428f409d6f828b9301b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:57:48:0c:2e:f0:d5:c0:e6:b4:13:24:bf:ba:
67:46:94:f0:cd:3f:64:f0:95:45:65:c7:ca:d1:16:
ad:ef:dc:43:11:74:8a:38:7e:04:04:97:a6:af:28:
b3:e9:83:a2:d9:86:a3:a3:98:99:13:f5:57:75:d5:
58:27:70:b0:06:38:24:34:23:db:7e:02:f5:95:3b:
08:0e:6c:d5:8f:2b:21:2c:95:cd:24:ce:dc:46:a1:
8f:d3:fd:1f:71:35:84:9a:e0:4b:aa:6d:d8:71:15:
29:5f:55:9d:7e:f0:67:5f:cb:f6:b0:0f:7f:75:e6:
93:d9:c8:29:94:10:a2:94:fd:8f:52:60:8e:51:c5:
70:5e:25:f8:61:ee:d0:40:ba:73:4e:6b:c7:33:2e:
65:96:91:e6:82:ba:54:d5:c3:ba:fe:8c:73:1e:fc:
58:4c:d4:86:68:62:5d:ff:f8:ed:f9:22:71:c7:a4:
0a:15:f8:4d:d4:32:a2:b3:cb:a1:42:6d:f3:a9:15:
1c:09:27:82:16:c5:00:5c:08:a7:0d:0f:17:05:e0:
7c:42:17:70:d5:03:73:61:5f:04:81:aa:53:52:b7:
6b:6d:0a:82:0a:74:e1:ed:db:5b:81:3f:75:d7:28:
1e:f1:ee:8e:15:94:3b:4c:cf:32:1e:64:b2:fa:a7:
c7:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:17:00:78:4F:68:40:83:96:F6:42:8F:40:9D:6F:82:8B:93:01:B9
X509v3 Authority Key Identifier:
keyid:5C:E1:AA:E0:C9:3A:D0:4B:72:98:08:2B:68:BF:6A:54:FA:68:BC:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XOGq4Mk60EtymAgraL9qVPpovPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ff3618-7032-4143-9374-ba1418d22087/1/FBcAeE9oQIOW9kKPQJ1vgouTAbk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ff3618-7032-4143-9374-ba1418d22087/1/XOGq4Mk60EtymAgraL9qVPpovPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.136.168.0/22
185.75.20.0/23
Signature Algorithm: sha256WithRSAEncryption
68:f4:0b:81:98:64:df:9e:33:1a:c2:eb:df:d8:3d:9a:8c:18:
2a:c5:a8:11:8f:06:d2:4e:44:f7:1d:3d:31:fc:6c:13:e1:6e:
f9:9b:7f:46:3a:bb:f7:03:3b:50:b4:05:3e:2d:96:90:2c:0e:
54:c5:f7:7e:37:6a:15:52:24:50:db:f2:e9:0d:c2:0f:03:4a:
e4:17:72:86:b8:2e:33:2b:8f:99:be:9c:d1:4e:51:3d:46:41:
ee:8c:6c:6c:7b:36:c0:b6:66:11:c0:03:26:b9:21:f0:9b:ef:
10:62:81:7f:6e:f8:d8:d8:f1:ae:16:47:0d:96:1c:52:9e:40:
42:a8:39:7f:c9:95:62:77:ac:fb:54:e7:f8:14:c9:02:5c:76:
65:ef:4e:cd:12:46:1e:89:5b:07:31:69:76:7f:91:2d:52:3d:
d1:15:e5:05:71:42:df:cf:e8:1f:0e:a1:ce:11:fd:48:2e:92:
a3:a1:c7:fa:33:d2:50:0d:19:fb:5a:4c:2f:ce:61:b0:5c:f0:
d9:02:8f:6a:da:af:7a:8a:66:0c:8e:6e:b8:ba:fc:f4:72:fd:
9c:ee:48:dd:f1:78:f8:b4:31:1b:08:c0:92:5f:1a:c0:31:b2:
1f:09:bf:7d:fb:20:e5:69:61:00:4c:73:c7:fd:d5:2e:7a:18:
43:cf:50:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:34:20 2025 by rpki-client