Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/Fzr1By55ZDL1AtjsLrCzN_F0gos.roa
File: Fzr1By55ZDL1AtjsLrCzN_F0gos.roa (raw, json)
Hash identifier: Qt6aTT1EiGUDBJx7fPAgx7FJH8IrDb++OhiY8fc3GRU=
Subject key identifier: 17:3A:F5:07:2E:79:64:32:F5:02:D8:EC:2E:B0:B3:37:F1:74:82:8B
Certificate issuer: /CN=0a8e93f1961bebc10009cb265c0baf34702a3dab
Certificate serial: 01941F8C888A1559BC11FC6482FCECA27BED
Authority key identifier: 0A:8E:93:F1:96:1B:EB:C1:00:09:CB:26:5C:0B:AF:34:70:2A:3D:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Co6T8ZYb68EACcsmXAuvNHAqPas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/Fzr1By55ZDL1AtjsLrCzN_F0gos.roa
Signing time: Wed 01 Jan 2025 01:48:11 +0000
ROA not before: Wed 01 Jan 2025 01:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48925
IP address blocks: 185.195.237.0/24 maxlen: 24
2001:67c:be8::/48 maxlen: 48
2a01:ec40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/Co6T8ZYb68EACcsmXAuvNHAqPas.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/Co6T8ZYb68EACcsmXAuvNHAqPas.mft
rsync://rpki.ripe.net/repository/DEFAULT/Co6T8ZYb68EACcsmXAuvNHAqPas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 23:34:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:88:8a:15:59:bc:11:fc:64:82:fc:ec:a2:7b:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a8e93f1961bebc10009cb265c0baf34702a3dab
Validity
Not Before: Jan 1 01:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=173af5072e796432f502d8ec2eb0b337f174828b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f8:aa:8e:34:e4:2c:f8:2c:01:3d:c8:2c:72:
d3:66:47:33:93:9e:93:9f:d4:6d:b6:3f:7c:1c:bb:
ef:7b:96:29:b1:21:ab:9c:f7:33:80:80:02:bd:71:
15:c5:4f:58:6e:95:fe:5b:51:d0:7c:90:c8:b9:ae:
3f:c0:73:57:8e:76:f9:1c:32:b1:db:87:dd:14:1e:
54:cb:3c:e9:21:6c:13:8b:e7:31:1f:4c:23:2d:ad:
29:fa:da:64:fe:9b:63:97:0a:ed:a5:e8:87:9b:a3:
cf:96:e1:c6:fd:ee:5a:0a:28:ce:54:b1:8e:43:3d:
0c:89:0f:3b:93:ea:82:a2:04:29:00:cf:60:10:d7:
be:13:e0:91:a6:32:97:57:5c:1f:8a:ba:8d:97:db:
7a:5e:36:c0:5e:47:b6:a4:a1:92:3e:18:07:ac:43:
d1:56:87:b7:fb:a4:89:33:5b:f3:94:bd:09:b0:03:
92:a3:5c:ef:fa:4e:0a:21:ef:0f:b4:6d:5b:dd:da:
d3:c1:8f:48:ef:e9:56:53:08:22:4e:67:24:8d:0c:
92:4c:e9:85:14:6c:48:8d:4b:05:92:57:61:ab:62:
ef:d2:5c:d6:d3:59:31:4c:6a:3d:28:07:53:c9:fc:
e7:08:99:a5:22:9e:77:e5:2c:ca:db:a0:8f:ad:a6:
77:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:3A:F5:07:2E:79:64:32:F5:02:D8:EC:2E:B0:B3:37:F1:74:82:8B
X509v3 Authority Key Identifier:
keyid:0A:8E:93:F1:96:1B:EB:C1:00:09:CB:26:5C:0B:AF:34:70:2A:3D:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Co6T8ZYb68EACcsmXAuvNHAqPas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/Fzr1By55ZDL1AtjsLrCzN_F0gos.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/Co6T8ZYb68EACcsmXAuvNHAqPas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.195.237.0/24
IPv6:
2001:67c:be8::/48
2a01:ec40::/48
Signature Algorithm: sha256WithRSAEncryption
19:a6:55:81:4a:00:4c:c0:82:e5:5e:89:26:a1:67:cb:60:42:
42:9f:84:41:e8:2c:82:5b:68:6b:87:82:e6:b2:89:38:a2:c6:
a3:0e:61:ca:01:e3:9c:fb:db:77:c3:93:d2:09:b5:62:dd:94:
c7:49:60:41:d1:45:97:5a:c2:6e:eb:83:14:70:c9:54:0e:24:
42:82:3a:63:12:e8:e9:73:ec:f8:75:fa:7d:9d:bd:a0:ed:7b:
a6:b9:00:e1:b0:1d:e5:9a:09:b3:5b:50:2e:5d:e8:23:3c:4b:
b4:c7:57:0a:bf:93:ac:66:e0:aa:0d:d4:89:44:58:ba:58:9d:
9d:6e:24:78:cc:08:a2:bb:eb:76:ef:0f:d9:88:9c:92:9a:8c:
f5:bb:26:7f:dd:f6:18:c7:54:68:7d:a3:b4:8c:20:1e:36:f9:
11:36:ff:97:1e:28:df:fe:e7:d6:ff:32:aa:5c:95:40:fa:cd:
a3:7a:53:09:9c:e2:9b:56:48:6c:ce:d6:fd:04:a7:34:47:d5:
5e:9f:99:82:d0:aa:ed:e5:49:ac:de:97:7b:7f:64:c4:60:92:
a6:7c:ca:56:0c:85:7a:18:3b:70:94:38:de:22:33:24:9c:ad:
c2:a3:65:6c:ea:d7:e4:d0:62:7e:aa:b4:d2:12:76:83:62:48:
e0:31:52:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:05:23 2025 by rpki-client