Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/27FHmyzi6Se6krMAx8iyaZkkui4.roa
File: 27FHmyzi6Se6krMAx8iyaZkkui4.roa (raw, json)
Hash identifier: hxU0+n4GJmSaVALTik02VPB85RwSKnzwnJh1oS8Qx2Y=
Subject key identifier: DB:B1:47:9B:2C:E2:E9:27:BA:92:B3:00:C7:C8:B2:69:99:24:BA:2E
Certificate issuer: /CN=fd1196d98decd38eb03f5f06b48e556c74f231f4
Certificate serial: 01941F8C9221CB795D348117E3FF51899B11
Authority key identifier: FD:11:96:D9:8D:EC:D3:8E:B0:3F:5F:06:B4:8E:55:6C:74:F2:31:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_RGW2Y3s046wP18GtI5VbHTyMfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/27FHmyzi6Se6krMAx8iyaZkkui4.roa
Signing time: Wed 01 Jan 2025 01:48:13 +0000
ROA not before: Wed 01 Jan 2025 01:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202339
IP address blocks: 185.47.96.0/22 maxlen: 22
185.47.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/_RGW2Y3s046wP18GtI5VbHTyMfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/_RGW2Y3s046wP18GtI5VbHTyMfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_RGW2Y3s046wP18GtI5VbHTyMfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 19:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:92:21:cb:79:5d:34:81:17:e3:ff:51:89:9b:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd1196d98decd38eb03f5f06b48e556c74f231f4
Validity
Not Before: Jan 1 01:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dbb1479b2ce2e927ba92b300c7c8b2699924ba2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d6:56:d8:87:ae:51:d4:8e:76:10:c8:8e:e0:
9d:a3:9b:98:85:63:ee:87:13:ba:e3:d7:cb:57:3e:
46:34:d9:e8:a7:7f:39:21:8b:b5:c9:6e:83:ef:b3:
48:35:09:e2:48:dd:00:d9:b4:84:4c:05:7b:73:ce:
4f:db:98:cb:72:9d:c0:1a:f0:71:6d:6a:78:c7:8a:
fa:04:9f:fb:33:74:d0:96:e8:12:91:53:d0:d4:22:
a2:41:98:a8:3c:1f:84:4c:2b:89:6d:54:51:c5:d1:
a9:3c:98:a5:b1:b8:bf:1b:7e:ea:2f:86:d6:75:0a:
59:02:1b:f7:35:fa:85:bc:a4:43:28:2f:e0:3b:c8:
f3:fc:82:f0:dd:4f:1e:76:e2:2a:9b:d3:85:51:38:
9e:a5:8f:ab:26:47:c9:4b:75:5c:b2:9d:72:b4:6a:
3a:66:13:dd:94:54:c0:28:6b:52:3b:6c:72:a0:9f:
05:13:fd:cc:3b:ad:ac:1a:95:eb:c4:e4:71:52:4f:
9f:ff:96:28:ff:4e:f4:9f:5d:25:37:66:66:ef:3f:
77:af:35:0b:4f:05:72:7f:8a:5c:d1:45:46:fb:9e:
f4:d4:a0:71:79:ae:70:8a:33:cc:5b:42:26:72:b9:
b9:57:81:24:2b:25:4d:23:fa:63:84:c3:8a:8a:55:
ad:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:B1:47:9B:2C:E2:E9:27:BA:92:B3:00:C7:C8:B2:69:99:24:BA:2E
X509v3 Authority Key Identifier:
keyid:FD:11:96:D9:8D:EC:D3:8E:B0:3F:5F:06:B4:8E:55:6C:74:F2:31:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_RGW2Y3s046wP18GtI5VbHTyMfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/27FHmyzi6Se6krMAx8iyaZkkui4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/_RGW2Y3s046wP18GtI5VbHTyMfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.47.96.0/22
Signature Algorithm: sha256WithRSAEncryption
99:79:20:47:8e:73:0c:31:c9:e7:3f:14:8e:79:f9:c1:0f:61:
8e:19:c4:04:ec:67:5a:bf:cd:41:80:d8:74:cc:c1:11:37:83:
c1:99:a3:8c:eb:94:ee:b7:90:b9:9a:24:4e:34:b2:ad:49:bd:
9c:e8:4a:c0:b1:20:1a:de:e7:87:3f:18:14:2d:d9:72:0d:33:
de:b8:44:2f:3c:9f:23:9c:57:fe:3f:89:7a:4c:b0:cf:43:8e:
da:88:70:14:4c:80:67:ff:32:85:28:04:7f:47:2a:f4:9e:a0:
20:37:38:2e:82:86:6b:30:05:1a:b1:e6:e0:d9:30:3d:36:3b:
d8:e6:c2:e4:8b:df:c8:e3:bf:0a:00:76:aa:8c:8b:09:26:4d:
d0:7e:8c:42:dd:04:cf:27:09:b5:3f:df:14:44:14:16:7f:72:
a8:7d:39:d7:8c:dc:c7:a6:4c:ee:78:bd:eb:cf:8f:c2:21:16:
1c:05:a6:e4:50:0d:af:1f:4a:8d:9c:4e:cd:e3:e0:58:e5:c6:
30:40:02:ba:fb:9c:3f:52:a3:1b:35:56:12:59:03:02:67:22:
3c:a8:1e:39:c2:99:08:51:aa:b0:59:3d:cb:e0:57:51:86:06:
6e:68:33:96:01:03:1f:b8:3e:bc:ae:1d:2e:46:e3:cc:28:d9:
a9:3b:25:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 04:14:00 2025 by rpki-client