Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/e1b20f-4d6d-40e0-af8a-3f17cbcba5ca/1/FEdxURaOUkYL0WbDVp9BT5YoCGg.roa
File: FEdxURaOUkYL0WbDVp9BT5YoCGg.roa (raw, json)
Hash identifier: V1bhzQdOv21eP2L8drvzUoPqsAJ8/f8TJjg7qCBB23Q=
Subject key identifier: 14:47:71:51:16:8E:52:46:0B:D1:66:C3:56:9F:41:4F:96:28:08:68
Certificate issuer: /CN=5b25909f3b94e55f5ef336a27d274a7dfd0d96b2
Certificate serial: 019426D98BCCCB023D3C2F1A3A19D4BBAF05
Authority key identifier: 5B:25:90:9F:3B:94:E5:5F:5E:F3:36:A2:7D:27:4A:7D:FD:0D:96:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WyWQnzuU5V9e8zaifSdKff0NlrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/e1b20f-4d6d-40e0-af8a-3f17cbcba5ca/1/FEdxURaOUkYL0WbDVp9BT5YoCGg.roa
Signing time: Thu 02 Jan 2025 11:49:38 +0000
ROA not before: Thu 02 Jan 2025 11:49:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41400
IP address blocks: 185.98.200.0/22 maxlen: 22
2a04:c00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/e1b20f-4d6d-40e0-af8a-3f17cbcba5ca/1/WyWQnzuU5V9e8zaifSdKff0NlrI.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/e1b20f-4d6d-40e0-af8a-3f17cbcba5ca/1/WyWQnzuU5V9e8zaifSdKff0NlrI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WyWQnzuU5V9e8zaifSdKff0NlrI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:8b:cc:cb:02:3d:3c:2f:1a:3a:19:d4:bb:af:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b25909f3b94e55f5ef336a27d274a7dfd0d96b2
Validity
Not Before: Jan 2 11:49:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=14477151168e52460bd166c3569f414f96280868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:49:68:c6:e2:50:67:90:fe:8b:80:93:6b:51:
b9:71:2d:f8:55:a3:69:c5:7d:8c:2a:2f:a7:68:e8:
14:eb:9c:f1:e1:89:c0:0a:03:c9:9a:d3:1e:b2:77:
56:0c:f3:83:67:bf:a6:26:fe:bb:b0:7f:e2:27:23:
bf:0b:29:b1:28:f9:76:8e:f6:cf:2a:94:8a:ce:bd:
3f:e4:54:4b:94:5c:ac:4c:1f:31:4f:92:70:ea:20:
49:48:9c:2b:6a:07:14:d7:03:42:84:b6:ca:49:18:
9b:28:f9:f2:83:9e:29:3f:e1:e2:08:f3:a3:ae:13:
cd:63:96:fb:d7:a1:a4:3f:91:8e:84:a1:af:0a:ab:
39:25:e5:df:46:d4:90:38:ce:ea:fa:f4:0c:8f:b5:
8b:f6:d9:10:c9:92:3d:fa:f7:38:d8:9e:28:cf:e2:
de:55:aa:2b:f2:4a:97:5a:0b:0e:aa:b2:1c:f5:61:
76:05:b2:fb:98:ae:9b:b2:69:8e:f8:70:49:cf:cb:
71:cd:f7:6c:e6:2e:85:e2:53:95:35:02:81:ac:7e:
9b:a5:41:65:f1:36:c1:04:e7:5e:61:c3:d7:cc:1b:
5b:4e:a7:63:f7:9c:41:2f:af:2d:16:ee:0e:32:40:
4c:df:71:a9:8d:5d:d6:0c:4b:77:34:a2:36:19:fe:
b7:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:47:71:51:16:8E:52:46:0B:D1:66:C3:56:9F:41:4F:96:28:08:68
X509v3 Authority Key Identifier:
keyid:5B:25:90:9F:3B:94:E5:5F:5E:F3:36:A2:7D:27:4A:7D:FD:0D:96:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WyWQnzuU5V9e8zaifSdKff0NlrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/e1b20f-4d6d-40e0-af8a-3f17cbcba5ca/1/FEdxURaOUkYL0WbDVp9BT5YoCGg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/e1b20f-4d6d-40e0-af8a-3f17cbcba5ca/1/WyWQnzuU5V9e8zaifSdKff0NlrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.98.200.0/22
IPv6:
2a04:c00::/29
Signature Algorithm: sha256WithRSAEncryption
35:31:60:3c:a7:7c:e3:5a:b6:c6:21:f7:65:8c:9c:84:a2:a0:
e5:7d:46:25:fe:b5:fc:34:e0:b0:13:92:cb:48:37:6f:df:13:
9e:bc:54:93:33:26:e8:2f:e5:7b:e5:0e:26:65:b0:a1:a7:8f:
38:fd:a2:69:d1:b1:00:cd:46:50:80:60:ed:70:05:50:a8:39:
a9:d3:62:5a:a5:8c:b0:e2:78:3c:d8:4e:4c:e3:bf:c5:0c:bf:
d6:af:6b:82:16:67:72:a0:2a:f4:ce:a6:8a:84:77:84:32:4a:
b9:65:87:04:a0:32:6d:c0:c3:e4:6f:ab:01:5b:cd:de:34:cb:
84:e7:32:06:f2:21:41:e0:46:0d:12:39:cd:c4:3d:9f:e1:f0:
58:94:fc:78:ca:c3:6c:57:9b:4c:c1:57:a6:4a:f8:a6:ba:aa:
d8:43:c8:3e:dc:08:47:6f:d9:d4:8c:af:32:66:37:5c:0c:53:
4e:a8:cb:ab:7c:49:d3:d8:63:32:27:12:6e:cf:23:a2:d2:fb:
73:d6:88:dc:77:48:87:03:02:a7:b3:fc:98:1e:0a:53:56:76:
57:fc:e8:5b:7d:5c:67:5f:4b:0e:21:80:ad:c4:29:94:f5:f4:
47:6f:d3:eb:2b:b9:f5:08:55:86:3c:ae:ce:8e:65:46:37:1e:
8a:17:1c:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 10:41:06 2025 by rpki-client