Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/fquyeKX2nPcx6NXez35Fwck9X7o.roa
File: fquyeKX2nPcx6NXez35Fwck9X7o.roa (raw, json)
Hash identifier: 94wWJ6U6/Z2p2HM3XP72iD2yXj6p2e+2K8+u8kOZuSQ=
Subject key identifier: 7E:AB:B2:78:A5:F6:9C:F7:31:E8:D5:DE:CF:7E:45:C1:C9:3D:5F:BA
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 01942747F2873FD682AECE4CF58A139C3258
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/fquyeKX2nPcx6NXez35Fwck9X7o.roa
Signing time: Thu 02 Jan 2025 13:50:14 +0000
ROA not before: Thu 02 Jan 2025 13:50:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51859
IP address blocks: 185.167.144.0/22 maxlen: 24
212.72.214.0/24 maxlen: 24
213.91.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:f2:87:3f:d6:82:ae:ce:4c:f5:8a:13:9c:32:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 2 13:50:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7eabb278a5f69cf731e8d5decf7e45c1c93d5fba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:49:f9:f9:0c:4c:04:3e:f8:0b:8b:51:c5:06:
58:5e:87:2c:b7:a0:85:83:cf:4c:c9:a4:ae:3e:16:
b2:bb:17:78:71:15:a9:3f:b1:ce:f7:2d:4f:17:8d:
20:6a:d5:66:0e:95:8e:a0:b3:50:8a:28:fb:ae:79:
af:4c:05:4c:97:64:7b:c3:d1:fd:42:f1:a1:23:3c:
fa:4a:4c:7a:66:a6:4f:a4:dc:01:96:5b:0a:54:02:
79:97:92:47:d2:b2:91:f9:4c:b5:f2:24:21:6c:27:
fa:74:3d:72:b9:70:ec:ef:b7:a6:58:9d:0d:50:68:
72:fd:db:01:d3:16:94:ce:66:a6:cc:4c:b5:70:39:
1c:66:c2:86:b6:52:b0:ab:f7:6e:18:47:04:95:3c:
df:77:d6:12:28:6e:08:41:0c:25:d3:53:f1:f2:fb:
8b:31:cd:80:8f:f9:88:f6:37:97:4d:da:fc:9e:80:
12:d4:84:0d:07:e7:83:7d:7e:6c:fc:3c:91:6e:4b:
2b:7d:5f:7b:c9:d6:21:29:c0:e1:1a:10:70:c3:a4:
d8:51:2a:81:f4:2e:c9:eb:50:61:24:f9:55:39:5a:
3e:73:e9:44:12:fd:59:dc:cc:f7:d0:35:ba:45:fd:
97:83:10:2c:0a:4f:d2:59:a1:91:f2:5d:81:66:68:
41:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:AB:B2:78:A5:F6:9C:F7:31:E8:D5:DE:CF:7E:45:C1:C9:3D:5F:BA
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/fquyeKX2nPcx6NXez35Fwck9X7o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.167.144.0/22
212.72.214.0/24
213.91.181.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:0a:64:5b:b9:32:dc:d5:4e:6d:46:9f:d4:26:28:36:3d:c9:
3b:1d:64:aa:cb:13:c0:22:e9:a4:94:e2:bd:ac:e9:7f:73:b8:
08:04:8e:f8:4b:9d:88:85:be:95:09:2e:70:25:48:84:8b:44:
c3:3c:bd:14:4a:00:39:12:48:3f:28:a2:72:a6:ef:f6:c7:3d:
8a:2b:05:f2:de:08:fd:15:65:8e:0b:1a:bf:a1:5f:05:77:a1:
09:96:d1:33:e0:d0:b8:b0:aa:d6:d6:7c:5b:6a:95:47:46:d5:
0f:d6:a5:ad:d3:b8:07:5b:90:ba:95:8d:48:45:a1:e3:db:d1:
29:4c:9b:1f:5c:1b:07:83:03:4f:9c:a2:45:66:17:cc:cb:9f:
5a:f7:55:67:dc:d0:d2:2f:66:58:de:26:8b:36:b1:0e:9f:b5:
ce:b7:74:8b:a1:b0:eb:53:18:4a:b5:cb:7d:d8:94:0c:31:25:
66:a9:b3:87:9d:68:46:a1:d7:26:85:e5:d3:12:f2:5d:0e:1a:
44:30:69:8b:71:1c:cc:58:a4:ea:7a:18:89:ff:04:b0:e7:36:
f9:3b:81:e7:e9:20:82:5a:44:75:92:b2:80:99:d6:48:1c:0f:
0e:3d:a0:34:15:4d:77:95:ad:2a:85:fb:a5:76:1b:81:80:d0:
bd:88:de:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 21:54:41 2025 by rpki-client