Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/FF3Fhf46ijaJdir6AHd5U86cRE8.roa
File: FF3Fhf46ijaJdir6AHd5U86cRE8.roa (raw, json)
Hash identifier: yP1i69A0L9Ot5SoeYpxjZognObucw8jdfd916fOFZQ0=
Subject key identifier: 14:5D:C5:85:FE:3A:8A:36:89:76:2A:FA:00:77:79:53:CE:9C:44:4F
Certificate issuer: /CN=e916dc9db4e49de71b2fd0819dae853aeb053b06
Certificate serial: 0196D39BE1B52286C282044C6BC451D69DFA
Authority key identifier: E9:16:DC:9D:B4:E4:9D:E7:1B:2F:D0:81:9D:AE:85:3A:EB:05:3B:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6RbcnbTknecbL9CBna6FOusFOwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/FF3Fhf46ijaJdir6AHd5U86cRE8.roa
Signing time: Thu 15 May 2025 11:02:10 +0000
ROA not before: Thu 15 May 2025 11:02:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216129
IP address blocks: 107.161.154.0/24 maxlen: 24
185.28.84.0/24 maxlen: 24
199.83.103.0/24 maxlen: 24
202.181.188.0/24 maxlen: 24
2a13:d200::/32 maxlen: 32
2a13:d200:6::/48 maxlen: 48
2a13:d200:7::/48 maxlen: 48
2a13:d200:8::/48 maxlen: 48
2a13:d200:9::/48 maxlen: 48
2a13:d200:10::/48 maxlen: 48
2a13:d200:11::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/6RbcnbTknecbL9CBna6FOusFOwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/6RbcnbTknecbL9CBna6FOusFOwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6RbcnbTknecbL9CBna6FOusFOwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d3:9b:e1:b5:22:86:c2:82:04:4c:6b:c4:51:d6:9d:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e916dc9db4e49de71b2fd0819dae853aeb053b06
Validity
Not Before: May 15 11:02:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=145dc585fe3a8a3689762afa00777953ce9c444f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3e:47:2e:a3:cb:50:ef:d6:fc:e8:b1:f7:aa:
31:a8:9e:5a:dc:fa:39:67:d0:84:05:79:1d:bf:25:
1d:79:bc:e7:b3:3f:7d:ce:68:fe:e9:97:83:31:8b:
8e:ac:04:c0:08:0f:ab:4d:93:fc:59:46:12:f1:c9:
1f:35:78:18:81:ad:32:f1:5b:73:41:b0:ad:10:17:
4d:5c:52:b5:8a:1c:3f:78:7c:9f:59:5e:c0:cd:3f:
91:fc:7b:3a:c1:db:e9:cd:a6:fb:3e:5d:16:6b:a0:
72:8d:ee:fe:16:1d:03:9a:b6:de:e2:39:3e:1f:7b:
75:41:28:da:a7:75:04:4a:09:74:5f:f3:5b:09:b5:
fd:4a:1a:72:c9:d1:d3:dc:7e:58:cc:4f:88:1d:2b:
26:66:91:51:38:28:52:c6:38:9a:c4:a5:19:40:13:
4e:0d:72:3a:40:19:e0:0e:56:16:5f:5e:bf:06:9b:
d7:f3:e4:d2:8f:94:11:0e:87:ce:1a:aa:f1:23:5b:
2f:d8:f9:5c:a0:42:de:0c:0f:8d:80:7c:51:cc:f9:
94:87:27:76:65:96:1e:df:ea:dc:eb:63:a8:11:b9:
31:ce:63:d0:8b:66:0e:ab:e1:38:a7:16:38:e7:88:
2c:9e:b4:c2:ba:68:01:c7:25:0b:ff:65:4d:d9:13:
0c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:5D:C5:85:FE:3A:8A:36:89:76:2A:FA:00:77:79:53:CE:9C:44:4F
X509v3 Authority Key Identifier:
keyid:E9:16:DC:9D:B4:E4:9D:E7:1B:2F:D0:81:9D:AE:85:3A:EB:05:3B:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6RbcnbTknecbL9CBna6FOusFOwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/FF3Fhf46ijaJdir6AHd5U86cRE8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/6RbcnbTknecbL9CBna6FOusFOwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
107.161.154.0/24
185.28.84.0/24
199.83.103.0/24
202.181.188.0/24
IPv6:
2a13:d200::/32
Signature Algorithm: sha256WithRSAEncryption
2b:78:6d:1b:61:84:23:5c:45:fc:5d:cb:0a:a2:b7:18:af:71:
c2:1b:cc:ba:ee:e2:a9:c8:f4:4e:59:1d:56:50:d2:a6:50:a5:
90:84:5e:f4:c8:16:25:bb:43:71:f9:17:b0:1e:ef:bd:ef:d9:
cb:8c:83:eb:7b:a7:8e:58:de:12:97:e0:26:2d:23:9d:ec:43:
83:46:b1:0e:73:72:62:77:33:6f:8f:70:d8:32:24:c2:35:a2:
4d:2a:00:59:3c:b9:a9:86:f5:7b:9a:59:a9:25:ad:5b:a4:42:
94:94:da:eb:83:99:fe:90:fa:c6:41:75:eb:b6:1b:46:c9:98:
c3:c4:fa:c1:71:6f:4c:ce:77:0d:4f:26:70:22:cb:f0:80:5f:
ec:98:35:db:30:3d:f7:ff:54:87:87:90:36:74:84:78:78:ee:
82:8e:ce:86:af:7e:9c:57:4e:ca:71:39:12:bf:88:1c:58:0b:
ac:08:de:e7:ba:b6:2e:b4:3e:a9:d6:38:2e:af:87:79:e4:c4:
d7:83:3d:88:21:dd:c8:86:ee:f0:b8:12:e2:d3:6f:a5:a6:0e:
75:f4:a2:99:6f:43:dd:ff:ae:7f:50:ff:cc:f4:ba:32:db:bd:
4c:0e:21:67:92:63:0e:5e:1d:bd:33:33:cf:a5:5c:b8:ef:9e:
e1:09:61:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:14:25 2025 by rpki-client