Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/ft2dBL2dxWtdVnnU4dlHVTXL4C0.roa
File: ft2dBL2dxWtdVnnU4dlHVTXL4C0.roa (raw, json)
Hash identifier: HQtGMREFODQOAzloACeTixd5hA5RT+3n/TffbecMmN8=
Subject key identifier: 7E:DD:9D:04:BD:9D:C5:6B:5D:56:79:D4:E1:D9:47:55:35:CB:E0:2D
Certificate issuer: /CN=f3b2805d8776eedeb7aa4cbe5af568cdb2629fc2
Certificate serial: 01941FFA5C6AE5FFD9B0D1B70197D80A9A8F
Authority key identifier: F3:B2:80:5D:87:76:EE:DE:B7:AA:4C:BE:5A:F5:68:CD:B2:62:9F:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87KAXYd27t63qky-WvVozbJin8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/ft2dBL2dxWtdVnnU4dlHVTXL4C0.roa
Signing time: Wed 01 Jan 2025 03:48:08 +0000
ROA not before: Wed 01 Jan 2025 03:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7018
IP address blocks: 178.255.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/87KAXYd27t63qky-WvVozbJin8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:5c:6a:e5:ff:d9:b0:d1:b7:01:97:d8:0a:9a:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3b2805d8776eedeb7aa4cbe5af568cdb2629fc2
Validity
Not Before: Jan 1 03:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7edd9d04bd9dc56b5d5679d4e1d9475535cbe02d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:96:6a:cb:45:37:95:a1:5a:6a:24:1f:e4:6d:
e3:fc:b2:0c:02:eb:11:22:3c:77:35:f7:ad:44:74:
4a:74:68:51:74:c6:b2:77:54:7e:7c:56:c9:99:79:
f4:7b:94:25:06:72:b4:38:58:4e:51:d5:e3:85:af:
9d:cd:d9:48:a6:c9:53:db:d4:a9:3f:cb:08:4d:ac:
5b:8b:e9:f4:3d:37:1c:6b:2b:08:18:d4:7c:f2:45:
fa:df:7a:e2:61:55:17:3b:d5:a2:67:bf:25:b0:5f:
ee:2d:be:86:36:ad:2d:3c:dc:b5:b7:f1:44:59:e0:
16:f5:40:f4:c7:c3:43:87:1a:c3:8d:03:ae:da:5b:
b2:f1:7e:4c:da:2d:4e:05:c4:f6:a6:48:1b:48:e1:
4c:b0:47:ab:7d:c5:c3:3d:73:6c:50:34:20:2e:f8:
cb:07:a1:7b:b9:48:ac:c1:4a:24:b9:cb:c6:5d:39:
9f:35:85:9b:f5:bf:1c:99:18:2d:89:0f:40:f0:41:
9d:b1:24:fd:a6:bf:4b:a1:0e:98:b3:4f:ff:fe:1c:
92:ec:26:b6:5c:12:55:3b:a8:e7:fa:84:e5:9b:24:
c5:b7:fa:8b:aa:cd:58:39:2a:26:89:fc:f0:f9:8a:
bf:be:ea:4a:9c:72:c8:3e:70:93:e0:89:03:14:ea:
9a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:DD:9D:04:BD:9D:C5:6B:5D:56:79:D4:E1:D9:47:55:35:CB:E0:2D
X509v3 Authority Key Identifier:
keyid:F3:B2:80:5D:87:76:EE:DE:B7:AA:4C:BE:5A:F5:68:CD:B2:62:9F:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87KAXYd27t63qky-WvVozbJin8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/ft2dBL2dxWtdVnnU4dlHVTXL4C0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.255.219.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:ff:43:8a:02:2d:8d:0a:a1:dd:b8:f4:89:73:76:2d:d9:2a:
fd:42:8d:8f:b4:72:6b:a5:23:f1:9b:ef:5c:5f:69:aa:c6:95:
26:c9:5f:f0:4f:5c:36:f2:19:0b:6b:d5:a5:7e:d9:0e:a0:0a:
68:58:48:a4:91:e6:3d:5c:8d:62:05:ea:60:33:e4:db:e6:b2:
3b:1f:bf:0c:d1:bb:11:5c:34:3d:66:18:7c:05:21:a5:4d:31:
c2:ed:ec:f8:4e:60:14:eb:b1:13:98:66:66:cd:76:0c:2a:8b:
85:e2:de:1b:18:64:e9:61:a9:bc:f7:d2:35:36:09:53:d0:d3:
d9:f3:93:88:bd:13:76:e2:cf:62:de:1f:4b:a5:b7:3d:33:47:
22:37:5c:dc:40:bb:dd:7d:02:30:a5:6c:98:f2:be:ad:44:11:
87:04:4c:32:96:8d:71:50:3e:de:8d:b0:05:79:b9:7f:02:7c:
6b:fd:64:5b:dc:f7:ee:c2:80:34:96:f1:6d:52:ad:a7:ac:d5:
d5:2c:34:97:9b:d1:ff:14:61:f0:74:b1:70:af:ba:29:37:90:
b3:7f:46:5b:63:3b:0c:61:4a:2a:eb:a7:63:bd:fa:e8:59:31:
55:af:3f:ee:62:42:7e:82:0e:a6:0d:51:b2:0f:cf:44:07:db:
ab:6c:7b:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:59:35 2025 by rpki-client