Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/FdgrAlXHTUPAeTheMsde8YkawNs.roa
File: FdgrAlXHTUPAeTheMsde8YkawNs.roa (raw, json)
Hash identifier: rje6Lwajr0YyCxZcxBMKIrTaIp18lo7SaPvG3dwiyVA=
Subject key identifier: 15:D8:2B:02:55:C7:4D:43:C0:79:38:5E:32:C7:5E:F1:89:1A:C0:DB
Certificate issuer: /CN=40254d4a767ad099606e442e092f91241a363670
Certificate serial: 019424B38EAA21030FEDD806FD3F12FD06DB
Authority key identifier: 40:25:4D:4A:76:7A:D0:99:60:6E:44:2E:09:2F:91:24:1A:36:36:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCVNSnZ60JlgbkQuCS-RJBo2NnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/FdgrAlXHTUPAeTheMsde8YkawNs.roa
Signing time: Thu 02 Jan 2025 01:48:54 +0000
ROA not before: Thu 02 Jan 2025 01:48:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207864
IP address blocks: 193.22.108.0/24 maxlen: 24
193.22.168.0/24 maxlen: 24
193.22.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/QCVNSnZ60JlgbkQuCS-RJBo2NnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/QCVNSnZ60JlgbkQuCS-RJBo2NnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QCVNSnZ60JlgbkQuCS-RJBo2NnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 19:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:8e:aa:21:03:0f:ed:d8:06:fd:3f:12:fd:06:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40254d4a767ad099606e442e092f91241a363670
Validity
Not Before: Jan 2 01:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=15d82b0255c74d43c079385e32c75ef1891ac0db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c1:d4:5d:1c:72:8d:f3:d9:33:75:57:26:5a:
8e:ad:ef:21:e4:14:c1:2b:ff:48:73:ff:db:a0:f1:
a4:91:45:75:56:06:df:ea:35:ec:c3:3d:c0:f7:16:
0c:0e:2c:eb:37:34:a2:cb:56:fc:37:34:53:17:63:
7b:5f:33:f1:fc:1f:57:83:4f:84:d7:66:80:0a:0c:
95:86:07:7e:db:06:9d:2a:f5:63:67:1d:e8:45:01:
10:16:34:f6:4e:7b:57:c6:28:cc:05:8e:f1:ab:6b:
0a:d9:ac:1f:79:4b:9c:85:3a:4a:3d:3b:bb:e3:4b:
ec:6f:dd:fe:2a:8a:4a:7e:bf:1c:67:83:76:f0:2a:
5d:67:9d:86:d3:7d:1e:1c:67:a9:01:bf:59:44:f1:
0d:ad:95:39:b7:d1:8e:1f:97:cc:dc:49:9d:58:a8:
81:db:10:20:56:88:ae:56:e5:fa:eb:7f:71:b6:0e:
29:f5:ce:c1:74:37:41:89:19:cf:e5:24:51:f9:d4:
7c:46:c1:62:8d:ec:a5:3d:9c:6f:d3:40:f5:1d:31:
53:c9:e0:12:49:cf:0d:a0:16:6d:60:8d:ac:b1:d1:
bc:a3:2b:21:b4:83:9d:1a:57:5a:68:a3:84:38:37:
4d:56:33:d2:f0:30:82:d5:e3:10:c2:b3:34:0c:5f:
23:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:D8:2B:02:55:C7:4D:43:C0:79:38:5E:32:C7:5E:F1:89:1A:C0:DB
X509v3 Authority Key Identifier:
keyid:40:25:4D:4A:76:7A:D0:99:60:6E:44:2E:09:2F:91:24:1A:36:36:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCVNSnZ60JlgbkQuCS-RJBo2NnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/FdgrAlXHTUPAeTheMsde8YkawNs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/QCVNSnZ60JlgbkQuCS-RJBo2NnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.22.108.0/24
193.22.168.0/24
193.22.170.0/24
Signature Algorithm: sha256WithRSAEncryption
59:9c:f9:7c:15:a2:60:01:cb:57:28:11:80:81:8a:9e:4f:be:
80:7f:40:f1:aa:f6:ae:eb:9e:03:76:29:01:1f:ab:84:71:6a:
6a:17:d3:e8:de:4b:5e:db:5c:c5:4e:5c:44:a0:87:ad:26:20:
da:c4:4f:fc:d2:41:10:45:2b:30:00:0a:4e:fe:ae:db:2e:a8:
e6:34:ef:ba:0c:fb:5e:42:93:14:65:3a:b2:61:29:4d:3f:41:
84:cd:7f:49:bd:b3:9b:4a:c8:9a:d7:b5:f3:d1:c1:d4:98:2f:
e9:1c:0e:28:86:7e:33:71:34:88:da:fa:b5:6c:29:44:e9:14:
d9:c9:04:f4:e1:8f:97:c8:06:cb:bc:b3:38:a6:f6:06:f9:bf:
e5:5f:4b:23:32:28:fa:c5:a9:6f:84:bc:94:fc:be:b1:d7:70:
20:de:8a:76:6c:43:aa:42:ba:fe:9f:e5:56:1e:ef:9e:3c:94:
d3:1a:5d:31:96:bb:13:b5:cb:e4:e8:a4:bc:ba:5f:17:64:b0:
e0:89:14:34:eb:c1:3a:e7:ca:95:17:bf:02:a8:c8:72:d5:ca:
9c:e2:ed:73:a8:01:9c:66:5d:eb:80:09:6f:ae:20:b0:71:81:
de:b5:e5:1c:5e:48:a6:fb:0e:67:89:1a:7b:d5:16:79:b5:5a:
08:80:fd:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:54:53 2025 by rpki-client