Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/FfGr-un4M5qS3iAEhkFV09RmhD8.roa
File: FfGr-un4M5qS3iAEhkFV09RmhD8.roa (raw, json)
Hash identifier: SGHONQWGkA5uEdcNNdqrKuafMozrB3z7UJ8XpLHd4+I=
Subject key identifier: 15:F1:AB:FA:E9:F8:33:9A:92:DE:20:04:86:41:55:D3:D4:66:84:3F
Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Certificate serial: 019420D65792036C538364EA03481F1C708A
Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/FfGr-un4M5qS3iAEhkFV09RmhD8.roa
Signing time: Wed 01 Jan 2025 07:48:25 +0000
ROA not before: Wed 01 Jan 2025 07:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16589
IP address blocks: 77.223.192.0/21 maxlen: 21
77.223.200.0/23 maxlen: 24
79.139.64.0/23 maxlen: 24
83.142.200.0/21 maxlen: 24
94.26.110.0/23 maxlen: 24
94.101.103.0/24 maxlen: 24
176.222.48.0/22 maxlen: 24
178.216.184.0/21 maxlen: 24
198.14.16.0/20 maxlen: 24
198.145.112.0/22 maxlen: 24
205.134.244.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 02:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:57:92:03:6c:53:83:64:ea:03:48:1f:1c:70:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Validity
Not Before: Jan 1 07:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=15f1abfae9f8339a92de2004864155d3d466843f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7d:2b:99:9f:62:1e:63:b7:32:6b:f1:81:d6:
4a:22:ba:93:39:1a:5f:95:8e:7b:b2:54:9c:79:fa:
fb:eb:45:36:6a:21:75:d5:eb:86:f1:e8:f9:d5:ab:
48:31:6e:12:09:fd:f1:4a:41:34:52:f5:7a:d6:f9:
55:12:14:b2:5d:b4:ba:91:35:4b:15:aa:8f:2e:38:
37:5a:8d:01:62:6d:9e:a9:e8:c3:ac:fe:03:ec:ba:
cc:14:e0:ad:1e:5e:4c:3a:13:ca:6e:9e:36:e4:0b:
b8:74:c7:81:6a:6e:8d:9c:61:cb:08:91:e9:91:7f:
99:ef:77:49:58:96:95:9a:9e:dc:b0:8b:c3:0e:94:
c3:77:12:b0:c1:c0:25:bc:2e:05:28:b8:d5:20:32:
90:38:9e:fe:ee:0e:b3:b3:2c:23:34:72:e2:05:df:
92:bd:bf:59:bd:ee:81:fc:e6:12:27:21:b6:2a:63:
64:db:4d:98:8e:e7:79:2b:a5:62:be:a5:de:05:93:
0a:e6:79:f8:50:c8:9e:b0:9e:97:46:73:c4:63:44:
84:eb:8d:12:13:19:e0:a2:dc:dd:69:4f:a6:cf:7b:
b3:55:44:bf:b1:52:49:23:6b:46:5f:b0:ae:9c:14:
9d:91:1a:e0:c9:3f:d4:d8:4c:c5:7c:06:4e:63:5a:
7b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:F1:AB:FA:E9:F8:33:9A:92:DE:20:04:86:41:55:D3:D4:66:84:3F
X509v3 Authority Key Identifier:
keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/FfGr-un4M5qS3iAEhkFV09RmhD8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.223.192.0-77.223.201.255
79.139.64.0/23
83.142.200.0/21
94.26.110.0/23
94.101.103.0/24
176.222.48.0/22
178.216.184.0/21
198.14.16.0/20
198.145.112.0/22
205.134.244.0/22
Signature Algorithm: sha256WithRSAEncryption
29:3b:c6:e0:c0:5b:30:12:cc:7c:8f:35:13:dd:83:69:2f:03:
c3:e4:69:ae:f5:ac:82:7f:c0:6a:e2:05:66:85:de:d9:54:0a:
89:92:28:01:5f:08:12:bf:50:69:f2:a2:ac:cc:2e:07:df:1a:
57:fe:84:dd:fc:f6:25:12:a1:2e:93:6f:5a:22:88:74:e0:e3:
f2:70:76:81:22:f4:99:50:2e:bc:1f:c8:10:90:3b:db:27:cb:
53:e9:7b:af:bc:d2:08:d6:9c:6a:af:06:d4:40:37:92:48:d1:
00:c7:74:35:b3:be:67:3e:6d:67:71:d0:e4:7a:de:d9:37:0c:
2c:1e:cf:49:6c:77:ea:3a:8d:3a:ea:6e:e3:4b:02:01:04:fa:
ee:49:10:da:26:f0:15:7d:85:0b:1f:e4:9c:07:57:e1:77:b7:
fa:d2:af:76:3b:07:84:96:44:25:09:7a:26:2a:b9:b8:27:4b:
20:76:28:e1:fc:7e:19:35:39:c6:c5:66:ce:c2:ce:73:2e:2f:
e3:9b:50:17:71:b7:e8:bb:47:4a:eb:52:66:1e:a3:62:71:2d:
ee:75:6c:6e:47:61:94:e6:3b:dc:a3:56:b9:0d:de:97:76:5c:
8e:5e:8f:23:b3:d1:a9:0c:b9:75:11:1f:67:5c:6a:d7:d8:24:
c8:d5:61:92
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Feb 5 11:57:54 2025 by rpki-client