Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/Fi_TM4K4PYpSezLxC5qNEiPOZ3Q.roa
File: Fi_TM4K4PYpSezLxC5qNEiPOZ3Q.roa (raw, json)
Hash identifier: DTiudzjdSu7JP8slciOiBe/Ykx5OQa6RusVSJBvKWj0=
Subject key identifier: 16:2F:D3:33:82:B8:3D:8A:52:7B:32:F1:0B:9A:8D:12:23:CE:67:74
Certificate issuer: /CN=274d91cfa0a6db9bfd9154a441858e00e38bdbd6
Certificate serial: 01941F8C8AEAA412F45083F4E95DEEA88A06
Authority key identifier: 27:4D:91:CF:A0:A6:DB:9B:FD:91:54:A4:41:85:8E:00:E3:8B:DB:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J02Rz6Cm25v9kVSkQYWOAOOL29Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/Fi_TM4K4PYpSezLxC5qNEiPOZ3Q.roa
Signing time: Wed 01 Jan 2025 01:48:11 +0000
ROA not before: Wed 01 Jan 2025 01:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209088
IP address blocks: 5.181.212.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/J02Rz6Cm25v9kVSkQYWOAOOL29Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:8a:ea:a4:12:f4:50:83:f4:e9:5d:ee:a8:8a:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=274d91cfa0a6db9bfd9154a441858e00e38bdbd6
Validity
Not Before: Jan 1 01:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=162fd33382b83d8a527b32f10b9a8d1223ce6774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:de:e1:53:5b:78:79:ec:8e:a3:cc:a6:a1:b8:
5a:14:b7:62:0a:a2:bc:86:c9:07:93:45:85:85:ba:
60:ce:06:fc:4c:00:1f:d1:1a:96:8e:5f:94:5f:fa:
1e:01:0d:1c:f2:79:b0:23:d3:c2:cd:78:28:a7:fc:
2c:64:7e:73:23:20:03:1c:3c:5c:0b:c9:e9:3d:08:
04:80:89:ce:be:9f:55:40:a3:88:96:32:cb:a6:5e:
60:78:10:06:cb:f9:2c:20:44:9c:a4:6d:2e:7b:11:
1f:5d:79:db:10:5c:00:8f:3d:94:88:31:eb:5a:6b:
26:48:b4:e0:57:21:f2:1b:0e:36:af:bb:b6:05:c8:
8d:99:e8:59:90:bb:1e:2a:08:f2:22:95:b9:03:21:
d4:c4:30:68:21:5c:8b:90:64:e2:e2:bd:9e:63:7c:
12:9f:2f:89:23:32:79:94:83:36:77:4a:d5:fd:4f:
5d:2b:4d:c7:ed:f9:be:0f:a8:e9:ea:1d:82:a9:45:
d7:9b:24:bf:39:4d:50:7b:24:f1:ed:3a:05:61:ad:
01:4a:4e:7a:6d:ee:47:3b:f5:4b:92:36:3e:3c:cc:
e7:54:8b:f7:44:d8:ed:44:10:dc:cb:1d:92:3a:ee:
0c:f0:1c:11:a0:9a:0f:e3:21:71:2e:cf:42:67:2d:
36:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:2F:D3:33:82:B8:3D:8A:52:7B:32:F1:0B:9A:8D:12:23:CE:67:74
X509v3 Authority Key Identifier:
keyid:27:4D:91:CF:A0:A6:DB:9B:FD:91:54:A4:41:85:8E:00:E3:8B:DB:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J02Rz6Cm25v9kVSkQYWOAOOL29Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/Fi_TM4K4PYpSezLxC5qNEiPOZ3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.212.0/22
Signature Algorithm: sha256WithRSAEncryption
08:79:c7:61:fd:c5:2f:02:91:2f:1a:5e:cb:e8:6e:6f:3e:a9:
50:f8:e6:1e:8c:82:04:1b:31:e2:f2:03:d9:78:36:c2:29:b5:
37:e5:65:05:34:d2:d3:69:ed:b3:f7:ea:f2:0c:45:00:dc:34:
62:ab:39:a1:cd:5e:cf:5e:31:0b:18:b2:1e:7e:fb:ad:cc:b1:
63:cb:9d:79:33:f4:33:93:7f:c1:46:2b:00:7c:25:d9:67:43:
8c:7a:4f:b2:f9:c7:54:47:9d:48:d9:5e:7b:2c:e3:13:5e:29:
33:d7:50:a1:1d:f0:87:91:5e:92:b8:2f:62:98:0e:c9:3b:f0:
ec:01:ff:15:32:74:8c:a1:b1:80:a3:e9:56:cb:7a:3d:71:d5:
ee:67:c9:e2:9e:37:e7:be:2d:12:be:85:01:47:75:35:ab:ea:
6f:a9:09:08:ee:92:ba:fe:86:4e:31:ab:c6:22:c9:b1:2d:fb:
24:45:ac:22:86:40:f5:71:71:c2:ab:c4:9c:22:74:be:58:82:
1c:a8:c3:8f:2c:d0:4a:dd:18:86:51:45:00:cb:d3:4a:c7:ad:
f3:0f:65:47:88:fc:7d:c1:cc:a3:c3:d2:7a:a5:8c:89:be:00:
7a:85:4b:35:a6:7e:6e:cf:b1:45:09:cd:bc:10:d4:07:55:2e:
77:3a:99:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 13:05:34 2025 by rpki-client