Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/Fn3fZBfq9OQZua6I7PupAYUzrsY.roa
File: Fn3fZBfq9OQZua6I7PupAYUzrsY.roa (raw, json)
Hash identifier: DY2rjxbe/gDhR1EYj/4Rv9E1KD3wieQAwxRczPV0GLM=
Subject key identifier: 16:7D:DF:64:17:EA:F4:E4:19:B9:AE:88:EC:FB:A9:01:85:33:AE:C6
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 019527520BC88CD636482A2FB9AA6F7627A5
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/Fn3fZBfq9OQZua6I7PupAYUzrsY.roa
Signing time: Fri 21 Feb 2025 07:04:03 +0000
ROA not before: Fri 21 Feb 2025 07:04:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 395092
IP address blocks: 2.56.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 20:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:27:52:0b:c8:8c:d6:36:48:2a:2f:b9:aa:6f:76:27:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Feb 21 07:04:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=167ddf6417eaf4e419b9ae88ecfba9018533aec6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:01:69:16:18:58:67:06:2b:41:e2:51:ac:8c:
8a:2d:b0:55:32:95:4f:b8:14:88:44:79:c7:56:e9:
d3:7d:15:ef:7f:11:87:b9:e7:cb:b4:98:d2:d6:94:
79:8e:41:f0:05:fe:35:ed:5e:16:ac:72:cd:d9:ce:
23:0b:9b:e7:ce:6e:ba:58:8e:07:05:1e:e8:e0:59:
0b:d5:56:a8:4a:cc:82:3e:c6:c4:61:a7:a4:e9:a8:
a4:f8:12:20:fc:12:f1:b6:2b:ff:c1:a2:3c:18:e6:
d3:0a:8e:85:a4:42:55:23:a2:c1:18:b8:18:64:12:
ba:9b:22:81:7a:71:67:97:82:f6:40:76:dc:c4:fe:
5c:d7:eb:9e:39:44:bd:30:c5:ec:ac:56:9d:ac:c6:
f7:ec:0a:84:37:2b:e8:c7:a0:e2:5e:ae:94:53:6c:
74:3c:d3:2d:f8:3b:8f:d7:c5:fb:b2:72:02:e1:d7:
a2:f5:5c:a2:db:ed:55:81:aa:7f:d4:5e:00:98:5d:
ed:a1:28:a8:8d:d0:1a:49:f3:24:d5:50:65:7c:60:
a8:c1:9a:1e:c2:14:be:e4:39:10:85:29:28:d6:c4:
66:ed:44:89:74:98:fb:41:78:b2:90:34:ff:24:bc:
17:e0:0f:cd:b9:63:25:a3:b5:d3:31:e1:58:1e:c1:
80:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:7D:DF:64:17:EA:F4:E4:19:B9:AE:88:EC:FB:A9:01:85:33:AE:C6
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/Fn3fZBfq9OQZua6I7PupAYUzrsY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.139.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:c0:66:4d:59:98:21:92:0c:bd:4f:e0:35:8a:99:97:d9:d8:
ae:38:4e:e9:8c:c7:f7:46:8d:c7:ee:31:0c:a6:5c:7b:c4:c1:
9d:43:ea:ac:20:bb:99:0f:e6:5c:5a:0d:f8:f8:f1:43:5a:e1:
e5:7b:ba:d8:82:e1:98:88:ee:15:f5:cd:a7:5c:70:ae:40:38:
68:9e:6c:87:86:62:13:10:45:ea:88:1c:6f:d4:01:77:45:af:
37:8d:f5:da:23:0a:20:7c:8a:3a:09:47:38:85:81:62:7d:d9:
84:ca:b7:4e:37:63:04:96:df:7d:4e:9c:60:db:9f:2a:ff:01:
e5:34:8d:0b:85:63:a7:74:2b:b7:2f:3c:17:52:d1:63:d2:a7:
e5:1f:75:9b:9d:19:63:24:f3:46:be:4e:4c:ad:a2:aa:32:ee:
bb:ef:ed:80:41:98:e3:b8:40:11:67:c8:7c:8c:ec:ed:c2:ec:
4b:0d:05:2e:7d:62:b5:47:84:a9:e1:73:28:33:61:b5:78:f6:
36:45:56:4d:6f:99:27:ef:aa:5c:d6:ab:35:d3:33:74:6f:04:
e8:6e:50:75:dc:3f:8c:36:e4:1c:08:36:31:10:1b:58:22:4b:
f0:f2:94:e2:ae:97:f4:9e:d6:e6:ee:9b:e7:a0:49:6b:29:6c:
63:a9:2c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:41:04 2025 by rpki-client