Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/fKuQAzM4T0dDo9h7v0PJI_1wtFI.roa
File: fKuQAzM4T0dDo9h7v0PJI_1wtFI.roa (raw, json)
Hash identifier: c6JyqnNUMFe7sI4GCdo7hUQRa+LhIQOxZq8/HL71dPA=
Subject key identifier: 7C:AB:90:03:33:38:4F:47:43:A3:D8:7B:BF:43:C9:23:FD:70:B4:52
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 019423D70791DDFA7AC663734F0FC132833C
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/fKuQAzM4T0dDo9h7v0PJI_1wtFI.roa
Signing time: Wed 01 Jan 2025 21:48:02 +0000
ROA not before: Wed 01 Jan 2025 21:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24875
IP address blocks: 185.106.92.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:07:91:dd:fa:7a:c6:63:73:4f:0f:c1:32:83:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 1 21:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7cab900333384f4743a3d87bbf43c923fd70b452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4a:96:9e:2b:d9:a8:fc:60:44:42:e8:df:44:
a5:fb:b7:4f:ba:af:37:e2:23:77:af:42:0a:ca:2d:
d9:27:14:90:39:09:84:74:cf:7c:0e:0f:9e:67:b4:
bf:8c:94:ca:2b:93:63:b2:26:3a:47:c3:d2:ff:52:
4b:5f:99:eb:5b:9e:92:96:0a:6e:ba:b3:a5:31:44:
6a:d2:76:3d:5a:dd:11:f3:89:82:4e:51:07:8d:bf:
25:e8:d1:5b:b7:e1:b8:d3:ec:08:5a:72:a6:c9:f3:
3f:da:94:db:3b:af:ea:ad:4a:40:68:df:9a:12:a7:
85:85:58:d3:6b:b0:bf:73:2e:f9:29:d7:b1:3c:39:
6f:82:67:6d:19:6a:bb:45:a1:86:a7:e4:fb:ea:32:
0c:5c:c7:63:65:68:c8:32:51:e2:df:78:e9:84:ae:
66:32:48:1a:f5:c9:fe:88:bd:df:b2:e8:f0:9b:03:
c0:fd:8c:51:33:f8:e2:42:e6:65:2e:f1:81:72:86:
94:19:b5:75:37:e8:92:3e:3f:43:93:10:b3:23:08:
e7:77:18:be:05:d2:9a:4d:fd:89:fa:fe:7e:09:ee:
9d:05:b5:d7:98:af:88:36:e4:d7:ca:e6:32:81:08:
d5:3b:06:5d:05:c3:ea:55:0f:0b:40:e3:1a:9d:29:
94:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:AB:90:03:33:38:4F:47:43:A3:D8:7B:BF:43:C9:23:FD:70:B4:52
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/fKuQAzM4T0dDo9h7v0PJI_1wtFI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.106.92.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:f6:67:af:b2:0e:28:f7:10:68:bb:5f:72:4b:a6:bb:35:f3:
a9:12:79:80:9d:e1:e5:1f:34:a1:87:63:3b:07:aa:50:64:68:
42:23:5f:64:7c:cd:48:6d:e3:f4:b7:ed:72:79:42:4f:63:1d:
e0:c0:08:9e:c3:f5:6b:a1:07:5d:52:45:4c:3a:8a:12:d8:be:
93:ec:de:0c:0c:9c:02:10:96:b3:42:07:37:fe:64:1b:e8:59:
82:54:a6:fb:b8:76:30:ea:5e:3b:0a:73:bf:9b:a5:2d:93:75:
ea:0c:3d:b0:0b:d0:ab:d2:0a:3c:5a:06:43:b5:a3:3b:b1:8a:
6d:b2:70:dd:f0:2a:b0:b6:25:25:f6:b3:58:f3:17:e2:93:2d:
f7:f3:d1:a0:c6:5e:d6:ec:79:58:31:0b:04:fa:96:d4:02:e2:
c4:81:f1:7e:bc:8e:9f:e9:79:7f:c6:9e:8d:da:f6:4a:44:7d:
fa:8c:22:db:f1:0a:14:f3:24:22:e3:f1:98:31:49:c8:d7:62:
44:fd:7f:73:60:18:c6:fd:07:8e:f0:51:e7:91:dc:f2:c1:cb:
fe:a4:fa:8a:1b:9e:02:f0:72:0b:39:a3:b0:d7:14:82:f5:9a:
42:31:44:7c:40:78:b5:d0:17:59:f1:ea:96:3d:e7:ac:bb:95:
ed:c6:a1:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:08:09 2025 by rpki-client