Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/fPUfeSK-zqhYqo9RI5ZO_RvTAnI.roa
File: fPUfeSK-zqhYqo9RI5ZO_RvTAnI.roa (raw, json)
Hash identifier: 2BLh0mt6BN3cuK7N2qRXjH6g7/lfrSvhbtCftnz6qGo=
Subject key identifier: 7C:F5:1F:79:22:BE:CE:A8:58:AA:8F:51:23:96:4E:FD:1B:D3:02:72
Certificate issuer: /CN=0e0f4872ad1c1f4fcb213b6b2edb388a2d9c9a23
Certificate serial: 019425FD9BC7538F9EB5734DC7861028C762
Authority key identifier: 0E:0F:48:72:AD:1C:1F:4F:CB:21:3B:6B:2E:DB:38:8A:2D:9C:9A:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dg9Icq0cH0_LITtrLts4ii2cmiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/fPUfeSK-zqhYqo9RI5ZO_RvTAnI.roa
Signing time: Thu 02 Jan 2025 07:49:24 +0000
ROA not before: Thu 02 Jan 2025 07:49:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197823
IP address blocks: 194.152.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dg9Icq0cH0_LITtrLts4ii2cmiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 08:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:9b:c7:53:8f:9e:b5:73:4d:c7:86:10:28:c7:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e0f4872ad1c1f4fcb213b6b2edb388a2d9c9a23
Validity
Not Before: Jan 2 07:49:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7cf51f7922becea858aa8f5123964efd1bd30272
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:8c:1b:e6:23:e3:a0:0f:cd:f6:c8:cb:a9:12:
d0:c9:78:92:fe:21:04:30:44:e5:d6:3d:3a:51:64:
89:ce:35:d6:7c:1a:66:5d:94:7e:6d:4b:c6:b7:a9:
51:c0:7e:ed:83:ea:89:86:66:d6:d3:21:0e:14:23:
f5:5b:db:9a:4f:c4:cf:29:9d:e7:f7:a5:9d:4d:32:
21:63:d8:eb:0b:0b:a5:50:ad:72:ee:06:d0:22:26:
32:e2:35:15:7d:97:94:60:5f:9e:71:4b:3a:cc:f9:
70:df:f9:a1:66:c0:18:6d:d0:f2:69:7c:4c:c2:10:
20:cb:27:b3:a8:93:95:0c:a4:e7:2f:85:b0:58:df:
dc:e2:2f:2d:d3:02:23:e5:01:4a:43:7c:26:e2:54:
b4:35:6f:a0:20:58:b7:4d:fd:29:3f:a4:f0:e6:65:
9b:0d:a9:e1:32:b7:2e:d7:cb:33:07:42:ba:c3:c6:
dd:5b:14:bc:90:28:c8:90:d0:5b:42:36:be:fb:de:
f7:db:1c:be:ec:9e:da:f9:f5:b7:24:fc:c0:59:b7:
c6:39:68:9f:6a:3d:ca:03:6d:30:51:25:8f:d1:5e:
37:fc:01:67:75:c7:21:ad:f5:a8:15:a8:6e:e7:f8:
65:e1:fe:39:07:5c:be:35:78:60:19:ae:bf:40:2f:
8c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:F5:1F:79:22:BE:CE:A8:58:AA:8F:51:23:96:4E:FD:1B:D3:02:72
X509v3 Authority Key Identifier:
keyid:0E:0F:48:72:AD:1C:1F:4F:CB:21:3B:6B:2E:DB:38:8A:2D:9C:9A:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dg9Icq0cH0_LITtrLts4ii2cmiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/fPUfeSK-zqhYqo9RI5ZO_RvTAnI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.152.215.0/24
Signature Algorithm: sha256WithRSAEncryption
34:f2:b0:3a:f4:23:d6:f6:08:8e:31:2f:e9:5a:6f:e7:47:6f:
d1:83:c4:b3:39:cd:6c:a7:6e:bf:47:d3:aa:46:34:70:2a:27:
a3:0f:fd:af:12:49:13:ed:76:74:9e:78:6a:20:c6:f9:56:db:
dd:4b:ac:c4:ef:e7:e2:17:a7:e9:b7:43:76:43:a0:23:c6:b7:
8e:0a:9a:c2:43:c6:87:16:c4:68:30:e9:35:a1:8f:1d:4b:2a:
d2:80:d0:2e:12:ec:2d:3c:86:4e:32:cc:1d:7b:bc:b4:58:5d:
c7:65:7e:6b:a0:1f:20:74:69:44:2d:6c:15:00:ef:72:c0:f3:
fb:1b:94:fb:91:7a:53:e2:26:98:49:25:4c:c6:8f:e5:b6:6e:
81:20:65:44:f2:03:ed:45:43:ad:d9:8a:0b:c7:c9:d2:69:6c:
90:f2:96:d2:9e:ed:94:86:08:6d:ef:14:e5:fa:6d:dd:00:b8:
58:3e:93:a3:b2:04:c9:1f:38:a8:04:88:c2:a9:2d:e4:47:06:
eb:fe:e0:49:17:06:61:6e:ff:af:f6:e4:08:2b:41:31:ab:51:
e7:0e:2b:29:e1:02:65:c8:1c:ee:4b:4e:14:fe:4a:33:90:95:
8b:d3:4f:50:cf:c1:d8:67:71:b6:fb:86:44:d7:20:60:4b:6a:
99:b9:23:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:41:22 2025 by rpki-client