Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/1-koDCeDfpeFx2DT7jE9B1I8AnsQ.roa
File: 1-koDCeDfpeFx2DT7jE9B1I8AnsQ.roa (raw, json)
Hash identifier: Yip/h4PD3+9zAiK45n1xjrGJLzotH/GKgYgsl2whd6k=
Subject key identifier: FA:4A:03:09:E0:DF:A5:E1:71:D8:34:FB:8C:4F:41:D4:8F:00:9E:C4
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 0194258EFCD6D943AA659AD19CCF5D4207A2
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/1-koDCeDfpeFx2DT7jE9B1I8AnsQ.roa
Signing time: Thu 02 Jan 2025 05:48:35 +0000
ROA not before: Thu 02 Jan 2025 05:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49147
IP address blocks: 85.187.0.0/24 maxlen: 24
85.187.5.0/24 maxlen: 24
85.187.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:fc:d6:d9:43:aa:65:9a:d1:9c:cf:5d:42:07:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 2 05:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fa4a0309e0dfa5e171d834fb8c4f41d48f009ec4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:9f:7b:cd:c7:1b:37:10:76:35:28:2a:a0:2c:
c0:01:45:e8:14:2a:47:33:8f:fa:a5:31:c3:ea:59:
e3:a4:43:93:a2:8f:93:29:f3:f3:36:29:b8:8b:e2:
ee:c5:44:cf:3b:ce:7e:e7:10:95:db:14:fe:5d:75:
55:8a:65:f1:82:42:18:3e:62:10:e6:33:df:85:ed:
c2:08:10:59:7a:b3:af:25:09:ee:ee:8e:91:d7:79:
ee:40:80:e5:58:d8:d9:6f:3c:0a:02:58:20:b7:3b:
46:7b:c9:2c:97:d7:62:9a:bd:8b:8c:62:e3:55:90:
0c:62:b5:a4:67:03:ee:07:69:13:af:e0:83:c6:76:
eb:ff:66:3c:68:25:76:01:72:67:2f:3e:19:03:1f:
db:8c:16:d8:93:f4:7d:6f:fb:c5:50:3c:cd:79:3f:
cb:13:4b:8a:31:29:2a:42:d4:f6:e4:c8:15:89:7c:
77:2e:bb:82:fd:15:43:c1:ef:ea:be:1f:87:98:ed:
35:aa:ed:81:c6:74:bb:f7:ed:97:77:0d:ce:c1:c1:
9f:1c:bf:5f:35:ba:aa:fc:b2:1e:69:7c:62:50:11:
ff:3c:d6:d4:7e:1b:35:49:fa:05:79:64:95:1a:4b:
89:42:84:fa:44:96:cc:54:dc:00:4c:6e:02:c7:db:
d7:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:4A:03:09:E0:DF:A5:E1:71:D8:34:FB:8C:4F:41:D4:8F:00:9E:C4
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/1-koDCeDfpeFx2DT7jE9B1I8AnsQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.187.0.0/24
85.187.5.0/24
85.187.12.0/24
Signature Algorithm: sha256WithRSAEncryption
12:53:a3:de:ab:ce:82:3c:aa:cc:b6:00:2a:ca:76:31:51:0f:
e7:b9:6b:37:89:e4:da:1d:cb:c7:93:7c:90:ed:9f:f5:45:ad:
82:27:04:b9:fd:76:b6:fd:ba:29:e9:c0:b6:ae:e7:49:0e:99:
13:e3:89:d5:b8:df:d3:bc:3f:01:5b:5a:7b:48:1d:a5:15:8c:
12:a2:39:8a:de:50:45:10:bc:fb:16:50:2d:0b:1c:9b:a9:23:
20:bd:65:b2:77:c4:d5:63:20:68:92:7d:97:98:aa:93:6d:9d:
0e:dd:28:5f:1e:ef:4d:0d:53:12:d3:36:4b:98:8f:3d:81:49:
09:8b:a5:d4:83:7a:e4:57:a6:ff:cf:97:9a:bb:b3:c0:4f:86:
f0:48:97:57:0e:cd:a9:dc:ac:19:5c:8b:38:01:01:76:b2:ff:
1d:ff:9f:b0:f3:8e:67:35:78:d4:e2:88:ad:94:39:ef:89:5b:
71:bc:e5:86:a2:dc:0b:f7:91:1a:1e:f4:1a:7e:dd:87:fb:1e:
e2:43:42:e4:db:7a:3f:28:8f:21:b4:26:f0:fa:17:9a:53:eb:
07:22:3b:35:c7:4a:c1:ae:e1:96:35:39:cf:cf:8e:38:09:81:
e7:1c:9c:0f:74:bb:4d:a4:93:e7:a5:73:85:08:c2:0f:17:ca:
12:73:42:59
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Apr 6 07:45:24 2025 by rpki-client