Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/F5olz2vPkVkTAq5AH7BDsTVTRZo.roa
File: F5olz2vPkVkTAq5AH7BDsTVTRZo.roa (raw, json)
Hash identifier: qV85SevHAs2hmPFkxFZYUCLiZm0oS+p1ij3KLPw6+Hg=
Subject key identifier: 17:9A:25:CF:6B:CF:91:59:13:02:AE:40:1F:B0:43:B1:35:53:45:9A
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 0194258F05EDCA9F3C12E94CC0FED22A2C76
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/F5olz2vPkVkTAq5AH7BDsTVTRZo.roa
Signing time: Thu 02 Jan 2025 05:48:37 +0000
ROA not before: Thu 02 Jan 2025 05:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200475
IP address blocks: 185.255.212.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 03:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:05:ed:ca:9f:3c:12:e9:4c:c0:fe:d2:2a:2c:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 2 05:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=179a25cf6bcf91591302ae401fb043b13553459a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d0:0b:f3:8d:69:6f:86:5d:22:b2:b2:9a:76:
8b:5e:ad:46:79:cf:4f:2d:e9:37:c9:1d:be:23:a8:
77:14:48:71:b4:0a:70:d6:27:28:5a:ec:62:9e:38:
5f:2c:25:0d:db:87:62:6e:2b:65:10:66:a4:bb:98:
68:fa:2a:52:58:36:bb:7c:72:73:f6:b1:50:b6:66:
75:6f:47:2b:29:e1:58:d4:14:b9:17:09:85:0c:32:
87:f6:b1:33:3d:cd:ae:8a:19:8a:9d:02:d8:4e:8b:
ad:4d:bb:6b:f6:33:bd:dc:1b:fc:95:e1:6f:d7:5e:
73:38:7c:26:39:ed:8a:0e:5f:57:9b:bc:a6:cf:ae:
23:64:fc:d9:c2:3c:a7:a6:33:5f:0d:b9:7f:b0:54:
4e:0f:5a:48:67:04:6c:c3:86:a2:38:d3:86:63:f9:
73:46:32:de:98:ff:12:88:58:0b:bc:33:53:43:87:
0a:e8:3e:9a:67:df:f9:cd:f9:d1:f3:8b:5a:52:41:
2f:9a:ce:01:32:53:f3:0f:5f:f6:bc:ca:8c:06:45:
60:5d:7f:26:d2:68:54:57:f6:14:15:8c:89:c0:b0:
b5:f3:4a:ab:c7:93:1f:3c:41:a8:5f:78:8e:e6:6a:
11:79:95:ca:34:87:85:20:37:6d:a9:9c:a2:45:a3:
d3:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:9A:25:CF:6B:CF:91:59:13:02:AE:40:1F:B0:43:B1:35:53:45:9A
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/F5olz2vPkVkTAq5AH7BDsTVTRZo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.212.0/22
Signature Algorithm: sha256WithRSAEncryption
54:2a:aa:dc:3d:24:a4:4d:83:04:f6:8d:3d:65:14:24:55:3e:
df:e4:8d:7b:f0:c1:99:00:23:dd:fa:0d:53:f2:e4:58:1d:f9:
71:f6:10:87:e0:04:3f:57:23:ac:65:a9:ca:f1:6a:57:f4:1e:
83:be:53:c8:0c:35:bb:f6:e2:81:3b:e8:73:11:18:bb:43:7b:
61:0f:78:38:37:69:2a:32:6d:8f:74:c0:f8:67:8d:dc:98:c9:
23:1f:b5:93:6f:2f:6a:ac:62:9f:52:b3:46:39:cf:ef:50:36:
db:68:21:99:8d:b0:b1:33:b9:35:e8:a6:03:9a:87:92:03:2c:
81:a9:db:8a:ec:72:76:74:fb:bf:b2:05:45:7c:26:22:00:b9:
d3:fb:b7:e7:9c:78:4e:5d:0b:a4:f2:fe:13:b8:79:ce:35:9d:
80:ed:29:51:da:b4:6b:06:70:16:ac:f7:09:29:a9:8e:2a:3d:
de:28:1b:65:12:8e:6b:c0:93:df:73:f9:d8:26:3c:e6:a6:87:
49:ed:e1:14:ad:f8:30:82:92:40:46:41:8d:51:a3:9a:bb:bd:
17:99:25:6e:1b:23:bb:3a:42:08:35:91:2f:88:16:b9:21:31:
88:c2:80:8c:a5:2a:d2:5b:1f:1c:5a:f6:5c:11:9d:c8:f8:32:
8c:a6:0f:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:10:37 2025 by rpki-client