Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/F5-uFC-HCfacb0NKiHjplTkPkFo.roa
File: F5-uFC-HCfacb0NKiHjplTkPkFo.roa (raw, json)
Hash identifier: R1kKdXwnjdSj1rrwlVEZQ4hXuVYuBcjFKUVlP5z/PR0=
Subject key identifier: 17:9F:AE:14:2F:87:09:F6:9C:6F:43:4A:88:78:E9:95:39:0F:90:5A
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0194222061E3ACA1B1C5F4E1C9B1DA60675D
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/F5-uFC-HCfacb0NKiHjplTkPkFo.roa
Signing time: Wed 01 Jan 2025 13:48:54 +0000
ROA not before: Wed 01 Jan 2025 13:48:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 398452
IP address blocks: 185.108.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:61:e3:ac:a1:b1:c5:f4:e1:c9:b1:da:60:67:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 1 13:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=179fae142f8709f69c6f434a8878e995390f905a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d0:14:d1:a5:cd:9a:4d:a4:cb:a0:96:93:38:
19:b3:0f:34:50:1a:3a:0d:f8:31:cd:e0:a5:93:b6:
68:85:9c:db:0e:08:15:6e:06:f5:2b:d5:f5:ba:a0:
b3:84:72:98:c7:e5:89:bc:3e:9f:5c:3f:c7:dd:53:
a1:4d:0c:6b:ff:62:02:21:99:f5:6a:26:c7:da:5c:
99:12:72:1b:21:71:7d:16:67:fd:1d:e7:b4:96:c7:
d4:95:59:b9:b9:47:7d:fa:5c:e9:79:ba:03:a4:9e:
cc:24:4c:96:c3:34:54:31:e4:af:e8:d1:21:3f:cc:
7b:0a:79:be:d5:49:94:90:ae:9b:d4:da:b1:9a:0e:
15:20:52:e9:27:d2:3d:4e:d5:d9:33:6b:fe:2a:65:
9b:ad:b1:d9:2b:c5:38:12:14:dc:14:76:11:8e:fd:
a6:e4:3d:bf:77:1e:0c:73:71:41:32:3e:60:cd:00:
45:04:88:f0:8c:75:bf:26:9a:a0:ae:61:8b:63:45:
59:94:7b:d0:af:b5:6a:4f:b3:40:66:22:53:0d:32:
36:d1:4c:68:03:58:a7:ae:f6:c4:0e:51:49:67:f5:
95:6d:14:92:b4:6f:92:b0:6c:02:3a:c2:b5:05:3a:
3a:e2:c0:30:2d:2f:e9:4a:7f:36:07:5f:d2:d3:b3:
46:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:9F:AE:14:2F:87:09:F6:9C:6F:43:4A:88:78:E9:95:39:0F:90:5A
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/F5-uFC-HCfacb0NKiHjplTkPkFo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.108.205.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:38:35:19:fa:17:ef:b0:69:d4:a0:ae:8e:ec:be:10:79:e2:
38:f5:c9:40:4f:00:19:1a:72:5a:32:8a:d1:6c:9b:3f:95:82:
57:a1:bb:ff:42:b0:8e:97:d2:b7:13:57:7a:da:e6:25:5d:fc:
81:62:eb:7c:66:e6:8e:10:72:82:00:12:a6:7d:f4:10:60:bb:
98:d9:15:26:c2:cf:1f:04:e8:ad:11:51:cf:a7:ad:80:d5:7a:
9d:00:67:f8:cb:94:4a:0a:35:1f:66:d0:a1:fd:3b:cc:a1:c2:
84:d7:6b:72:f8:fc:9d:c1:d2:b3:5f:ae:52:7f:77:36:c9:5e:
c9:fd:f8:b7:43:7e:cb:d6:cb:d5:74:8f:0c:9e:ac:01:df:40:
60:8c:87:53:b2:7b:ee:36:05:e9:57:d0:3f:5c:61:60:81:a4:
51:55:ce:e5:62:43:b2:f8:a5:52:e4:42:14:a1:ff:57:f3:7f:
60:48:fc:aa:a3:d7:c0:52:52:bf:a1:ca:f9:7c:bd:07:57:4f:
ed:22:7d:16:3d:ad:16:1d:17:a8:cf:7f:36:5b:a9:7e:e6:c8:
d6:f3:a6:03:b8:52:3b:17:43:0c:b8:59:ed:c0:16:ea:4c:33:
2c:fb:d0:78:dc:95:10:c5:1a:bb:85:15:2e:7d:28:8e:25:53:
7c:05:2d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 09:28:25 2025 by rpki-client