Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/foz-XGD-1ugjMs0Fiq2Vqd2Q6oA.roa
File: foz-XGD-1ugjMs0Fiq2Vqd2Q6oA.roa (raw, json)
Hash identifier: ck4+NfPkU8wvZrU6NwgK2YYCM2pv6EA8TqrJialxWbg=
Subject key identifier: 7E:8C:FE:5C:60:FE:D6:E8:23:32:CD:05:8A:AD:95:A9:DD:90:EA:80
Certificate issuer: /CN=81a7ce8bacbeceeb16f600b607d1bfd08033b302
Certificate serial: 019420D5EC6F3A43CFA33BA43E83B74834E9
Authority key identifier: 81:A7:CE:8B:AC:BE:CE:EB:16:F6:00:B6:07:D1:BF:D0:80:33:B3:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/foz-XGD-1ugjMs0Fiq2Vqd2Q6oA.roa
Signing time: Wed 01 Jan 2025 07:47:58 +0000
ROA not before: Wed 01 Jan 2025 07:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44569
IP address blocks: 93.190.232.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 03:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:ec:6f:3a:43:cf:a3:3b:a4:3e:83:b7:48:34:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81a7ce8bacbeceeb16f600b607d1bfd08033b302
Validity
Not Before: Jan 1 07:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7e8cfe5c60fed6e82332cd058aad95a9dd90ea80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:8c:5e:31:e0:20:3e:48:91:4f:10:69:c6:1e:
73:aa:4b:41:ce:ab:be:fd:82:96:73:df:b8:3a:e2:
d1:5a:96:b2:f1:c6:cd:f0:8f:11:a3:55:57:e2:31:
1c:a2:18:b1:68:05:09:e6:40:a5:bc:ee:66:98:03:
d9:ea:ef:a8:5b:d9:0b:8a:84:65:f1:36:2a:62:6a:
7b:96:8e:01:34:5b:a4:2b:9e:11:34:0c:ef:7c:be:
77:f5:a1:5b:6a:e4:a9:f3:92:9a:8d:1c:b8:78:fa:
c6:43:57:81:59:bb:7f:6b:af:77:f3:f6:70:b3:44:
21:aa:e0:44:0c:08:a0:ba:17:0c:c7:30:de:39:1c:
d7:66:ad:1d:d0:7e:40:59:93:a5:8e:a1:e2:0d:e0:
5a:44:68:c3:0d:e5:ae:d3:c1:ff:9e:3c:a3:bf:9e:
3e:f5:99:fe:64:7d:96:79:4d:bf:ea:f3:40:9c:01:
ec:9f:33:cb:12:a5:05:16:38:b5:a9:1e:d6:c5:1e:
30:09:1d:06:60:54:93:82:e6:54:6e:6d:b1:2d:7f:
b1:ad:f9:01:49:07:7c:89:51:85:bb:98:1c:69:bb:
5c:0a:e5:19:ff:a6:80:d0:70:63:a4:fd:a6:a0:73:
de:a6:48:a5:6b:1f:f3:6a:88:08:73:a3:34:d6:b3:
c6:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:8C:FE:5C:60:FE:D6:E8:23:32:CD:05:8A:AD:95:A9:DD:90:EA:80
X509v3 Authority Key Identifier:
keyid:81:A7:CE:8B:AC:BE:CE:EB:16:F6:00:B6:07:D1:BF:D0:80:33:B3:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/foz-XGD-1ugjMs0Fiq2Vqd2Q6oA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.190.232.0/21
Signature Algorithm: sha256WithRSAEncryption
b9:7b:c0:2a:08:9c:9f:5d:5e:89:10:b2:bd:73:80:8c:95:94:
93:9e:01:ed:1a:f3:f9:7d:21:8e:66:f6:94:8b:10:14:20:83:
60:47:d8:3d:38:e7:90:8f:22:75:ba:b3:39:a5:e4:fe:79:d4:
78:17:ae:17:21:45:c0:a2:10:47:fa:0d:b2:aa:6f:a5:9b:54:
d0:fa:a9:6b:78:fe:0b:dc:75:b0:2b:b1:6a:6c:fd:0a:02:46:
e8:5e:36:f6:ca:eb:9c:47:5d:be:e5:d8:02:f6:26:a5:3d:1c:
05:22:e1:b6:88:a4:73:b2:0f:2e:5e:a2:22:7f:0c:f9:b4:c9:
d5:d2:40:ec:03:fd:67:c6:e6:28:e0:9f:ee:a2:50:47:76:17:
d8:f4:f3:e4:c2:16:b2:fa:5a:8d:4e:f0:df:f9:f3:19:81:a7:
4c:4d:82:a8:e5:66:14:b1:cb:9c:89:fc:58:78:44:d0:d8:e4:
c3:be:c0:d0:e7:d9:d7:22:bb:8c:31:df:69:a7:48:fb:bd:a6:
9d:f1:ab:38:be:e7:b4:3e:31:e2:24:37:12:3e:83:04:f9:39:
b6:e8:47:2e:01:8b:96:bb:16:4c:5b:f3:4c:14:6a:5a:3b:c5:
88:0c:2b:6f:e1:d9:e8:ab:a3:1e:fa:df:78:82:e4:c7:1b:6b:
6f:aa:c0:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 10:03:21 2025 by rpki-client