Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/fw6EErcKUkE6wVnp4BcQXOeheJE.roa
File: fw6EErcKUkE6wVnp4BcQXOeheJE.roa (raw, json)
Hash identifier: X3Re7oVemXlG1F0GxrgY8aRLn+cfxjtelXf5RJOURd0=
Subject key identifier: 7F:0E:84:12:B7:0A:52:41:3A:C1:59:E9:E0:17:10:5C:E7:A1:78:91
Certificate issuer: /CN=48724742c3f54e179b82e6af8e33e0d9d2fbd4d5
Certificate serial: 019426D9D329FDCDF2C31295B59FDE5A7811
Authority key identifier: 48:72:47:42:C3:F5:4E:17:9B:82:E6:AF:8E:33:E0:D9:D2:FB:D4:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SHJHQsP1ThebguavjjPg2dL71NU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/fw6EErcKUkE6wVnp4BcQXOeheJE.roa
Signing time: Thu 02 Jan 2025 11:49:57 +0000
ROA not before: Thu 02 Jan 2025 11:49:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35104
IP address blocks: 185.48.148.0/23 maxlen: 23
185.48.148.0/24 maxlen: 24
185.48.149.0/24 maxlen: 24
185.48.150.0/24 maxlen: 24
185.48.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SHJHQsP1ThebguavjjPg2dL71NU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 19:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:d3:29:fd:cd:f2:c3:12:95:b5:9f:de:5a:78:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48724742c3f54e179b82e6af8e33e0d9d2fbd4d5
Validity
Not Before: Jan 2 11:49:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7f0e8412b70a52413ac159e9e017105ce7a17891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:53:f8:81:1a:d6:65:77:4a:92:22:c8:70:1a:
d2:73:8a:ca:84:46:2c:83:1d:97:43:e5:a7:3a:19:
02:a1:fa:0d:33:db:fe:d2:da:de:ef:0f:7e:eb:34:
c0:0c:ef:cd:da:06:c6:bb:30:0c:bd:ca:c3:0d:2c:
97:2c:e9:80:d1:b3:57:53:94:fa:20:0a:07:bb:c9:
c3:3b:69:a4:fc:3c:9a:aa:76:15:25:0d:cd:f1:3f:
10:87:42:dd:13:a2:d4:b2:48:77:24:4f:63:cb:bb:
55:b5:95:87:b5:98:09:92:bf:c7:8e:6e:60:97:a3:
ca:55:db:45:18:c4:89:df:ac:56:6c:ee:ad:62:8b:
de:57:78:69:9d:7c:f9:67:18:2f:63:43:86:d9:f8:
95:95:c3:78:7d:6e:99:9d:d0:25:ae:d2:1a:88:72:
d4:3c:f1:53:97:3a:18:ad:52:e9:1f:41:6b:2d:32:
38:23:e7:a8:88:df:f3:66:b9:1a:c8:9d:ed:35:20:
49:08:3d:47:13:62:2d:35:e6:e9:07:1f:90:27:05:
45:8a:7f:57:74:42:c2:49:89:f0:a6:b8:cd:99:b1:
35:bb:70:86:d9:f0:41:1f:10:0e:4a:f3:69:5f:c8:
6d:15:c7:93:a5:f2:3f:f8:04:cf:c5:90:d7:cb:f9:
8f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:0E:84:12:B7:0A:52:41:3A:C1:59:E9:E0:17:10:5C:E7:A1:78:91
X509v3 Authority Key Identifier:
keyid:48:72:47:42:C3:F5:4E:17:9B:82:E6:AF:8E:33:E0:D9:D2:FB:D4:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SHJHQsP1ThebguavjjPg2dL71NU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/fw6EErcKUkE6wVnp4BcQXOeheJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4f6ee-00a8-4a4a-868c-35e027836ba3/1/SHJHQsP1ThebguavjjPg2dL71NU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.48.148.0/22
Signature Algorithm: sha256WithRSAEncryption
c6:91:39:d0:1d:8e:65:e9:8d:04:16:70:83:d5:d0:d9:ee:b5:
97:c7:7d:71:44:bb:44:27:f2:26:fa:83:62:a6:7e:83:2d:30:
46:4e:3c:ee:8b:dd:1b:6c:19:25:81:fb:42:7c:bc:cc:24:45:
51:4c:dd:45:a3:1c:78:2c:39:e9:a8:8e:cf:11:1c:82:ac:48:
78:50:3f:43:75:c9:82:96:51:f2:b3:96:87:a1:da:10:f7:29:
c9:9d:0e:7b:77:ac:a5:08:4f:23:6a:15:a0:75:f6:e5:09:b1:
8a:ed:bf:b3:ae:92:a4:67:2d:af:3d:9f:1c:d2:cb:01:88:b5:
96:2f:a7:4f:dd:3b:2b:c9:b2:2c:3d:80:39:a4:93:4a:09:4a:
75:d9:9f:6c:22:31:2e:a6:90:04:f8:72:68:56:21:58:0b:5d:
41:4a:2d:76:c4:34:a2:ae:6a:e8:ba:12:99:44:76:e6:8d:25:
63:b6:ab:2e:e3:4a:55:5a:83:65:37:9e:e2:67:1c:2f:8f:32:
29:1a:5e:25:df:d2:a5:37:30:58:2e:27:9c:1b:15:2c:6e:7f:
e3:c9:05:e0:2b:ce:b8:e4:cd:f6:45:2a:d4:0c:e5:d1:de:84:
22:f1:be:a5:66:99:6a:f7:72:48:ed:34:cc:be:47:6d:0f:02:
7d:2a:29:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:42:52 2025 by rpki-client