Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/FeALzwmlHVBsdnrHTXpUuCdKMKk.roa
File: FeALzwmlHVBsdnrHTXpUuCdKMKk.roa (raw, json)
Hash identifier: LOwvL3odoyBFINMdFWH/VCQRIEFy3WTnNyeQKYYbRfU=
Subject key identifier: 15:E0:0B:CF:09:A5:1D:50:6C:76:7A:C7:4D:7A:54:B8:27:4A:30:A9
Certificate issuer: /CN=b3c51b0c063cfc16943fc9a47e2c805990f6eaae
Certificate serial: 0194236A04DFBCB12C1A85A114F7D1D6D45F
Authority key identifier: B3:C5:1B:0C:06:3C:FC:16:94:3F:C9:A4:7E:2C:80:59:90:F6:EA:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/FeALzwmlHVBsdnrHTXpUuCdKMKk.roa
Signing time: Wed 01 Jan 2025 19:48:58 +0000
ROA not before: Wed 01 Jan 2025 19:48:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214452
IP address blocks: 195.35.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.mft
rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:04:df:bc:b1:2c:1a:85:a1:14:f7:d1:d6:d4:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3c51b0c063cfc16943fc9a47e2c805990f6eaae
Validity
Not Before: Jan 1 19:48:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=15e00bcf09a51d506c767ac74d7a54b8274a30a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:60:02:81:87:90:4a:43:40:29:8b:fd:f7:3e:
28:93:f3:92:fb:4f:57:da:0f:a8:61:7f:97:86:db:
a5:9d:80:6d:b4:15:e1:f9:0f:f8:4b:fd:08:72:8d:
96:2a:04:6b:11:47:cf:ad:16:ce:ca:61:9b:f7:fe:
cd:9e:3e:a2:5f:5c:b8:d1:4d:35:bb:aa:a0:87:b6:
19:e9:25:d3:e8:80:f5:b5:26:78:61:ed:18:fa:0d:
bd:4d:39:c4:c3:16:59:51:a6:f4:dc:f1:33:92:6d:
88:22:d1:38:7a:ef:da:ef:f6:a1:e0:e5:01:ef:e1:
af:58:28:43:1e:26:df:1e:bf:fe:26:27:87:f5:69:
96:10:a2:94:b2:56:3b:9e:f9:0b:6e:7a:57:00:fb:
52:d0:40:83:bf:14:d3:ec:29:1e:d9:7a:b1:91:aa:
ec:ed:a0:30:5c:6f:6a:39:82:e3:66:fd:20:ff:ac:
0c:39:a9:c7:53:73:f7:14:13:06:34:60:42:48:b4:
3d:b4:ee:19:e2:61:4a:ef:43:04:b0:c5:da:71:7f:
9b:e3:07:32:54:42:02:f9:30:30:77:bb:3b:a5:26:
ed:c0:f1:6d:da:cd:31:49:3d:42:2d:a6:21:03:d7:
52:5d:cd:f4:f9:63:30:42:3c:56:fd:b9:b4:a1:60:
6e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:E0:0B:CF:09:A5:1D:50:6C:76:7A:C7:4D:7A:54:B8:27:4A:30:A9
X509v3 Authority Key Identifier:
keyid:B3:C5:1B:0C:06:3C:FC:16:94:3F:C9:A4:7E:2C:80:59:90:F6:EA:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/FeALzwmlHVBsdnrHTXpUuCdKMKk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.35.92.0/24
Signature Algorithm: sha256WithRSAEncryption
47:12:9c:65:ce:36:0d:22:68:65:98:a9:1d:76:c2:1d:d2:03:
7d:29:9a:5f:71:fd:9c:08:48:68:55:a4:b6:7e:ca:28:30:69:
47:e7:66:62:ac:70:b1:05:79:de:68:b4:e2:62:d3:3c:9b:e3:
35:e8:e7:80:6b:b2:d2:f2:e8:e6:bb:a1:00:61:1b:eb:63:e7:
03:74:d1:d7:cd:07:5b:6b:07:d5:20:0f:34:67:8a:ba:a3:3a:
de:68:17:be:74:96:b7:f9:ed:9c:4a:85:c4:b6:7d:66:32:58:
2c:16:9d:d6:32:84:ce:e2:a3:91:17:eb:57:e8:9d:06:d9:94:
e7:3b:f4:42:99:65:75:8e:92:86:35:af:35:3e:ac:86:2e:c3:
2a:7e:ca:07:e8:fd:7d:92:2e:21:8c:8d:39:8d:3c:f1:5f:e6:
9e:23:4f:a5:19:a8:0d:e8:5b:35:7e:22:2d:06:d2:38:e1:1a:
f0:c2:84:ea:3f:86:96:3c:a0:be:a8:ef:ab:e2:d4:11:94:f1:
99:ce:f0:b8:1d:4d:fb:77:c4:71:5d:19:a3:ef:41:bb:4b:31:
d5:a9:e5:93:68:6f:28:de:80:37:da:fe:0c:52:2d:f7:60:b5:
e0:ac:74:9c:f6:60:be:8e:a6:15:50:aa:35:12:89:b1:d0:5f:
18:45:9b:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 09:34:38 2025 by rpki-client