Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/f02661-b591-4f5e-b369-f74a5f2bcb47/1/fKufob24rjFmDrGHIRnqnRhk_04.roa
File: fKufob24rjFmDrGHIRnqnRhk_04.roa (raw, json)
Hash identifier: v3safCF9eXY/C1Hr4VINM56t3JBmrqwVep5g+aDbQfA=
Subject key identifier: 7C:AB:9F:A1:BD:B8:AE:31:66:0E:B1:87:21:19:EA:9D:18:64:FF:4E
Certificate issuer: /CN=5e8cb6da358a8d2d270c305f8b61f3c990d5766e
Certificate serial: 0194E07D117A130E4773306E21E81A05CFA4
Authority key identifier: 5E:8C:B6:DA:35:8A:8D:2D:27:0C:30:5F:8B:61:F3:C9:90:D5:76:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xoy22jWKjS0nDDBfi2HzyZDVdm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/f02661-b591-4f5e-b369-f74a5f2bcb47/1/fKufob24rjFmDrGHIRnqnRhk_04.roa
Signing time: Fri 07 Feb 2025 12:58:00 +0000
ROA not before: Fri 07 Feb 2025 12:58:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28876
IP address blocks: 81.89.160.0/20 maxlen: 21
217.24.48.0/20 maxlen: 20
217.24.48.0/21 maxlen: 21
217.24.56.0/21 maxlen: 21
2a00:9d80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/f02661-b591-4f5e-b369-f74a5f2bcb47/1/Xoy22jWKjS0nDDBfi2HzyZDVdm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/f02661-b591-4f5e-b369-f74a5f2bcb47/1/Xoy22jWKjS0nDDBfi2HzyZDVdm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xoy22jWKjS0nDDBfi2HzyZDVdm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 05:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:e0:7d:11:7a:13:0e:47:73:30:6e:21:e8:1a:05:cf:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e8cb6da358a8d2d270c305f8b61f3c990d5766e
Validity
Not Before: Feb 7 12:58:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7cab9fa1bdb8ae31660eb1872119ea9d1864ff4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0d:b4:a0:3d:1f:5f:a1:ec:d6:a6:2a:ae:e4:
de:a1:88:ac:b2:30:46:a6:ca:7e:89:16:55:fa:23:
a9:1e:65:65:2d:56:68:bc:45:5f:83:24:97:82:2f:
79:06:d1:c2:41:93:2c:cb:71:36:1d:fb:e0:6d:12:
c3:9e:c5:33:d7:74:04:04:01:fe:e7:a7:77:ec:ba:
03:14:7e:c0:e4:7d:d6:31:87:1f:be:4e:68:cd:a1:
58:3b:e8:7f:c7:81:b8:80:d8:2b:a9:c1:64:22:8d:
d3:98:2c:28:2d:7e:30:ca:b5:ee:7f:e7:e0:71:47:
08:47:d1:f6:42:e7:85:f7:0e:e2:16:1c:d4:1a:9b:
bd:a4:dd:d0:33:33:fc:b3:9a:c4:2c:5a:25:22:23:
63:ff:ba:25:ab:73:df:e3:ba:5c:a9:83:93:ad:01:
c1:8c:f8:f9:cd:e5:02:90:ad:5f:98:9b:98:7f:9c:
72:b2:6f:c7:3d:3d:4b:41:6a:bf:d9:aa:2c:44:16:
41:b1:1d:3c:de:ae:6b:bf:d1:f1:67:4e:26:8e:d3:
18:48:f0:6c:ab:15:e9:f2:c2:0c:e3:bb:41:a1:24:
8e:83:d5:76:04:f0:36:48:21:6b:ce:dd:7f:f6:07:
6f:5e:27:ae:be:e1:85:ee:66:bb:8b:99:10:57:09:
41:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:AB:9F:A1:BD:B8:AE:31:66:0E:B1:87:21:19:EA:9D:18:64:FF:4E
X509v3 Authority Key Identifier:
keyid:5E:8C:B6:DA:35:8A:8D:2D:27:0C:30:5F:8B:61:F3:C9:90:D5:76:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xoy22jWKjS0nDDBfi2HzyZDVdm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f02661-b591-4f5e-b369-f74a5f2bcb47/1/fKufob24rjFmDrGHIRnqnRhk_04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f02661-b591-4f5e-b369-f74a5f2bcb47/1/Xoy22jWKjS0nDDBfi2HzyZDVdm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.89.160.0/20
217.24.48.0/20
IPv6:
2a00:9d80::/32
Signature Algorithm: sha256WithRSAEncryption
a2:86:21:a3:10:04:df:b4:14:c7:52:4e:65:88:5d:f7:d9:06:
66:52:80:18:37:75:23:7e:9c:d3:9e:ac:20:63:58:89:16:74:
e0:50:85:ee:e6:15:c4:a9:7a:1c:42:0e:d8:2b:5c:84:03:72:
ed:c1:b9:23:06:19:52:cb:67:f8:42:12:b7:30:e8:23:c6:13:
36:e8:3d:43:b4:3f:35:1c:88:0e:dc:50:94:d0:c8:f3:82:64:
4a:c8:08:4b:fc:6e:45:bb:a5:28:8f:08:00:f9:ea:ee:46:cf:
2c:8a:30:1d:59:dc:eb:a9:4a:f0:0a:21:e8:c5:f7:33:c7:62:
14:68:ad:f6:3a:e3:9c:a0:90:8a:ce:6c:49:9b:ce:b1:a5:55:
e4:7c:7d:e8:6e:8d:f3:42:45:8f:f6:4b:0a:be:3a:cf:62:92:
5d:9a:21:7f:d4:c5:c6:a3:5f:d3:f2:1c:89:c7:9c:3f:7b:0e:
fe:61:22:10:38:ae:d3:32:9a:30:1a:9e:4e:4f:51:45:b3:5a:
6a:b5:b0:83:8d:20:42:29:fc:7e:f5:65:60:1c:20:fc:7c:87:
c5:df:3d:e9:d0:1c:5a:ae:60:88:80:1a:4f:f7:18:48:2c:47:
f5:30:23:04:2a:ab:a5:a1:0a:eb:77:4e:fd:fb:a7:88:7a:23:
6f:12:63:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:00:07 2025 by rpki-client