Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/FDLG3C3BdLH5mkEdaIkf5JVVR9k.roa
File: FDLG3C3BdLH5mkEdaIkf5JVVR9k.roa (raw, json)
Hash identifier: eIvSohIS9AHs7C/UrNBbvINwpxqPAthufHpH6qHXtGg=
Subject key identifier: 14:32:C6:DC:2D:C1:74:B1:F9:9A:41:1D:68:89:1F:E4:95:55:47:D9
Certificate issuer: /CN=25a89539520004270d34253bdc16d87784156e1a
Certificate serial: 01941FFA22ACADFA077FC27A97AE7F344521
Authority key identifier: 25:A8:95:39:52:00:04:27:0D:34:25:3B:DC:16:D8:77:84:15:6E:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JaiVOVIABCcNNCU73BbYd4QVbho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/FDLG3C3BdLH5mkEdaIkf5JVVR9k.roa
Signing time: Wed 01 Jan 2025 03:47:54 +0000
ROA not before: Wed 01 Jan 2025 03:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62336
IP address blocks: 212.48.116.64/26 maxlen: 26
212.53.216.0/22 maxlen: 22
212.53.224.0/20 maxlen: 20
212.53.240.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/JaiVOVIABCcNNCU73BbYd4QVbho.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/JaiVOVIABCcNNCU73BbYd4QVbho.mft
rsync://rpki.ripe.net/repository/DEFAULT/JaiVOVIABCcNNCU73BbYd4QVbho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:22:ac:ad:fa:07:7f:c2:7a:97:ae:7f:34:45:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25a89539520004270d34253bdc16d87784156e1a
Validity
Not Before: Jan 1 03:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1432c6dc2dc174b1f99a411d68891fe4955547d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:6f:e3:58:73:96:84:c0:39:39:2b:be:df:62:
5e:dd:44:59:c4:56:73:e0:3b:bd:22:6f:cb:80:ad:
85:b3:04:dc:eb:29:20:ae:fc:a1:07:12:be:fd:b9:
26:68:ef:f3:fa:38:c5:4f:d1:63:70:54:b2:66:ac:
cb:86:c7:96:f4:b7:e8:13:63:07:49:29:bf:d0:bb:
6b:eb:e7:7c:55:ba:61:ab:47:c1:b5:de:8f:9f:88:
37:0e:4a:2a:26:87:07:51:a8:a7:8a:0c:e1:a8:69:
29:f3:54:9a:01:40:9a:84:95:1e:ba:5e:5c:30:d6:
85:b3:bd:1c:a0:36:4c:d1:c7:45:97:37:6a:1d:c9:
e5:14:07:6f:54:8c:ae:91:ca:fd:f1:57:ce:c6:c3:
9e:d2:00:0c:64:24:27:99:5a:a0:6e:84:f5:ba:97:
0f:5c:90:ae:6d:f3:f0:bb:e1:ec:8e:4d:c3:1f:26:
2b:ec:ee:63:e3:cb:a5:68:91:ce:c1:91:e3:61:a4:
c6:c3:4c:ae:3d:1e:14:9f:cf:48:b3:21:0d:c0:d8:
a0:9d:5b:c3:6c:a0:37:16:42:0c:59:60:93:5d:62:
df:ef:22:19:95:92:e0:7e:8f:7e:93:69:70:9a:df:
35:ca:72:62:7e:57:d3:45:22:24:bb:0c:28:cf:f3:
17:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:32:C6:DC:2D:C1:74:B1:F9:9A:41:1D:68:89:1F:E4:95:55:47:D9
X509v3 Authority Key Identifier:
keyid:25:A8:95:39:52:00:04:27:0D:34:25:3B:DC:16:D8:77:84:15:6E:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JaiVOVIABCcNNCU73BbYd4QVbho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/FDLG3C3BdLH5mkEdaIkf5JVVR9k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/JaiVOVIABCcNNCU73BbYd4QVbho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.48.116.64/26
212.53.216.0/22
212.53.224.0/19
Signature Algorithm: sha256WithRSAEncryption
39:bb:20:fd:fc:88:0d:d3:60:fb:cf:e1:19:79:96:f3:95:57:
e3:f8:bc:3b:8d:a9:86:9e:c0:99:27:5d:aa:dd:f6:b6:92:7a:
7b:e2:d9:08:81:f9:bf:5b:69:db:4f:97:53:6b:53:35:96:54:
30:a1:3f:d0:ac:0c:65:cc:6c:dc:93:63:09:21:51:fe:cd:f5:
fa:1c:0a:3a:79:47:32:56:82:09:a6:5a:f3:0e:c5:f2:0c:56:
a6:a4:5f:23:4a:b0:f6:b9:77:22:96:91:db:cb:09:26:09:52:
94:ed:55:87:6b:82:b3:ad:63:97:f7:29:db:e8:1d:53:1f:a8:
88:2a:ca:10:2c:7a:00:f0:ec:62:58:44:e8:55:5d:64:a6:21:
e4:3d:36:a2:20:06:ba:13:ed:98:38:e7:9c:d5:b2:46:d8:43:
11:03:9a:1c:28:3c:c0:6f:39:62:8d:40:3b:44:44:c9:e6:9e:
f9:d4:79:87:b6:b7:87:ff:e0:eb:fc:a9:29:70:a9:f5:81:46:
b1:ae:c6:6a:77:f4:cb:40:b5:71:d5:d1:2f:89:ad:49:54:58:
77:12:6c:c7:12:ff:0b:a1:f7:d5:2b:86:23:59:f5:dd:43:72:
fe:e1:07:cd:bf:3a:49:81:06:a8:2c:0a:d0:e7:f3:bb:25:53:
ea:d7:a7:3a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 5 21:19:16 2025 by rpki-client