Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/Fs8XEPRvhs2sBrhxNlZzi8XKons.roa
File: Fs8XEPRvhs2sBrhxNlZzi8XKons.roa (raw, json)
Hash identifier: C0hFaordL7p5SUJfrTELAa9KIVrov4I7azhDmZ9FUrw=
Subject key identifier: 16:CF:17:10:F4:6F:86:CD:AC:06:B8:71:36:56:73:8B:C5:CA:A2:7B
Certificate issuer: /CN=971c78b305fb49cbd4005d4427c1f62c6a455a68
Certificate serial: 019422FBDF6C5081541EE1F84107BB871817
Authority key identifier: 97:1C:78:B3:05:FB:49:CB:D4:00:5D:44:27:C1:F6:2C:6A:45:5A:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxx4swX7ScvUAF1EJ8H2LGpFWmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/Fs8XEPRvhs2sBrhxNlZzi8XKons.roa
Signing time: Wed 01 Jan 2025 17:48:39 +0000
ROA not before: Wed 01 Jan 2025 17:48:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206610
IP address blocks: 85.208.4.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/lxx4swX7ScvUAF1EJ8H2LGpFWmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/lxx4swX7ScvUAF1EJ8H2LGpFWmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lxx4swX7ScvUAF1EJ8H2LGpFWmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:df:6c:50:81:54:1e:e1:f8:41:07:bb:87:18:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=971c78b305fb49cbd4005d4427c1f62c6a455a68
Validity
Not Before: Jan 1 17:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=16cf1710f46f86cdac06b8713656738bc5caa27b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:38:71:73:46:da:a4:82:09:3a:ab:3a:f3:8e:
b3:50:8f:a7:03:ff:57:2e:8a:1a:84:50:43:8c:e5:
46:49:40:b3:36:56:af:52:06:c6:3d:d3:b1:66:8a:
5a:a4:c8:df:2c:54:ba:b9:cb:4f:d0:c6:f8:13:a6:
42:7a:ec:c2:12:0e:11:e3:24:cc:09:21:e2:ba:c1:
4c:32:ea:a1:48:c0:ab:c9:ba:ad:75:2b:2f:81:f0:
c7:79:be:2d:7d:35:5d:6b:6e:b4:0f:9a:90:64:33:
ce:8e:10:45:cb:fe:b8:a0:c0:ae:99:6c:9d:8b:0e:
26:05:12:9b:4e:88:13:43:15:5e:b1:71:8e:96:28:
6d:3b:0a:67:44:93:84:25:e7:38:ee:5b:13:f3:58:
7a:9f:66:0c:cf:8e:10:35:35:e6:01:8e:17:89:c3:
51:b5:6f:18:22:de:f6:87:28:40:7f:31:c4:15:49:
7c:e2:b9:f0:80:9f:b6:86:71:06:79:46:ef:b7:6f:
8a:8c:62:69:62:d1:2f:5a:85:a5:0f:6e:2e:5b:48:
7e:e4:2a:9e:7d:66:de:e1:45:c9:e2:65:f0:de:47:
c4:2d:5f:75:8a:50:04:0d:62:c3:4f:16:f0:12:38:
37:3f:86:5c:99:0a:9b:d7:1e:84:21:9e:7a:8c:7e:
11:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:CF:17:10:F4:6F:86:CD:AC:06:B8:71:36:56:73:8B:C5:CA:A2:7B
X509v3 Authority Key Identifier:
keyid:97:1C:78:B3:05:FB:49:CB:D4:00:5D:44:27:C1:F6:2C:6A:45:5A:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxx4swX7ScvUAF1EJ8H2LGpFWmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/Fs8XEPRvhs2sBrhxNlZzi8XKons.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/df3a15-2e49-4d8e-855a-1c2758651efa/1/lxx4swX7ScvUAF1EJ8H2LGpFWmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.4.0/22
Signature Algorithm: sha256WithRSAEncryption
09:b7:1c:15:48:42:f5:a9:e2:a5:8f:0f:12:ae:bf:31:07:3f:
95:1f:aa:28:1f:05:e0:53:59:e3:91:b9:bb:8c:3a:16:05:49:
da:2d:1c:e6:37:87:27:a8:e1:29:ef:09:76:ac:f7:03:0c:1a:
b9:5a:49:c0:67:c1:c4:12:e5:45:17:6c:ce:fb:63:a4:d2:05:
d2:13:eb:74:99:fa:0a:3d:57:6f:26:3e:6f:6c:ba:1a:1f:44:
d0:67:56:b2:40:fa:d1:d9:8c:6f:64:78:b4:14:ed:39:e1:ac:
f2:6d:00:eb:17:b0:bc:dd:ce:df:b6:b4:cf:68:27:30:2c:bd:
a5:1f:70:f1:f0:16:35:47:bd:f2:ea:fd:f6:a1:4f:8e:a6:20:
e2:cb:2b:ed:af:51:72:45:1a:38:35:3a:3f:5f:b1:6e:99:65:
40:21:8f:13:d2:4d:25:d7:e2:44:61:5f:93:04:ee:7a:b0:ce:
cd:30:22:30:74:9f:53:f5:30:fc:53:6f:b2:b7:53:3f:d5:2c:
7b:08:b8:82:60:a6:5e:8c:b8:b9:ed:c8:40:df:c2:d0:1c:a0:
60:fa:96:e5:e1:9e:34:81:80:36:28:98:38:94:2e:e9:ef:0a:
bf:e0:0c:b2:0d:bb:78:01:0a:f0:7a:11:2d:4c:6a:76:ac:3e:
85:c2:f1:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 21:59:46 2025 by rpki-client