Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/349c58-fbb0-4ddd-a080-d2c97d65efa8/1/n1FcMiLz_JoY9XiP99JB8OfMowM.roa
File: n1FcMiLz_JoY9XiP99JB8OfMowM.roa (raw, json)
Hash identifier: RgJPkvDM2qRz5jBp/2aQedJ1Hffc/ZwhPvwJOiAl5xo=
Subject key identifier: 9F:51:5C:32:22:F3:FC:9A:18:F5:78:8F:F7:D2:41:F0:E7:CC:A3:03
Certificate issuer: /CN=3da4c2fbdf10f8231f3df531ce5a3a2e3b23cefc
Certificate serial: 0194258ED8470B0DC8BBE7131AF949EC343B
Authority key identifier: 3D:A4:C2:FB:DF:10:F8:23:1F:3D:F5:31:CE:5A:3A:2E:3B:23:CE:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PaTC-98Q-CMfPfUxzlo6Ljsjzvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/349c58-fbb0-4ddd-a080-d2c97d65efa8/1/n1FcMiLz_JoY9XiP99JB8OfMowM.roa
Signing time: Thu 02 Jan 2025 05:48:25 +0000
ROA not before: Thu 02 Jan 2025 05:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 176.110.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/349c58-fbb0-4ddd-a080-d2c97d65efa8/1/PaTC-98Q-CMfPfUxzlo6Ljsjzvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/349c58-fbb0-4ddd-a080-d2c97d65efa8/1/PaTC-98Q-CMfPfUxzlo6Ljsjzvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PaTC-98Q-CMfPfUxzlo6Ljsjzvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:d8:47:0b:0d:c8:bb:e7:13:1a:f9:49:ec:34:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3da4c2fbdf10f8231f3df531ce5a3a2e3b23cefc
Validity
Not Before: Jan 2 05:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9f515c3222f3fc9a18f5788ff7d241f0e7cca303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ca:cb:50:77:df:3a:ec:90:3d:dc:04:0f:cc:
a8:3c:8b:dd:a2:3c:6d:e6:7c:60:3e:35:65:7e:9f:
4a:9a:81:8d:8d:7c:5a:7a:f3:f4:17:e7:9e:2d:0b:
bf:1b:4a:a4:75:99:5e:16:18:90:64:a6:34:4a:0f:
51:0c:3a:ca:8b:05:fe:d1:3b:61:37:63:df:ba:19:
b4:f9:ed:f9:86:88:5b:aa:ac:ac:3b:7c:0e:32:b1:
57:a4:ee:dd:04:28:43:04:54:cf:fe:98:78:c4:27:
74:a0:58:bd:44:3f:60:7f:73:06:7b:9f:cc:70:9c:
57:61:1b:6f:8d:75:7e:3e:63:53:7c:16:10:3a:00:
d4:92:2d:1c:61:82:21:1a:8a:bf:60:3c:c5:97:2f:
90:7a:98:04:81:aa:fb:d0:a5:fb:f9:2e:0a:16:b3:
42:0a:37:2c:79:36:39:4b:f6:24:c8:87:b5:87:a8:
b0:08:88:fe:8e:56:47:fd:b4:a0:f9:a2:02:45:98:
45:e0:7c:de:69:a7:65:11:28:ab:cf:01:38:aa:d8:
84:79:1b:f4:7e:6d:0c:3c:cf:84:04:bb:66:34:23:
2b:e0:4b:f0:d0:5e:20:92:de:d0:68:ad:9d:ef:dc:
46:98:e3:88:57:63:50:e2:6d:ea:3e:8f:76:f0:5f:
b0:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:51:5C:32:22:F3:FC:9A:18:F5:78:8F:F7:D2:41:F0:E7:CC:A3:03
X509v3 Authority Key Identifier:
keyid:3D:A4:C2:FB:DF:10:F8:23:1F:3D:F5:31:CE:5A:3A:2E:3B:23:CE:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PaTC-98Q-CMfPfUxzlo6Ljsjzvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/349c58-fbb0-4ddd-a080-d2c97d65efa8/1/n1FcMiLz_JoY9XiP99JB8OfMowM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/349c58-fbb0-4ddd-a080-d2c97d65efa8/1/PaTC-98Q-CMfPfUxzlo6Ljsjzvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.110.104.0/24
Signature Algorithm: sha256WithRSAEncryption
40:08:84:40:c9:0d:0b:4b:07:88:92:9b:9f:88:c1:a7:de:da:
9e:01:b9:71:ef:57:56:92:88:7d:5c:08:1e:04:94:3e:92:fd:
28:ba:c6:61:14:da:72:d0:f8:69:6e:c3:9b:ed:b6:82:66:5a:
1c:17:74:b2:6c:a7:d9:08:3b:5d:06:df:fd:aa:27:72:9b:32:
54:dd:22:18:0e:37:3c:63:58:10:76:fa:3d:fa:95:cf:33:61:
17:a3:f3:e1:59:35:18:3b:31:2e:80:ff:75:b4:62:dc:7e:ca:
73:1e:f4:03:ec:59:e1:e7:aa:ae:82:3f:d1:38:e2:44:b9:f9:
87:c9:7a:a2:2d:35:8f:75:37:cc:ac:14:5e:ea:0e:8f:c4:7f:
e1:fa:3f:75:31:3f:02:82:f0:19:7d:d7:68:55:91:e2:ec:ec:
63:67:55:4d:e6:21:55:7f:68:1c:6f:2d:ba:71:e0:bd:8d:92:
0e:40:12:85:69:93:6b:d6:1c:f7:6c:3c:cb:ed:da:8d:88:c9:
e5:e0:0a:d2:64:8d:a3:13:da:bd:85:5d:b4:55:e4:b0:66:90:
b6:b3:7e:92:f8:40:cd:85:47:cf:a1:75:1c:0b:80:82:20:46:
21:d0:c1:b0:50:27:af:32:a0:b9:1e:1e:5e:c6:18:95:45:b5:
51:0f:bb:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:25:41 2025 by rpki-client