Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/c566c7-3cac-45a9-82a1-04b09057522f/1/Fa0oKJS-5OytgjD9FfEKRTyYbH4.roa
File: Fa0oKJS-5OytgjD9FfEKRTyYbH4.roa (raw, json)
Hash identifier: uvEwc2Oby4x64qeSjPHNoFr0vjSUe2G9BJiy9VMRAr0=
Subject key identifier: 15:AD:28:28:94:BE:E4:EC:AD:82:30:FD:15:F1:0A:45:3C:98:6C:7E
Certificate issuer: /CN=a0af3d8551fbdd3b62f4ffdfd59cad4161e4471e
Certificate serial: 019427B5C522D43C217E128897B9AE827098
Authority key identifier: A0:AF:3D:85:51:FB:DD:3B:62:F4:FF:DF:D5:9C:AD:41:61:E4:47:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oK89hVH73Tti9P_f1ZytQWHkRx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/c566c7-3cac-45a9-82a1-04b09057522f/1/Fa0oKJS-5OytgjD9FfEKRTyYbH4.roa
Signing time: Thu 02 Jan 2025 15:50:11 +0000
ROA not before: Thu 02 Jan 2025 15:50:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212165
IP address blocks: 185.80.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/c566c7-3cac-45a9-82a1-04b09057522f/1/oK89hVH73Tti9P_f1ZytQWHkRx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/c566c7-3cac-45a9-82a1-04b09057522f/1/oK89hVH73Tti9P_f1ZytQWHkRx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oK89hVH73Tti9P_f1ZytQWHkRx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:c5:22:d4:3c:21:7e:12:88:97:b9:ae:82:70:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0af3d8551fbdd3b62f4ffdfd59cad4161e4471e
Validity
Not Before: Jan 2 15:50:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=15ad282894bee4ecad8230fd15f10a453c986c7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:00:2d:91:70:60:6d:af:bc:f1:93:fa:d7:95:
7e:b5:db:a1:05:b7:23:33:f5:e2:f7:60:83:be:dc:
0c:58:7d:9c:0e:d2:2d:b4:d3:e6:06:09:40:e3:3c:
80:bf:87:57:4e:48:bc:65:c6:07:0f:f7:00:d1:1b:
20:d5:06:09:89:2b:82:8e:a5:28:2f:52:8c:69:c8:
89:3a:9e:83:b6:99:3b:b5:26:ed:26:02:79:56:1b:
79:2a:a6:d4:6b:d7:44:07:dd:e5:aa:63:d4:76:cf:
0a:68:df:4b:4b:3d:ab:2a:05:8e:f3:3e:b0:9b:14:
e8:7e:5d:f9:cf:19:c4:d1:9b:1c:29:a6:e4:53:85:
65:1d:b8:e9:8b:ad:66:ba:74:3e:33:9e:ed:ea:cb:
5c:20:15:f3:22:43:10:09:b7:78:27:a9:ad:32:3e:
1a:65:97:61:d4:17:f1:32:81:9c:16:bf:1b:b2:24:
64:af:bb:90:b2:5d:2a:6b:36:b8:44:33:dd:06:23:
6c:56:b6:ed:8a:44:dd:ea:ef:ad:21:95:8c:f2:89:
e0:dd:94:e7:b0:5d:62:4d:ca:1d:19:42:00:0f:6d:
af:2f:3a:63:5e:19:b3:7f:a8:1f:68:1f:9b:50:28:
2f:50:95:cf:5b:74:f4:74:e9:8c:0b:34:d1:43:02:
17:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:AD:28:28:94:BE:E4:EC:AD:82:30:FD:15:F1:0A:45:3C:98:6C:7E
X509v3 Authority Key Identifier:
keyid:A0:AF:3D:85:51:FB:DD:3B:62:F4:FF:DF:D5:9C:AD:41:61:E4:47:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oK89hVH73Tti9P_f1ZytQWHkRx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c566c7-3cac-45a9-82a1-04b09057522f/1/Fa0oKJS-5OytgjD9FfEKRTyYbH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c566c7-3cac-45a9-82a1-04b09057522f/1/oK89hVH73Tti9P_f1ZytQWHkRx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.80.91.0/24
Signature Algorithm: sha256WithRSAEncryption
15:68:3f:44:ca:b4:b2:b4:cd:c4:d4:19:d9:f4:f4:8f:5b:f3:
11:bc:34:49:53:98:26:c4:49:ed:a4:3b:b8:2f:63:a8:65:8e:
b1:94:66:17:26:25:cf:1b:52:28:12:9e:62:40:ad:3b:53:fa:
05:d7:92:e1:fc:83:4d:00:c3:75:27:07:36:d0:d7:1a:c9:98:
55:ae:97:b5:1b:cc:03:eb:b2:97:66:4b:83:a0:47:cf:95:77:
97:e7:aa:2f:a6:b3:4c:eb:28:fb:8f:a8:64:55:3c:86:81:7a:
5d:3e:ed:4c:90:16:50:80:44:be:d6:fc:2c:0d:6e:cb:92:62:
92:3c:a4:9d:61:e7:3b:10:19:0e:e8:e2:29:6d:a4:ee:a8:58:
10:66:8b:08:bd:0b:d8:62:54:a3:1e:92:0f:c5:77:dc:84:b7:
a0:77:19:38:3d:37:89:f6:58:31:4d:f2:89:6e:6b:9b:2e:10:
95:f6:b0:e2:40:47:aa:b5:dc:6f:cc:c3:a6:c4:aa:c5:89:3e:
50:4c:73:50:8d:06:32:0d:32:80:cf:59:39:fc:41:33:ea:1b:
0f:d8:6d:ce:e1:9c:95:1e:cd:5c:76:6d:47:8e:ce:ca:13:e0:
57:f3:2d:02:fd:2e:53:8b:b4:f1:65:f1:11:68:d2:a8:e8:25:
19:fd:dd:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:29:38 2025 by rpki-client