Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/FGmjTJ5BNIGcHTaYOHKezd1P2zY.roa
File: FGmjTJ5BNIGcHTaYOHKezd1P2zY.roa (raw, json)
Hash identifier: Erq/bi/faVpdLd489gfJpnnRsTbaiEt6kPr4sQ09lTM=
Subject key identifier: 14:69:A3:4C:9E:41:34:81:9C:1D:36:98:38:72:9E:CD:DD:4F:DB:36
Certificate issuer: /CN=f1f930e23b08a15ccd4dc9ab1829c607fedde8a5
Certificate serial: 019424B3EE2CC390E1CCC892800772B8159A
Authority key identifier: F1:F9:30:E2:3B:08:A1:5C:CD:4D:C9:AB:18:29:C6:07:FE:DD:E8:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fkw4jsIoVzNTcmrGCnGB_7d6KU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/FGmjTJ5BNIGcHTaYOHKezd1P2zY.roa
Signing time: Thu 02 Jan 2025 01:49:19 +0000
ROA not before: Thu 02 Jan 2025 01:49:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25145
IP address blocks: 185.22.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8fkw4jsIoVzNTcmrGCnGB_7d6KU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:ee:2c:c3:90:e1:cc:c8:92:80:07:72:b8:15:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1f930e23b08a15ccd4dc9ab1829c607fedde8a5
Validity
Not Before: Jan 2 01:49:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1469a34c9e4134819c1d369838729ecddd4fdb36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5d:7b:08:57:32:61:4b:d5:ac:9b:89:ae:59:
44:25:78:1a:87:f4:1d:e9:2c:2d:50:a3:14:dd:20:
63:c0:49:e5:05:17:2d:c2:a3:eb:6c:c9:4e:9f:a2:
d9:89:a8:64:5e:b8:46:a4:8b:d5:bd:8a:33:69:80:
98:9b:f4:c4:d1:da:b7:4d:6b:07:a3:e3:9a:f0:39:
b9:fa:c2:59:8e:df:82:15:33:8a:1a:36:34:cd:b4:
ea:f7:f8:51:3c:bd:4d:1a:41:10:48:cd:4b:35:0d:
63:81:4a:31:5d:21:56:7e:80:0d:b7:29:4e:23:c1:
77:07:d7:35:be:ef:db:2c:17:7e:11:79:c8:20:91:
68:2c:58:a5:a9:3f:96:8e:94:d7:fd:71:98:15:87:
ea:b5:85:09:83:21:be:2a:7b:c3:ec:07:bd:2a:f6:
b9:bc:51:5d:14:f9:77:79:bf:64:6e:f6:bf:da:7a:
14:9b:65:9f:ec:45:45:09:4c:bd:88:d0:40:d7:52:
6c:f5:c4:b9:a6:8b:de:8c:29:f4:98:4c:d8:85:13:
99:92:01:34:0a:71:96:ac:43:7b:b9:ad:5a:fc:74:
77:38:1c:09:fe:15:0a:2f:ca:cf:7a:3c:13:ec:e3:
c9:69:6d:bb:ef:1f:5a:a4:aa:39:62:33:f0:26:55:
f4:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:69:A3:4C:9E:41:34:81:9C:1D:36:98:38:72:9E:CD:DD:4F:DB:36
X509v3 Authority Key Identifier:
keyid:F1:F9:30:E2:3B:08:A1:5C:CD:4D:C9:AB:18:29:C6:07:FE:DD:E8:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fkw4jsIoVzNTcmrGCnGB_7d6KU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/FGmjTJ5BNIGcHTaYOHKezd1P2zY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.22.230.0/24
Signature Algorithm: sha256WithRSAEncryption
19:f2:0f:1d:de:09:4c:a7:56:e5:5a:3b:d2:c5:b4:2c:1d:50:
02:e8:fd:9f:95:6f:18:52:3d:6d:23:42:ce:89:01:c7:73:18:
63:be:37:93:51:47:64:2f:01:a7:64:fb:77:a8:68:08:68:0d:
d5:2a:07:c0:d4:83:20:74:ee:cd:59:d6:45:9a:e1:cb:91:53:
e6:d4:de:c7:99:e6:53:96:d8:6d:7d:f0:c3:16:6f:91:7c:a5:
e6:3b:ea:bb:2e:5b:67:67:d9:6b:ad:a3:f4:64:ba:01:42:5f:
f7:82:47:69:2d:10:02:f6:3e:c4:db:69:34:5c:a9:cc:ee:ff:
d8:21:a7:85:bc:f2:39:ae:af:46:55:ac:6d:9b:0d:d8:24:7b:
f0:6a:a1:e4:2e:1c:d0:74:43:68:06:7b:63:64:10:56:76:30:
e6:7a:9e:36:51:d6:f6:14:4f:4a:bc:b4:ea:c1:90:88:ff:80:
5c:90:cd:c2:4e:ea:e8:6e:5e:30:5a:6a:3d:14:cd:88:6a:9a:
1d:0a:e4:b9:79:b0:7a:ee:9e:bc:3c:5a:5e:89:e2:5e:d6:65:
46:2f:06:60:1b:72:df:a8:4d:94:f2:70:4d:d7:f7:40:7e:07:
3c:4a:7f:13:e3:d8:d0:76:66:d0:2d:08:f2:26:b8:d0:13:f8:
ff:24:08:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:01:01 2025 by rpki-client