Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/Fkrt9RNHni3guvB_cQuhuznpHZc.roa
File: Fkrt9RNHni3guvB_cQuhuznpHZc.roa (raw, json)
Hash identifier: OlsqEuMmMIypqYIMYeepBZ4yi7aa74tCReGh7qFQ600=
Subject key identifier: 16:4A:ED:F5:13:47:9E:2D:E0:BA:F0:7F:71:0B:A1:BB:39:E9:1D:97
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 0194266C55C2E95421D1385932FBD8D8A8E3
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/Fkrt9RNHni3guvB_cQuhuznpHZc.roa
Signing time: Thu 02 Jan 2025 09:50:21 +0000
ROA not before: Thu 02 Jan 2025 09:50:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8828
IP address blocks: 212.0.64.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Mar 2025 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:55:c2:e9:54:21:d1:38:59:32:fb:d8:d8:a8:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Jan 2 09:50:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=164aedf513479e2de0baf07f710ba1bb39e91d97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c6:f8:4a:e2:9c:f9:e6:2f:c5:53:ea:34:b4:
79:f6:ff:44:2e:91:f5:24:6a:81:bc:a7:a6:64:35:
d9:73:c2:17:ee:ce:85:09:69:ae:ae:d8:20:87:3f:
ed:68:62:c9:4c:86:1a:b1:a1:1e:f2:c6:f6:6b:0c:
29:3b:d6:8c:9f:bd:eb:46:b2:47:91:f7:c1:0b:fe:
33:36:45:39:87:d4:82:08:e1:be:ad:78:67:92:b8:
9c:70:d1:ce:fb:9f:d3:71:63:6a:0f:a8:86:ef:df:
6a:e3:08:41:4b:56:e2:7d:62:f0:83:2f:bf:9a:d9:
a8:be:3c:e8:14:c4:4a:f0:ac:b4:94:b4:80:ac:8a:
48:2f:14:9c:e0:bb:dd:52:dc:d9:9c:de:3f:08:5c:
06:65:b8:08:c4:ec:f9:95:f8:e2:8f:6d:5e:d1:4c:
7e:8a:12:a7:10:69:3f:30:c5:c8:ad:56:b3:0a:eb:
28:8e:39:4b:63:31:78:19:7c:da:e5:ea:2d:e7:f4:
43:f4:da:10:66:b8:fe:af:e4:ed:84:e7:d7:8d:78:
15:4e:01:81:64:38:a2:d3:82:79:f9:ac:3b:53:ae:
08:ac:94:f8:b9:a9:7e:c1:71:03:ab:e4:ed:b7:1b:
76:50:7a:5a:c3:68:70:ca:21:71:d4:4c:2c:0c:ca:
e2:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:4A:ED:F5:13:47:9E:2D:E0:BA:F0:7F:71:0B:A1:BB:39:E9:1D:97
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/Fkrt9RNHni3guvB_cQuhuznpHZc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.0.64.0/19
Signature Algorithm: sha256WithRSAEncryption
57:92:fa:0d:41:33:92:fc:c0:31:91:0f:40:f6:ea:ac:34:7f:
84:0f:99:0f:62:c4:53:4e:38:31:ce:1c:29:ee:ec:14:8b:19:
3d:71:d1:e1:ac:59:e9:ec:e2:0b:7a:36:dc:f8:86:c2:0b:4e:
a0:c6:1a:ed:66:1e:25:17:8d:d5:54:1e:81:7a:65:38:1b:f5:
ca:f0:31:8b:bc:82:24:70:20:5a:1d:09:ed:f5:4e:a8:3b:92:
2a:51:a3:d1:ef:ea:2e:a6:bf:ee:f2:88:16:9c:b6:53:5e:bc:
c8:a0:39:47:52:ad:c2:13:16:c2:11:37:b3:77:97:3c:5d:ef:
d9:a5:6a:52:9a:72:1d:95:3a:68:57:81:f1:e6:d6:8b:d0:4c:
4d:d1:74:9a:a6:0c:58:08:88:72:b3:c6:a7:3f:a0:5a:c6:fc:
63:72:fa:75:77:8a:83:34:ab:5f:aa:30:1a:09:8d:ad:cc:42:
69:18:8e:4a:0d:96:be:8c:4e:bb:44:0c:c7:c1:4d:48:72:d1:
8e:3e:0e:1d:29:50:51:c4:df:b1:85:45:61:c1:23:0f:b8:93:
e1:75:72:45:6f:6b:e5:a0:06:38:d7:b5:69:54:bd:bc:d1:c9:
14:3c:00:b4:5d:3d:54:2e:a6:e5:50:ee:f5:1a:c0:b5:92:17:
f5:bb:4c:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:57:13 2025 by rpki-client