Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/0SGQgnDHvljd8WswPS3Zor6FDL4.roa
File: 0SGQgnDHvljd8WswPS3Zor6FDL4.roa (raw, json)
Hash identifier: 6cEGIRuHIzEG7/ilcX3ol3tjHMExu8vRWtvJG3iihbQ=
Subject key identifier: D1:21:90:82:70:C7:BE:58:DD:F1:6B:30:3D:2D:D9:A2:BE:85:0C:BE
Certificate issuer: /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Certificate serial: 019427479C5BC4657A6F84549B915B7F1F71
Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/0SGQgnDHvljd8WswPS3Zor6FDL4.roa
Signing time: Thu 02 Jan 2025 13:49:52 +0000
ROA not before: Thu 02 Jan 2025 13:49:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 931
IP address blocks: 5.226.138.0/24 maxlen: 24
185.16.204.0/24 maxlen: 24
217.146.81.0/24 maxlen: 24
217.146.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 15:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:9c:5b:c4:65:7a:6f:84:54:9b:91:5b:7f:1f:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Validity
Not Before: Jan 2 13:49:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d121908270c7be58ddf16b303d2dd9a2be850cbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3f:b8:66:eb:c7:66:7a:12:f0:df:b4:7e:76:
cd:03:92:0b:05:d4:a2:61:cb:be:53:fe:8b:9d:0f:
ad:65:eb:ee:09:36:75:6f:f5:c8:fe:9b:99:bc:8d:
bc:9e:11:2a:75:1c:4b:84:b3:87:38:0a:1f:f7:4b:
02:09:af:65:9e:b4:10:9c:d7:2f:a6:7f:b3:e5:01:
f6:77:c3:17:fc:ec:ee:72:26:9b:9b:59:63:dd:88:
63:d9:80:ff:1e:fd:9d:51:80:34:ae:41:a9:59:f4:
97:2f:f7:a5:2d:a4:83:08:c4:27:bb:f5:2b:a4:22:
c5:0a:e6:ab:63:c7:63:16:67:10:0d:8f:29:3d:7d:
7d:eb:b0:ab:3e:6f:ea:e5:76:13:ef:cc:73:15:f9:
de:dd:1f:13:ad:bf:3a:12:ad:02:fe:33:2d:ed:1d:
d4:83:09:04:a3:21:58:60:59:77:5b:eb:99:27:25:
61:c4:d9:a8:4b:9c:bc:d0:e9:2b:19:e2:94:ef:a0:
ba:f2:eb:36:1c:b1:33:01:d6:ed:9f:35:44:41:6d:
5b:7d:85:a3:32:21:b8:2f:87:e6:43:e7:e6:e3:f1:
f1:8a:8c:af:3d:75:a8:45:41:0d:00:8d:77:89:0b:
2f:47:6a:fd:cc:82:3f:22:48:74:0f:4a:c1:4a:9b:
d8:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:21:90:82:70:C7:BE:58:DD:F1:6B:30:3D:2D:D9:A2:BE:85:0C:BE
X509v3 Authority Key Identifier:
keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/0SGQgnDHvljd8WswPS3Zor6FDL4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.226.138.0/24
185.16.204.0/24
217.146.81.0/24
217.146.88.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:80:16:4f:22:61:bd:1b:b7:1d:91:b3:94:4a:51:7c:9b:ab:
43:93:db:1e:df:72:55:e3:92:31:e2:0a:b3:b4:a3:fe:08:ba:
87:cb:99:ab:cc:58:a0:72:39:90:89:3d:77:77:27:8f:8f:6b:
d4:65:59:c5:4c:05:7a:2f:a2:41:61:9c:7e:61:60:79:ab:c1:
a7:ce:fa:ed:ed:26:fa:07:d8:49:64:b7:3c:04:d1:9e:02:33:
a3:95:6d:83:6a:f7:55:9d:3b:8b:27:7c:a7:d6:0a:14:cd:02:
b1:67:98:79:af:25:6c:78:91:f5:67:0c:77:54:c9:21:9b:61:
b8:f0:ba:82:04:59:66:e3:cd:0d:2a:09:90:91:18:a2:4d:93:
cb:a2:f5:21:59:8e:94:ea:14:cd:a0:0e:c3:ff:2e:bd:87:01:
b0:dd:17:f5:b9:83:9b:0c:89:ca:74:28:ca:66:45:bd:82:7a:
c9:76:1b:99:56:1d:46:0a:86:35:4e:50:d5:57:80:24:e0:53:
c6:70:ec:8d:49:9a:83:90:c3:c9:51:fe:2c:30:fa:53:bb:36:
45:2d:95:e2:88:82:2c:52:17:1d:50:5c:22:9c:61:31:ef:7a:
d3:2a:87:e6:d9:a3:8d:7b:f6:f6:22:0c:10:44:72:e0:ff:98:
16:8c:0a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:51:53 2025 by rpki-client