Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/fb6wEgaDbLPx8q9w1xJmiSz6jYA.roa
File: fb6wEgaDbLPx8q9w1xJmiSz6jYA.roa (raw, json)
Hash identifier: cTH5l3quR1dZhmY8/pVYGOhtfcq0HdpSh+BT0OKf954=
Subject key identifier: 7D:BE:B0:12:06:83:6C:B3:F1:F2:AF:70:D7:12:66:89:2C:FA:8D:80
Certificate issuer: /CN=83a062525292a29e97fe6a055b9bd6084a771977
Certificate serial: 0194221FE7D51D1FD346655C023C28246381
Authority key identifier: 83:A0:62:52:52:92:A2:9E:97:FE:6A:05:5B:9B:D6:08:4A:77:19:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g6BiUlKSop6X_moFW5vWCEp3GXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/fb6wEgaDbLPx8q9w1xJmiSz6jYA.roa
Signing time: Wed 01 Jan 2025 13:48:23 +0000
ROA not before: Wed 01 Jan 2025 13:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3303
IP address blocks: 185.54.172.0/22 maxlen: 22
2a02:4620::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/g6BiUlKSop6X_moFW5vWCEp3GXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:e7:d5:1d:1f:d3:46:65:5c:02:3c:28:24:63:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83a062525292a29e97fe6a055b9bd6084a771977
Validity
Not Before: Jan 1 13:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7dbeb01206836cb3f1f2af70d71266892cfa8d80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:72:17:80:d6:8f:07:1f:7b:4d:30:1e:12:0f:
85:3d:2d:bc:b1:b0:7b:9e:24:45:5d:7e:aa:a9:02:
11:b1:36:c1:32:01:27:ce:2d:fe:3b:fc:0e:e3:bf:
89:a8:c4:08:91:bd:5a:24:40:66:8b:b9:c0:80:6e:
e7:db:28:a7:b3:2e:f2:70:74:e6:04:01:f9:75:e1:
17:5f:57:3c:12:90:e4:1c:72:f3:6c:12:18:40:0d:
ec:53:c1:44:63:39:8a:a3:39:1d:e8:7d:4e:08:b5:
c6:14:3f:1b:d0:91:66:d5:6d:8b:7c:b0:41:11:52:
a9:06:ed:54:70:f3:6e:7b:a8:23:5c:d0:35:0e:d7:
28:47:b5:92:d9:6c:4a:66:b3:37:55:81:97:45:91:
c4:9b:2a:e8:b7:12:e7:05:d5:24:aa:8f:f3:d1:b0:
07:04:2b:24:ad:2e:2c:81:bd:ae:09:95:ff:64:61:
df:c1:11:ba:77:b5:92:cc:38:2b:d3:c9:67:f0:ce:
51:54:83:cc:3c:09:dd:99:95:73:de:d6:9d:0e:1f:
74:df:14:e6:21:53:dc:f2:52:be:2d:d0:b4:ab:c8:
a0:91:88:7d:18:6a:de:55:50:a2:c4:88:ac:92:57:
16:6a:6b:21:de:db:b3:10:2b:b4:d2:03:e9:13:42:
f2:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:BE:B0:12:06:83:6C:B3:F1:F2:AF:70:D7:12:66:89:2C:FA:8D:80
X509v3 Authority Key Identifier:
keyid:83:A0:62:52:52:92:A2:9E:97:FE:6A:05:5B:9B:D6:08:4A:77:19:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g6BiUlKSop6X_moFW5vWCEp3GXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/fb6wEgaDbLPx8q9w1xJmiSz6jYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.54.172.0/22
IPv6:
2a02:4620::/32
Signature Algorithm: sha256WithRSAEncryption
15:99:05:03:c7:32:97:52:ac:48:80:8a:bf:99:c0:97:17:9a:
c6:7f:9f:81:59:70:90:6c:23:78:6c:ed:06:01:6d:60:ac:80:
15:18:f1:92:dd:be:b5:35:9f:04:41:6c:cb:c7:bb:23:6a:69:
08:7f:8a:38:3c:eb:b8:16:01:bd:29:91:4a:4d:9b:f3:b3:31:
0e:d1:31:d5:10:34:2a:66:c2:60:ae:c3:bb:84:73:5e:60:81:
0a:e0:09:8b:e9:28:6d:da:f1:ba:67:e5:ba:c8:da:ee:88:34:
59:bb:4b:69:2e:46:60:68:90:1c:69:88:75:e6:85:21:a7:9a:
e0:49:8e:74:bf:87:e8:64:70:95:09:26:55:34:3b:72:64:74:
fa:ac:33:33:44:83:7f:55:04:7a:6e:df:81:ac:7e:20:8c:f8:
55:4d:f6:23:17:d9:43:bf:b6:fe:23:8b:73:10:c7:4b:52:3a:
67:0f:75:6f:a9:e2:83:d5:3d:17:8f:28:bb:0c:bb:0c:19:60:
b0:a6:83:2c:d2:e3:d0:37:3c:b7:45:5a:a6:23:b8:5c:ab:7c:
5a:99:6f:a2:a7:f6:39:44:7e:91:44:58:fe:cd:1f:12:c6:73:
f5:b2:73:9a:5b:22:03:15:85:11:7a:94:a3:2f:99:ea:5c:d6:
bd:ea:6a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:38:52 2025 by rpki-client