Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/fCiUIighRSUqDy9_j7Ntck8ZsVk.roa
File: fCiUIighRSUqDy9_j7Ntck8ZsVk.roa (raw, json)
Hash identifier: UKgRc+5pPOQlC0a0ajbNwptnIkCgOsFRgQmvx4R5d8k=
Subject key identifier: 7C:28:94:22:28:21:45:25:2A:0F:2F:7F:8F:B3:6D:72:4F:19:B1:59
Certificate issuer: /CN=b307c87e7b6e294f2700790eef19e82939d85cd6
Certificate serial: 019424B36F44452D1C0573FDDF0E268DB009
Authority key identifier: B3:07:C8:7E:7B:6E:29:4F:27:00:79:0E:EF:19:E8:29:39:D8:5C:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/swfIfntuKU8nAHkO7xnoKTnYXNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/fCiUIighRSUqDy9_j7Ntck8ZsVk.roa
Signing time: Thu 02 Jan 2025 01:48:46 +0000
ROA not before: Thu 02 Jan 2025 01:48:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211181
IP address blocks: 79.132.194.0/24 maxlen: 24
2a10:fa41::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.mft
rsync://rpki.ripe.net/repository/DEFAULT/swfIfntuKU8nAHkO7xnoKTnYXNY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 07:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:6f:44:45:2d:1c:05:73:fd:df:0e:26:8d:b0:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b307c87e7b6e294f2700790eef19e82939d85cd6
Validity
Not Before: Jan 2 01:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7c289422282145252a0f2f7f8fb36d724f19b159
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:cc:da:f4:0d:55:a5:0a:ca:13:a0:58:85:dd:
a0:c3:ae:94:f4:07:d5:ac:35:46:8b:d7:69:50:1d:
a6:c5:27:d8:47:0c:e0:df:82:94:94:0b:88:69:74:
4c:e5:a9:99:00:79:f6:d5:1d:ca:4c:27:07:90:89:
b5:9a:01:b7:9c:f6:14:c8:71:b8:15:75:e2:3f:42:
1f:3a:93:05:11:07:66:2b:18:94:97:4d:59:67:1b:
47:d7:7f:10:8a:67:ca:7a:2f:cb:dd:5a:b6:10:4b:
f3:33:11:08:b5:b0:ac:04:ac:0b:c0:cc:e8:2f:aa:
e4:af:54:cc:c7:09:bc:77:25:f5:d9:1f:37:7f:71:
14:d7:1e:6b:49:14:f2:1b:93:04:85:9d:6e:b6:e5:
8a:2f:96:0b:46:5d:ba:91:bd:a3:47:ec:90:e3:a0:
78:67:0a:ef:41:44:d6:df:87:4e:e8:2e:ad:bf:18:
72:5d:56:13:44:07:31:57:9f:f0:ca:e3:70:1a:2d:
1a:9d:d0:2b:1d:71:c0:3f:96:74:8b:ee:2d:9d:68:
e7:34:c8:07:3b:ea:57:5a:86:d0:5c:7a:48:46:a1:
e8:ab:30:04:d9:b7:da:dd:e4:0c:a6:aa:db:ac:d1:
3d:9b:d4:7d:5d:98:fa:84:dc:8a:90:45:0c:19:a2:
5f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:28:94:22:28:21:45:25:2A:0F:2F:7F:8F:B3:6D:72:4F:19:B1:59
X509v3 Authority Key Identifier:
keyid:B3:07:C8:7E:7B:6E:29:4F:27:00:79:0E:EF:19:E8:29:39:D8:5C:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/swfIfntuKU8nAHkO7xnoKTnYXNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/fCiUIighRSUqDy9_j7Ntck8ZsVk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.132.194.0/24
IPv6:
2a10:fa41::/32
Signature Algorithm: sha256WithRSAEncryption
bd:4d:0c:39:35:80:0b:1d:1a:37:4a:f9:e7:e9:02:d0:db:27:
b7:37:e5:36:df:f0:ac:71:aa:0e:f4:9e:ed:d8:eb:7f:7a:87:
cf:ba:cb:38:03:8d:82:d5:29:89:5b:10:e7:7a:81:7b:7b:64:
96:34:8a:c8:ea:fb:68:b1:e2:7e:c3:ca:52:c5:43:e6:17:42:
02:80:54:09:13:15:59:5a:f4:e0:0e:03:1d:ca:eb:c6:67:94:
6d:f8:48:79:e4:bd:57:87:12:42:65:c1:c7:54:bb:4f:1b:50:
22:96:f5:7f:31:14:78:c0:44:25:3a:51:ed:60:df:37:02:c9:
d9:88:b0:fc:76:34:81:e6:d0:0c:7f:35:73:bb:d7:51:21:39:
a3:a0:99:51:33:41:ab:85:dc:ed:c8:48:00:e2:35:2c:45:88:
46:e2:60:d3:ae:5f:33:74:f3:0c:ef:45:07:4e:50:98:28:99:
dd:29:4e:e8:56:61:70:bb:6a:6d:b3:03:a0:65:06:89:d7:ff:
16:63:9f:61:54:ab:a5:64:9e:22:7e:b7:d7:56:f9:44:0c:40:
0d:34:35:60:64:6b:22:ee:dd:6b:e4:49:1a:b2:c9:40:45:0a:
9c:75:23:ca:dc:d0:ba:c5:cc:77:70:2f:f4:bb:a1:95:80:3b:
49:f6:4e:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 14:15:50 2025 by rpki-client