Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/849281-a302-4ff8-92e3-3ae4f9cf2683/1/fpEtFF5tn_F6AS7ORtQk_79zOLM.roa
File: fpEtFF5tn_F6AS7ORtQk_79zOLM.roa (raw, json)
Hash identifier: ecIVoFs7h4RkV6LSwkMSO/FMl9ZMbuW6Wd5+RjOOYhk=
Subject key identifier: 7E:91:2D:14:5E:6D:9F:F1:7A:01:2E:CE:46:D4:24:FF:BF:73:38:B3
Certificate issuer: /CN=736ef5730050c720f8c790466eb8b8a48efbe749
Certificate serial: 01942827CDE6278D88CBA992B52C4B3CD0DE
Authority key identifier: 73:6E:F5:73:00:50:C7:20:F8:C7:90:46:6E:B8:B8:A4:8E:FB:E7:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c271cwBQxyD4x5BGbri4pI7750k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/849281-a302-4ff8-92e3-3ae4f9cf2683/1/fpEtFF5tn_F6AS7ORtQk_79zOLM.roa
Signing time: Thu 02 Jan 2025 17:54:44 +0000
ROA not before: Thu 02 Jan 2025 17:54:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42977
IP address blocks: 185.192.12.0/24 maxlen: 24
185.192.13.0/24 maxlen: 24
185.192.14.0/24 maxlen: 24
2a0a:25c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/849281-a302-4ff8-92e3-3ae4f9cf2683/1/c271cwBQxyD4x5BGbri4pI7750k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/849281-a302-4ff8-92e3-3ae4f9cf2683/1/c271cwBQxyD4x5BGbri4pI7750k.mft
rsync://rpki.ripe.net/repository/DEFAULT/c271cwBQxyD4x5BGbri4pI7750k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:cd:e6:27:8d:88:cb:a9:92:b5:2c:4b:3c:d0:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=736ef5730050c720f8c790466eb8b8a48efbe749
Validity
Not Before: Jan 2 17:54:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7e912d145e6d9ff17a012ece46d424ffbf7338b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:0a:1a:10:cb:34:f9:15:4c:ae:e4:36:4b:58:
e2:60:cb:7b:49:5c:0f:e1:b5:dc:51:f1:8e:62:61:
50:79:c2:cd:34:a6:fd:9a:6d:74:38:01:65:0b:b4:
7a:7b:7a:d7:7f:af:53:d1:e9:1a:42:5a:cb:9e:e4:
d5:15:72:d8:c9:a1:99:19:f6:2c:b4:24:01:43:27:
1b:b2:f6:0f:17:07:95:6d:10:2a:7c:48:d3:76:ad:
aa:37:37:f2:65:79:2c:03:0e:e7:6c:bf:bd:60:c5:
43:56:1c:de:2d:b9:1b:51:f8:cb:54:9b:b5:2e:ad:
93:be:ba:58:53:04:eb:41:28:40:ab:5a:eb:ed:01:
6d:a9:f8:ab:32:d9:3f:90:b3:c6:ae:7b:ea:c0:4b:
d0:56:fd:4c:a5:ae:84:13:35:2b:b9:2d:7c:63:6f:
0e:1a:94:29:a6:55:05:f5:70:42:42:f4:31:67:bf:
a4:a0:6c:8e:63:fb:4e:0d:8a:17:96:21:ff:31:9a:
ed:1d:03:89:88:e3:ad:88:a9:81:58:73:3c:ec:b0:
bb:7b:41:90:9e:fb:96:76:82:c7:44:8d:5a:a9:63:
bd:31:8d:79:10:9d:7f:14:71:8a:ae:28:4e:c4:07:
ba:a9:7b:7c:93:0e:f7:87:df:df:15:f6:f6:42:6b:
13:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:91:2D:14:5E:6D:9F:F1:7A:01:2E:CE:46:D4:24:FF:BF:73:38:B3
X509v3 Authority Key Identifier:
keyid:73:6E:F5:73:00:50:C7:20:F8:C7:90:46:6E:B8:B8:A4:8E:FB:E7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c271cwBQxyD4x5BGbri4pI7750k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/849281-a302-4ff8-92e3-3ae4f9cf2683/1/fpEtFF5tn_F6AS7ORtQk_79zOLM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/849281-a302-4ff8-92e3-3ae4f9cf2683/1/c271cwBQxyD4x5BGbri4pI7750k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.192.12.0-185.192.14.255
IPv6:
2a0a:25c0::/29
Signature Algorithm: sha256WithRSAEncryption
b8:55:60:e5:b7:3f:5c:e9:4b:51:6a:83:63:47:eb:d6:c2:18:
13:9a:69:17:31:a1:fa:bc:44:20:f2:2c:d2:90:ca:22:98:de:
71:21:a4:48:8a:99:22:5a:3c:8c:1b:cc:dc:a7:d2:d0:7d:19:
35:1c:a5:3c:ff:5a:85:cb:40:2c:30:75:d3:f7:e8:79:2e:ea:
1d:97:fd:e6:fa:b2:dd:0e:9d:35:d0:28:12:84:8d:0e:87:81:
a6:13:ee:3e:2c:2f:c2:e3:b7:be:e1:40:a2:58:0a:d8:ff:dc:
53:b8:e5:52:d5:9f:77:47:30:3b:72:cd:ea:52:a2:88:1e:fa:
ad:eb:8e:4f:94:6f:15:ee:57:f8:b5:66:e1:cf:3e:9e:a0:2c:
a4:18:8d:22:e8:ae:df:d6:96:bf:ef:1e:68:f4:da:f0:5d:0d:
9b:29:80:48:42:d0:dc:22:f8:a2:ab:11:78:fa:55:44:6b:f5:
b5:25:37:48:46:84:0b:4e:43:a7:12:76:e0:88:28:77:99:25:
85:21:7b:d7:43:17:f7:47:2a:dc:c8:1c:cc:e0:c0:af:94:67:
f5:8e:e5:2e:b9:90:73:13:42:08:b0:c6:05:e9:b2:f6:87:6f:
75:cb:20:9c:6a:bf:97:65:fe:7b:8a:7b:6b:a2:63:5e:5c:62:
ef:59:4c:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:04:17 2025 by rpki-client