Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/FJEFcX2c3QiytgwJXtBXdfXF7AQ.roa
File: FJEFcX2c3QiytgwJXtBXdfXF7AQ.roa (raw, json)
Hash identifier: wDOQFjMrdpmJOwUI55qSC810FFGrsaY4QPcOoJKWykM=
Subject key identifier: 14:91:05:71:7D:9C:DD:08:B2:B6:0C:09:5E:D0:57:75:F5:C5:EC:04
Certificate issuer: /CN=8d11cb015df9baab61228dbbce17dd4e00e63c13
Certificate serial: 0195FFEC95A51EFDC9C93318F2A621EC8EFF
Authority key identifier: 8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/FJEFcX2c3QiytgwJXtBXdfXF7AQ.roa
Signing time: Fri 04 Apr 2025 08:30:49 +0000
ROA not before: Fri 04 Apr 2025 08:30:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208626
IP address blocks: 178.171.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ff:ec:95:a5:1e:fd:c9:c9:33:18:f2:a6:21:ec:8e:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d11cb015df9baab61228dbbce17dd4e00e63c13
Validity
Not Before: Apr 4 08:30:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=149105717d9cdd08b2b60c095ed05775f5c5ec04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d0:dd:9e:b1:a3:d6:49:a4:78:58:9d:c7:d8:
9f:40:4f:8c:79:5c:bd:65:cb:9b:60:38:5b:bd:ef:
64:06:8f:a0:4e:1b:50:14:99:f0:06:bb:f6:87:5b:
25:d9:3c:f6:35:f2:70:07:f6:37:78:9c:e5:8c:d4:
c2:da:96:65:31:80:58:1b:81:23:ec:20:25:82:70:
f0:23:ec:e9:dc:73:e7:83:a8:24:1c:77:26:18:ba:
52:3a:af:dd:c0:6e:db:37:b1:e6:10:99:54:59:03:
6a:e4:bc:c6:45:d6:b9:be:18:c5:8a:cb:a4:fb:bb:
41:29:26:59:84:aa:bf:7a:c1:84:d8:64:f2:a6:c7:
f5:73:77:61:01:78:59:62:ec:47:af:8b:3e:d4:21:
57:6b:b3:04:b7:f0:24:73:57:61:57:42:54:4e:c8:
86:40:d7:b3:be:0e:b5:7b:37:fd:e7:c0:3c:3d:15:
84:d4:20:dd:ff:a7:80:4d:01:91:ea:37:84:3b:bb:
8e:a1:d0:36:88:35:b3:19:8a:ce:12:d5:d8:31:4a:
9c:ff:03:84:83:ed:30:b4:d7:03:d0:eb:c6:d7:55:
1a:5d:05:a9:4b:9a:ed:41:7d:39:d2:f4:f2:47:3f:
a3:44:dc:09:da:38:1a:fc:98:e5:81:0d:b3:d5:6d:
bd:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:91:05:71:7D:9C:DD:08:B2:B6:0C:09:5E:D0:57:75:F5:C5:EC:04
X509v3 Authority Key Identifier:
keyid:8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/FJEFcX2c3QiytgwJXtBXdfXF7AQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.171.122.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:95:05:dd:37:81:e9:72:6d:67:db:2e:ed:ce:73:71:2d:f6:
0c:18:d7:d6:d8:3d:3f:91:a3:b0:96:18:07:66:cf:ea:b7:d3:
4f:3b:9c:ed:49:c7:2e:ca:ca:ae:b3:bc:34:ca:e7:f0:84:18:
7d:aa:df:a7:ac:15:aa:18:3b:a5:7b:f3:4c:20:e5:e1:64:bb:
49:e4:c5:fd:11:7e:ba:21:77:87:00:6f:c8:35:c5:13:c4:71:
83:10:e2:5d:b0:32:a7:b5:2d:f5:ec:7a:37:7f:94:a1:4c:e4:
ab:79:f0:4f:f3:a1:f1:80:b2:8d:8f:3e:2d:c4:cf:1b:ca:78:
c5:17:77:6a:0e:34:fd:df:d4:c3:b9:c3:92:31:95:02:4f:3f:
31:d1:52:73:9d:ad:d1:13:e6:e8:85:53:77:ee:df:83:c4:04:
01:8d:31:59:b2:a0:83:40:36:58:67:8e:64:ff:25:f6:60:13:
a5:28:8a:c0:6c:e5:c7:80:c5:8f:c1:7c:8b:e4:ee:f1:3f:c8:
da:f9:1d:02:59:4d:1a:d9:da:e5:00:01:82:eb:79:77:46:48:
a3:3d:29:14:93:9e:87:a6:3c:91:6f:0c:9e:45:89:c5:14:bc:
e0:8d:b5:32:f1:62:d5:00:ff:4f:9e:0e:5c:0f:a8:f3:9c:eb:
4e:af:b4:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:13:40 2025 by rpki-client