Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/FktOgxEd5inrsl5Xig_9VZ-14kI.roa
File: FktOgxEd5inrsl5Xig_9VZ-14kI.roa (raw, json)
Hash identifier: YzQiSJ9dizGMefq4AymfGDFF9EYlcJRts+qMHM/974Q=
Subject key identifier: 16:4B:4E:83:11:1D:E6:29:EB:B2:5E:57:8A:0F:FD:55:9F:B5:E2:42
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 0195F79B11E3EAC87EE594DFAB38A1EE935A
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/FktOgxEd5inrsl5Xig_9VZ-14kI.roa
Signing time: Wed 02 Apr 2025 17:44:49 +0000
ROA not before: Wed 02 Apr 2025 17:44:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47959
IP address blocks: 46.23.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f7:9b:11:e3:ea:c8:7e:e5:94:df:ab:38:a1:ee:93:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Apr 2 17:44:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=164b4e83111de629ebb25e578a0ffd559fb5e242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c6:2a:08:0b:28:dd:c8:7c:17:b5:db:b1:9a:
a8:97:f6:c5:00:d9:6b:1d:d1:a8:1f:df:fc:82:fa:
c9:e8:61:d2:77:f9:a4:54:5b:fa:42:f2:5c:b8:a9:
c2:00:da:97:8a:64:a0:c0:2e:64:53:1e:73:be:ef:
39:9e:49:9d:a0:05:f7:07:96:95:f4:64:31:5d:f8:
04:ea:a9:6d:7b:12:a7:b7:d5:b5:a3:43:98:09:52:
f5:bb:42:95:4d:fa:ca:b5:57:48:59:e3:0d:7d:df:
f0:b7:5d:41:b2:2a:8e:5d:6f:17:42:0b:cf:45:61:
22:47:e2:e5:74:1f:68:93:ed:41:d6:ff:3f:a3:b0:
50:2e:fb:ad:cc:1a:f9:0f:30:fa:46:67:39:b9:ae:
ee:36:4f:00:a1:5d:8a:7b:6d:87:ee:e1:0f:da:50:
6a:d9:ee:fe:4b:2c:3a:40:de:7c:20:39:85:9e:ac:
68:0c:b2:33:d4:37:8e:47:ec:2f:ab:8c:0c:a0:d7:
dd:4b:15:cc:8c:1d:bb:93:f5:b2:67:fe:82:e0:16:
10:53:69:de:03:1d:ec:8f:51:61:fc:cb:35:d1:4e:
7e:79:79:e0:99:c8:6f:f1:5e:4e:88:fa:51:12:40:
dd:09:42:47:9b:27:21:99:77:bf:ef:41:89:91:e8:
6b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:4B:4E:83:11:1D:E6:29:EB:B2:5E:57:8A:0F:FD:55:9F:B5:E2:42
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/FktOgxEd5inrsl5Xig_9VZ-14kI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.23.110.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:b3:76:8d:6b:d5:5f:e7:52:fd:ff:04:53:9f:19:9c:54:bf:
9b:34:c7:18:07:d2:9d:98:e4:c6:7a:aa:20:cc:5c:46:b7:12:
58:51:4f:e8:16:0a:01:f5:85:f7:3c:7a:a6:24:d1:66:75:a7:
ea:d9:a3:8f:0f:f5:d1:d8:d9:01:17:ea:bc:f8:9a:9f:11:e7:
fd:32:03:01:44:78:6d:d5:7a:b8:3f:73:bb:fd:2c:cf:7c:98:
16:ae:24:cc:c1:f6:c4:5b:5c:a7:e2:7a:26:ff:9e:6f:a3:97:
db:97:87:24:d8:ba:33:d4:41:66:28:72:5b:5c:e6:60:d6:c1:
55:e8:9d:9d:0f:d4:51:14:f0:10:c2:8e:a6:25:91:d9:22:aa:
6c:e2:86:d6:21:c0:39:4b:b0:0a:45:24:75:b6:75:0e:2d:bd:
95:b7:e2:a8:ff:3b:92:8c:e5:24:5c:d3:7f:60:85:cb:44:ce:
72:e0:9b:22:aa:04:79:68:1d:a3:65:96:e6:e8:b1:4c:b4:f5:
b3:d5:2c:a9:6c:3f:7d:aa:39:95:6d:9e:df:0c:7d:8f:12:24:
1a:bd:e2:5c:70:d3:48:39:81:a2:fd:d9:c4:84:72:4b:e1:b7:
46:90:1b:7c:e3:12:95:51:4a:4a:bc:b9:9c:df:66:63:e9:60:
31:05:40:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:08:01 2025 by rpki-client