Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/_LfFtEsXYCblpYFMFTx8R3UNSd8.roa
File: _LfFtEsXYCblpYFMFTx8R3UNSd8.roa (raw, json)
Hash identifier: /kHbXgsOfLV12xroXM3TmLwBBc306X8k3iTXevjsVe8=
Subject key identifier: FC:B7:C5:B4:4B:17:60:26:E5:A5:81:4C:15:3C:7C:47:75:0D:49:DF
Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b
Certificate serial: 0196A00DA32D5E166FEFF8CE36B268BA5719
Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/_LfFtEsXYCblpYFMFTx8R3UNSd8.roa
Signing time: Mon 05 May 2025 10:46:10 +0000
ROA not before: Mon 05 May 2025 10:46:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 31.192.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 22:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:0d:a3:2d:5e:16:6f:ef:f8:ce:36:b2:68:ba:57:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b
Validity
Not Before: May 5 10:46:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fcb7c5b44b176026e5a5814c153c7c47750d49df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f0:d8:8c:e2:dc:16:cd:88:3c:55:67:40:b1:
e8:57:1d:3b:94:e5:3f:e6:e4:99:35:db:17:8f:83:
aa:d6:84:c0:e8:05:b0:f1:02:ee:34:ad:5c:56:64:
f7:4d:65:d7:a1:e3:9a:a4:4c:e4:9e:60:7e:af:1c:
64:d4:91:00:91:63:19:69:05:84:b3:86:b3:86:9c:
e3:f0:92:2d:db:c5:03:d7:ec:e4:13:8f:1f:c2:0a:
64:dd:95:af:0f:b4:41:60:a2:5a:93:37:6c:c9:80:
53:c2:ef:7a:6b:9a:ed:82:47:e7:e1:cd:af:37:f5:
09:3c:e9:e9:a9:4d:51:d5:bc:f9:2c:a1:57:5c:bc:
6a:48:03:8d:5d:b0:4c:84:2e:cf:23:ff:21:d5:9c:
eb:46:98:7a:ba:94:a3:95:59:2e:69:67:c3:85:3c:
f4:66:36:37:e2:45:1e:16:55:fa:ec:d9:37:07:e4:
57:90:a7:c5:da:36:0b:9f:03:f9:78:0b:32:0f:45:
8a:67:df:94:76:44:43:e1:c1:68:2c:26:42:06:03:
41:8f:d6:10:32:11:9f:92:ed:96:5a:25:cc:03:1d:
20:b3:1a:8c:c7:79:0f:78:b5:af:ae:8b:b8:a1:0e:
18:5a:fd:6a:98:3b:57:ff:5e:b6:e9:7a:42:05:2e:
94:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:B7:C5:B4:4B:17:60:26:E5:A5:81:4C:15:3C:7C:47:75:0D:49:DF
X509v3 Authority Key Identifier:
keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/_LfFtEsXYCblpYFMFTx8R3UNSd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.192.246.0/24
Signature Algorithm: sha256WithRSAEncryption
92:b4:5b:c9:4f:87:f8:40:2b:cd:11:64:c8:20:6d:14:e1:b8:
d5:d5:92:d5:d8:f0:05:e6:a2:8c:1f:26:d4:31:d8:8f:0e:6d:
79:71:c5:04:e7:46:94:9f:cd:40:8b:95:20:39:47:71:3b:2d:
74:13:74:1e:31:78:8a:f0:0d:05:b8:53:2f:9c:e9:28:af:49:
ee:f9:a4:0c:36:2f:67:ab:9c:f0:81:7f:8c:ee:85:47:8a:5f:
06:22:5e:d0:df:d4:25:b5:89:09:b4:7a:cd:27:e9:25:4b:2a:
6f:89:b8:7b:4a:47:b8:57:c5:6f:70:ef:4a:f9:5b:c4:71:54:
93:89:e5:e6:c4:a9:af:f8:eb:bb:3b:68:9a:0d:bb:a4:47:5a:
5a:42:9c:db:39:95:cc:dd:4f:02:bd:3d:fe:53:3d:bd:6c:a5:
a2:ea:3d:5b:c1:0b:3f:53:59:9c:93:b0:18:84:5e:cb:06:00:
38:ea:60:33:e6:f1:3d:27:b1:55:f4:af:88:ab:d9:28:44:7e:
7a:1c:b9:aa:cf:e1:b1:30:91:53:bf:fa:c6:83:82:ab:a7:1c:
74:a1:ea:cf:89:65:fa:00:0c:40:2e:ab:6a:5a:9d:76:01:d1:
5f:67:7c:d3:57:69:72:e2:df:eb:c1:31:57:4b:d7:51:15:18:
82:e0:c8:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 06:54:59 2025 by rpki-client