Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/_AyEjlvPslOj71viwAbQL5scON8.roa
File: _AyEjlvPslOj71viwAbQL5scON8.roa (raw, json)
Hash identifier: ug/k5F4KUE9M9QyeZRD3AQygNVr/uom3znaBJoq5W1U=
Subject key identifier: FC:0C:84:8E:5B:CF:B2:53:A3:EF:5B:E2:C0:06:D0:2F:9B:1C:38:DF
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 019690F9C6AC47053E9E3F64CC343160E801
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/_AyEjlvPslOj71viwAbQL5scON8.roa
Signing time: Fri 02 May 2025 12:30:10 +0000
ROA not before: Fri 02 May 2025 12:30:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214159
IP address blocks: 84.32.208.0/24 maxlen: 24
88.216.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 04:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:90:f9:c6:ac:47:05:3e:9e:3f:64:cc:34:31:60:e8:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: May 2 12:30:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fc0c848e5bcfb253a3ef5be2c006d02f9b1c38df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f0:2d:c1:0e:56:b8:ef:2c:ff:47:f7:ad:cc:
a7:3e:03:cb:c3:8f:bf:94:75:b5:9d:47:72:ea:a4:
43:18:a7:92:00:0c:98:ca:94:43:50:a6:88:3e:f0:
d2:1c:7d:82:3e:e1:43:79:64:bd:d2:9e:c6:b6:34:
51:9e:5d:51:a8:10:4b:27:59:cc:c0:5b:ea:e3:8e:
e2:39:b9:31:5d:b1:9e:59:7d:5e:1e:69:cb:bc:2a:
ba:93:18:b1:69:e7:dd:ab:e3:5c:72:46:31:54:f7:
20:75:df:b4:64:0d:2a:8c:28:43:d2:d0:00:a8:f7:
24:84:89:ec:50:ab:fd:e6:33:2f:a4:e3:04:42:d0:
34:64:23:82:57:0c:ee:e2:e0:50:ef:b2:50:d6:77:
a3:e7:02:4c:68:aa:84:d3:a5:17:10:91:2a:62:73:
b9:cc:4e:7c:d7:73:ae:4c:b8:c5:5f:f5:18:b5:fd:
dc:df:bc:85:31:5d:82:55:9c:63:a8:8c:e0:44:1a:
7b:68:3c:46:e5:22:2e:3d:eb:36:4d:78:00:86:75:
fd:64:d1:f7:d8:95:f8:ea:42:db:ed:5f:f6:4e:65:
57:67:6e:02:7f:14:42:17:f3:c2:c5:47:bc:3e:d6:
b0:9f:8e:a8:8f:be:94:85:82:18:24:66:cb:90:88:
20:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:0C:84:8E:5B:CF:B2:53:A3:EF:5B:E2:C0:06:D0:2F:9B:1C:38:DF
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/_AyEjlvPslOj71viwAbQL5scON8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.208.0/24
88.216.214.0/24
Signature Algorithm: sha256WithRSAEncryption
59:69:5c:7e:9d:2c:0c:55:98:f2:fa:b9:f7:06:2e:34:eb:4c:
46:7c:d2:7c:bc:68:75:9d:fb:d5:f7:b2:4a:29:17:50:5a:53:
aa:3a:90:c2:e5:63:7e:98:ac:32:67:c3:20:c7:ec:e7:6e:9f:
37:02:42:b8:37:29:9c:91:d6:bd:16:23:74:b8:7c:30:47:75:
0d:e4:18:16:df:d4:cb:ce:d0:99:9f:57:10:3f:ee:3f:3e:2c:
9e:cd:cf:38:29:25:ab:2b:6e:16:26:86:12:b9:ca:a1:bc:b6:
7c:21:a2:5e:63:e7:40:fe:53:cd:2c:03:ed:85:00:47:09:43:
8e:6a:16:91:1e:aa:9b:90:4b:57:d8:85:e2:3c:df:c6:47:4a:
90:5d:38:98:cb:b7:37:18:ee:67:92:fc:1c:69:40:d0:81:7e:
06:c5:bd:eb:19:de:ae:5d:4e:b5:30:0e:b5:f6:1d:c2:e6:39:
42:d4:80:0f:80:24:ed:e8:ae:00:11:90:ab:50:e0:6e:d7:10:
06:e0:58:3b:85:f8:c7:4e:01:da:c8:84:eb:d8:d6:36:1c:ea:
93:27:97:23:4e:0c:6c:c8:b1:ad:c4:81:71:1b:14:b3:10:f8:
c4:bb:fe:ed:0a:85:b3:5d:2a:14:87:d1:cd:a4:27:d8:92:d4:
e9:dd:68:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 14:46:19 2025 by rpki-client