Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0f7d30-6f24-4b8c-b75c-61700dde7692/1/FTz3I1LwzTnAWMfdkHFOvWrYtnw.roa
File: FTz3I1LwzTnAWMfdkHFOvWrYtnw.roa (raw, json)
Hash identifier: ON7nD9k8gZbbUe0iuDqX0lxMxjEVRpGMdIVVvIAhjDg=
Subject key identifier: 15:3C:F7:23:52:F0:CD:39:C0:58:C7:DD:90:71:4E:BD:6A:D8:B6:7C
Certificate issuer: /CN=9f91443630bed4a41827ace57079a947ac87cbbe
Certificate serial: 01965D36242EF55668FCF487D7C33B6DF028
Authority key identifier: 9F:91:44:36:30:BE:D4:A4:18:27:AC:E5:70:79:A9:47:AC:87:CB:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n5FENjC-1KQYJ6zlcHmpR6yHy74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/0f7d30-6f24-4b8c-b75c-61700dde7692/1/FTz3I1LwzTnAWMfdkHFOvWrYtnw.roa
Signing time: Tue 22 Apr 2025 11:15:51 +0000
ROA not before: Tue 22 Apr 2025 11:15:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205622
IP address blocks: 185.198.160.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/0f7d30-6f24-4b8c-b75c-61700dde7692/1/n5FENjC-1KQYJ6zlcHmpR6yHy74.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/0f7d30-6f24-4b8c-b75c-61700dde7692/1/n5FENjC-1KQYJ6zlcHmpR6yHy74.mft
rsync://rpki.ripe.net/repository/DEFAULT/n5FENjC-1KQYJ6zlcHmpR6yHy74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5d:36:24:2e:f5:56:68:fc:f4:87:d7:c3:3b:6d:f0:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f91443630bed4a41827ace57079a947ac87cbbe
Validity
Not Before: Apr 22 11:15:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=153cf72352f0cd39c058c7dd90714ebd6ad8b67c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:60:57:c2:15:3c:ba:dd:7a:55:11:9c:f1:a0:
50:d3:a7:3b:e9:65:06:c5:3c:f8:97:0e:b4:85:50:
9a:51:3a:97:76:72:97:7a:df:1d:9f:37:8f:1e:ed:
f2:90:e3:2a:82:86:f6:6f:55:b1:80:84:60:43:16:
c4:65:1d:37:cc:2a:08:bb:2e:f9:5a:51:a4:44:02:
cb:f8:e6:89:a7:df:f9:b8:48:31:92:fa:1f:26:5e:
08:e5:73:ad:e7:13:ec:f7:07:df:60:30:4c:6a:20:
ed:65:ae:d3:b9:58:41:a6:60:7e:d9:cb:a3:59:4d:
6f:fc:94:b7:34:15:35:7c:1d:9d:a9:e5:3d:c9:bc:
58:75:23:0d:8c:f3:21:5c:d4:25:88:24:66:1f:b4:
27:bb:35:15:91:8d:a7:35:29:e1:c3:b4:5f:12:aa:
09:7d:a1:c6:ed:ea:39:c4:37:4d:1d:47:63:90:87:
ad:4e:24:43:63:d5:1b:83:61:6f:38:b9:1b:32:59:
08:79:7a:65:4c:30:4d:48:06:ce:b5:9a:66:99:b0:
19:a8:15:db:b1:3a:3e:ca:96:79:49:a0:d1:3a:a7:
85:98:6e:ab:38:49:bd:19:df:f5:9a:0f:d4:14:0b:
fc:05:b0:46:db:46:4c:5c:71:9a:6a:71:16:6a:6f:
e9:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:3C:F7:23:52:F0:CD:39:C0:58:C7:DD:90:71:4E:BD:6A:D8:B6:7C
X509v3 Authority Key Identifier:
keyid:9F:91:44:36:30:BE:D4:A4:18:27:AC:E5:70:79:A9:47:AC:87:CB:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n5FENjC-1KQYJ6zlcHmpR6yHy74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0f7d30-6f24-4b8c-b75c-61700dde7692/1/FTz3I1LwzTnAWMfdkHFOvWrYtnw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0f7d30-6f24-4b8c-b75c-61700dde7692/1/n5FENjC-1KQYJ6zlcHmpR6yHy74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.198.160.0/22
Signature Algorithm: sha256WithRSAEncryption
35:ea:bd:c7:2f:46:84:39:0f:85:b4:e5:ec:42:27:05:2c:03:
c4:10:37:bf:ca:4f:f4:12:2f:1d:cd:9a:a4:f6:d5:e0:8d:f8:
f4:be:9b:1e:b9:28:e2:80:43:ef:2a:57:2a:98:e2:0c:8a:9f:
b7:63:35:1e:37:57:0e:bf:67:ff:8f:20:ff:59:84:31:32:82:
06:78:6c:cc:ee:31:ed:81:5e:73:15:6e:3a:6e:11:6c:d6:ee:
95:ce:df:c8:11:a4:bc:72:9b:58:b8:6f:0e:98:b8:af:4d:19:
dc:e0:9d:eb:34:2b:c3:d6:99:5b:ac:b0:46:92:22:d4:33:0b:
7e:d1:0c:c2:26:26:61:6e:eb:e1:43:03:a1:12:d8:93:6b:38:
42:c3:7c:c2:dd:39:26:15:f3:7d:30:c7:09:27:c0:64:b0:0a:
54:1a:32:90:d9:6d:55:f6:ac:f8:05:49:0b:7c:f5:98:1b:0d:
aa:49:4c:dc:ea:1d:a3:4c:be:d1:7f:a3:5a:85:79:64:ab:22:
4a:68:c4:6b:33:51:f2:9d:13:3c:38:87:20:16:a8:0c:28:17:
67:83:ae:96:12:35:7e:3d:22:7f:db:b4:45:8a:f1:05:61:35:
73:17:39:89:53:6d:f7:0f:83:b4:62:ad:07:6a:0f:3a:37:fe:
c2:6a:08:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 20:04:31 2025 by rpki-client