Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/fkzxhNwpXM5jeuEJssvVXsdwixg.roa
File: fkzxhNwpXM5jeuEJssvVXsdwixg.roa (raw, json)
Hash identifier: 0lAziCTuzAq2pp7jVp0iOpELYiMBg6nHcEbSbhOqWGs=
Subject key identifier: 7E:4C:F1:84:DC:29:5C:CE:63:7A:E1:09:B2:CB:D5:5E:C7:70:8B:18
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 019777B15031DB7752AC11CF050CDCCD40E1
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/fkzxhNwpXM5jeuEJssvVXsdwixg.roa
Signing time: Mon 16 Jun 2025 07:43:18 +0000
ROA not before: Mon 16 Jun 2025 07:43:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198584
IP address blocks: 213.145.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft
rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:b1:50:31:db:77:52:ac:11:cf:05:0c:dc:cd:40:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: Jun 16 07:43:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7e4cf184dc295cce637ae109b2cbd55ec7708b18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:bb:e1:ac:a6:95:69:58:1d:ed:ad:a4:4c:67:
63:8c:10:2e:39:68:de:df:23:f3:1a:b5:ed:c7:6b:
6f:34:c0:86:5d:9e:5f:7c:e5:2d:74:35:df:29:a7:
ce:6b:64:d2:14:7f:1d:6b:2f:c4:06:cd:86:c6:55:
3a:19:ba:a8:34:76:d6:81:36:5b:a4:a2:30:5a:82:
90:f2:27:5c:4a:a5:e9:8c:6c:e7:0d:8e:b7:83:87:
c9:f8:41:7b:a0:31:c1:a3:2b:7e:9e:9c:57:77:74:
17:ff:57:5b:12:07:a9:b0:22:3f:f5:0f:4d:b0:5c:
33:2a:39:ba:e6:c3:48:12:f3:7c:7e:3d:5a:76:2d:
15:a8:8b:9c:fc:55:87:50:79:bf:b2:67:a5:fc:ce:
d6:ab:b2:85:76:00:72:bb:ab:7b:f8:06:fd:86:9b:
88:a7:b5:d8:61:db:f2:51:aa:3e:ab:c7:1b:fd:73:
79:42:b5:4d:68:55:f5:d7:f7:dc:2f:9f:df:98:92:
18:22:11:4d:79:1f:d3:37:06:3c:c1:7c:90:65:a1:
f7:41:b8:85:2f:78:e3:21:72:26:e4:0c:7a:92:45:
b3:3b:40:ae:66:4a:7a:7e:da:57:ba:e9:1e:89:e0:
84:09:fe:a7:90:81:d7:68:20:a5:b2:39:ae:9a:5b:
bf:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:4C:F1:84:DC:29:5C:CE:63:7A:E1:09:B2:CB:D5:5E:C7:70:8B:18
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/fkzxhNwpXM5jeuEJssvVXsdwixg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.145.71.0/24
Signature Algorithm: sha256WithRSAEncryption
21:e5:74:f9:44:5a:1f:1e:33:95:fa:19:bc:ef:16:d3:bc:86:
9c:bd:a6:13:ba:4f:f9:29:47:84:af:8d:f8:09:70:e9:23:b5:
e8:41:f9:10:b4:54:83:8a:aa:01:0d:1b:e6:e8:9a:80:eb:78:
cd:f0:83:d1:ab:aa:af:b1:a8:a7:84:c1:e2:85:01:79:e0:0c:
f8:9b:1e:53:d4:b2:79:02:79:99:1c:ae:79:a2:3e:05:b2:c4:
d2:cd:f6:4e:12:d9:b3:90:07:58:b7:68:b2:94:f7:5c:1f:e9:
fe:97:8c:66:bf:0a:1c:84:c2:37:e5:56:2a:5a:8c:a3:ed:e8:
7a:91:15:32:a5:4c:03:80:49:9c:0f:c0:5a:20:00:1e:d3:b9:
85:8d:31:e3:1d:f7:d2:ab:21:45:94:1a:e3:e1:8a:70:cb:a1:
7d:e9:00:af:d4:a2:bb:77:1c:78:ff:4f:c5:32:c4:87:9b:d2:
fc:0c:71:37:c6:ee:35:37:15:9b:6b:b2:ea:a7:ed:b7:0d:24:
98:8e:25:88:43:48:7e:f7:19:64:cc:1c:72:3b:00:46:bd:38:
c1:7f:be:22:6d:a0:5c:2b:c0:f5:bc:bb:ec:cb:bf:f3:ce:fe:
df:ca:dc:96:25:f6:51:aa:8e:95:17:f6:d8:62:5f:2d:d3:59:
29:19:d6:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:26:15 2025 by rpki-client