Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/37514f-14e9-4dbe-b398-c87fab985af8/1/1-6KFFu76PFsOuJn8gJBndgCFOdU.roa
File: 1-6KFFu76PFsOuJn8gJBndgCFOdU.roa (raw, json)
Hash identifier: 6vvOH7Ca5iY7AgmvELf2eSvGZtIS2tf6NCvrsrbSjcE=
Subject key identifier: FB:A2:85:16:EE:FA:3C:5B:0E:B8:99:FC:80:90:67:76:00:85:39:D5
Certificate issuer: /CN=3d14528eefc2df93ffb4e74fa1b6503b76ed96ce
Certificate serial: 019426D972BBF9E1A1FC7517B845CDAA6E33
Authority key identifier: 3D:14:52:8E:EF:C2:DF:93:FF:B4:E7:4F:A1:B6:50:3B:76:ED:96:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PRRSju_C35P_tOdPobZQO3btls4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/37514f-14e9-4dbe-b398-c87fab985af8/1/1-6KFFu76PFsOuJn8gJBndgCFOdU.roa
Signing time: Thu 02 Jan 2025 11:49:32 +0000
ROA not before: Thu 02 Jan 2025 11:49:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49756
IP address blocks: 194.242.20.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/37514f-14e9-4dbe-b398-c87fab985af8/1/PRRSju_C35P_tOdPobZQO3btls4.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/37514f-14e9-4dbe-b398-c87fab985af8/1/PRRSju_C35P_tOdPobZQO3btls4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PRRSju_C35P_tOdPobZQO3btls4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:72:bb:f9:e1:a1:fc:75:17:b8:45:cd:aa:6e:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d14528eefc2df93ffb4e74fa1b6503b76ed96ce
Validity
Not Before: Jan 2 11:49:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fba28516eefa3c5b0eb899fc80906776008539d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:12:61:86:92:89:e5:da:a0:74:b0:5f:10:dd:
fb:ea:57:5f:93:f2:8a:e2:9f:e8:2a:d5:38:40:49:
8b:b0:bb:8a:57:52:4f:6e:80:60:70:82:8e:30:d2:
32:78:d0:3f:d9:7a:cd:2a:10:15:16:ec:10:fe:1e:
b0:61:d5:28:f5:b3:85:ed:fb:a4:c4:11:bf:cb:80:
cb:17:60:11:7e:7a:47:81:11:98:ba:ab:ce:93:fe:
30:dc:67:fa:da:4d:21:c6:42:bb:27:4e:69:0f:63:
60:2c:61:e7:2e:3a:42:5b:07:c4:2a:ee:d2:0c:95:
17:ea:66:31:d4:87:e5:68:42:35:b7:51:4d:27:5b:
4c:35:92:a5:fa:dc:4a:1c:3b:42:5e:eb:d4:31:44:
5f:99:a5:ce:3d:ff:c2:f8:6f:ba:b9:ce:11:a6:1a:
71:58:ce:2a:1e:b9:c3:fd:7d:09:82:a1:5b:ad:e0:
1f:e1:f6:9e:9a:a0:3c:6b:63:b8:3a:32:be:d5:70:
a6:a9:11:ea:b3:df:69:e1:15:06:64:28:48:d9:d9:
69:2a:02:74:37:d4:02:b5:d3:3e:ef:6b:45:d8:93:
75:79:9a:de:e8:02:df:14:1f:db:78:ad:01:8c:1f:
06:f1:52:8d:90:69:14:2a:5f:8c:eb:9e:42:a9:1b:
80:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:A2:85:16:EE:FA:3C:5B:0E:B8:99:FC:80:90:67:76:00:85:39:D5
X509v3 Authority Key Identifier:
keyid:3D:14:52:8E:EF:C2:DF:93:FF:B4:E7:4F:A1:B6:50:3B:76:ED:96:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRRSju_C35P_tOdPobZQO3btls4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/37514f-14e9-4dbe-b398-c87fab985af8/1/1-6KFFu76PFsOuJn8gJBndgCFOdU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/37514f-14e9-4dbe-b398-c87fab985af8/1/PRRSju_C35P_tOdPobZQO3btls4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.242.20.0/23
Signature Algorithm: sha256WithRSAEncryption
46:a2:d7:c3:96:7e:f8:46:e4:67:43:b7:b6:f1:00:aa:af:42:
65:5b:80:31:dc:f9:c3:d8:73:70:0f:c0:e9:96:af:8c:63:c9:
2b:2f:07:a5:68:5d:10:3e:13:95:b9:4b:27:58:90:40:d4:ba:
66:11:aa:29:06:eb:fa:df:51:8d:12:44:16:88:14:22:c1:1d:
e2:dc:40:68:de:06:ae:81:41:9b:88:c8:4d:5d:5a:eb:1f:e0:
e0:15:ad:0f:0c:c8:f4:f6:5a:23:97:74:18:e5:fc:78:63:5b:
11:5d:d8:60:b2:ca:45:35:43:90:9b:1a:e9:5f:81:de:0a:f0:
a6:ae:40:29:14:32:52:33:e8:3c:af:c5:23:27:64:50:9b:c9:
2f:64:21:c3:f4:8d:d0:72:83:61:aa:ed:58:fa:4d:03:7e:65:
aa:f3:ed:0f:57:f1:95:ef:7c:67:31:30:2a:79:b1:7c:97:d6:
89:68:e2:ae:c8:a4:45:47:3a:e0:b0:40:b6:38:15:ff:b4:10:
c5:e8:ad:a7:6d:16:47:8d:42:56:c9:14:ee:9c:21:65:f8:54:
16:2f:85:62:e3:57:e5:0a:5d:60:e9:cb:5e:ca:ac:ac:28:7a:
12:8e:59:71:71:73:75:2e:61:0f:56:e5:c1:7d:5d:42:fe:1e:
0e:37:1f:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 11:04:31 2025 by rpki-client