Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/fUI0Er6KHBgECGP2ah8gdM9UuFA.roa
File: fUI0Er6KHBgECGP2ah8gdM9UuFA.roa (raw, json)
Hash identifier: XYyda5VpxULPNS1Sj6VM9JEsTzZpb+bGtmrOG4o+0Ko=
Subject key identifier: 7D:42:34:12:BE:8A:1C:18:04:08:63:F6:6A:1F:20:74:CF:54:B8:50
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 019421441272B8D4C92885917988C7573F65
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/fUI0Er6KHBgECGP2ah8gdM9UuFA.roa
Signing time: Wed 01 Jan 2025 09:48:16 +0000
ROA not before: Wed 01 Jan 2025 09:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201211
IP address blocks: 80.242.53.0/24 maxlen: 24
95.130.224.0/24 maxlen: 24
185.19.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:12:72:b8:d4:c9:28:85:91:79:88:c7:57:3f:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Jan 1 09:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7d423412be8a1c18040863f66a1f2074cf54b850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a7:e1:ad:c6:cf:9a:84:91:51:bb:d9:88:2b:
a6:41:ed:2f:1c:fa:a6:45:a8:ea:59:e8:d4:1e:aa:
dc:f8:23:17:b6:32:cc:22:40:37:3f:be:08:67:53:
f6:97:55:86:d7:08:67:df:39:ee:16:d5:7a:1d:36:
7b:12:49:9d:67:12:c7:94:f9:f2:f7:04:fe:9a:82:
53:af:7e:2c:76:f2:77:22:74:fd:02:c3:fc:fe:65:
08:5c:ff:50:3b:5a:0d:02:8a:95:f7:14:17:e8:fb:
94:b5:ec:1e:45:d5:43:b7:98:4e:34:99:1e:99:b9:
4c:e7:04:c5:16:95:13:8b:3e:e6:51:05:f1:f1:85:
fe:ce:58:1e:e4:53:02:f7:cc:fc:e0:c7:3f:6b:a7:
ba:c2:7c:6d:b5:2b:2f:53:2a:a4:c4:32:22:6e:2a:
26:31:41:e2:03:ca:ae:9a:4a:ee:ac:80:91:80:97:
f8:5d:e0:92:87:e6:0c:b2:b2:7a:ce:a1:f4:6b:5c:
31:e8:ff:c2:0c:84:62:5f:96:90:73:ba:7d:f1:75:
1c:a3:3f:99:14:fe:0f:3c:2c:b0:3d:5b:7f:b3:cb:
c3:2c:7b:45:6d:59:57:32:76:52:9b:82:5b:a9:18:
53:d8:45:0c:8c:81:90:52:d6:b1:a0:fc:10:de:e7:
75:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:42:34:12:BE:8A:1C:18:04:08:63:F6:6A:1F:20:74:CF:54:B8:50
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/fUI0Er6KHBgECGP2ah8gdM9UuFA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.242.53.0/24
95.130.224.0/24
185.19.202.0/24
Signature Algorithm: sha256WithRSAEncryption
21:9f:02:ec:50:8a:e1:46:51:9c:e9:fd:5d:47:d3:9f:78:ff:
4d:19:a1:4a:31:82:c1:ef:87:96:1c:76:65:cd:5b:5a:63:af:
9a:f8:f5:a2:9f:37:59:71:15:87:e0:73:e6:7c:df:0a:5e:85:
7e:b2:06:b6:2a:92:5e:b4:9c:91:59:6d:f7:9b:fb:a3:8f:7c:
57:59:29:a7:56:5d:ad:04:c2:6b:c7:07:c8:02:d7:71:12:9d:
f4:69:6e:1a:80:a7:9e:6b:0b:98:0a:80:25:bc:00:c1:4d:15:
07:91:e3:6f:e9:f3:7a:15:f6:c8:b3:11:c4:dc:ae:47:16:99:
62:90:8c:6d:c8:0b:9c:da:38:39:6e:90:29:23:cc:98:3c:fb:
0f:fb:37:ed:29:f1:77:eb:c9:1a:84:b3:7b:f5:45:a1:8b:a4:
be:f9:d4:a2:18:93:09:37:81:1e:ee:cf:01:19:07:09:fc:10:
0e:0b:c6:bf:e4:e6:10:59:a2:ad:1a:01:80:50:74:2d:0c:26:
8f:f6:a9:45:0e:9a:78:9a:d1:4d:f4:d5:11:e8:fb:8c:16:d5:
b5:65:d0:17:de:d0:c4:49:2a:8f:16:4d:19:b5:79:dd:40:b3:
15:ce:03:17:bd:51:7d:57:ce:5b:0e:86:fa:d3:19:36:41:7d:
ec:a9:b0:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:36:53 2025 by rpki-client