Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/6bf5ed-6fe6-4562-b853-9a4ec10607c5/1/FAudlpGk_kDfTVYbbohSs3--fwY.roa
File: FAudlpGk_kDfTVYbbohSs3--fwY.roa (raw, json)
Hash identifier: s6Wsa14pBQYCdq/M2UXC/KMh/WJZHtqOr4iUBFGtM4E=
Subject key identifier: 14:0B:9D:96:91:A4:FE:40:DF:4D:56:1B:6E:88:52:B3:7F:BE:7F:06
Certificate issuer: /CN=d32563ed9964e42681a1c5d295b0c6148606e73d
Certificate serial: 01942369F6A7B70A47FAC81ABCB5293E274B
Authority key identifier: D3:25:63:ED:99:64:E4:26:81:A1:C5:D2:95:B0:C6:14:86:06:E7:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0yVj7Zlk5CaBocXSlbDGFIYG5z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/6bf5ed-6fe6-4562-b853-9a4ec10607c5/1/FAudlpGk_kDfTVYbbohSs3--fwY.roa
Signing time: Wed 01 Jan 2025 19:48:54 +0000
ROA not before: Wed 01 Jan 2025 19:48:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44477
IP address blocks: 194.59.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/6bf5ed-6fe6-4562-b853-9a4ec10607c5/1/0yVj7Zlk5CaBocXSlbDGFIYG5z0.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/6bf5ed-6fe6-4562-b853-9a4ec10607c5/1/0yVj7Zlk5CaBocXSlbDGFIYG5z0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0yVj7Zlk5CaBocXSlbDGFIYG5z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:f6:a7:b7:0a:47:fa:c8:1a:bc:b5:29:3e:27:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d32563ed9964e42681a1c5d295b0c6148606e73d
Validity
Not Before: Jan 1 19:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=140b9d9691a4fe40df4d561b6e8852b37fbe7f06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f4:6f:29:2e:1b:5f:d5:e6:dc:7e:b8:c8:af:
1b:c8:d3:6c:45:30:f8:c9:79:79:35:58:07:b1:34:
42:9b:28:63:df:77:df:04:87:29:97:b9:3f:8a:54:
99:18:0d:0a:4d:e4:57:97:b6:f6:fb:d7:83:d4:2a:
85:89:2d:5f:36:1b:c5:bc:bc:88:af:bb:f2:06:46:
6e:0a:76:47:eb:5c:27:e5:ac:82:1f:e8:1b:11:b4:
c4:61:9d:ac:2e:a1:9c:7d:76:41:59:a4:73:7b:1a:
b9:27:93:de:d7:6b:ad:52:89:91:1f:1f:4d:ee:09:
9a:3e:c3:3f:f5:85:f1:d6:29:0b:8e:f9:55:cb:bb:
60:20:b3:f3:8e:69:25:2c:a8:58:74:e5:3d:03:53:
17:45:5e:f6:24:3e:25:48:ee:43:f6:5d:b1:1d:16:
a3:9e:52:ee:6a:e4:44:7d:ed:ed:fa:22:04:e7:90:
2e:6e:1f:27:33:f4:07:f6:b5:63:48:2c:a3:a1:8c:
f0:76:c6:0e:09:e4:3d:f0:c1:35:c0:b7:a8:86:af:
bc:e5:51:cf:a6:85:48:dc:0a:0b:0a:42:f9:c3:f3:
c2:06:77:a2:a8:5f:f3:99:43:0a:54:e4:f4:cc:c4:
83:00:79:05:c8:52:f7:61:4e:6b:95:01:d5:fe:6e:
b7:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:0B:9D:96:91:A4:FE:40:DF:4D:56:1B:6E:88:52:B3:7F:BE:7F:06
X509v3 Authority Key Identifier:
keyid:D3:25:63:ED:99:64:E4:26:81:A1:C5:D2:95:B0:C6:14:86:06:E7:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0yVj7Zlk5CaBocXSlbDGFIYG5z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/6bf5ed-6fe6-4562-b853-9a4ec10607c5/1/FAudlpGk_kDfTVYbbohSs3--fwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/6bf5ed-6fe6-4562-b853-9a4ec10607c5/1/0yVj7Zlk5CaBocXSlbDGFIYG5z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.59.247.0/24
Signature Algorithm: sha256WithRSAEncryption
38:ee:13:85:37:34:80:09:24:1f:30:48:a3:74:90:c9:08:2c:
d2:11:0b:c8:82:48:25:4e:2c:94:6b:b6:ed:14:09:21:54:00:
03:47:06:03:f1:0a:e5:cc:2a:4a:c0:8a:48:9b:55:ff:0d:b9:
d9:39:a5:32:85:ca:1a:7e:94:69:97:ce:13:3b:a4:02:34:a1:
00:fc:ca:c5:a2:0c:35:48:f9:1c:4f:bb:26:94:2b:17:da:ad:
d1:32:6d:8f:a8:08:83:44:ce:ba:b6:52:3d:6f:24:bc:fa:08:
d5:ba:9d:a4:3d:41:76:a0:99:27:62:c9:83:cd:c0:fc:f2:2c:
2d:16:87:d5:46:cf:ff:a7:f3:e2:2a:ee:d3:f4:1a:c9:2d:79:
b2:1f:13:52:06:ef:b4:d2:aa:8b:fb:b2:68:7a:5d:e8:66:e8:
57:0d:0b:c6:7e:6b:f1:5e:2d:3b:14:8c:62:e2:66:37:ad:69:
48:16:15:47:75:9c:3d:78:8a:2e:11:0c:5c:97:da:9f:94:2a:
ee:55:d9:91:5d:20:64:16:94:58:d0:7b:a4:7d:a3:cb:ff:6d:
5d:4a:52:08:ee:9c:a0:d3:ef:b4:7d:57:01:ad:90:41:95:d2:
a0:8b:06:33:32:df:aa:de:cb:87:c1:4d:f3:87:67:6b:3c:d7:
b3:4b:6f:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:59:23 2025 by rpki-client