Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/CgdiB-LvALW6eF8te_abb7XhHzw.roa
File: CgdiB-LvALW6eF8te_abb7XhHzw.roa (raw, json)
Hash identifier: FMmsOk3IFJDqEQcmSu8en9nadePYE7fdzLtSrsLGOLw=
Subject key identifier: 0A:07:62:07:E2:EF:00:B5:BA:78:5F:2D:7B:F6:9B:6F:B5:E1:1F:3C
Certificate issuer: /CN=49596cecc21dd02677a727ef37f0689546ea5097
Certificate serial: 0194214444613A03E5492DC9AD2D6992F327
Authority key identifier: 49:59:6C:EC:C2:1D:D0:26:77:A7:27:EF:37:F0:68:95:46:EA:50:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SVls7MId0CZ3pyfvN_BolUbqUJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/CgdiB-LvALW6eF8te_abb7XhHzw.roa
Signing time: Wed 01 Jan 2025 09:48:29 +0000
ROA not before: Wed 01 Jan 2025 09:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48714
IP address blocks: 83.119.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/SVls7MId0CZ3pyfvN_BolUbqUJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/SVls7MId0CZ3pyfvN_BolUbqUJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SVls7MId0CZ3pyfvN_BolUbqUJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:44:61:3a:03:e5:49:2d:c9:ad:2d:69:92:f3:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49596cecc21dd02677a727ef37f0689546ea5097
Validity
Not Before: Jan 1 09:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0a076207e2ef00b5ba785f2d7bf69b6fb5e11f3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e6:35:46:e1:5a:c4:ef:a0:0d:ee:97:95:3d:
d5:b6:64:58:29:78:3d:ab:47:4b:1b:e8:58:5c:f7:
2e:a5:0d:cc:ad:91:8b:39:6a:be:ad:9a:71:98:33:
ef:33:d9:01:3b:9c:24:03:3d:e7:24:ac:a2:a3:c2:
1d:df:a1:f1:6d:6a:7b:58:f3:43:80:1b:3f:b2:ab:
a5:1a:42:ac:b9:41:32:60:89:09:35:bd:f9:29:e7:
4d:68:64:5e:7b:f4:1e:44:b6:b4:8b:38:40:13:44:
de:cc:b6:f8:7e:d4:d8:90:02:91:34:25:b5:94:20:
7d:58:4f:95:04:bc:6d:62:ef:5f:39:15:2c:e1:ce:
b4:70:25:7a:42:e1:aa:61:38:ed:04:b4:0c:a0:31:
0e:3c:a8:4b:f6:43:91:29:e4:71:09:be:e8:74:c4:
8a:8e:63:49:5d:dd:3b:b2:13:c2:9a:ef:bb:cf:e1:
b9:ac:19:4d:35:cf:f6:7a:2c:45:8a:c3:a7:37:ba:
da:03:0c:21:f9:63:2d:b9:ea:65:67:a0:3e:e8:84:
f7:3a:e4:22:75:a2:eb:cb:87:8b:15:1c:ed:bb:fc:
47:f6:48:d1:b8:50:1c:2d:04:1b:17:84:69:2d:63:
c6:6c:2a:15:55:e4:c2:b5:23:59:0b:15:9c:62:0b:
59:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:07:62:07:E2:EF:00:B5:BA:78:5F:2D:7B:F6:9B:6F:B5:E1:1F:3C
X509v3 Authority Key Identifier:
keyid:49:59:6C:EC:C2:1D:D0:26:77:A7:27:EF:37:F0:68:95:46:EA:50:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SVls7MId0CZ3pyfvN_BolUbqUJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/CgdiB-LvALW6eF8te_abb7XhHzw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/SVls7MId0CZ3pyfvN_BolUbqUJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.119.7.0/24
Signature Algorithm: sha256WithRSAEncryption
26:8f:a5:df:5c:fd:4b:ac:47:bb:ca:3f:fc:fe:e0:01:5d:82:
ee:68:18:63:5c:ac:ea:be:37:26:4c:16:c7:ca:8a:20:48:e7:
11:95:ed:62:d1:0f:4c:3f:9c:5e:f5:1b:f8:bc:7b:d8:d1:75:
01:df:e5:dc:4a:4c:cb:22:2d:a3:6d:c7:a7:3e:6b:7c:39:77:
62:a0:dd:f1:01:f4:ae:e5:ef:3a:73:d4:1b:52:1d:56:a8:ed:
78:72:f6:cb:0c:30:94:13:d8:4c:91:9c:0a:b8:1f:f0:a6:a0:
4f:fb:c6:5c:87:8d:d8:9a:1f:f9:ef:67:3f:90:25:52:bc:64:
b8:d4:ab:b7:46:76:bf:93:d3:a4:4f:1f:40:f6:f7:aa:3d:00:
79:de:86:fd:62:00:65:ef:4a:81:a1:bc:b9:ac:b5:c9:6a:96:
99:15:02:ff:a6:3e:ed:91:89:bb:62:44:3f:f8:40:bd:ff:81:
88:7b:f6:b4:4e:e2:5e:18:96:90:39:c8:47:35:1d:b6:3d:e9:
14:f6:f2:fc:95:70:01:a1:be:68:f4:60:9e:12:34:25:8d:69:
62:8d:de:77:62:88:8c:45:1e:6b:fe:4e:b8:41:e8:21:2c:60:
23:fd:d3:df:fe:4f:0a:7b:a9:5c:81:ba:22:d7:c4:35:90:a3:
17:38:d9:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 14:02:38 2025 by rpki-client