Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/cZSQ8R7-65vAwJO-FT96chJrUGw.roa
File: cZSQ8R7-65vAwJO-FT96chJrUGw.roa (raw, json)
Hash identifier: 9tzcRSPinXlO3L9oDrIRigxx9j9+0/c5jg3Nd12dBaI=
Subject key identifier: 71:94:90:F1:1E:FE:EB:9B:C0:C0:93:BE:15:3F:7A:72:12:6B:50:6C
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01942369FC34F6A7A11DA759257706497657
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/cZSQ8R7-65vAwJO-FT96chJrUGw.roa
Signing time: Wed 01 Jan 2025 19:48:55 +0000
ROA not before: Wed 01 Jan 2025 19:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212416
IP address blocks: 194.104.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:fc:34:f6:a7:a1:1d:a7:59:25:77:06:49:76:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Jan 1 19:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=719490f11efeeb9bc0c093be153f7a72126b506c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:80:79:b5:79:41:e5:4e:0d:66:4b:7f:8d:9f:
8e:00:15:5c:a7:da:06:73:da:df:90:6d:0f:66:24:
20:e0:39:85:09:d6:ca:ea:4e:7d:45:be:f7:77:eb:
90:ea:40:67:8a:49:b3:dd:8d:75:1e:2a:d2:a3:4c:
c3:b9:60:64:d9:58:65:d0:57:9a:de:e1:8f:10:99:
75:d2:df:a3:5c:b8:2d:b0:55:e2:c0:c0:e1:56:97:
52:28:4b:a5:8a:c9:34:16:64:76:90:ae:7e:dc:45:
50:05:62:e2:08:9b:39:b9:02:3a:9e:b3:51:ad:14:
fb:14:43:1d:f4:75:33:b5:80:18:25:13:4d:70:7b:
64:64:69:23:09:75:f1:03:85:ed:34:f0:00:1b:15:
c2:ee:a3:c7:42:6d:f1:a1:ab:1f:4d:f2:e7:0f:5a:
cf:5a:7a:a1:91:7e:7b:6a:f6:36:d4:57:09:fe:9c:
9c:2a:3b:1b:dc:9a:9d:e3:89:94:ce:88:34:25:73:
14:c0:f9:37:89:59:94:b1:90:36:43:0a:d7:08:33:
2e:bf:5c:5e:29:49:de:fc:a6:01:88:8f:f0:9e:31:
74:05:5f:dd:6c:18:e1:97:24:ef:16:77:88:57:08:
24:2e:f5:11:5f:81:c7:ec:3c:6d:af:54:2a:c4:5c:
39:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:94:90:F1:1E:FE:EB:9B:C0:C0:93:BE:15:3F:7A:72:12:6B:50:6C
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/cZSQ8R7-65vAwJO-FT96chJrUGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.131.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:c2:38:fd:ea:ea:75:58:5d:c1:c2:20:3d:4d:fc:26:f8:2a:
c8:c9:7a:e1:83:16:eb:dc:7e:da:20:02:7f:ab:7f:36:be:6c:
9a:a7:2c:cb:55:65:7a:d5:33:a8:64:62:77:43:b3:12:8c:7c:
71:83:59:b7:36:53:6a:c4:d1:00:66:4f:db:0d:f7:ff:fc:a0:
60:b1:54:c7:52:aa:c8:27:3f:ae:8b:aa:16:8b:9f:5c:e0:fe:
5a:36:42:21:84:ba:46:4b:a3:76:45:6f:c5:1e:1c:25:9f:0a:
1b:f8:d8:0d:28:02:60:94:17:38:5f:18:0e:d8:3f:f6:51:ae:
cd:32:16:7f:aa:69:b8:eb:75:d7:2b:20:1d:05:af:17:e4:7d:
c9:d3:08:da:34:a5:c0:a5:1b:d1:aa:4f:85:c9:db:1a:e8:1f:
06:ef:f1:72:6d:fa:bf:d9:57:27:a1:15:09:2a:50:05:53:f8:
59:22:01:44:b1:75:8f:f5:2e:5a:c6:87:3e:27:78:50:f0:e5:
5f:95:3e:3c:e1:8b:7f:4b:c4:43:70:d3:db:50:e5:c0:aa:0d:
98:58:bd:a8:dc:1e:67:2c:2b:b4:62:73:86:50:2a:2a:79:af:
7b:36:cd:89:9b:8b:1a:92:f1:d6:2a:47:62:b9:84:74:a6:81:
7b:19:8f:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 12:48:28 2025 by rpki-client