Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/cTuB-ABZUf0AWR__0VF3CDRNo30.roa
File: cTuB-ABZUf0AWR__0VF3CDRNo30.roa (raw, json)
Hash identifier: YL1vZUc95MXZVuCPTTh8OWx5ow2ebJPHUlFFR9eeynk=
Subject key identifier: 71:3B:81:F8:00:59:51:FD:00:59:1F:FF:D1:51:77:08:34:4D:A3:7D
Certificate issuer: /CN=cfba043e1c4b52447a8e367bbc1307519fa5fae0
Certificate serial: 0194258F32E7BBBDA9BF78F555AA5F978B91
Authority key identifier: CF:BA:04:3E:1C:4B:52:44:7A:8E:36:7B:BC:13:07:51:9F:A5:FA:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/cTuB-ABZUf0AWR__0VF3CDRNo30.roa
Signing time: Thu 02 Jan 2025 05:48:49 +0000
ROA not before: Thu 02 Jan 2025 05:48:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57834
IP address blocks: 185.197.124.0/24 maxlen: 24
185.197.125.0/24 maxlen: 24
185.197.126.0/24 maxlen: 24
185.197.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.mft
rsync://rpki.ripe.net/repository/DEFAULT/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 10:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:32:e7:bb:bd:a9:bf:78:f5:55:aa:5f:97:8b:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfba043e1c4b52447a8e367bbc1307519fa5fae0
Validity
Not Before: Jan 2 05:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=713b81f8005951fd00591fffd1517708344da37d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:04:01:47:28:1e:ef:82:b4:63:95:91:ad:70:
a6:4e:19:b3:ca:81:25:d2:54:85:dd:9b:4c:df:82:
fc:81:b5:d7:f5:81:cf:1d:64:5a:3d:94:95:2d:83:
a6:7f:65:56:79:d9:3f:e9:56:06:98:6a:1b:8e:33:
82:be:39:99:06:f4:f6:24:21:60:83:8a:3c:4c:75:
66:ab:34:55:df:1c:12:83:52:43:a6:b4:c3:eb:f4:
78:bb:64:4f:cb:a0:42:ec:b3:13:dc:d9:af:0c:7d:
67:fe:13:f3:ec:c1:cb:f1:94:e2:67:a2:8c:27:97:
42:61:74:8b:26:96:e7:59:f3:52:9a:7f:33:6d:9c:
a9:fa:4f:33:5a:6e:33:59:c5:e6:ca:fd:0f:b7:0c:
60:ad:7d:a7:c7:7f:5a:41:c0:be:7a:ca:6d:5c:79:
59:9d:af:51:95:fe:05:9d:e0:0d:1f:a4:23:f5:7a:
80:0e:93:fe:ec:70:50:a9:d5:a9:fa:77:29:5a:90:
0e:a6:22:7b:f9:2c:29:a1:e4:30:7d:b7:f7:19:0d:
e1:57:9a:ad:10:ab:7c:3c:1d:d0:5a:5d:8c:94:f3:
46:06:5b:7a:63:44:e1:4e:90:41:29:d8:91:51:8c:
12:9a:4e:c7:66:c2:f2:f1:ad:76:4b:78:2c:07:98:
13:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:3B:81:F8:00:59:51:FD:00:59:1F:FF:D1:51:77:08:34:4D:A3:7D
X509v3 Authority Key Identifier:
keyid:CF:BA:04:3E:1C:4B:52:44:7A:8E:36:7B:BC:13:07:51:9F:A5:FA:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/cTuB-ABZUf0AWR__0VF3CDRNo30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.197.124.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:0f:b6:f3:ab:f9:8f:7e:c2:1e:8b:dc:99:1e:7a:c7:44:5e:
8b:cc:e6:52:35:fc:46:25:b0:6b:f6:d8:14:46:d8:2a:cf:71:
37:09:98:63:93:64:38:90:58:e5:63:e4:bd:5c:0e:48:8f:d2:
17:36:ee:dd:63:96:71:ac:7d:36:c5:ab:f7:6f:f4:4f:24:e7:
1f:6c:2e:55:13:66:b0:e5:01:f9:7d:85:94:f6:42:9f:83:20:
4a:72:88:11:a4:4b:4a:54:ad:98:32:ea:6c:f7:e3:24:2f:5e:
1b:27:92:9c:58:43:f6:f0:cb:ce:81:ae:f0:0b:8d:c7:e7:e2:
1c:50:9f:6d:e0:63:0f:23:39:3a:12:f8:f7:06:20:e7:e4:0e:
4a:53:be:a3:a3:f7:fd:b4:cc:89:91:9f:a7:a5:7c:61:8b:23:
28:18:0f:bd:64:38:c9:07:57:d7:cf:58:72:92:29:92:ff:94:
3c:13:ab:3d:1e:74:13:41:57:1d:9b:95:42:60:d9:90:7a:b6:
e9:5d:d8:24:3c:4b:83:94:36:89:58:f2:17:c3:af:d2:b0:d5:
33:92:08:06:10:14:b7:20:3e:19:aa:e0:83:f4:27:08:0e:45:
11:e0:42:9a:fe:af:e0:02:2d:74:6c:a4:ca:31:f0:6d:13:23:
90:ea:36:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:04:12 2025 by rpki-client