Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/ElC-6BWKIscUitjfAAuE6V-GosE.roa
File: ElC-6BWKIscUitjfAAuE6V-GosE.roa (raw, json)
Hash identifier: puexHHhEWAY8GemHhcMwArliXKfDZpEmPaNZcjyIMY4=
Subject key identifier: 12:50:BE:E8:15:8A:22:C7:14:8A:D8:DF:00:0B:84:E9:5F:86:A2:C1
Certificate issuer: /CN=fd261d45319e8375187436da44bf5b9adb044a7f
Certificate serial: 01942827CC1D72663283C61F73A48AAC50CF
Authority key identifier: FD:26:1D:45:31:9E:83:75:18:74:36:DA:44:BF:5B:9A:DB:04:4A:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_SYdRTGeg3UYdDbaRL9bmtsESn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/ElC-6BWKIscUitjfAAuE6V-GosE.roa
Signing time: Thu 02 Jan 2025 17:54:44 +0000
ROA not before: Thu 02 Jan 2025 17:54:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20560
IP address blocks: 194.50.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/_SYdRTGeg3UYdDbaRL9bmtsESn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/_SYdRTGeg3UYdDbaRL9bmtsESn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_SYdRTGeg3UYdDbaRL9bmtsESn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 22:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:cc:1d:72:66:32:83:c6:1f:73:a4:8a:ac:50:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd261d45319e8375187436da44bf5b9adb044a7f
Validity
Not Before: Jan 2 17:54:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1250bee8158a22c7148ad8df000b84e95f86a2c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c3:10:35:d2:a1:ba:55:47:26:31:30:d2:72:
e7:62:ce:75:31:34:04:ce:ec:24:8b:7a:82:48:60:
85:30:9c:1b:f0:cd:7e:ea:3c:61:96:d7:f4:4f:07:
c5:a8:a6:80:20:85:d7:1b:48:e0:05:e4:71:eb:08:
e9:44:b2:e9:17:18:26:09:f2:50:d9:03:89:0d:6c:
4f:c5:06:57:eb:ae:93:fa:e4:41:d8:36:62:4c:96:
f2:92:60:47:d6:70:d4:66:80:20:46:b9:43:87:62:
db:fc:4e:19:29:46:81:ed:c7:4d:40:9f:e0:d6:04:
20:b9:02:e4:df:d7:e0:c4:7e:e7:cf:c5:4d:56:03:
a4:b4:eb:ce:b8:41:66:7d:75:4b:38:21:25:a3:d7:
d7:d3:f5:f4:68:15:18:12:16:bf:5b:a8:e6:7b:2a:
0b:8c:c6:59:43:a7:7a:58:9d:d7:6f:cf:0e:6e:28:
e5:e3:2f:dc:7e:1b:b7:71:d5:87:4b:af:f2:a4:42:
15:9d:9a:03:69:72:f0:44:65:0d:42:90:c2:8c:3d:
4a:84:bb:0d:5f:9e:75:f6:b4:76:3c:f7:bf:fd:42:
3d:5a:04:7f:ae:57:b7:b9:f9:4e:26:0a:92:ef:57:
f3:6e:f5:1b:86:6f:f6:24:61:d0:e3:fd:18:bd:e0:
58:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:50:BE:E8:15:8A:22:C7:14:8A:D8:DF:00:0B:84:E9:5F:86:A2:C1
X509v3 Authority Key Identifier:
keyid:FD:26:1D:45:31:9E:83:75:18:74:36:DA:44:BF:5B:9A:DB:04:4A:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_SYdRTGeg3UYdDbaRL9bmtsESn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/ElC-6BWKIscUitjfAAuE6V-GosE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/_SYdRTGeg3UYdDbaRL9bmtsESn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.34.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:3c:59:c4:84:96:45:4a:a1:60:36:b3:10:98:e5:62:db:da:
87:cf:ba:0d:8d:90:81:bd:29:62:a4:b9:ed:8c:fb:b5:0d:08:
0e:8b:56:a7:97:b2:85:1d:12:ec:a2:d2:41:02:34:a0:10:1b:
6e:23:aa:b5:3c:a3:58:59:8f:dd:ca:8f:08:ee:b4:d7:0b:b5:
3a:ea:a4:5b:f5:4c:17:c5:64:17:60:9a:25:0c:4f:68:3d:a2:
c4:49:f0:d9:9b:a6:80:07:29:e2:4a:a5:47:b9:79:02:45:b0:
3f:f2:f4:23:f5:e0:38:c6:62:bc:69:8c:56:7e:6a:00:9c:44:
d0:d4:8b:96:7b:c5:70:92:0d:db:da:54:29:3c:70:ea:c7:53:
52:26:9e:98:80:c3:41:8a:e6:9a:ac:4b:71:a7:45:8d:1d:9d:
a4:06:ee:55:85:80:3e:4b:1e:58:4d:0d:bf:da:60:d2:a3:13:
18:f2:dc:11:fb:fd:d5:c5:64:bb:09:d0:49:5e:fb:8e:d5:6f:
df:90:fe:9e:45:79:97:2d:55:a0:e4:89:03:8f:b1:26:74:9e:
90:06:a0:5a:a3:7e:a6:a1:20:e4:aa:09:21:dc:d6:1a:a0:ed:
22:ac:d9:26:30:5d:df:a5:a7:58:c5:bc:19:71:e8:ca:dd:18:
a7:49:7a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 06:59:30 2025 by rpki-client