Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c0afd4-e27f-41ca-bbe4-db78a0525797/1/cfMo45Jv9A1WGKpmxu905UcUbY4.roa
File: cfMo45Jv9A1WGKpmxu905UcUbY4.roa (raw, json)
Hash identifier: U6aEuljm9L9MfkEprrOph8zxNUxsNX0jhdgLZVW2e8c=
Subject key identifier: 71:F3:28:E3:92:6F:F4:0D:56:18:AA:66:C6:EF:74:E5:47:14:6D:8E
Certificate issuer: /CN=f3409b83d114c809211116ca2c8db38dce1680f9
Certificate serial: 019420D5FD1B02362094A132555A9C3D54E3
Authority key identifier: F3:40:9B:83:D1:14:C8:09:21:11:16:CA:2C:8D:B3:8D:CE:16:80:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/80Cbg9EUyAkhERbKLI2zjc4WgPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/c0afd4-e27f-41ca-bbe4-db78a0525797/1/cfMo45Jv9A1WGKpmxu905UcUbY4.roa
Signing time: Wed 01 Jan 2025 07:48:02 +0000
ROA not before: Wed 01 Jan 2025 07:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212292
IP address blocks: 195.246.232.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/c0afd4-e27f-41ca-bbe4-db78a0525797/1/80Cbg9EUyAkhERbKLI2zjc4WgPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/c0afd4-e27f-41ca-bbe4-db78a0525797/1/80Cbg9EUyAkhERbKLI2zjc4WgPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/80Cbg9EUyAkhERbKLI2zjc4WgPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:fd:1b:02:36:20:94:a1:32:55:5a:9c:3d:54:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3409b83d114c809211116ca2c8db38dce1680f9
Validity
Not Before: Jan 1 07:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=71f328e3926ff40d5618aa66c6ef74e547146d8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:9b:be:38:a8:70:ac:14:ca:09:80:d3:4d:6c:
e7:77:11:2f:de:9d:9e:19:ad:68:81:ed:ba:e6:67:
21:8b:d4:2e:31:a0:a9:6d:ff:87:1d:5d:c1:94:ef:
4c:86:58:7c:1b:4a:c3:44:3e:dd:c4:b8:9a:b6:e3:
b4:a5:43:ef:18:01:55:ca:8c:4e:dc:76:e7:f2:a3:
07:7f:04:58:13:19:a3:34:c7:b4:a3:6c:f9:d3:28:
b9:77:9c:1d:bd:b0:6b:58:a4:f4:1c:9f:ac:62:30:
68:51:f8:4a:af:13:ee:44:11:7c:0b:f5:69:a4:0e:
04:19:ab:f2:7f:89:b2:3c:2e:f8:ae:22:9b:67:d5:
f5:79:87:09:d3:00:5d:2d:36:f9:6e:7a:25:5b:5b:
70:11:b1:4f:72:79:be:22:4f:ea:03:8f:91:f6:32:
74:cc:5c:fa:54:ec:99:64:d8:6c:53:ba:a0:b8:64:
4a:92:73:e2:95:2b:dd:2e:a4:d1:7e:ec:9e:06:35:
0b:30:b4:24:8a:5c:d0:a9:4e:b3:39:83:a2:35:25:
ba:7d:05:13:50:43:74:7b:ee:35:d8:83:ce:8e:86:
59:a0:f7:8d:f9:36:86:23:76:ae:a3:19:40:34:e1:
04:4f:0a:ff:da:16:83:d2:f5:50:25:18:6f:60:6a:
fc:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:F3:28:E3:92:6F:F4:0D:56:18:AA:66:C6:EF:74:E5:47:14:6D:8E
X509v3 Authority Key Identifier:
keyid:F3:40:9B:83:D1:14:C8:09:21:11:16:CA:2C:8D:B3:8D:CE:16:80:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/80Cbg9EUyAkhERbKLI2zjc4WgPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c0afd4-e27f-41ca-bbe4-db78a0525797/1/cfMo45Jv9A1WGKpmxu905UcUbY4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c0afd4-e27f-41ca-bbe4-db78a0525797/1/80Cbg9EUyAkhERbKLI2zjc4WgPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.246.232.0/23
Signature Algorithm: sha256WithRSAEncryption
a8:0b:e4:2e:97:4a:3e:2c:89:b5:71:2f:31:2a:ed:7f:50:6e:
87:02:e8:a0:15:be:82:e2:b9:aa:05:87:65:5b:d6:1d:fe:ad:
1d:b3:6c:e6:71:d2:6d:fc:64:33:2d:5a:40:4d:85:e8:c2:b4:
b0:c8:c3:4d:3e:de:d5:58:70:b9:c0:d8:92:00:77:5c:f9:ce:
02:47:75:03:ab:3b:97:1f:9a:e4:2a:08:d6:db:6b:e4:d5:a2:
a2:02:b4:a4:b0:99:a0:ad:3e:31:df:09:77:bf:9e:c2:6b:d8:
4d:59:db:18:82:e4:a3:c9:09:d5:8b:02:51:0f:e4:7b:b9:3e:
be:a9:88:fc:31:ec:3c:30:c1:74:e2:bc:66:fe:46:c3:b6:4c:
8a:f9:5a:da:9d:2f:a4:46:83:81:d4:c7:55:24:98:4e:36:0b:
3c:4e:d1:81:b8:8d:ee:cb:ca:a8:16:af:0e:cc:6e:b9:16:f2:
1a:7f:56:e3:8d:73:36:0d:ff:01:ec:a0:bd:32:2c:20:c2:8c:
61:32:78:45:85:10:bb:e9:fd:71:cf:e4:0a:07:d5:67:44:2b:
49:5f:2f:8e:c2:f1:00:24:93:b3:3e:35:1b:6a:26:e2:ca:e6:
e7:36:f0:bc:87:1f:9e:25:75:be:51:98:ae:5e:18:c0:bc:e3:
41:6e:b3:d3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQg1f0bAjYglKEyVVqcPVTjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzNDA5YjgzZDExNGM4MDkyMTExMTZjYTJjOGRiMzhkY2Ux
NjgwZjkwHhcNMjUwMTAxMDc0ODAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MWYzMjhlMzkyNmZmNDBkNTYxOGFhNjZjNmVmNzRlNTQ3MTQ2ZDhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Zu+OKhwrBTKCYDTTWzndxEv3p2e
Ga1oge265mchi9QuMaCpbf+HHV3BlO9Mhlh8G0rDRD7dxLiatuO0pUPvGAFVyoxO
3Hbn8qMHfwRYExmjNMe0o2z50yi5d5wdvbBrWKT0HJ+sYjBoUfhKrxPuRBF8C/Vp
pA4EGavyf4myPC74riKbZ9X1eYcJ0wBdLTb5bnolW1twEbFPcnm+Ik/qA4+R9jJ0
zFz6VOyZZNhsU7qguGRKknPilSvdLqTRfuyeBjULMLQkilzQqU6zOYOiNSW6fQUT
UEN0e+412IPOjoZZoPeN+TaGI3auoxlANOEETwr/2haD0vVQJRhvYGr8HQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHHzKOOSb/QNVhiqZsbvdOVHFG2OMB8GA1UdIwQY
MBaAFPNAm4PRFMgJIREWyiyNs43OFoD5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODBDYmc5RVV5QWtoRVJiS0xJMnpqYzRXZ1BrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9jMGFmZDQtZTI3Zi00MWNhLWJiZTQt
ZGI3OGEwNTI1Nzk3LzEvY2ZNbzQ1SnY5QTFXR0twbXh1OTA1VWNVYlk0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9jMGFmZDQtZTI3Zi00MWNhLWJiZTQtZGI3OGEwNTI1Nzk3
LzEvODBDYmc5RVV5QWtoRVJiS0xJMnpqYzRXZ1BrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw/boMA0G
CSqGSIb3DQEBCwUAA4IBAQCoC+Qul0o+LIm1cS8xKu1/UG6HAuigFb6C4rmqBYdl
W9Yd/q0ds2zmcdJt/GQzLVpATYXowrSwyMNNPt7VWHC5wNiSAHdc+c4CR3UDqzuX
H5rkKgjW22vk1aKiArSksJmgrT4x3wl3v57Ca9hNWdsYguSjyQnViwJRD+R7uT6+
qYj8Mew8MMF04rxm/kbDtkyK+VranS+kRoOB1MdVJJhONgs8TtGBuI3uy8qoFq8O
zG65FvIaf1bjjXM2Df8B7KC9MiwgwoxhMnhFhRC76f1xz+QKB9VnRCtJXy+OwvEA
JJOzPjUbaibiyubnNvC8hx+eJXW+UZiuXhjAvONBbrPT
-----END CERTIFICATE-----
Generated at Mon Apr 7 15:40:09 2025 by rpki-client