Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/F5qz-Vy2ncltsniwS8n2KgCCfq0.roa
File: F5qz-Vy2ncltsniwS8n2KgCCfq0.roa (raw, json)
Hash identifier: kxMCsu4yD7h4P+QzcS37eIb+y0MEuK5iSa4JgSytJ7M=
Subject key identifier: 17:9A:B3:F9:5C:B6:9D:C9:6D:B2:78:B0:4B:C9:F6:2A:00:82:7E:AD
Certificate issuer: /CN=213e1d50d52288bee80eea435577018712409bbe
Certificate serial: 0194274774FA17A33B19309AE11B1195B945
Authority key identifier: 21:3E:1D:50:D5:22:88:BE:E8:0E:EA:43:55:77:01:87:12:40:9B:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/F5qz-Vy2ncltsniwS8n2KgCCfq0.roa
Signing time: Thu 02 Jan 2025 13:49:41 +0000
ROA not before: Thu 02 Jan 2025 13:49:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34984
IP address blocks: 185.195.252.0/24 maxlen: 24
193.22.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft
rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 23:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:74:fa:17:a3:3b:19:30:9a:e1:1b:11:95:b9:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=213e1d50d52288bee80eea435577018712409bbe
Validity
Not Before: Jan 2 13:49:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=179ab3f95cb69dc96db278b04bc9f62a00827ead
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:bd:2d:19:58:8f:e3:40:8b:b4:74:d1:ee:25:
f3:fe:cb:a6:fe:1f:4a:d8:4b:b3:f4:8d:94:dd:8e:
05:ce:13:e7:96:a6:62:98:7a:33:16:e4:59:c6:c1:
d9:b0:8f:26:af:02:18:f4:db:03:76:43:ef:9f:04:
d6:6b:cc:59:54:73:7c:99:d2:56:82:09:af:34:58:
93:7f:87:26:bc:ab:27:31:1d:8d:ed:64:bb:23:81:
d2:61:f5:31:93:85:55:cb:57:d6:fe:d5:63:6b:3d:
01:ad:74:36:9d:d5:34:fe:08:c1:74:61:6b:ee:1b:
56:57:13:2d:18:12:58:b4:15:1a:03:85:b2:48:e1:
70:65:2b:b8:38:0b:5d:36:5c:2f:0e:0f:b9:88:3c:
f8:cc:6b:ec:38:60:7b:d2:9e:16:f2:26:27:49:f1:
f2:ef:16:8a:fb:b8:c0:4f:0c:11:ac:69:2b:3d:3b:
d6:26:7b:cb:8c:54:d2:f3:92:a0:46:be:67:7d:c8:
02:80:2e:8e:fa:c6:07:4e:2f:a3:c6:10:53:1f:ee:
58:96:7f:c6:0e:38:8f:6d:ab:8c:20:7b:ff:da:cc:
02:7b:6c:ba:7a:61:1d:15:61:77:fd:3c:85:7c:8e:
44:1a:81:a0:1d:a7:4b:ca:b3:eb:2a:50:73:d3:40:
17:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:9A:B3:F9:5C:B6:9D:C9:6D:B2:78:B0:4B:C9:F6:2A:00:82:7E:AD
X509v3 Authority Key Identifier:
keyid:21:3E:1D:50:D5:22:88:BE:E8:0E:EA:43:55:77:01:87:12:40:9B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/F5qz-Vy2ncltsniwS8n2KgCCfq0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.195.252.0/24
193.22.12.0/24
Signature Algorithm: sha256WithRSAEncryption
85:9a:ea:a6:e0:f0:d2:06:68:4f:4e:90:a0:60:59:c5:10:16:
ed:45:6d:2e:bd:6c:ee:61:d3:04:56:3e:e1:60:0e:02:85:57:
1c:8b:6c:75:ef:50:44:88:ba:d2:65:de:db:3f:be:29:e3:2a:
72:33:18:21:08:7d:dc:6e:dc:5c:4b:fc:27:59:8b:1b:0a:5e:
9b:f4:e4:60:cc:80:ee:fa:3d:04:b8:17:56:0a:2a:6e:67:da:
30:a2:bb:a0:32:dd:45:60:4d:9b:a7:6a:ed:7e:80:26:d2:1d:
6e:d6:e5:5d:00:07:6a:2d:43:e2:72:3d:ec:aa:2b:57:09:19:
c2:33:d6:93:d9:bf:4e:49:cc:8e:0a:6e:f9:01:52:7c:f3:8a:
ce:44:99:f2:f6:5e:51:b1:ba:2a:9e:33:6d:f7:1d:c2:79:3f:
a1:6d:4e:2e:06:95:c3:40:8f:7f:2d:79:a1:d0:02:70:f6:17:
1b:5d:7b:95:37:d9:c7:be:24:8c:c2:66:e2:1d:14:39:a8:4a:
5a:de:b8:c2:83:bf:28:26:07:ed:f2:33:a4:1f:9d:32:f6:7f:
21:58:fb:f3:3e:70:58:67:a5:6e:a1:49:05:0a:8f:b3:19:93:
8d:e5:ac:ee:a7:57:70:e1:c9:9b:d0:56:8c:25:2a:42:e6:a0:
d8:d1:bc:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 09:00:46 2025 by rpki-client