Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/CFUwFBzQtfgbafFzZOyLhQjWkGM.roa
File: CFUwFBzQtfgbafFzZOyLhQjWkGM.roa (raw, json)
Hash identifier: 97CGeBu3yLbE5oYRJj25Ylb6GhnLEinlvUvhqt045H4=
Subject key identifier: 08:55:30:14:1C:D0:B5:F8:1B:69:F1:73:64:EC:8B:85:08:D6:90:63
Certificate issuer: /CN=47a82e55779a1ea4ef9967f821d5cc05b7bd99e9
Certificate serial: 019422FB18D4986F8A9BDABA8D424DECA33C
Authority key identifier: 47:A8:2E:55:77:9A:1E:A4:EF:99:67:F8:21:D5:CC:05:B7:BD:99:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R6guVXeaHqTvmWf4IdXMBbe9mek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/CFUwFBzQtfgbafFzZOyLhQjWkGM.roa
Signing time: Wed 01 Jan 2025 17:47:48 +0000
ROA not before: Wed 01 Jan 2025 17:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 559
IP address blocks: 193.5.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.mft
rsync://rpki.ripe.net/repository/DEFAULT/R6guVXeaHqTvmWf4IdXMBbe9mek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 21:50:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:18:d4:98:6f:8a:9b:da:ba:8d:42:4d:ec:a3:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47a82e55779a1ea4ef9967f821d5cc05b7bd99e9
Validity
Not Before: Jan 1 17:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=085530141cd0b5f81b69f17364ec8b8508d69063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d6:d8:c4:01:f1:74:6f:25:ee:48:ff:9e:6b:
88:2a:2a:58:9a:c5:0d:4b:e7:de:34:d6:1e:a3:e1:
a2:4d:09:73:47:d5:1e:b3:5e:52:ef:fb:7f:6f:2b:
97:40:88:ff:71:4b:14:f2:93:41:6f:6b:e1:a9:9a:
4f:56:77:6b:8b:13:f5:cc:84:f3:1e:b2:d5:25:55:
06:5e:3c:07:66:2f:df:4c:fd:f0:e0:b0:3b:90:f6:
3c:33:d0:52:de:a6:26:60:8f:ef:61:2e:e2:b8:9b:
dc:56:8b:ee:c7:ce:69:1a:19:de:3e:20:69:1f:48:
52:47:e4:d9:b8:bf:44:b7:5f:d7:66:bf:8c:6e:8e:
10:93:f2:5a:7a:10:9c:e0:69:36:9f:2a:5a:55:c7:
f1:3b:22:25:46:31:56:e0:0c:8c:a9:2e:68:46:07:
35:df:d7:1b:01:42:8e:29:eb:d4:0c:3c:41:fd:49:
06:d0:7a:7d:0f:a4:e6:a6:8b:6e:76:a8:93:d7:71:
9b:1f:ee:d8:fb:d3:b8:33:07:20:9b:08:40:68:e7:
99:78:6f:4b:e0:ec:08:9e:88:13:ad:db:7c:aa:da:
59:95:92:1e:d5:ea:9a:c5:a4:fb:21:66:56:ed:af:
7a:f8:74:bf:d0:83:af:af:bd:80:4f:b7:e0:9a:a2:
cd:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:55:30:14:1C:D0:B5:F8:1B:69:F1:73:64:EC:8B:85:08:D6:90:63
X509v3 Authority Key Identifier:
keyid:47:A8:2E:55:77:9A:1E:A4:EF:99:67:F8:21:D5:CC:05:B7:BD:99:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R6guVXeaHqTvmWf4IdXMBbe9mek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/CFUwFBzQtfgbafFzZOyLhQjWkGM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.5.60.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:78:6f:5d:dd:6c:b5:fc:ff:d2:61:ee:23:b8:f8:af:62:08:
8a:9f:b3:be:ae:e0:ca:a5:ce:63:bb:f1:06:09:81:cf:3b:5c:
4e:82:ef:a8:58:ec:46:4a:be:d1:b5:0e:dc:95:53:fd:52:85:
72:18:ae:45:51:8b:f7:a4:36:5c:71:e1:97:c5:6a:24:a8:fc:
79:84:ac:c9:51:c7:ee:f8:c3:f9:8c:c0:55:df:51:75:26:88:
de:f9:4c:25:70:f2:37:5e:11:0a:8c:76:7d:e0:25:f4:78:1e:
5f:59:9c:f5:d0:58:6e:d6:3d:d7:33:28:8d:a4:f4:59:25:e5:
33:57:c8:c8:99:e6:6f:01:32:96:bb:e4:02:30:7c:98:ed:c7:
c2:08:a2:28:81:14:e8:58:1b:fd:52:f4:51:89:13:ac:2d:21:
e1:ff:08:cf:7b:0b:b0:12:54:2d:d1:69:00:58:35:3e:5b:1c:
54:e3:3b:36:ee:8a:44:66:e0:4f:89:ee:4e:40:f5:50:ad:e9:
1f:4b:6f:0a:91:62:3c:fa:f1:b0:1b:51:a9:95:81:35:65:09:
09:bb:f6:d9:9a:fd:d7:29:71:49:ae:8a:82:24:c1:6c:6f:25:
6b:36:f4:aa:00:d7:13:01:9c:9a:a1:00:ea:c8:f5:e2:11:32:
8e:b0:b9:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 05:46:44 2025 by rpki-client