Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/4Cr_AZQLT_WBncHFbgxshGQHYaU.roa
File: 4Cr_AZQLT_WBncHFbgxshGQHYaU.roa (raw, json)
Hash identifier: odKNnrATtaoWJ7rsSK/dsrX7QlZG9X10pJoEQMaMnzM=
Subject key identifier: E0:2A:FF:01:94:0B:4F:F5:81:9D:C1:C5:6E:0C:6C:84:64:07:61:A5
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 0194266BF5255BAB1A5E9E8F97F23F3F9B87
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/4Cr_AZQLT_WBncHFbgxshGQHYaU.roa
Signing time: Thu 02 Jan 2025 09:49:56 +0000
ROA not before: Thu 02 Jan 2025 09:49:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206632
IP address blocks: 85.202.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:f5:25:5b:ab:1a:5e:9e:8f:97:f2:3f:3f:9b:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 2 09:49:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e02aff01940b4ff5819dc1c56e0c6c84640761a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0b:9c:7d:9f:f2:74:5b:c9:21:98:20:70:83:
02:0e:d3:2d:75:ef:19:8a:91:94:95:97:b3:9c:24:
d8:f4:69:f5:bf:75:e9:ac:fd:68:36:67:35:c4:bb:
ff:a4:ae:34:5b:98:00:3d:71:c2:8f:ff:88:06:24:
77:3d:0e:de:e9:82:1d:6a:a6:b9:7e:f5:10:01:4b:
3e:fd:9f:a2:2b:68:49:18:ff:f2:36:36:77:ae:4d:
dc:3a:be:b4:5e:4e:c3:1e:b8:12:d8:da:d8:ff:3c:
a5:e5:4c:db:2b:ab:2d:da:1a:41:38:52:32:b0:57:
4d:4d:7c:06:43:e1:48:e5:d7:53:4c:03:26:89:b9:
66:1c:91:17:40:3a:17:60:b1:87:b3:0e:05:6b:18:
8f:55:09:7b:71:0f:9b:2c:e0:a3:95:a2:81:89:bb:
36:93:79:b7:72:e8:b3:ab:7f:3b:a4:5d:77:2e:5a:
51:d7:c3:8f:04:fc:ca:9f:b1:f6:4e:34:67:59:96:
71:ba:3f:e6:fa:07:9b:fd:c6:5c:18:57:a9:60:a0:
66:36:3f:bd:4a:7d:c5:20:b6:99:ab:b3:2b:1a:6a:
bd:df:70:97:ae:de:29:6e:39:4f:91:1e:d5:ea:b4:
42:be:71:02:12:9e:e3:0d:cf:d8:cb:42:a5:54:b3:
f2:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:2A:FF:01:94:0B:4F:F5:81:9D:C1:C5:6E:0C:6C:84:64:07:61:A5
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/4Cr_AZQLT_WBncHFbgxshGQHYaU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.202.50.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:69:bf:43:3b:e7:56:7d:ce:29:c8:b3:e8:24:cb:1d:91:de:
7a:da:fe:60:2a:3e:8f:2c:c2:a5:3e:88:85:68:08:d1:37:3c:
21:c0:e4:d9:96:57:48:f7:e9:03:fa:e0:9e:c5:29:a1:39:77:
91:52:f4:d5:16:bf:af:91:d2:8a:5c:82:d5:47:80:e7:0c:17:
e4:8b:08:e6:a5:a2:53:a5:4b:3c:55:1a:b7:19:a2:e3:c1:1f:
cb:83:c7:e9:af:7d:6c:58:75:f3:52:7a:e5:4d:8a:1f:aa:24:
f2:19:03:c2:89:3f:af:a8:85:d0:c5:bd:76:2b:66:1a:cd:8b:
6e:37:0a:1e:40:0d:68:e7:78:25:3a:1a:22:0a:7b:61:18:e0:
8a:73:3c:1e:d8:9e:a4:42:b9:12:89:5c:5c:f4:ce:af:5c:ba:
25:10:50:6c:92:d3:ce:f7:aa:62:65:6d:46:01:b2:a1:23:6c:
9d:41:43:44:5e:bc:74:b1:41:c7:b7:1c:5c:69:00:25:a3:9d:
89:94:8d:0f:a5:d4:5d:69:90:49:af:2c:a3:07:8f:0b:2c:36:
a2:96:46:db:9c:f8:28:4c:95:eb:dd:65:ac:9b:c1:27:fc:19:
c2:6e:64:35:a9:97:e6:c5:77:39:f9:2e:e4:67:f9:fd:fe:c8:
e1:50:8e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:42:44 2025 by rpki-client