Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/cvAUqC-wqdKlSxcmoT98suqBdeQ.roa
File: cvAUqC-wqdKlSxcmoT98suqBdeQ.roa (raw, json)
Hash identifier: iCAVbytT0F4nIDc1qR0wodMkx1rV40m7Tl8XBXROi8A=
Subject key identifier: 72:F0:14:A8:2F:B0:A9:D2:A5:4B:17:26:A1:3F:7C:B2:EA:81:75:E4
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 019427483C9DFB3BB3E9F67EDC17770056DF
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/cvAUqC-wqdKlSxcmoT98suqBdeQ.roa
Signing time: Thu 02 Jan 2025 13:50:33 +0000
ROA not before: Thu 02 Jan 2025 13:50:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51621
IP address blocks: 185.71.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:3c:9d:fb:3b:b3:e9:f6:7e:dc:17:77:00:56:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 2 13:50:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=72f014a82fb0a9d2a54b1726a13f7cb2ea8175e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:42:98:f1:3e:0e:c0:3b:c5:87:a9:31:4c:0c:
c9:45:d4:9d:29:f2:3f:54:e9:88:36:2f:8b:87:b9:
18:0f:15:ff:b3:cf:de:6f:6f:ab:0a:78:b3:3f:95:
2d:15:29:07:b0:ed:0b:13:c6:ff:d2:f3:3d:7d:b1:
89:57:e1:9b:7b:58:0d:0a:48:d3:4b:4b:08:0b:37:
9f:d5:ad:c5:06:82:4d:2e:a0:3b:bd:c7:c5:9a:17:
1b:20:8d:88:a6:d6:08:be:23:a7:92:64:76:38:f0:
64:66:69:b1:6e:0b:2f:43:a8:a5:3d:04:57:ee:c9:
9c:27:c0:41:c3:03:d9:35:1e:76:93:ed:1a:4b:79:
ed:6a:5a:66:f8:2b:57:25:8a:0f:98:23:ee:60:03:
5f:bf:9f:0d:23:eb:07:0e:9e:c5:89:da:98:f0:12:
7a:b5:4b:fa:82:f1:3b:2d:db:79:33:8b:64:64:3d:
f0:e7:f1:98:69:bd:30:3b:14:95:16:cb:6e:68:06:
3d:53:0a:2d:17:df:2e:75:38:fc:b1:ac:1c:82:c7:
c6:95:3b:00:1a:ce:68:b2:c1:1b:21:b5:37:a1:5b:
a4:df:8d:62:ed:4f:5d:3b:a0:34:b2:43:fc:4a:70:
6d:76:d6:2e:f0:cf:57:51:45:03:27:72:6c:d0:d6:
a6:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:F0:14:A8:2F:B0:A9:D2:A5:4B:17:26:A1:3F:7C:B2:EA:81:75:E4
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/cvAUqC-wqdKlSxcmoT98suqBdeQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.71.31.0/24
Signature Algorithm: sha256WithRSAEncryption
23:cf:75:7c:e2:0e:d7:97:5d:83:0c:20:ce:ac:ab:a7:9a:af:
4a:6c:23:5d:5e:47:f0:6a:6d:c4:e5:80:b2:6c:6d:cf:33:13:
ec:13:cd:8e:96:fb:1a:8c:f1:44:5f:eb:67:f5:71:63:71:35:
13:cf:55:f2:4a:98:e2:ec:90:78:7c:7b:ab:3c:02:6e:a5:8e:
65:15:32:ee:2a:d0:ed:21:7a:50:88:64:52:ca:74:09:1e:32:
8e:e3:c2:40:ca:fe:ad:a2:6e:7d:7f:a7:31:de:3d:31:08:36:
11:1d:17:69:95:73:82:bf:6e:43:e3:87:8c:e3:78:53:8a:31:
4b:cb:ea:90:cf:d8:22:60:5e:36:8d:ae:ba:5e:78:62:13:6e:
12:7c:99:c3:ce:07:92:a2:a8:9e:54:6a:76:81:d2:d3:1b:a4:
ff:f4:21:54:ce:78:1d:9b:d9:ac:87:32:75:82:9d:4a:83:1a:
4f:50:e5:e7:bf:66:66:8b:21:58:37:9d:07:32:3d:f4:4c:4b:
fe:86:c8:3f:86:1e:32:65:1e:31:4a:3d:60:30:d0:bd:2e:06:
be:6a:40:35:38:c1:24:18:17:13:86:46:a8:f1:d4:ec:ed:e3:
24:61:64:7c:2d:97:43:ce:d5:67:15:6a:11:cf:18:58:fb:81:
25:96:39:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 16:49:09 2025 by rpki-client