Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/a9a7d8-a9bf-49e2-b68a-a5b4f26fc976/1/T69lzJMivaoqkIjYcLrgOdTOnrA.roa
File: T69lzJMivaoqkIjYcLrgOdTOnrA.roa (raw, json)
Hash identifier: 0Ssr+TPBD7HcausVt5jkHNvBIqeqcRP2h1WDFhHFN7o=
Subject key identifier: 4F:AF:65:CC:93:22:BD:AA:2A:90:88:D8:70:BA:E0:39:D4:CE:9E:B0
Certificate issuer: /CN=32559e07d6388dd2af753565e9253d682f93ebde
Certificate serial: 0194252170DD0447312DC5618033F10994C6
Authority key identifier: 32:55:9E:07:D6:38:8D:D2:AF:75:35:65:E9:25:3D:68:2F:93:EB:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlWeB9Y4jdKvdTVl6SU9aC-T694.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/a9a7d8-a9bf-49e2-b68a-a5b4f26fc976/1/T69lzJMivaoqkIjYcLrgOdTOnrA.roa
Signing time: Thu 02 Jan 2025 03:48:56 +0000
ROA not before: Thu 02 Jan 2025 03:48:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5610
IP address blocks: 194.50.248.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/a9a7d8-a9bf-49e2-b68a-a5b4f26fc976/1/MlWeB9Y4jdKvdTVl6SU9aC-T694.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/a9a7d8-a9bf-49e2-b68a-a5b4f26fc976/1/MlWeB9Y4jdKvdTVl6SU9aC-T694.mft
rsync://rpki.ripe.net/repository/DEFAULT/MlWeB9Y4jdKvdTVl6SU9aC-T694.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 12:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:70:dd:04:47:31:2d:c5:61:80:33:f1:09:94:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32559e07d6388dd2af753565e9253d682f93ebde
Validity
Not Before: Jan 2 03:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4faf65cc9322bdaa2a9088d870bae039d4ce9eb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:56:e0:07:03:0f:fe:3c:9d:1d:48:42:9e:ab:
e7:71:d6:d7:e6:11:c7:89:f7:50:8a:9e:c4:aa:6c:
f4:30:dd:37:34:7b:be:07:5b:ca:1b:1a:67:02:8b:
53:8b:03:07:a9:ed:d7:ba:5d:2c:9f:30:44:83:ae:
fa:d0:05:55:cb:dc:32:81:ae:ad:7a:e3:36:72:a0:
6e:1c:59:dd:b4:8e:42:d4:d1:9f:f0:d1:da:e3:56:
aa:54:bf:63:3a:43:cb:5e:89:7e:57:6c:81:b9:cb:
96:d9:76:fd:3b:2c:d2:7a:75:41:a6:f4:e1:83:2c:
7a:4c:af:27:80:47:19:53:ad:38:21:21:57:a9:37:
27:ba:18:1d:94:f8:f1:0c:b5:72:ef:32:9a:46:51:
3e:b4:c7:af:01:36:c5:c1:1e:8f:d0:50:7a:d4:5a:
d3:ca:ac:35:1d:54:9d:c0:6b:67:f2:aa:13:5f:80:
ef:34:6b:09:14:ee:60:33:fc:0b:92:9f:26:1a:c1:
23:1a:28:c1:a2:7c:da:99:4e:62:15:8c:6d:2b:38:
4f:0e:b1:4a:b9:32:44:ed:3e:dd:21:92:0e:68:0c:
9f:10:23:3b:82:be:6e:6b:29:cc:02:31:05:86:76:
53:8b:0c:be:0c:d5:a4:38:61:90:ed:38:b0:a6:52:
f6:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:AF:65:CC:93:22:BD:AA:2A:90:88:D8:70:BA:E0:39:D4:CE:9E:B0
X509v3 Authority Key Identifier:
keyid:32:55:9E:07:D6:38:8D:D2:AF:75:35:65:E9:25:3D:68:2F:93:EB:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlWeB9Y4jdKvdTVl6SU9aC-T694.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/a9a7d8-a9bf-49e2-b68a-a5b4f26fc976/1/T69lzJMivaoqkIjYcLrgOdTOnrA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/a9a7d8-a9bf-49e2-b68a-a5b4f26fc976/1/MlWeB9Y4jdKvdTVl6SU9aC-T694.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.248.0/23
Signature Algorithm: sha256WithRSAEncryption
7a:69:d7:eb:5c:bf:72:00:b8:4e:d9:a3:74:a6:04:c6:9d:cf:
3f:96:71:eb:b6:1c:a7:49:14:a5:fd:82:c6:19:47:35:50:55:
5c:3a:8f:40:c4:ce:d2:3d:55:26:28:f4:4a:b3:7e:77:0e:da:
18:ee:bb:b7:dc:16:4f:b3:55:a0:a1:e3:c0:78:8b:d9:a1:01:
79:4e:b9:83:f5:b1:4f:ec:fb:84:ec:e1:21:8d:f7:ab:42:8d:
e4:82:8b:62:a3:02:e7:36:7d:9d:c8:a5:53:67:92:42:0c:b4:
4b:62:0e:6e:3a:bf:d9:ed:59:13:dd:29:7f:2b:da:b6:7c:d9:
17:d1:bd:d3:fd:30:a8:a5:e6:04:be:66:69:bc:65:ca:ce:bb:
b0:29:1c:56:89:b6:40:02:29:8a:cf:92:4f:b2:4d:25:1a:5d:
6b:4a:26:00:f3:79:91:a2:2d:4c:20:73:5c:fe:bc:80:99:8a:
cd:78:4f:0c:53:58:e7:c0:f6:c1:cc:50:62:41:0a:8e:dd:1a:
0d:4e:29:8d:45:44:5b:42:b0:35:73:0a:18:66:6e:51:76:58:
c7:d6:61:5b:22:3f:21:03:c1:44:01:47:59:06:8a:48:aa:89:
ea:ee:14:ef:12:41:87:65:94:76:a5:e8:14:0e:55:b3:bf:fb:
75:01:c6:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:13:28 2025 by rpki-client