Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/FJQAYtcJwVgsJq6Dp-_dDLCChz4.roa
File: FJQAYtcJwVgsJq6Dp-_dDLCChz4.roa (raw, json)
Hash identifier: P+Htl3OZlCZWW92CluXOKM5ydgSuI1x1FIkNItsEDx8=
Subject key identifier: 14:94:00:62:D7:09:C1:58:2C:26:AE:83:A7:EF:DD:0C:B0:82:87:3E
Certificate issuer: /CN=2e252a477242fb45f20bb08020a403a2bb466a9b
Certificate serial: 019426D9D6114F72B623A83B5C3D908C52EA
Authority key identifier: 2E:25:2A:47:72:42:FB:45:F2:0B:B0:80:20:A4:03:A2:BB:46:6A:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LiUqR3JC-0XyC7CAIKQDortGaps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/FJQAYtcJwVgsJq6Dp-_dDLCChz4.roa
Signing time: Thu 02 Jan 2025 11:49:57 +0000
ROA not before: Thu 02 Jan 2025 11:49:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6736
IP address blocks: 85.132.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/LiUqR3JC-0XyC7CAIKQDortGaps.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/LiUqR3JC-0XyC7CAIKQDortGaps.mft
rsync://rpki.ripe.net/repository/DEFAULT/LiUqR3JC-0XyC7CAIKQDortGaps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:d6:11:4f:72:b6:23:a8:3b:5c:3d:90:8c:52:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e252a477242fb45f20bb08020a403a2bb466a9b
Validity
Not Before: Jan 2 11:49:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=14940062d709c1582c26ae83a7efdd0cb082873e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:cc:2d:a0:ca:81:e7:97:23:ab:6e:8d:dd:39:
68:d5:38:d2:2f:b3:31:52:f7:98:6a:bf:93:a9:1e:
7a:f1:5c:48:c5:10:9c:9f:37:d0:c4:2b:85:df:43:
7e:37:73:29:4d:1f:2a:29:8e:78:e2:04:63:56:f8:
a0:96:cf:a2:b2:1e:5d:7d:11:f1:59:b7:69:ce:45:
cd:8b:7a:47:17:8f:54:2e:e8:b2:e8:b2:84:79:1d:
fe:09:5d:c0:a1:46:bf:f9:dc:c9:03:63:bc:d2:b4:
b9:65:82:d7:49:7d:b3:e4:da:64:56:d2:91:f9:a6:
18:f2:8a:4c:e4:4f:ce:e1:32:29:92:03:96:ca:96:
57:e4:89:d5:80:c3:31:0f:ce:4b:a5:76:4b:89:8c:
db:27:0f:3d:d2:d2:5a:0f:71:99:ae:84:ea:b0:6d:
49:eb:a1:e5:ac:fc:58:45:e4:8e:66:1b:73:5f:aa:
2f:cb:0e:86:5a:7e:14:1d:c0:70:4d:0d:f0:80:23:
67:4f:04:ff:6a:ba:7c:08:bf:0a:3c:4e:77:d0:53:
31:12:32:25:41:e8:c4:02:f8:85:d9:71:99:be:80:
ed:fd:49:f0:b5:75:4f:5a:1b:cb:11:09:56:53:fa:
f0:2f:ab:89:31:7d:d9:f0:f3:65:50:7a:64:c4:00:
c4:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:94:00:62:D7:09:C1:58:2C:26:AE:83:A7:EF:DD:0C:B0:82:87:3E
X509v3 Authority Key Identifier:
keyid:2E:25:2A:47:72:42:FB:45:F2:0B:B0:80:20:A4:03:A2:BB:46:6A:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LiUqR3JC-0XyC7CAIKQDortGaps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/FJQAYtcJwVgsJq6Dp-_dDLCChz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/LiUqR3JC-0XyC7CAIKQDortGaps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.132.50.0/24
Signature Algorithm: sha256WithRSAEncryption
17:87:d2:2b:9b:36:20:ca:5d:bd:a0:4b:42:c5:b2:26:8d:7a:
79:3c:f2:08:f4:22:dc:98:b9:0f:4f:e8:ff:6f:7e:c8:f0:ed:
db:7d:8d:d0:8a:6b:64:8c:27:2a:1e:c7:26:53:83:c5:65:e7:
b1:da:b8:25:82:c0:19:92:c9:4e:d9:a3:34:5c:9e:c3:e2:ff:
2b:d8:4c:65:f7:ab:29:bb:c8:af:21:b9:ce:73:9f:38:af:38:
5c:e0:55:8e:e6:39:53:d3:fb:79:33:bd:fd:eb:63:ac:29:bf:
a3:35:3e:cf:2f:f4:5f:c7:7b:6e:7f:ae:c9:16:29:44:3d:ce:
5a:ee:23:ba:94:32:34:7a:5c:f9:5e:59:0a:57:a3:f1:99:fa:
e9:72:5b:de:1f:79:23:17:87:45:2e:ab:5d:29:0b:33:8c:2f:
9a:03:f3:c8:1d:ff:a2:a0:66:ed:67:0c:34:d1:b9:db:33:b3:
9a:80:a2:41:8f:57:42:48:1c:74:a0:72:08:49:2b:cc:7b:70:
73:6c:b3:3a:0a:f0:86:c0:5b:04:3e:a0:47:d2:42:1b:bc:ba:
a7:30:71:4d:1e:27:f6:7a:f2:8e:f9:1e:83:a2:62:5c:aa:04:
5e:f6:34:20:23:2e:bb:97:0d:49:db:f0:8b:23:af:01:23:6e:
62:ec:b2:7e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQm2dYRT3K2I6g7XD2QjFLqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlMjUyYTQ3NzI0MmZiNDVmMjBiYjA4MDIwYTQwM2EyYmI0
NjZhOWIwHhcNMjUwMTAyMTE0OTU3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNDk0MDA2MmQ3MDljMTU4MmMyNmFlODNhN2VmZGQwY2IwODI4NzNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4MwtoMqB55cjq26N3Tlo1TjSL7Mx
UveYar+TqR568VxIxRCcnzfQxCuF30N+N3MpTR8qKY544gRjVvigls+ish5dfRHx
WbdpzkXNi3pHF49ULuiy6LKEeR3+CV3AoUa/+dzJA2O80rS5ZYLXSX2z5NpkVtKR
+aYY8opM5E/O4TIpkgOWypZX5InVgMMxD85LpXZLiYzbJw890tJaD3GZroTqsG1J
66HlrPxYReSOZhtzX6ovyw6GWn4UHcBwTQ3wgCNnTwT/arp8CL8KPE530FMxEjIl
QejEAviF2XGZvoDt/UnwtXVPWhvLEQlWU/rwL6uJMX3Z8PNlUHpkxADE6QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBSUAGLXCcFYLCaug6fv3Qywgoc+MB8GA1UdIwQY
MBaAFC4lKkdyQvtF8guwgCCkA6K7RmqbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGlVcVIzSkMtMFh5QzdDQUlLUURvcnRHYXBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9iMTA1NjItMjZhMS00NjQ1LThkMmIt
MTZmMTQ2YmVmOTk1LzEvRkpRQVl0Y0p3VmdzSnE2RHAtX2RETENDaHo0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS9iMTA1NjItMjZhMS00NjQ1LThkMmItMTZmMTQ2YmVmOTk1
LzEvTGlVcVIzSkMtMFh5QzdDQUlLUURvcnRHYXBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVYQyMA0G
CSqGSIb3DQEBCwUAA4IBAQAXh9IrmzYgyl29oEtCxbImjXp5PPII9CLcmLkPT+j/
b37I8O3bfY3QimtkjCcqHscmU4PFZeex2rglgsAZkslO2aM0XJ7D4v8r2Exl96sp
u8ivIbnOc584rzhc4FWO5jlT0/t5M73962OsKb+jNT7PL/Rfx3tuf67JFilEPc5a
7iO6lDI0elz5XlkKV6PxmfrpclveH3kjF4dFLqtdKQszjC+aA/PIHf+ioGbtZww0
0bnbM7OagKJBj1dCSBx0oHIISSvMe3BzbLM6CvCGwFsEPqBH0kIbvLqnMHFNHif2
evKO+R6DomJcqgRe9jQgIy67lw1J2/CLI68BI25i7LJ+
-----END CERTIFICATE-----
Generated at Thu Mar 13 07:00:58 2025 by rpki-client