Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/9a5599-d389-4836-8033-43dc2b5eeb5b/1/CFjxJzCmd6HUFa7VuE6yI0I0AMQ.roa
File: CFjxJzCmd6HUFa7VuE6yI0I0AMQ.roa (raw, json)
Hash identifier: MIyflourwhBuhTA+A0FwkrenrfoY9JbHcdU1eop0jPQ=
Subject key identifier: 08:58:F1:27:30:A6:77:A1:D4:15:AE:D5:B8:4E:B2:23:42:34:00:C4
Certificate issuer: /CN=6c2ca7c7f00dec44f48c49f22a577294869aa9ba
Certificate serial: 0194221F9DA0A98F801CB49D76D51EBE9045
Authority key identifier: 6C:2C:A7:C7:F0:0D:EC:44:F4:8C:49:F2:2A:57:72:94:86:9A:A9:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bCynx_AN7ET0jEnyKldylIaaqbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/9a5599-d389-4836-8033-43dc2b5eeb5b/1/CFjxJzCmd6HUFa7VuE6yI0I0AMQ.roa
Signing time: Wed 01 Jan 2025 13:48:04 +0000
ROA not before: Wed 01 Jan 2025 13:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24833
IP address blocks: 195.244.10.0/23 maxlen: 23
2a00:7460::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/9a5599-d389-4836-8033-43dc2b5eeb5b/1/bCynx_AN7ET0jEnyKldylIaaqbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/9a5599-d389-4836-8033-43dc2b5eeb5b/1/bCynx_AN7ET0jEnyKldylIaaqbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/bCynx_AN7ET0jEnyKldylIaaqbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Mar 2025 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:9d:a0:a9:8f:80:1c:b4:9d:76:d5:1e:be:90:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c2ca7c7f00dec44f48c49f22a577294869aa9ba
Validity
Not Before: Jan 1 13:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0858f12730a677a1d415aed5b84eb223423400c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:86:eb:07:a4:82:ad:89:de:e1:af:7c:63:a6:
d6:a8:2e:be:1a:42:af:26:0e:0b:66:2e:7a:71:3f:
c5:97:ac:77:2f:cd:f2:ef:2f:eb:f6:b0:df:ca:6f:
66:1e:ce:f3:3b:02:f7:76:7b:89:7e:b9:99:e5:fe:
9f:55:53:0a:43:83:07:8b:b6:bb:c4:2a:5e:7b:bf:
f5:85:ec:4c:d8:4d:e3:ee:bd:ea:3a:4a:35:2a:6f:
71:83:b2:73:21:20:22:7e:41:2d:5b:42:9a:4f:9f:
ac:66:87:6c:6b:b6:39:4e:76:5e:43:b8:87:e8:42:
25:e0:26:cd:6d:a7:83:4b:c5:cd:96:6a:92:51:3c:
da:03:0f:81:44:f2:4c:42:27:f6:f2:e2:9b:3b:c9:
a5:7d:c6:71:5d:09:a4:a0:10:c7:df:d0:e9:3a:22:
9a:dd:39:14:98:c0:7e:a5:3a:dc:ec:35:17:9d:ac:
c0:b7:e4:ee:f6:41:cd:70:34:96:b6:76:dd:7e:59:
70:f8:4b:2e:35:b8:49:97:f2:67:33:0b:b9:83:f7:
00:92:a4:51:88:3a:56:87:bb:93:3a:03:7c:21:60:
9c:39:85:c1:fc:21:db:0c:ca:4c:4f:5d:6c:e8:76:
01:21:d5:25:4a:82:d1:18:83:9f:cf:28:ce:ee:64:
d7:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:58:F1:27:30:A6:77:A1:D4:15:AE:D5:B8:4E:B2:23:42:34:00:C4
X509v3 Authority Key Identifier:
keyid:6C:2C:A7:C7:F0:0D:EC:44:F4:8C:49:F2:2A:57:72:94:86:9A:A9:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bCynx_AN7ET0jEnyKldylIaaqbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9a5599-d389-4836-8033-43dc2b5eeb5b/1/CFjxJzCmd6HUFa7VuE6yI0I0AMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9a5599-d389-4836-8033-43dc2b5eeb5b/1/bCynx_AN7ET0jEnyKldylIaaqbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.244.10.0/23
IPv6:
2a00:7460::/32
Signature Algorithm: sha256WithRSAEncryption
0c:c2:34:ef:5d:ce:73:64:3e:97:8b:a7:3e:50:6e:64:77:a1:
03:6d:44:22:38:2d:8a:12:e9:88:3c:d9:77:b1:72:81:56:47:
de:03:34:b6:be:df:92:05:ad:39:f5:ee:88:52:cd:66:d1:f3:
72:5a:34:0f:0a:4b:40:0a:a4:25:00:cd:47:ef:2d:99:63:f0:
46:09:29:8c:41:d4:e7:2f:6e:15:5e:fb:ef:04:f1:5e:bb:ee:
c8:33:54:b9:f1:49:05:d2:e0:d1:3f:a3:95:60:ae:c5:b7:ca:
07:5a:34:a4:27:5a:78:c9:28:57:68:3d:98:e4:27:ef:eb:50:
98:96:15:92:72:41:0e:86:2d:08:87:84:88:fe:3e:02:2e:79:
47:50:8a:30:eb:dc:04:65:58:e5:7f:9a:29:3f:9f:9d:62:e0:
ef:b5:19:05:76:98:b8:23:e4:9d:d4:95:fd:e4:5e:9a:b8:56:
2d:b5:f0:23:f8:cf:d7:c7:b7:9b:cf:36:af:fb:ea:d6:c7:de:
55:3d:7c:fe:ff:61:3a:f7:2d:6d:d6:e9:21:0e:1d:f4:8c:c1:
5b:ed:10:ca:3b:4e:37:e7:3a:45:b2:7d:5c:6b:d7:17:c3:d4:
48:a3:5a:ea:36:20:4b:0a:f0:70:0b:f8:2e:9f:34:10:44:35:
33:ae:db:29
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQiH52gqY+AHLSddtUevpBFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjMmNhN2M3ZjAwZGVjNDRmNDhjNDlmMjJhNTc3Mjk0ODY5
YWE5YmEwHhcNMjUwMTAxMTM0ODA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwODU4ZjEyNzMwYTY3N2ExZDQxNWFlZDViODRlYjIyMzQyMzQwMGM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4obrB6SCrYne4a98Y6bWqC6+GkKv
Jg4LZi56cT/Fl6x3L83y7y/r9rDfym9mHs7zOwL3dnuJfrmZ5f6fVVMKQ4MHi7a7
xCpee7/1hexM2E3j7r3qOko1Km9xg7JzISAifkEtW0KaT5+sZodsa7Y5TnZeQ7iH
6EIl4CbNbaeDS8XNlmqSUTzaAw+BRPJMQif28uKbO8mlfcZxXQmkoBDH39DpOiKa
3TkUmMB+pTrc7DUXnazAt+Tu9kHNcDSWtnbdfllw+EsuNbhJl/JnMwu5g/cAkqRR
iDpWh7uTOgN8IWCcOYXB/CHbDMpMT11s6HYBIdUlSoLRGIOfzyjO7mTXvwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFAhY8Scwpneh1BWu1bhOsiNCNADEMB8GA1UdIwQY
MBaAFGwsp8fwDexE9IxJ8ipXcpSGmqm6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkN5bnhfQU43RVQwakVueUtsZHlsSWFhcWJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC85YTU1OTktZDM4OS00ODM2LTgwMzMt
NDNkYzJiNWVlYjViLzEvQ0ZqeEp6Q21kNkhVRmE3VnVFNnlJMEkwQU1RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC85YTU1OTktZDM4OS00ODM2LTgwMzMtNDNkYzJiNWVlYjVi
LzEvYkN5bnhfQU43RVQwakVueUtsZHlsSWFhcWJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBw/QKMA0E
AgACMAcDBQAqAHRgMA0GCSqGSIb3DQEBCwUAA4IBAQAMwjTvXc5zZD6Xi6c+UG5k
d6EDbUQiOC2KEumIPNl3sXKBVkfeAzS2vt+SBa059e6IUs1m0fNyWjQPCktACqQl
AM1H7y2ZY/BGCSmMQdTnL24VXvvvBPFeu+7IM1S58UkF0uDRP6OVYK7Ft8oHWjSk
J1p4yShXaD2Y5Cfv61CYlhWSckEOhi0Ih4SI/j4CLnlHUIow69wEZVjlf5opP5+d
YuDvtRkFdpi4I+Sd1JX95F6auFYttfAj+M/Xx7ebzzav++rWx95VPXz+/2E69y1t
1ukhDh30jMFb7RDKO0435zpFsn1ca9cXw9RIo1rqNiBLCvBwC/gunzQQRDUzrtsp
-----END CERTIFICATE-----
Generated at Fri Mar 14 12:12:35 2025 by rpki-client