Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/fudoZ6TJp9dp16Pww5r5a49f_qw.roa
File: fudoZ6TJp9dp16Pww5r5a49f_qw.roa (raw, json)
Hash identifier: WSDqUxIZJlZyyACmY/UreISdxVZNSP6rtPlIwpgLS+I=
Subject key identifier: 7E:E7:68:67:A4:C9:A7:D7:69:D7:A3:F0:C3:9A:F9:6B:8F:5F:FE:AC
Certificate issuer: /CN=02cc691476a6e7895b0e456116444f91937bf01e
Certificate serial: 019420D65AAF5E5CE282D2A853C732D76179
Authority key identifier: 02:CC:69:14:76:A6:E7:89:5B:0E:45:61:16:44:4F:91:93:7B:F0:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsxpFHam54lbDkVhFkRPkZN78B4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/fudoZ6TJp9dp16Pww5r5a49f_qw.roa
Signing time: Wed 01 Jan 2025 07:48:26 +0000
ROA not before: Wed 01 Jan 2025 07:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29471
IP address blocks: 195.158.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.mft
rsync://rpki.ripe.net/repository/DEFAULT/AsxpFHam54lbDkVhFkRPkZN78B4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:5a:af:5e:5c:e2:82:d2:a8:53:c7:32:d7:61:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02cc691476a6e7895b0e456116444f91937bf01e
Validity
Not Before: Jan 1 07:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7ee76867a4c9a7d769d7a3f0c39af96b8f5ffeac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:46:b8:d6:1f:88:c6:34:4b:ad:bf:d2:fc:5c:
ad:91:14:08:3b:93:d1:01:50:2e:0f:a1:b1:38:b2:
88:c7:3e:2a:67:e6:1b:b8:c9:d9:f3:5a:14:0e:0b:
e5:a4:d6:03:fa:46:b1:15:7c:df:8e:6b:a4:ab:44:
88:e6:d3:1f:04:84:a3:2e:cb:41:34:75:1b:6b:85:
a2:fc:80:0d:0c:f9:54:65:81:ad:9c:11:9e:25:ba:
52:68:a4:1d:f2:04:cf:9b:ea:8c:cb:8a:9e:34:3e:
c3:06:b1:f6:be:cc:1a:69:9d:4e:ab:c6:94:fc:47:
c2:b3:52:45:04:1e:db:86:51:d0:06:d2:8a:28:48:
af:44:3b:50:40:ca:5e:aa:94:19:56:06:95:e9:5f:
0a:1e:7e:54:d2:8f:87:3a:86:4e:47:47:4d:f6:db:
45:74:a3:f4:af:29:ad:76:8d:4a:2e:e1:7c:bc:6a:
e6:36:3b:7c:8a:ca:c2:8e:8d:6b:c4:3b:8c:9d:ce:
5a:59:bf:ec:96:c0:0a:e8:25:76:b0:29:96:7d:61:
02:b9:07:7b:2f:9d:85:87:f3:cb:79:f8:62:8e:76:
0c:c4:e5:e9:22:af:b2:04:a0:ac:aa:16:74:34:bf:
d4:8a:f4:fc:88:23:f6:61:c2:e8:43:42:f2:8c:7b:
c7:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:E7:68:67:A4:C9:A7:D7:69:D7:A3:F0:C3:9A:F9:6B:8F:5F:FE:AC
X509v3 Authority Key Identifier:
keyid:02:CC:69:14:76:A6:E7:89:5B:0E:45:61:16:44:4F:91:93:7B:F0:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsxpFHam54lbDkVhFkRPkZN78B4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/fudoZ6TJp9dp16Pww5r5a49f_qw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.158.54.0/24
Signature Algorithm: sha256WithRSAEncryption
71:f3:8a:c4:f3:75:d2:1e:26:bd:20:fc:ea:d3:cd:49:3f:72:
7c:2e:5f:8d:c6:f0:23:12:14:04:4d:69:ae:70:26:d2:94:77:
b6:c7:8d:53:63:ce:bc:59:f4:7b:b7:a0:af:93:6e:34:6a:08:
14:18:79:6c:6e:4f:86:a3:e6:9d:c4:4a:87:cb:1a:a3:20:8f:
a1:43:25:10:26:02:33:74:d6:01:c3:3b:43:50:07:03:54:86:
d4:ff:5b:2e:d7:ad:4f:c1:f9:ae:5f:a9:a5:4c:89:6f:b2:ad:
58:78:39:17:2f:e7:53:b8:4d:f6:17:ec:da:b5:86:62:60:08:
37:ea:07:23:8f:40:d8:a5:4c:49:fd:8b:79:4b:ce:1d:6d:4a:
0a:94:44:76:57:57:e0:0e:2b:52:18:ff:a7:3c:e0:ac:3a:f5:
7a:05:f6:7e:95:62:38:e6:8c:2d:20:aa:2c:9e:7a:73:e3:77:
44:cd:2e:5a:76:e0:60:da:04:66:50:32:2c:0b:7f:dc:1b:54:
db:9b:be:cd:9d:81:17:83:b9:8c:4c:18:e9:cd:09:5b:1a:dc:
00:00:26:6b:fa:cd:e6:93:0c:f3:49:41:e6:3c:e2:e3:20:01:
88:d1:f5:0f:b0:3f:f4:ed:fe:63:48:4b:4f:24:a8:99:da:f2:
53:ad:23:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:30:50 2025 by rpki-client