Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/1-t2gcnq_wGKj6Cw9yBTlPkMhqpA.roa
File: 1-t2gcnq_wGKj6Cw9yBTlPkMhqpA.roa (raw, json)
Hash identifier: biNGhGH5AKAvuvZqlWI6oNS4u1EhxLRFN8pAccYPS0U=
Subject key identifier: FA:DD:A0:72:7A:BF:C0:62:A3:E8:2C:3D:C8:14:E5:3E:43:21:AA:90
Certificate issuer: /CN=7271506bfab912c7b8171b96b85a099b140e6cd8
Certificate serial: 019426D9EE493399DE738CA7B4EA38293EE9
Authority key identifier: 72:71:50:6B:FA:B9:12:C7:B8:17:1B:96:B8:5A:09:9B:14:0E:6C:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cnFQa_q5Ese4FxuWuFoJmxQObNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/1-t2gcnq_wGKj6Cw9yBTlPkMhqpA.roa
Signing time: Thu 02 Jan 2025 11:50:04 +0000
ROA not before: Thu 02 Jan 2025 11:50:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49556
IP address blocks: 81.30.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/cnFQa_q5Ese4FxuWuFoJmxQObNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:ee:49:33:99:de:73:8c:a7:b4:ea:38:29:3e:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7271506bfab912c7b8171b96b85a099b140e6cd8
Validity
Not Before: Jan 2 11:50:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fadda0727abfc062a3e82c3dc814e53e4321aa90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:75:5e:90:8e:73:a7:44:26:2f:ac:a8:ba:fc:
2c:1e:c6:6f:af:48:7d:d4:ec:f0:98:4f:49:03:cc:
02:aa:c4:5e:ac:88:0e:ce:3e:4a:f6:b5:b0:f2:db:
da:45:18:48:90:97:15:6b:12:37:d5:f4:9f:a4:08:
4f:9c:24:01:3a:35:63:f4:2c:b9:c4:73:76:b7:fa:
3d:df:16:00:53:9a:74:6f:37:a2:7a:61:5a:7b:97:
e3:20:e6:87:18:e0:dc:fa:86:74:99:55:3e:6f:c7:
85:07:f6:55:64:a8:f4:b5:0d:1e:9d:86:32:e1:af:
f5:ef:3c:35:7f:13:ce:7a:ae:bb:a2:a7:5e:df:db:
fa:7a:da:d2:3d:c6:2e:f3:dc:41:71:eb:8e:34:17:
04:a9:f5:12:70:24:69:8d:84:af:27:01:f8:7b:66:
a4:6b:e3:19:2d:ab:2b:19:db:d3:bc:0c:fa:11:b1:
05:3b:90:52:48:a1:b5:35:07:45:e1:44:8c:7e:d8:
8b:ed:15:17:cf:06:5b:49:6f:57:0d:f4:c3:fb:05:
45:e6:5b:45:34:44:16:44:2b:fd:eb:d3:da:04:04:
23:cd:4b:66:34:23:69:ed:a0:68:5a:bd:ea:b2:7b:
63:f4:6f:97:4e:66:4a:31:30:f4:63:5b:1d:a0:51:
1e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:DD:A0:72:7A:BF:C0:62:A3:E8:2C:3D:C8:14:E5:3E:43:21:AA:90
X509v3 Authority Key Identifier:
keyid:72:71:50:6B:FA:B9:12:C7:B8:17:1B:96:B8:5A:09:9B:14:0E:6C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cnFQa_q5Ese4FxuWuFoJmxQObNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/1-t2gcnq_wGKj6Cw9yBTlPkMhqpA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.30.108.0/24
Signature Algorithm: sha256WithRSAEncryption
26:5e:50:73:4c:59:71:27:45:95:50:b5:2d:56:ee:f5:13:3e:
9a:46:86:96:f5:2f:0e:a8:c1:86:90:0c:df:33:cd:97:56:40:
bd:d2:0c:2c:3f:1f:1d:f5:d2:8b:22:fd:10:80:0a:41:29:2b:
71:da:8c:84:87:97:24:f7:c4:aa:be:b7:ce:30:a3:45:79:a2:
66:46:82:48:fe:22:68:3d:9f:bc:f4:c7:7e:73:72:12:ef:76:
fa:a1:85:4e:37:61:bc:f3:8a:ba:7b:68:37:b3:cb:4a:20:7c:
a6:c1:9d:9f:e3:0d:64:aa:2d:1d:1b:85:68:e8:7a:55:58:09:
55:ac:4f:78:56:5d:4a:4b:55:e8:88:6a:75:99:2a:4c:fd:93:
e0:ef:ee:3b:06:0a:c2:a4:e7:3d:5a:26:48:27:d0:74:75:33:
53:74:8e:80:f4:97:76:7a:3f:25:2b:0f:8d:1e:57:22:46:f3:
e6:56:98:1c:21:9d:3f:a5:bf:e1:4f:44:d1:1b:4a:94:c8:95:
05:0f:fc:49:81:4a:9b:b6:4b:2c:08:cf:9d:97:89:13:c4:1f:
22:49:9d:75:08:cb:81:eb:5a:b1:1c:0f:4f:f1:8e:ff:58:62:
8e:5d:06:05:f2:17:42:81:d1:1f:eb:33:79:a8:c4:6c:f7:9a:
0d:34:4e:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:12:53 2025 by rpki-client