Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/e68e1b-356c-4868-909f-42606f5aa5b9/1/fuWr4ajPQIorYySrCuX8pRFFTFM.roa
File: fuWr4ajPQIorYySrCuX8pRFFTFM.roa (raw, json)
Hash identifier: m3vIKMXFzJeuW2Nn3Yn1mc3oXD70c/mqAAyNwLfO+oc=
Subject key identifier: 7E:E5:AB:E1:A8:CF:40:8A:2B:63:24:AB:0A:E5:FC:A5:11:45:4C:53
Certificate issuer: /CN=cd6b9d593ac54aa6cbb83889277ba24f54067889
Certificate serial: 01941FFA39D8AC2FDBC2146EB578E35AD0AE
Authority key identifier: CD:6B:9D:59:3A:C5:4A:A6:CB:B8:38:89:27:7B:A2:4F:54:06:78:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zWudWTrFSqbLuDiJJ3uiT1QGeIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/e68e1b-356c-4868-909f-42606f5aa5b9/1/fuWr4ajPQIorYySrCuX8pRFFTFM.roa
Signing time: Wed 01 Jan 2025 03:48:00 +0000
ROA not before: Wed 01 Jan 2025 03:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29084
IP address blocks: 94.190.252.0/22 maxlen: 22
94.190.252.0/24 maxlen: 24
94.190.253.0/24 maxlen: 24
94.190.254.0/24 maxlen: 24
94.190.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/e68e1b-356c-4868-909f-42606f5aa5b9/1/zWudWTrFSqbLuDiJJ3uiT1QGeIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/e68e1b-356c-4868-909f-42606f5aa5b9/1/zWudWTrFSqbLuDiJJ3uiT1QGeIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zWudWTrFSqbLuDiJJ3uiT1QGeIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:39:d8:ac:2f:db:c2:14:6e:b5:78:e3:5a:d0:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd6b9d593ac54aa6cbb83889277ba24f54067889
Validity
Not Before: Jan 1 03:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7ee5abe1a8cf408a2b6324ab0ae5fca511454c53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f7:7b:49:72:76:a6:c5:db:da:2f:b1:dd:1d:
1a:77:83:df:0d:bc:4c:ff:1b:d4:cd:62:a2:be:90:
9e:37:c3:2b:24:2d:4c:ac:4d:50:fa:e9:f5:79:b3:
0f:a0:aa:8e:db:6a:db:a3:5d:59:2f:63:be:e9:8d:
8b:59:7e:35:ea:2c:47:77:44:d9:36:26:41:69:c7:
fd:6a:5f:dd:d4:23:7e:2f:9f:e8:c7:d4:68:0b:15:
a6:b2:53:ed:e9:6a:73:c3:0a:e9:95:65:c5:f6:21:
b7:1f:29:33:19:69:d1:30:9b:1a:66:fc:55:7d:6e:
cc:7c:3d:8d:23:86:b0:8a:1e:6c:41:d3:11:f1:53:
72:ed:80:1a:31:c2:1a:e7:ed:f8:ea:1f:de:98:84:
92:dc:e6:e6:34:fb:a2:ad:12:29:b8:7e:ff:87:3b:
54:e1:4b:a8:da:ab:c7:ca:64:a0:95:02:77:c6:ad:
ff:42:0b:81:48:15:da:c0:64:3b:89:b0:06:0a:2e:
19:e4:f5:5b:6f:20:0e:3c:2e:9c:e8:7c:8d:e0:ff:
88:0f:71:70:5b:70:4a:e9:5d:3c:f1:2b:25:a4:fe:
4b:19:a5:ee:44:4f:4b:e7:bd:11:47:62:9b:e6:d6:
fb:72:14:2e:4d:3f:8a:b7:69:77:75:0f:b5:39:b6:
97:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:E5:AB:E1:A8:CF:40:8A:2B:63:24:AB:0A:E5:FC:A5:11:45:4C:53
X509v3 Authority Key Identifier:
keyid:CD:6B:9D:59:3A:C5:4A:A6:CB:B8:38:89:27:7B:A2:4F:54:06:78:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWudWTrFSqbLuDiJJ3uiT1QGeIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e68e1b-356c-4868-909f-42606f5aa5b9/1/fuWr4ajPQIorYySrCuX8pRFFTFM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e68e1b-356c-4868-909f-42606f5aa5b9/1/zWudWTrFSqbLuDiJJ3uiT1QGeIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.190.252.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:68:18:a7:10:ea:2b:91:a6:bc:ad:b0:7f:eb:20:68:a2:a9:
11:30:0c:96:1c:73:e5:d0:46:1f:66:a7:58:94:b5:5d:8f:a3:
18:d1:42:35:59:90:a8:04:0e:71:ad:18:07:8b:02:de:d3:02:
f9:74:6c:34:f3:02:2c:5e:e5:6f:7b:59:5d:21:8a:61:e4:c0:
0c:5a:3c:8e:ed:7c:3b:b5:53:a4:ad:52:50:bd:3d:3d:13:83:
2a:c2:4a:41:36:72:ff:05:21:3c:ee:60:57:fc:83:d9:f6:9e:
9d:e6:86:ff:d0:49:fa:88:a2:aa:6f:ac:ae:d7:9c:33:ee:41:
24:73:e9:8b:46:13:0c:dd:86:d6:8e:03:b0:36:00:48:64:50:
28:5a:04:3d:db:be:83:85:8d:75:b9:41:e1:29:7c:b4:50:7c:
7e:20:ff:d2:66:b3:25:e5:0f:fd:ce:74:82:c9:cf:cc:85:ce:
fe:4b:4f:b2:fd:c8:5c:03:77:da:e2:4e:f9:88:b5:fd:0a:b2:
14:19:81:37:6d:f9:fe:68:c7:96:6e:aa:6e:ef:6d:73:1c:de:
0c:b9:41:fa:4e:6e:d7:0c:ce:41:be:13:b5:76:4a:f5:54:0a:
05:51:48:28:17:27:d8:a9:b8:11:eb:8c:13:b6:bb:5a:78:a0:
b4:62:c0:96
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQf+jnYrC/bwhRutXjjWtCuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkNmI5ZDU5M2FjNTRhYTZjYmI4Mzg4OTI3N2JhMjRmNTQw
Njc4ODkwHhcNMjUwMTAxMDM0ODAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZWU1YWJlMWE4Y2Y0MDhhMmI2MzI0YWIwYWU1ZmNhNTExNDU0YzUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfd7SXJ2psXb2i+x3R0ad4PfDbxM
/xvUzWKivpCeN8MrJC1MrE1Q+un1ebMPoKqO22rbo11ZL2O+6Y2LWX416ixHd0TZ
NiZBacf9al/d1CN+L5/ox9RoCxWmslPt6WpzwwrplWXF9iG3HykzGWnRMJsaZvxV
fW7MfD2NI4awih5sQdMR8VNy7YAaMcIa5+346h/emISS3ObmNPuirRIpuH7/hztU
4Uuo2qvHymSglQJ3xq3/QguBSBXawGQ7ibAGCi4Z5PVbbyAOPC6c6HyN4P+ID3Fw
W3BK6V088SslpP5LGaXuRE9L570RR2Kb5tb7chQuTT+Kt2l3dQ+1ObaXhwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH7lq+Goz0CKK2Mkqwrl/KURRUxTMB8GA1UdIwQY
MBaAFM1rnVk6xUqmy7g4iSd7ok9UBniJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveld1ZFdUckZTcWJMdURpSkozdWlUMVFHZUlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9lNjhlMWItMzU2Yy00ODY4LTkwOWYt
NDI2MDZmNWFhNWI5LzEvZnVXcjRhalBRSW9yWXlTckN1WDhwUkZGVEZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS9lNjhlMWItMzU2Yy00ODY4LTkwOWYtNDI2MDZmNWFhNWI5
LzEveld1ZFdUckZTcWJMdURpSkozdWlUMVFHZUlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCXr78MA0G
CSqGSIb3DQEBCwUAA4IBAQAdaBinEOorkaa8rbB/6yBooqkRMAyWHHPl0EYfZqdY
lLVdj6MY0UI1WZCoBA5xrRgHiwLe0wL5dGw08wIsXuVve1ldIYph5MAMWjyO7Xw7
tVOkrVJQvT09E4MqwkpBNnL/BSE87mBX/IPZ9p6d5ob/0En6iKKqb6yu15wz7kEk
c+mLRhMM3YbWjgOwNgBIZFAoWgQ9276DhY11uUHhKXy0UHx+IP/SZrMl5Q/9znSC
yc/Mhc7+S0+y/chcA3fa4k75iLX9CrIUGYE3bfn+aMeWbqpu721zHN4MuUH6Tm7X
DM5BvhO1dkr1VAoFUUgoFyfYqbgR64wTtrtaeKC0YsCW
-----END CERTIFICATE-----
Generated at Sun Feb 2 10:03:02 2025 by rpki-client