Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/9f285b-a00b-4222-9e55-799a18c9ac5a/1/cfA5700Oyp_l8HYxK2rUF9sJFNw.roa
File: cfA5700Oyp_l8HYxK2rUF9sJFNw.roa (raw, json)
Hash identifier: nBkOSSWEqJ7QWBbrB7ANbAxBsvt2sTitoBCV4yvlduo=
Subject key identifier: 71:F0:39:EF:4D:0E:CA:9F:E5:F0:76:31:2B:6A:D4:17:DB:09:14:DC
Certificate issuer: /CN=aae448271d85ae879a9abf15b3bca983470a1348
Certificate serial: 0194266B981EB4D843DD12716BB71580C6A9
Authority key identifier: AA:E4:48:27:1D:85:AE:87:9A:9A:BF:15:B3:BC:A9:83:47:0A:13:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/quRIJx2Froeamr8Vs7ypg0cKE0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/9f285b-a00b-4222-9e55-799a18c9ac5a/1/cfA5700Oyp_l8HYxK2rUF9sJFNw.roa
Signing time: Thu 02 Jan 2025 09:49:32 +0000
ROA not before: Thu 02 Jan 2025 09:49:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29509
IP address blocks: 176.100.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/9f285b-a00b-4222-9e55-799a18c9ac5a/1/quRIJx2Froeamr8Vs7ypg0cKE0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/9f285b-a00b-4222-9e55-799a18c9ac5a/1/quRIJx2Froeamr8Vs7ypg0cKE0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/quRIJx2Froeamr8Vs7ypg0cKE0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:98:1e:b4:d8:43:dd:12:71:6b:b7:15:80:c6:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aae448271d85ae879a9abf15b3bca983470a1348
Validity
Not Before: Jan 2 09:49:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=71f039ef4d0eca9fe5f076312b6ad417db0914dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f0:f3:7a:29:19:a6:ae:0e:8a:15:cb:d6:d4:
ba:e8:cf:c1:03:80:98:9f:e9:60:4a:28:6d:3f:26:
54:b3:ea:e0:47:e4:b5:ee:9e:f2:87:15:7f:07:03:
bd:07:08:88:7c:d9:4d:b4:4e:09:d5:ad:cf:df:53:
95:08:c6:a5:d7:58:b6:ee:4b:4b:ef:56:b2:a2:a1:
a3:41:95:bf:eb:7c:ba:30:e2:80:97:fb:84:d8:3a:
60:1e:20:13:ba:84:2f:95:c0:b8:e8:5b:21:0f:db:
ba:21:0a:0a:6f:f3:35:73:02:76:6a:af:6f:cd:3b:
47:01:96:2c:1e:93:96:b3:c5:12:64:88:dd:a5:0e:
02:2e:68:17:c3:ac:58:f7:4c:93:12:2c:ab:5e:0f:
5d:dd:3d:ce:97:5e:8a:e5:41:12:11:5e:60:91:7d:
8a:c3:d8:5f:a3:2f:72:65:e0:d6:5e:d5:01:dc:6d:
65:07:bf:b2:76:ee:5b:da:d7:ca:9c:48:33:31:1a:
f0:3d:4d:06:7c:7f:9f:87:66:5b:df:08:54:16:41:
98:74:59:d5:72:1c:1e:7d:16:b8:51:e2:59:fd:94:
60:7d:e2:80:6f:b4:aa:c3:f2:98:02:2a:22:5e:48:
41:71:92:07:03:ec:cf:0a:1a:7d:e2:25:8c:ae:a6:
46:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:F0:39:EF:4D:0E:CA:9F:E5:F0:76:31:2B:6A:D4:17:DB:09:14:DC
X509v3 Authority Key Identifier:
keyid:AA:E4:48:27:1D:85:AE:87:9A:9A:BF:15:B3:BC:A9:83:47:0A:13:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/quRIJx2Froeamr8Vs7ypg0cKE0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/9f285b-a00b-4222-9e55-799a18c9ac5a/1/cfA5700Oyp_l8HYxK2rUF9sJFNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/9f285b-a00b-4222-9e55-799a18c9ac5a/1/quRIJx2Froeamr8Vs7ypg0cKE0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.100.251.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:82:db:a3:61:cc:b2:39:a8:45:e1:e3:24:6e:ad:31:b0:bb:
ce:dd:5a:c0:0b:69:77:3d:1d:e9:93:35:5b:73:3e:40:5c:94:
84:27:74:3b:c9:82:05:4d:56:0c:b5:c3:62:20:75:5e:4f:ca:
6b:1d:39:41:10:72:8e:b3:08:37:9f:86:fb:0e:e3:4d:69:f5:
93:fe:e2:be:7e:b2:1c:f4:ba:cf:9f:c3:06:0c:3f:d4:1a:1c:
13:3e:77:e6:72:9c:cc:e0:5f:57:55:aa:42:00:9e:9b:b6:00:
87:a5:80:77:d1:a6:17:26:b9:d3:ae:c2:12:d1:22:d9:0a:af:
42:64:91:c1:d3:65:4b:54:4c:92:3e:c6:1b:ab:f1:b6:88:2c:
79:c8:f6:cd:3f:37:f7:19:fd:e6:6a:10:e9:70:df:49:15:b6:
7e:98:d3:e2:41:51:8c:bd:9b:20:4c:0d:cb:c6:63:98:f0:78:
33:30:56:c4:33:63:55:c5:1f:d1:5a:d6:a2:da:17:0c:86:41:
23:43:60:f1:20:77:59:c7:0d:ca:c9:1a:b9:5c:3c:0d:54:1f:
d0:ba:e7:fa:4e:69:d9:0a:9c:26:3b:ca:5e:54:fc:11:a0:6e:
8e:e3:32:77:77:0e:dd:dc:a1:9d:da:5a:71:af:51:0f:7a:f7:
66:2b:2f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 07:06:52 2025 by rpki-client