Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/_Cb6FUCoQ03XQzWaAGVZCL11bhk.roa
File: _Cb6FUCoQ03XQzWaAGVZCL11bhk.roa (raw, json)
Hash identifier: 7DHJ0ftYg5chCGMOY75jI68kzxP7FSC041EsKG1o0UA=
Subject key identifier: FC:26:FA:15:40:A8:43:4D:D7:43:35:9A:00:65:59:08:BD:75:6E:19
Certificate issuer: /CN=33c342c06aacc359d39439ff58defa8ea1875748
Certificate serial: 019422FAF422A8D2766E4CF1A75B9BD245F6
Authority key identifier: 33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/_Cb6FUCoQ03XQzWaAGVZCL11bhk.roa
Signing time: Wed 01 Jan 2025 17:47:39 +0000
ROA not before: Wed 01 Jan 2025 17:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198973
IP address blocks: 109.236.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 20:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fa:f4:22:a8:d2:76:6e:4c:f1:a7:5b:9b:d2:45:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33c342c06aacc359d39439ff58defa8ea1875748
Validity
Not Before: Jan 1 17:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fc26fa1540a8434dd743359a00655908bd756e19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:16:74:fd:df:ee:f4:91:86:a7:b8:fa:b7:66:
e9:a5:85:84:84:a2:fd:04:12:f4:2a:a0:58:8f:28:
8d:d9:31:f6:74:cc:ed:f9:64:b3:e6:0e:29:24:7f:
d3:e1:3a:4c:1d:d0:bd:45:2d:34:8f:7b:2d:97:f7:
e5:2f:ed:56:af:a8:15:b6:f5:52:8a:64:81:d3:41:
fe:9f:07:50:83:eb:2a:95:60:21:a2:06:41:02:15:
05:6c:60:5b:bb:c7:66:5f:61:04:fd:8d:69:c6:6a:
48:32:8b:97:75:01:86:03:76:06:3c:db:83:a9:2e:
d8:8e:86:96:b8:a4:f6:14:bb:0f:92:5b:c2:d6:f8:
c8:d6:b4:0f:ae:f7:77:b9:44:b4:8d:6f:ca:36:f1:
ca:5c:b4:e3:16:e5:58:84:ad:28:d1:27:20:c1:a2:
72:16:b4:67:b1:ad:1d:f4:79:72:aa:fd:2f:1b:18:
b3:76:b9:03:ae:5c:37:1d:dc:72:21:d0:5e:de:d6:
5c:4b:7e:bb:1c:33:31:45:c5:a9:61:43:6c:9d:55:
82:ca:75:77:86:e7:fa:ef:e2:fe:1e:50:f3:87:23:
54:b0:a2:0d:a0:1a:0b:66:da:85:22:99:b2:fd:ca:
6f:8e:cf:f9:47:ee:29:a6:0a:2b:99:6c:10:4e:4a:
fb:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:26:FA:15:40:A8:43:4D:D7:43:35:9A:00:65:59:08:BD:75:6E:19
X509v3 Authority Key Identifier:
keyid:33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/_Cb6FUCoQ03XQzWaAGVZCL11bhk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.236.244.0/24
Signature Algorithm: sha256WithRSAEncryption
98:c3:3c:f9:cd:eb:79:b1:06:c7:7c:74:99:43:dd:19:89:11:
8e:4a:dc:e5:ee:d2:b6:23:68:dc:2f:48:a9:78:06:e4:0f:1d:
0e:11:c2:e6:36:a8:37:e8:43:93:04:97:9e:06:1f:85:5f:f3:
6d:6a:f3:9c:ed:d0:14:b9:c3:0c:7d:f8:d6:95:7e:ac:60:17:
2b:74:50:b5:f8:1f:dd:34:fd:1f:c7:df:1e:51:01:bd:09:f2:
e8:07:5f:37:38:cc:e3:03:94:b9:5d:f8:3e:79:80:f3:73:a0:
12:d2:5b:a2:00:da:a1:9e:6b:1f:05:14:ff:89:3d:4b:26:9b:
6a:9a:2f:2f:c5:62:d8:de:f1:a9:e9:ea:4b:16:d9:89:d9:10:
9d:a4:9a:f1:08:40:79:a1:d3:ac:26:ad:22:74:8e:7c:3b:9d:
14:ab:40:7b:06:b5:b8:cf:a8:86:5f:98:ef:8e:b6:19:f2:d6:
aa:8a:66:53:b1:ac:07:dd:1e:d1:b1:b0:91:11:22:ea:19:ca:
49:3e:48:73:8b:b3:7c:56:25:07:57:f5:ca:68:7d:99:2b:d8:
78:f9:4f:9c:41:71:da:cb:b4:ec:06:33:af:6f:26:84:0c:b7:
6a:b4:ad:18:a6:37:1f:02:30:83:46:68:80:4c:15:11:2b:42:
97:98:a9:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 05:55:21 2025 by rpki-client