Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/c60d81-7142-4a5b-9b50-0077c2bdbf37/1/1-ytWl0hX9ynA9JXKT1kDTjFFd_k.roa
File: 1-ytWl0hX9ynA9JXKT1kDTjFFd_k.roa (raw, json)
Hash identifier: SVFx2HIlhTnZm/5An2t1/eTf/PAIAECB7vLR+zIL0/U=
Subject key identifier: FB:2B:56:97:48:57:F7:29:C0:F4:95:CA:4F:59:03:4E:31:45:77:F9
Certificate issuer: /CN=470485f5eac675a241ab6e02d8e53dd28556d2ee
Certificate serial: 0195D8034CCC197BE9BCD1D124472439E536
Authority key identifier: 47:04:85:F5:EA:C6:75:A2:41:AB:6E:02:D8:E5:3D:D2:85:56:D2:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RwSF9erGdaJBq24C2OU90oVW0u4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/c60d81-7142-4a5b-9b50-0077c2bdbf37/1/1-ytWl0hX9ynA9JXKT1kDTjFFd_k.roa
Signing time: Thu 27 Mar 2025 14:30:49 +0000
ROA not before: Thu 27 Mar 2025 14:30:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202406
IP address blocks: 194.55.236.0/24 maxlen: 24
194.55.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/c60d81-7142-4a5b-9b50-0077c2bdbf37/1/RwSF9erGdaJBq24C2OU90oVW0u4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/c60d81-7142-4a5b-9b50-0077c2bdbf37/1/RwSF9erGdaJBq24C2OU90oVW0u4.mft
rsync://rpki.ripe.net/repository/DEFAULT/RwSF9erGdaJBq24C2OU90oVW0u4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 11:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d8:03:4c:cc:19:7b:e9:bc:d1:d1:24:47:24:39:e5:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=470485f5eac675a241ab6e02d8e53dd28556d2ee
Validity
Not Before: Mar 27 14:30:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fb2b56974857f729c0f495ca4f59034e314577f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:73:1d:77:a0:97:87:a0:8c:36:07:d1:92:ef:
7f:e7:e0:94:76:7f:a5:52:42:bf:dc:ee:ec:9f:c6:
c0:e8:94:0b:2d:f5:7a:d1:91:1f:3d:d1:02:19:ea:
df:44:a5:44:94:dc:cd:af:8d:51:80:be:6b:28:f2:
d2:8f:27:01:13:08:d8:3c:5c:55:f6:89:e4:bf:ff:
f8:7e:3b:69:60:fd:9d:95:9e:05:36:f8:de:48:c7:
3b:a5:c4:8f:65:b9:c8:7a:4e:b8:0e:d7:d0:ce:07:
00:4d:d5:6d:92:38:8a:cb:58:fa:fe:38:b9:8f:1c:
2e:6a:1f:65:77:f8:eb:cd:2c:3d:ce:d3:e4:8f:7c:
a6:b5:e5:af:71:2d:c7:63:4d:c2:c6:a4:99:fa:71:
af:c7:d8:1c:42:b6:33:d4:3a:d8:33:d6:96:0f:ac:
77:7d:d5:37:37:56:11:ce:2c:7e:1a:de:93:e0:54:
b3:c6:f9:28:14:a7:8c:38:c1:e8:c1:dd:89:0d:ce:
e2:88:35:62:b3:00:0e:b7:f1:d5:84:ab:2b:46:0b:
9b:48:49:5f:c9:27:f4:18:50:6d:ca:8a:4d:f4:c9:
24:3e:29:0b:78:f4:7d:1c:8c:6f:ff:21:dd:e8:34:
d3:8a:55:ce:24:98:11:f0:bd:7d:4a:12:c4:fd:84:
f4:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:2B:56:97:48:57:F7:29:C0:F4:95:CA:4F:59:03:4E:31:45:77:F9
X509v3 Authority Key Identifier:
keyid:47:04:85:F5:EA:C6:75:A2:41:AB:6E:02:D8:E5:3D:D2:85:56:D2:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RwSF9erGdaJBq24C2OU90oVW0u4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c60d81-7142-4a5b-9b50-0077c2bdbf37/1/1-ytWl0hX9ynA9JXKT1kDTjFFd_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c60d81-7142-4a5b-9b50-0077c2bdbf37/1/RwSF9erGdaJBq24C2OU90oVW0u4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.55.236.0/23
Signature Algorithm: sha256WithRSAEncryption
9e:1c:f7:25:c3:09:c3:dc:51:55:b5:ac:e1:88:8a:7b:b1:95:
86:f7:69:65:3a:dc:cb:ef:f9:f9:26:ac:8f:5e:bb:68:f0:46:
13:91:41:bc:38:10:3b:d4:42:bd:8e:2b:f3:cb:ad:08:47:55:
ff:b5:8b:6d:bd:ba:ca:29:f8:68:98:c2:32:c0:95:ce:9e:47:
a4:1d:37:c6:32:a9:a8:b4:64:58:6f:0a:31:27:1d:aa:63:96:
3c:16:be:18:1e:02:5e:43:5d:7f:5e:8c:63:b6:bc:1b:e2:fc:
8d:26:e8:a5:f6:ba:f8:e6:34:92:24:52:14:42:db:58:0e:9f:
f6:b1:d3:b6:01:04:c4:1e:85:cf:5f:2d:50:7c:c3:7c:7b:bf:
3b:4e:3c:2a:f3:2b:13:12:94:ff:b1:05:7a:76:6a:ac:d1:0b:
ff:6f:6a:22:4e:7d:c8:91:7f:0e:73:58:b9:09:d9:58:75:82:
41:c3:e0:12:da:82:63:c3:4e:d0:62:bc:17:68:48:e9:df:79:
7b:af:bc:38:49:44:ba:09:e1:e6:71:40:17:b5:ad:79:1b:31:
7d:78:79:43:7a:42:23:a4:c6:30:1c:cf:7c:65:94:cb:92:c8:
08:74:13:9f:31:25:a2:e5:b1:b5:08:d9:02:cf:c0:19:64:c9:
8b:4c:3a:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 22:19:06 2025 by rpki-client